5.8 Identify These Elements Used for Server Profiling 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In server profiling, what is the purpose of identifying running tasks?

   • ATo determine the server's network latency.
   • BTo understand the server's automated and scheduled activities.
   • CTo check the server's power supply status.
   • DTo list all installed device drivers.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   During server profiling, a security analyst runs a command that lists all TCP and UDP ports on which the server is currently listening. Which element of server profiling does this action directly reveal?

   • AListening ports
   • BRunning processes
   • CLogged in users
   • DRunning tasks
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An analyst is profiling a Windows file server. The analyst reviews scheduled tasks and finds one that runs `powershell.exe -EncodedCommand ...` every hour as SYSTEM. The analyst also sees a process `powershell.exe` running with high CPU. What should the analyst do next?

   • AIgnore the task because scheduled tasks are always legitimate.
   • BImmediately kill the PowerShell process and disable the scheduled task.
   • CRecord the task as malicious because it runs as SYSTEM.
   • DDecode the encoded command and compare it with known administrative scripts before deciding if it is malicious.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   While profiling a database server, an analyst discovers a scheduled task that runs a script named 'cleanup.ps1' every night at 2:00 AM. The task runs under the 'svc_db' service account. The analyst also sees that the 'svc_db' account is currently logged in interactively. What should the analyst do?

   • AImmediately disable the scheduled task and log off the interactive session.
   • BNote the scheduled task as a normal maintenance activity and ignore the interactive login.
   • CInvestigate the script's contents and the reason for the interactive login before making any changes.
   • DChange the service account password and update the scheduled task to use a different account.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In server profiling, why are listening ports considered important?

   • AThey indicate which network services are available on the server.
   • BThey list all files and directories shared by the server.
   • CThey identify the physical location of the server.
   • DThey show the operating system version and patch level.
   Reveal Solution Discussion Select an answer first