Administrative Application Security CND Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A network administrator is configuring access for a new finance application. The company requires that employees in the finance department can view and edit their own department's records, but managers must be able to approve transactions. The administrator wants to enforce least privilege. What should the administrator implement?

   • ACreate role-based access control (RBAC) roles for 'Finance Employee' and 'Finance Manager' with only the permissions each role requires.
   • BAssign all finance users the same generic 'Finance User' role that includes both view/edit and approval permissions.
   • CGrant each user individual permissions based on their personal requests, without grouping into roles.
   • DUse the application's default administrator account for all finance users to simplify access.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary goal of incident response in the context of application security?

   • ATo punish the attacker responsible for the breach
   • BTo identify the root cause of all application bugs
   • CTo prevent all future security incidents
   • DTo contain and mitigate the impact of a security breach
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security administrator is setting up logging for a web application. The administrator needs to detect a possible brute-force attack on user accounts. Which logging configuration would best support this detection?

   • ALog only failed logins, because successful logins are not relevant to security.
   • BLog only application errors and exceptions, not authentication events.
   • CLog only successful logins to reduce storage usage.
   • DLog all authentication attempts, including successful and failed logins, with timestamps and source IP addresses.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which topic should be included in security awareness training for application users?

   • AHow to write secure application code
   • BHow to recognize and report phishing emails
   • CHow to configure the application's firewall
   • DHow to perform penetration testing on the application
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company's incident response plan is being updated. The plan must address a ransomware attack that encrypts application data. The administrator is evaluating recovery strategies. What is the most important element to include in the plan?

   • AA plan to restore from cloud backups that are continuously synchronized with production data.
   • BRegularly tested, offline backups that can be restored without paying the ransom.
   • CA plan to disconnect all systems from the network and wait for the attack to end.
   • DA policy to pay the ransom quickly to minimize downtime.
   Reveal Solution Discussion Select an answer first