2.2 Describe the Use of Hardening Machine Images for Deployment 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization uses a hardened VM image to deploy web servers. After a critical vulnerability is disclosed in a library included in the image, the security team updates the image and redeploys all servers. Which benefit of using hardened images is demonstrated by this action?

   • AThe ability to reduce the number of virtual machines needed for the application.
   • BThe ability to eliminate the need for runtime security monitoring.
   • CThe ability to quickly remediate vulnerabilities by updating the image and redeploying instances.
   • DThe ability to automatically apply patches to running instances without redeployment.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a common technique used to harden a machine image?

   • AConfiguring the image to automatically accept all incoming connections
   • BEnabling all default services to ensure full functionality
   • CDisabling unnecessary services and removing unused applications
   • DInstalling the latest version of every available software package
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses a hardened image to deploy virtual machines in a development environment. The security team wants to ensure that all deployed VMs meet the same security baseline. Which practice is most effective?

   • ARe-deploy all VMs from the image every week
   • BUse a configuration management tool to enforce the baseline on all VMs after deployment
   • CRely on the image alone and do not perform any post-deployment checks
   • DAllow developers to modify the VMs as needed without restrictions
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key benefit of using a hardened machine image in deployment?

   • AIt eliminates the need for any monitoring or logging
   • BIt allows the image to be deployed without any network security controls
   • CIt guarantees the image is immune to all attacks
   • DIt ensures that all instances meet the organization's security baseline
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team is preparing a Windows Server 2022 image for deployment to a fleet of application servers. The image was built from a clean installation, and the team has installed the required application components. Before finalizing the image, which action is most important to reduce the attack surface?

   • AEnable Windows Defender Firewall and set all inbound rules to block by default, then capture the image.
   • BRemove unused roles, features, and sample files, then apply the latest patches and configure security baselines.
   • CConfigure the image to use a local administrator account with a strong password, then generalize with Sysprep.
   • DInstall the latest antivirus agent and perform a full scan of the image before capture.
   Reveal Solution Discussion Select an answer first