Maintain Server Security POWEREDGE-OPERATE-V2 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which tool is commonly used on Dell PowerEdge servers to update firmware components such as BIOS, iDRAC, and RAID controllers?

   • ADell Update Packages (DUPs)
   • BLinux yum update
   • CWindows Update
   • DDell OpenManage Server Administrator (OMSA)
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of setting up audit trails on a Dell PowerEdge server?

   • ATo provide a record of security-relevant events for analysis and accountability
   • BTo encrypt sensitive data
   • CTo improve server performance
   • DTo automatically block malicious IP addresses
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which core principle of server security ensures that data is not altered or destroyed by unauthorized parties?

   • AConfidentiality
   • BIntegrity
   • CAuthentication
   • DAvailability
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A Dell PowerEdge server is the target of a brute-force SSH attack from multiple IP addresses. The administrator has already implemented a host-based firewall that blocks the offending IPs, but new IPs keep appearing. The server also hosts a web application that must remain available. Which additional control is most effective to stop the attack while maintaining availability?

   • AChange the SSH port from 22 to a non-standard port.
   • BDisable password authentication and require SSH keys for all users.
   • CDisable SSH entirely and use the iDRAC web interface for remote administration.
   • DImplement fail2ban to dynamically block IPs after repeated failed login attempts.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A Dell PowerEdge server has a compliance requirement that all administrative actions be logged and that no single administrator can change audit logs. The server runs Linux. Which configuration satisfies this requirement?

   • AUse a shared administrative account and rely on the OS's default logging.
   • BGrant all administrators root access and enable sudo logging.
   • CConfigure auditd to send logs to a remote, append-only log server and restrict local log modification.
   • DEnable Secure Boot and require TPM attestation for all logins.
   Reveal Solution Discussion Select an answer first