Which action is an example of hardening a service to reduce its attack surface?

Increasing the number of open ports

Granting all users administrative privileges

Disabling unnecessary features and services

A system admin needs to update a configuration file on a production application server to fix a security vulnerability. The change management policy requires a change request, testing, and approval. Which step is most critical to ensure the change does not introduce a new security issue?

Document the change, test it in a staging environment, and obtain approval before applying it to production.

Email the change to the security team for information after it has been applied.

Apply the change directly to production and monitor the logs for errors.

Make a backup of the configuration file and apply the change immediately.

A company has a DMZ with a public web server and an internal application server. The web server needs to query the application server on a specific port. The security team wants to protect the internal network. Which firewall rule set is most appropriate?

Allow the web server to initiate connections to the application server on the specific port, and block all other traffic from the DMZ to the internal network.

Place the web server and application server on the same internal subnet to avoid firewall rules.

Allow the application server to initiate connections to the web server on the specific port.

Allow all traffic from the DMZ to the internal network to simplify management.

Which action helps limit the exposure of network information to potential attackers?

Disabling unnecessary services and hiding system banners

Displaying detailed version information in banners

Allowing SNMP public community strings

Enabling all services to provide maximum functionality

Which activity is typically performed during a system audit?

Rebuilding the operating system from scratch

Installing new security patches

Reviewing system logs and configuration files

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 4

Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

38questions here

8free pages

12concepts

28%of the exam

Questions 26–30

26foundation · easy
Which action is an example of hardening a service to reduce its attack surface?
Select an answer first
27application · medium
A system admin needs to update a configuration file on a production application server to fix a security vulnerability. The change management policy requires a change request, testing, and approval. Which step is most critical to ensure the change does not introduce a new security issue?
Select an answer first
28application · medium
A company has a DMZ with a public web server and an internal application server. The web server needs to query the application server on a specific port. The security team wants to protect the internal network. Which firewall rule set is most appropriate?
Select an answer first
29foundation · easy
Which action helps limit the exposure of network information to potential attackers?
Select an answer first
30foundation · easy
Which activity is typically performed during a system audit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.