Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A hospital's IT team is segmenting its network to protect patient records (PHI) from the general user network. They have a limited number of firewall rules available and must balance usability with security. Which segmentation strategy provides the strongest protection for PHI while remaining practical?

   • APlace PHI systems on the same VLAN as the user network but enable port security on the switches.
   • BUse a single flat network and rely on host-based firewalls on each PHI system.
   • CSegment by department (e.g., cardiology, radiology) rather than by data sensitivity.
   • DPlace all PHI systems in a dedicated 'restricted' VLAN, and use a firewall to allow only specific, documented flows from the user network to that VLAN.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to prioritize software updates based on the severity of vulnerabilities?

   • ATo update all software at the same time regardless of risk
   • BTo delay updates until a vulnerability is actively exploited
   • CTo address the most critical vulnerabilities first, reducing the risk of exploitation
   • DTo avoid updating software that is not commonly used
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which protocol is the secure version of HTTP, encrypting data exchanged between a web browser and a web server?

   • ASSH
   • BSMTP
   • CFTP
   • DHTTPS
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company runs a legacy application that requires an unencrypted Telnet service on an internal server for a small set of administrative scripts. The security team cannot replace the application yet, but must reduce the risk of exploitation. Which combination of restrictions provides the most effective risk reduction?

   • ARestrict Telnet access to specific source IPs via the host firewall, and require the service to run under a low-privilege service account.
   • BDisable the Telnet service and require all administration to be done at the physical console.
   • CAllow Telnet from any internal IP but wrap it with TCP wrappers to log all connections.
   • DMove Telnet to a high port (e.g., 2323) and keep the default service account.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A system administrator is configuring a shared directory on a Windows file server. The directory contains project files that should be readable by the 'ProjectTeam' group, but only the project lead should be able to modify them. The administrator wants to enforce least privilege. What is the most appropriate NTFS permission configuration?

   • AGrant 'ProjectTeam' Modify, and deny the project lead's user account Write.
   • BGrant 'ProjectTeam' Full Control, and rely on the share permissions to restrict access.
   • CGrant 'ProjectTeam' Read, and grant the project lead's user account Full Control.
   • DGrant 'ProjectTeam' Read & Execute, and grant the project lead's user account Modify.
   Reveal Solution Discussion Select an answer first