What is the goal of applying hardening techniques to software and services?

To make the software run faster on older hardware

To increase the number of features available to users

To simplify the user interface for easier navigation

To reduce the attack surface by removing or disabling non-essential components

Which statement best describes the difference between a firewall and an intrusion prevention system (IPS)?

A firewall blocks traffic based on rules, while an IPS detects and blocks traffic based on signatures and anomalies.

A firewall detects intrusions, while an IPS prevents them by blocking traffic.

A firewall is deployed inline, while an IPS is deployed out-of-band.

A firewall operates at the application layer, while an IPS operates at the network layer.

Why is it important to tighten file and directory permissions?

To increase the speed of file access

To prevent unauthorized users from accessing sensitive data

To make files easier to share among all users

To reduce the storage space used by files

A company is migrating to a new identity provider and wants to enforce stronger authentication for all administrative access to cloud resources. They currently use only username and password. Which control should they implement first?

Implement a longer password policy with a minimum of 16 characters.

Enable multi-factor authentication (MFA) for all administrative accounts.

Deploy endpoint detection and response (EDR) on all admin workstations.

Rotate administrative passwords every 30 days.

Why would an administrator apply additional restrictions to a service that is considered high-risk?

To increase the performance of the service

To minimize the attack surface and reduce the likelihood of exploitation

To make the service more accessible to all users

To simplify the configuration of the service

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 4

Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

38questions here

8free pages

12concepts

28%of the exam

Questions 11–15

11foundation · easy
What is the goal of applying hardening techniques to software and services?
Select an answer first
12foundation · easy
Which statement best describes the difference between a firewall and an intrusion prevention system (IPS)?
Select an answer first
13foundation · easy
Why is it important to tighten file and directory permissions?
Select an answer first
14application · medium
A company is migrating to a new identity provider and wants to enforce stronger authentication for all administrative access to cloud resources. They currently use only username and password. Which control should they implement first?
Select an answer first
15foundation · easy
Why would an administrator apply additional restrictions to a service that is considered high-risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.