Server Hardening SK0-005 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a patch management policy that requires all servers to be patched within 14 days of a security update's release. The administrator is managing a server that runs a legacy application. The application vendor has stated that they will only support the application on a specific OS version, and applying the latest OS patches may cause compatibility issues. What should the administrator do to comply with the policy while minimizing risk?

   • ADo not apply the patches and document the exception.
   • BApply the patches to a test server first and verify the application works before applying to production.
   • CDisable the application until the patches are applied.
   • DApply the patches and test the application afterward.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A server administrator is deploying a new file server that will store sensitive documents. The company's security baseline requires antivirus protection on all servers. The administrator has installed the antivirus software, but the file server is experiencing performance issues during large file transfers. What should the administrator do to address the performance issue while maintaining the security baseline?

   • AConfigure the host firewall to block all incoming traffic to the file server.
   • BDisable the antivirus software entirely to improve performance.
   • CMove the file server to a different network segment to reduce the load on the antivirus software.
   • DExclude the file server's data volume from real-time scanning and schedule a weekly full scan instead.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a typical rule configured in a host-based firewall?

   • AAllow inbound traffic on port 443 for HTTPS
   • BSet the server's hostname
   • CInstall the latest OS updates
   • DConfigure the server's IP address
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is it important to identify services running on a server?

   • ATo assign IP addresses to each service
   • BTo determine which services are necessary and which can be disabled
   • CTo configure the server's hostname
   • DTo increase the number of services for better functionality
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is it important to keep antivirus definitions up to date?

   • ATo improve the server's processing speed
   • BTo comply with hardware requirements
   • CTo reduce the server's memory usage
   • DTo recognize and protect against new malware variants
   Reveal Solution Discussion Select an answer first