Server Hardening SK0-005 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the principle of least privilege in user account security?

   • AUsers should have the same permissions as administrators
   • BUsers should have only the permissions necessary to perform their job
   • CUsers should have all permissions by default
   • DUsers should have no permissions at all
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A server administrator is investigating a new Linux web server that was deployed by another team. The administrator runs `netstat -tulpn` and sees that the server is listening on ports 22, 80, 443, 3306, and 8080. The web application only needs ports 80 and 443. Which action should the administrator take to reduce the attack surface?

   • AChange the web server to listen on port 8080 and disable ports 22, 3306, and 443.
   • BDisable only the service on port 8080, since ports 22 and 3306 are standard for SSH and MySQL.
   • CDisable the services bound to ports 22, 3306, and 8080, and configure the host firewall to allow only ports 80 and 443.
   • DLeave the services running but configure the host firewall to block incoming traffic on ports 22, 3306, and 8080.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is deploying a new server that will be used by multiple departments. The security team has provided a security baseline that includes specific firewall rules, password policies, and service configurations. The administrator is responsible for ensuring the server meets the baseline. Which action should the administrator take to verify compliance?

   • ARun a security scanner or compliance tool to check the server against the baseline.
   • BManually review each setting on the server and compare it to the baseline.
   • CAssume the server is compliant because it was deployed from a standard image.
   • DAsk the security team to verify the server's compliance.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is establishing a security baseline important for an organization?

   • AIt guarantees the server will never be hacked
   • BIt eliminates the need for antivirus software
   • CIt ensures consistent security settings across all servers
   • DIt reduces the server's power consumption
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A server administrator is setting up a new Linux server for a team of developers. The developers need to run commands with elevated privileges. The security baseline requires that user accounts have the least privilege necessary. What should the administrator do?

   • AGive each developer the root password so they can log in as root when needed.
   • BCreate individual user accounts for each developer and configure `sudo` to allow only the specific commands they need.
   • CAdd all developers to the `sudo` group and allow them to run any command with `sudo`.
   • DCreate a shared account for all developers and set a strong password for it.
   Reveal Solution Discussion Select an answer first