1.2 Compare Security Deployments 200-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A small business is using a legacy antivirus product that relies solely on signature updates. The business recently experienced an infection from a new, previously unknown ransomware variant. Why did the legacy antivirus fail to detect this threat?

   • AThe antivirus was not running with administrative privileges
   • BThe antivirus was not connected to the internet for updates
   • CThe antivirus could not detect the threat because no signature existed for the new variant
   • DThe antivirus was not configured to scan the correct file types
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is subject to a regulation that requires retaining authentication logs for at least one year. The security team currently stores logs locally on each server, which makes searching difficult and risks data loss if a server fails. Which practice should the team implement to meet the retention requirement and improve searchability?

   • AIncrease local disk space on each server to store one year of logs
   • BCentralize log collection into a dedicated log management platform with one-year retention
   • CDelete logs older than 30 days to reduce storage costs
   • DConfigure each server to email logs to the security team daily
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a security challenge specific to virtual machines (VMs)?

   • AVMs cannot be isolated from each other
   • BVMs are immune to malware
   • CVMs do not require operating system updates
   • DHypervisor vulnerabilities can compromise multiple VMs on the same host
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of security groups in a cloud environment?

   • ATo control inbound and outbound network traffic to cloud resources
   • BTo encrypt data stored in cloud buckets
   • CTo manage user passwords and authentication
   • DTo monitor application logs for security incidents
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security engineer is configuring a cloud environment and must ensure that only authorized users can access a storage bucket, and that data is protected during transmission. The engineer also needs to log all access attempts for auditing. Which set of controls should be implemented?

   • AData encryption at rest and a VPN gateway
   • BWeb application firewall and DDoS protection
   • CIAM policies, TLS encryption, and cloud audit logging
   • DSecurity groups and network ACLs
   Reveal Solution Discussion Select an answer first