Maintain Server Security POWEREDGE-OPERATE-V2 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A Dell PowerEdge server runs a critical application that cannot tolerate downtime during business hours. The security team has identified a critical firmware vulnerability in the server's BIOS. The vendor has released a patch. What is the most appropriate patch management approach?

   • AApply the firmware update immediately during business hours to eliminate the vulnerability as soon as possible.
   • BApply only the OS-level patches and ignore the firmware update.
   • CSchedule the firmware update during the next maintenance window and test it in a staging environment first.
   • DSkip the firmware update because the server is behind a firewall and not exposed to the internet.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of a firewall on a Dell PowerEdge server?

   • ATo filter incoming and outgoing network traffic based on rules
   • BTo authenticate users
   • CTo encrypt data at rest
   • DTo detect and remove malware
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst notices that a Dell PowerEdge server has been sending a large amount of outbound traffic to an unknown IP address at 3:00 AM every day. The server's OS logs show no corresponding user activity. Which action should the analyst take first to investigate this potential breach?

   • AReboot the server to clear any malicious processes from memory.
   • BDisconnect the server from the network immediately.
   • CReview the firewall logs and netstat output to identify the process and destination.
   • DChange the root password to prevent further unauthorized access.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A Dell PowerEdge server is located in a data center that is shared with other tenants. The server contains highly sensitive data. The security policy requires that the server be protected from unauthorized physical access and that any physical intrusion be detected. The server is mounted in a standard 19-inch rack. Which combination of controls best meets the requirement?

   • AEnable Secure Boot and set a BIOS setup password.
   • BInstall the server in a locked rack cabinet, enable chassis intrusion detection, and configure iDRAC to send alerts.
   • CUse cable locks to secure the server to the rack and disable the front USB ports.
   • DRely on the data center's CCTV cameras and access control system.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which physical security measure is most effective in preventing unauthorized personnel from physically accessing a server in a data center?

   • AUsing cable locks
   • BSetting a BIOS password
   • CEnabling Secure Boot
   • DRestricting access to the server rack with a locked enclosure
   Reveal Solution Discussion Select an answer first