2.4 Evaluate the Security Controls of an Environment, Diagnose Gaps, and Recommend Improvement 350-201 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of a gap analysis in security control evaluation?

   • ATo test the effectiveness of security controls under attack
   • BTo identify differences between current controls and a desired security baseline
   • CTo determine the root cause of a security incident
   • DTo assign a monetary value to each security control
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   An organization's security policy requires that all servers be configured with a host-based firewall that only allows necessary ports. A review finds that a web server has the firewall disabled. What is the most appropriate action to improve the security control?

   • AInstall an antivirus solution on the web server.
   • BMonitor the web server's traffic with a network IPS.
   • CEnable the host-based firewall and configure rules to allow only necessary ports, such as 80 and 443.
   • DAdd the web server to a network segmentation VLAN.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security assessment reveals that a company's web application firewall (WAF) is not logging blocked requests, making it impossible to tune rules or verify effectiveness. The team must prioritize improvements based on risk. Which recommendation should be implemented first?

   • AEnable logging for all WAF traffic, especially blocked requests.
   • BReplace the WAF with a next-generation firewall (NGFW).
   • CConduct a penetration test to validate the WAF rules.
   • DIncrease the WAF rule severity to block more traffic.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An organization's security policy requires that all administrative access to network devices be logged and reviewed monthly. The current configuration logs access but the logs are never reviewed. What is the most appropriate recommendation?

   • AIncrease the log retention period.
   • BImplement a process to review the logs monthly.
   • CDisable logging because it is not being used.
   • DChange the policy to remove the review requirement.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security assessment reveals that the organization's backup system is not tested regularly, and the backup server is on the same network segment as the production servers. The security policy requires that backups be tested quarterly and stored offline. Which recommendation should be prioritized?

   • AOnly test the backups quarterly.
   • BOnly move the backup server to a separate segment.
   • CMove the backup server to a separate network segment and test backups quarterly.
   • DKeep the backup server on the same segment for easier management.
   Reveal Solution Discussion Select an answer first