Implement Security Measures Based on Customer Policies POWEREDGE-XE-OPERATE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A customer policy requires that security incidents be reported to the customer's security team within 1 hour of detection. What should a technician do upon detecting a potential security incident?

   • AReport the incident to the customer's security team immediately
   • BDocument the incident in the local log and do not report it
   • CAttempt to fix the issue first and report only if it cannot be fixed
   • DWait until the end of the shift to report the incident
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A financial services customer requires that all sensitive data stored on a Dell PowerEdge XE server be unreadable if a physical disk is removed, and that all data transmitted between the server and backup storage be protected. The server uses a hardware RAID controller with a cache. Which combination of measures should the administrator implement?

   • AApply a BIOS administrator password and configure the backup software to use a shared secret for authentication.
   • BUse a software encryption tool on the OS and disable the network encryption on the backup link to reduce CPU overhead.
   • CEnable self-encrypting drives (SEDs) with a pre-boot authentication password and configure the backup link to use TLS.
   • DEnable the RAID controller's write-back cache and rely on the array's redundancy to protect data if a disk is removed.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A customer policy requires that all firmware and software be kept up to date with security patches. Which tool is commonly used to manage firmware updates on Dell PowerEdge XE servers?

   • AWindows Update
   • BDell OpenManage Server Administrator (OMSA)
   • CLinux yum command
   • DVMware vSphere Client
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A customer policy requires that only the server administrator can access the iDRAC management interface. Which access control measure should be implemented to enforce this policy?

   • AAssign the administrator role to all IT staff to simplify management.
   • BDisable all iDRAC user accounts and rely on physical console access only.
   • CCreate a local iDRAC user account with administrator privileges and share the credentials with the IT team.
   • DConfigure iDRAC user accounts with role-based access, granting administrator privileges only to the designated server administrator.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A customer's security policy requires that security-relevant events on Dell PowerEdge XE servers be logged and that the logs be protected from tampering. The administrator has enabled iDRAC and OS audit logs. Which additional configuration is required to meet the tamper-protection requirement?

   • AEnable the iDRAC system event log and set it to overwrite the oldest events when full.
   • BStore the logs only on the server's local disk and set the log file permissions to read-only for all users.
   • CIncrease the log buffer size and enable log rotation to keep the logs from filling the disk.
   • DConfigure the logs to be forwarded to a centralized, write-once log collector that only authorized security staff can access.
   Reveal Solution Discussion Select an answer first