5.1 Describe Management Concepts 200-201 Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A company is preparing for a security audit and discovers that several network switches were installed three years ago but were never added to the asset inventory. The security team needs to ensure that all network devices are tracked and that their configurations are consistent with the company's security standards. Which two actions should the team take first?

   • AImmediately apply the latest firmware updates to the switches and then document the change.
   • BAdd the switches to the asset inventory and establish a configuration baseline for them.
   • CDisconnect the switches from the network until they are properly documented.
   • DReplace the switches with new models that are already in the asset inventory.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary purpose of configuration management?

   • ATo assign IP addresses to devices on the network
   • BTo establish and maintain consistent settings and versions of systems and devices
   • CTo monitor network traffic for suspicious activity
   • DTo store backup copies of all data
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A security analyst is reviewing configuration drift on a fleet of 50 identical web servers. The configuration management tool reports that 10 servers have drifted from the baseline. The analyst needs to determine whether the drift is a security issue or a legitimate operational change. What is the BEST first step?

   • ARun a vulnerability scan on the drifted servers
   • BUpdate the baseline to match the drifted servers
   • CRevert all drifted servers to the baseline immediately
   • DCompare the drifted configurations to the baseline and check change management records
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A network team is managing a large number of devices with varying configurations. They want to reduce the risk of misconfiguration and ensure that all devices meet security standards. However, they also need to allow some devices to have custom settings for specific business needs. What is the best approach?

   • AAllow each team to configure devices as they see fit
   • BUse configuration management tools with role-based access and exception handling
   • CDisable configuration management and rely on manual audits
   • DEnforce a single strict configuration for all devices
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A company allows employees to use personal smartphones for email. A phone is lost, and IT needs to ensure the corporate email data on the device cannot be accessed. The device is enrolled in the company's MDM. What should the IT administrator do?

   • APerform a remote wipe of the device
   • BRevoke the user's Active Directory account
   • CChange the corporate email server password
   • DRemove the device from the MDM enrollment list
   Reveal Solution Discussion Select an answer first