Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which practice is an example of strengthening authentication mechanisms?

   • AUsing the same password for all systems
   • BDisabling account lockout after failed attempts
   • CAllowing users to share passwords for convenience
   • DImplementing a policy that requires complex passwords and MFA
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company's remote workforce uses VPN to access internal resources. After a phishing campaign compromised several user accounts, management wants to strengthen authentication without requiring hardware tokens. Which combination of measures should the security team implement?

   • ARequire multi-factor authentication (MFA) using a software authenticator app, and enforce a policy that blocks VPN access from unmanaged devices.
   • BDeploy endpoint anti-malware on all user laptops and call it a day.
   • CImplement single sign-on (SSO) so users only need to remember one password.
   • DIncrease the password length requirement to 20 characters and disable account lockout to avoid user lockouts.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A new Linux web server is being deployed. The security baseline requires reducing the attack surface. Which set of hardening actions is most appropriate for this server?

   • AInstall a GUI desktop environment to make administration easier, and leave the default firewall settings.
   • BEnable all services that might be needed in the future, and rely on the firewall to block access.
   • CDisable unused services and daemons, remove unnecessary software packages, and configure the firewall to allow only ports 80 and 443.
   • DChange the SSH port to 2222 and disable password authentication, but leave all other services running.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which measure is an example of increasing restrictions on a high-risk service?

   • AAllowing access from any IP address
   • BRestricting access to the service to specific IP addresses
   • CRunning the service with administrative privileges
   • DDisabling logging for the service
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security scan of a web server reveals that it is responding to ICMP echo requests, and the server's SSH banner is disclosing the exact OS version and kernel build. Which set of actions will best reduce the server's network information exposure?

   • AChange the SSH port from 22 to a non-standard port and leave the banner as is.
   • BEnable more verbose logging on the firewall to track who is pinging the server.
   • CBlock ICMP at the firewall and modify the SSH banner to show a generic message.
   • DDisable SSH entirely and rely on the console for administration.
   Reveal Solution Discussion Select an answer first