Administrative Application Security CND Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a best practice for patch management in an enterprise environment?

   • ADeploy patches immediately to all systems without testing to minimize the window of exposure
   • BApply patches only when a security incident occurs
   • CTest patches in a non-production environment before deploying them broadly
   • DDisable automatic updates to maintain control over the environment
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company uses a configuration management database (CMDB) to track application configurations. A recent audit found that some servers have configuration settings that do not match the approved baseline. The administrator needs to remediate this. What is the best approach?

   • AIgnore the discrepancies because the servers are functioning correctly.
   • BManually update each server's configuration to match the baseline.
   • CUpdate the baseline to match the current configuration of the servers.
   • DUse automated configuration management tools to enforce the approved baseline on all servers.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is deploying a new application that will be accessed by both employees and external partners. The security policy requires that external partners have limited access compared to employees. The administrator is designing the access control model. What is the best approach?

   • AGive external partners the same access as employees to simplify management.
   • BCreate individual user accounts for each partner with manually assigned permissions.
   • CCreate separate roles for employees and external partners, with permissions tailored to each group's needs.
   • DUse a single role for all users and rely on the application's business logic to restrict access.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security administrator is configuring logging for a financial application. The compliance team requires that audit logs be retained for at least seven years. The administrator is concerned about storage costs. What is the most appropriate approach?

   • AStore logs in a low-cost, long-term storage solution, such as cold storage, and ensure they are tamper-evident.
   • BStore logs on the application server's local disk for easy access.
   • CReduce the retention period to one year to save storage costs.
   • DDisable logging for non-critical events to reduce the amount of data stored.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which step is part of the incident recovery process?

   • AInforming all users that the incident was a false alarm
   • BDeleting all logs to remove evidence of the incident
   • CChanging the application's source code to fix a bug
   • DRestoring the application from a known-good backup
   Reveal Solution Discussion Select an answer first