A database administrator (DBA) is responsible for managing the company's customer database. The DBA also needs to run daily backups. The security team wants to ensure the DBA has only the permissions necessary for these tasks. What should the security team do?

Grant the DBA the minimum permissions required to manage the database and perform backups.

Grant the DBA full administrative rights to the database server.

Grant the DBA access to all databases in the company.

Grant the DBA read-only access to the database and backups.

According to the principle of least privilege, a user should be granted:

The same permissions as their supervisor to simplify administration

Temporary permissions that expire after one day

Only the permissions necessary to perform their job functions

All permissions available in the system to avoid access issues

A system administrator needs to securely manage a Linux server remotely over the internet. The server currently has password-based authentication enabled for SSH. The admin wants to reduce the risk of brute-force attacks. Which action is most effective?

Implement a strong password policy for all user accounts.

Change the SSH port from 22 to a non-standard port.

Enable SSH protocol version 1 for compatibility.

Disable password authentication and require SSH key-based authentication.

A company is updating its password policy. The security team wants to prevent users from reusing old passwords and to ensure passwords are not easily guessed. Which combination of policy settings best achieves this?

Enforce a minimum length of 12 characters and a password history of 10 previous passwords.

Require a password change every 30 days and allow reuse after 3 changes.

Set a maximum password age of 90 days and no password history.

Require at least one special character and one number, but no minimum length.

What is the primary purpose of multi-factor authentication (MFA)?

To replace the need for user accounts

To eliminate the need for passwords

To provide an extra layer of security by requiring multiple verification factors

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 2

Objective 3.2 Protect Access. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

26questions here

6free pages

8concepts

28%of the exam

Questions 11–15

11application · medium
A database administrator (DBA) is responsible for managing the company's customer database. The DBA also needs to run daily backups. The security team wants to ensure the DBA has only the permissions necessary for these tasks. What should the security team do?
Select an answer first
12foundation · easy
According to the principle of least privilege, a user should be granted:
Select an answer first
13application · medium
A system administrator needs to securely manage a Linux server remotely over the internet. The server currently has password-based authentication enabled for SSH. The admin wants to reduce the risk of brute-force attacks. Which action is most effective?
Select an answer first
14application · medium
A company is updating its password policy. The security team wants to prevent users from reusing old passwords and to ensure passwords are not easily guessed. Which combination of policy settings best achieves this?
Select an answer first
15foundation · easy
What is the primary purpose of multi-factor authentication (MFA)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.