Maintain Server Security POWEREDGE-OPERATE-V2 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has a Dell PowerEdge server used by a team of 10 developers. The security policy requires that only the team lead can install software, but all developers need to start and stop a specific service. The server runs Linux with sudo. What is the most secure way to configure access?

   • ACreate a sudoers rule that allows the team lead to run all commands and the developers to run only the specific service management commands.
   • BAdd all developers to the sudo group and rely on the team lead to monitor their actions.
   • CDisable password authentication and use SSH keys for all users, including the team lead.
   • DGive all developers the root password so they can perform any task.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A Dell PowerEdge server stores sensitive customer data on a local RAID array. The security policy requires that the data be unreadable if the physical disks are stolen. The server uses UEFI with a TPM 2.0 module. Which solution best meets this requirement?

   • AConfigure the RAID controller cache to be write-back.
   • BSet a BIOS setup password to prevent unauthorized boot.
   • CEnable BitLocker Drive Encryption and seal the encryption key to the TPM.
   • DEnable Secure Boot to ensure only trusted OS code loads.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A Dell PowerEdge server uses BitLocker with a TPM. The server's motherboard fails and must be replaced. The administrator has the BitLocker recovery key. After replacing the motherboard and booting the server, BitLocker prompts for the recovery key. What is the most likely reason, and what should the administrator do?

   • AThe BIOS settings were reset; the administrator should disable Secure Boot and reboot.
   • BThe TPM is new, so the BitLocker key sealed to the old TPM is no longer valid; the administrator should enter the recovery key and then re-seal the key to the new TPM.
   • CThe hard drive was corrupted during the motherboard replacement; the administrator should reformat the drive.
   • DThe administrator must reinstall the OS because the motherboard replacement invalidates the OS license.
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A Dell PowerEdge server is located in a shared equipment room that is accessible to multiple contractors. The server contains sensitive data. The administrator wants to detect if someone opens the server chassis. Which feature should be enabled?

   • AA host-based firewall with strict inbound rules.
   • BFull-disk encryption with a TPM-sealed key.
   • CSecure Boot in the BIOS settings.
   • DChassis intrusion detection in iDRAC, configured to log and alert on chassis open events.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Dell PowerEdge server is being deployed in a high-security environment. The security policy mandates that the server only boot from a trusted, signed operating system and that the boot process be protected from tampering. The server has UEFI boot mode enabled. Which configuration should the administrator apply?

   • AEnable Legacy BIOS boot mode and disable Secure Boot to ensure compatibility.
   • BEnable Secure Boot and configure the UEFI boot order to only include the trusted OS bootloader.
   • CSet a BIOS setup password and a system password.
   • DDisable the TPM and rely on the chassis intrusion switch for boot integrity.
   Reveal Solution Discussion Select an answer first