Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Why is a formal change management process important for maintaining security during system modifications?

   • AIt speeds up the implementation of all changes without review
   • BIt guarantees that no security issues will ever occur after a change
   • CIt allows administrators to make changes without approval
   • DIt ensures changes are reviewed, tested, and documented before implementation
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security auditor is reviewing a database server. The audit checklist includes verifying that the service account has the minimum privileges needed, that the database software is up to date, and that the data files are not accessible by unauthorized users. Which audit activity directly addresses the principle of least privilege?

   • AVerifying that the database listens only on the internal network interface.
   • BReviewing the permissions on the database data files and the privileges assigned to the service account.
   • CConfirming that database backups are encrypted at rest.
   • DChecking the version of the database software against the latest patch release.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   During a routine system audit of a Linux file server, you discover that a deprecated service is running with default credentials, and several user home directories have world-readable permissions. The audit also shows the OS is several patches behind. Which action should you prioritize first to reduce immediate risk?

   • ARun a full anti-malware scan to check for existing infections.
   • BDisable the deprecated service and change its credentials immediately.
   • CApply all pending OS patches to fix known vulnerabilities.
   • DFix the world-readable permissions on the home directories.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which protocol should be used to securely transfer files over a network, providing encryption for both authentication and data?

   • ATFTP
   • BSFTP
   • CFTP
   • DHTTP
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of multi-factor authentication (MFA)?

   • ATo allow users to log in with just a username
   • BTo speed up the login process
   • CTo eliminate the need for passwords entirely
   • DTo require users to provide two or more verification factors to prove their identity
   Reveal Solution Discussion Select an answer first