Implement Security Measures Based on Customer Policies POWEREDGE-XE-OPERATE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A customer's secure configuration baseline requires that Dell PowerEdge XE servers have Secure Boot enabled, TPM 2.0 enabled, and the iDRAC accessible only from the management network. The server is currently running with Secure Boot disabled and TPM 2.0 disabled. Which sequence of actions should the administrator perform?

   • AEnable TPM 2.0 in the operating system and leave Secure Boot disabled.
   • BConfigure iDRAC to use the production network and rely on the host firewall to restrict access.
   • CEnter BIOS setup, enable Secure Boot and TPM 2.0, save the changes, then configure iDRAC to use the management network with an ACL.
   • DEnable Secure Boot in the operating system and leave TPM 2.0 disabled.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A customer's security policy requires that all administrative actions on a Dell PowerEdge XE server be recorded with the identity of the person who performed them, and that these records be retained for at least one year. The server is managed through iDRAC and the operating system. Which configuration should the administrator implement?

   • AEnable iDRAC audit logs and configure them to overwrite the oldest events when the log is full.
   • BEnable only the iDRAC system event log and leave the default retention settings, which store events for the life of the server.
   • CConfigure the OS to log only successful logins and store the logs locally on the server's boot drive.
   • DEnable iDRAC and OS audit logs, configure them to send events to a centralized log collector, and set the retention period on the collector to 365 days.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A customer policy requires that security patches be applied within 30 days of release. Which process should be followed to ensure compliance?

   • AApply patches only during annual maintenance windows.
   • BSubscribe to vendor security advisories and schedule patch deployment within the required timeframe.
   • CWait for the customer to request patch installation.
   • DDisable automatic updates to avoid unexpected reboots.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A customer's security baseline requires that Dell PowerEdge XE servers boot only from the internal operating system drive, disable legacy boot options, and require a password for entering the BIOS setup. The server is being deployed for the first time. Which sequence of actions should the administrator perform?

   • AEnable UEFI boot mode, leave the boot order at the default, and set an operating system password.
   • BEnter BIOS setup, set a setup password, disable legacy boot modes, set the boot order to the internal drive only, and save the configuration.
   • CDisable the TPM and enable the serial console for remote management.
   • DSet a BIOS setup password and enable the network boot option as a fallback.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A managed service provider operates a multi-tenant Dell PowerEdge XE rack where each customer's virtual servers share the same physical host. A customer policy requires that administrative access to their virtual machines be restricted to specific named IT staff, and that all administrative sessions be cryptographically protected. The hypervisor uses a central authentication service. Which configuration should the administrator implement to satisfy the policy?

   • AIntegrate the hypervisor and VMs with the central authentication service, assign the named staff to a role that grants administrative privileges, and require SSH or HTTPS for management connections.
   • BCreate a local administrator account on each VM with a strong password and require the staff to use it over a plain HTTP management interface.
   • CEnable the built-in administrator account on each VM and share the password with all IT staff, then connect using Telnet for simplicity.
   • DConfigure the VMs to accept only console access through the hypervisor's virtual console, without any additional authentication or network encryption.
   Reveal Solution Discussion Select an answer first