Administrative Application Security CND Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's web application was compromised. The incident response team has identified the vulnerability and applied a fix. The administrator is now responsible for recovery. What is the most important next step?

   • AChange all user passwords and then restore the application from backup.
   • BVerify that the backup is clean, restore the application, and then monitor logs for any signs of lingering compromise.
   • CDelete all logs to remove any traces of the attacker's activity.
   • DRestore the application from the most recent backup and immediately put it back online.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A multinational company stores customer data in a cloud application. The company must comply with data residency requirements that mandate customer data be stored within a specific country. The administrator is configuring the application. What is the most important action?

   • ASelect a cloud region located within the required country for data storage.
   • BEncrypt all customer data regardless of where it is stored.
   • CRestrict access to customer data to only the company's employees.
   • DUse a private cloud to ensure data is stored on dedicated hardware.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator is reviewing user access to a file-sharing application. The administrator discovers that several former employees still have active accounts. What is the most appropriate action to take?

   • AOnly disable the accounts if they have administrative privileges.
   • BLeave the accounts active in case the former employees return to the company.
   • CChange the passwords of the former employees' accounts and keep them active.
   • DDisable or delete the accounts of former employees immediately and review the access of current employees periodically.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which component is typically included in a security policy for application management?

   • AThe IP address of the application's database server
   • BThe source code for the application's authentication module
   • CThe default password for the application's administrator account
   • DThe procedure for requesting and approving access to applications
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is security awareness training important for application security?

   • AIt helps users recognize and avoid risky behaviors that could compromise applications
   • BIt guarantees that no security incidents will ever occur
   • CIt eliminates the need for technical security controls
   • DIt ensures that all users have the same level of access to applications
   Reveal Solution Discussion Select an answer first