5.1 Describe Management Concepts 200-201 Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is the primary purpose of Mobile Device Management (MDM)?

   • ATo increase the battery life of mobile devices
   • BTo manage and secure mobile devices by enforcing policies, remote wipe, and application control
   • CTo replace the need for antivirus software on mobile devices
   • DTo provide a backup service for mobile device data
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A security team is implementing a configuration baseline for a fleet of servers. They want to ensure that any unauthorized change is detected quickly. However, they also need to allow legitimate administrative changes without generating excessive alerts. What is the best approach?

   • AMonitor changes but do not establish a baseline
   • BReview changes only during quarterly audits
   • CLock down all servers so no changes can be made
   • DEstablish a baseline and use change monitoring with a defined approval process
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following lists the stages of an asset's lifecycle in the correct order?

   • AProcurement, deployment, maintenance, disposal
   • BMaintenance, procurement, deployment, disposal
   • CDeployment, procurement, disposal, maintenance
   • DDisposal, procurement, maintenance, deployment
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A vulnerability scan identifies a high-severity vulnerability on an internal application server. The server is not internet-facing, but it is accessible from the internal network. The vulnerability requires authentication to exploit. The application team says the fix will take three weeks. What is the BEST immediate action?

   • ARestrict network access to the server to only authorized administrators
   • BWait for the application team to apply the fix
   • CMove the server to a public cloud environment
   • DDisable authentication on the server to simplify access
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A vulnerability scan identifies a critical vulnerability on a legacy application server. The server cannot be patched because the vendor no longer provides updates, and the application is essential to business operations. Which remediation or mitigation strategy is most appropriate?

   • AIgnore the vulnerability because the server is legacy
   • BApply a compensating control, such as an ingress firewall rule that blocks access to the vulnerable service
   • CRun the vulnerability scanner again to confirm the finding
   • DUninstall the application and migrate users to a different system
   Reveal Solution Discussion Select an answer first