Implement Security Measures Based on Customer Policies POWEREDGE-XE-OPERATE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A customer policy requires that Dell PowerEdge XE servers be protected from network-based attacks by limiting the services exposed to the network. The server runs a web application on port 443 and an SSH service for administration. Which network security control should the administrator implement?

   • AConfigure the host firewall to allow inbound traffic only on ports 443 and 22, and restrict the source of SSH connections to the admin subnet.
   • BAllow all inbound traffic on all ports and rely on the application's authentication to protect the server.
   • CConfigure the firewall to allow inbound traffic only on port 80 and disable SSH.
   • DDisable the host firewall and rely on the server's operating system to handle network security.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   A customer policy requires that audit logs be retained for at least one year. Which action should be taken to comply with this policy?

   • ASet up log forwarding to a centralized log server with long-term storage.
   • BDisable audit logging to avoid storage issues.
   • CConfigure log rotation to overwrite logs daily.
   • DStore logs only in the server's volatile memory.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A customer policy requires that all data written to a Dell PowerEdge XE server's local disks be encrypted, and that the encryption keys be protected from unauthorized access. The server uses a hardware RAID controller and the operating system supports BitLocker. Which configuration should the administrator implement?

   • AEnable BitLocker on the operating system volume and configure it to use the TPM 2.0 chip for key protection.
   • BEnable the iDRAC's virtual console and require a password for remote KVM access.
   • CSet a BIOS administrator password and disable the front USB ports to prevent key extraction.
   • DEnable the RAID controller's write-back cache and rely on the array's parity to protect the data.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A customer is repurposing a Dell PowerEdge XE server for a different business unit. The server contains non-encrypted drives with data from a former project. The customer policy requires that the data be sanitized before the server is repurposed, and the drives must remain usable for the new project. The administrator needs to choose a sanitization method. Which method should the administrator use?

   • APhysically destroy the drives with a shredder and install new drives for the new project.
   • BPerform a single-pass overwrite of the entire drive with zeros using a trusted utility, then verify the drive is blank.
   • CUse the operating system's 'remove' command on all files and then empty the recycle bin.
   • DDelete the partition and create a new one, then format the drive with a quick format.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   A customer policy requires that iDRAC be configured securely. Which setting is a key part of a secure iDRAC configuration?

   • AEnabling strong password requirements and changing default credentials
   • BUsing default passwords for iDRAC accounts
   • CAllowing anonymous access to iDRAC for monitoring tools
   • DDisabling all authentication for iDRAC access
   Reveal Solution Discussion Select an answer first