Infrastructure Security DS0-001 Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A database administrator is setting up a firewall for a new database server. The server will be used for development and testing, and the administrator needs to allow access from their own workstation (IP 192.168.1.100) and from a colleague's workstation (IP 192.168.1.101). The firewall uses a default-deny policy. Which configuration is correct?

   • ACreate a single allow rule for the database port with the source set to 192.168.1.100, and rely on the default-deny policy to block the colleague's workstation.
   • BCreate two allow rules for the database port, one for each workstation IP.
   • CCreate a single allow rule for the database port with the source set to 'Any'.
   • DCreate a single allow rule for the database port with the source set to 192.168.1.0/24.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A database administrator is responsible for the physical security of a server room. The room contains a single rack of database servers. The administrator wants to implement a control that ensures only the database team can access the rack, and that the access is logged for auditing. Which control should be implemented?

   • AA proximity card reader on the rack door, with no logging capability.
   • BA CCTV camera pointed at the rack, with footage stored for 30 days.
   • CA biometric fingerprint reader on the rack door that logs the identity of each person who enters.
   • DA simple key lock on the rack door, with a sign-in sheet for visitors.
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A data center is being designed to house a high-availability database cluster. The facility manager is considering fire suppression options. The cluster is critical and must remain operational during a fire event. Which fire suppression system is most appropriate for this environment?

   • AA gaseous clean agent system that discharges an inert gas to suppress the fire.
   • BA pre-action sprinkler system that requires two independent triggers before releasing water.
   • CA standard wet-pipe sprinkler system that discharges water immediately upon heat detection.
   • DA dry chemical system that uses a powder to extinguish the fire.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A network administrator needs to block all incoming traffic on port 22 (SSH) from external networks while still allowing internal SSH access. Which firewall rule should be implemented?

   • AAllow all incoming traffic on port 22
   • BAllow incoming traffic on port 22 from internal network only
   • CDeny all incoming traffic on port 22 from any source
   • DDeny outgoing traffic on port 22 to any destination
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   A database administrator is reviewing the physical security of a server room. The room is protected by a gaseous fire suppression system. The administrator is concerned about the safety of personnel who might be in the room when the system discharges. Which feature should the suppression system have to address this concern?

   • AA manual release button that can be used to activate the system from outside the room.
   • BA pre-discharge alarm and time delay to allow personnel to evacuate before the gas is released.
   • CA visual indicator light that shows when the system is armed.
   • DA pressure relief vent to prevent over-pressurization of the room.
   Reveal Solution Discussion Select an answer first