Define Essential Security Principles 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A penetration tester is assessing a company's network. The tester finds that a web server is running an unpatched version of a content management system. The tester uses a publicly available tool that sends a specially crafted request to the server, which allows the tester to execute commands on the server. In this scenario, what is the exploit?

   • AThe penetration tester
   • BThe web server
   • CThe unpatched content management system
   • DThe specially crafted request that executes commands
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the core idea behind defense-in-depth?

   • AUsing multiple layers of security controls so that if one fails, others still provide protection
   • BRelying on a single strong firewall to block all attacks
   • CUsing only physical security measures
   • DPlacing all security controls at the network perimeter
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What does the 'C' in the CIA triad stand for?

   • AConfidentiality
   • BCryptography
   • CControl
   • DCompliance
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which action is an example of system hardening?

   • ADisabling unused USB ports on a server
   • BInstalling additional software for user convenience
   • CConnecting the system to more networks
   • DGranting all users administrative privileges
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary goal of system hardening?

   • ATo reduce the attack surface by disabling unnecessary services and applying security configurations
   • BTo increase the number of open ports for better connectivity
   • CTo make the system more user-friendly by removing security prompts
   • DTo replace all software with open-source alternatives
   Reveal Solution Discussion Select an answer first