Administrative Application Security CND Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is developing a security policy for its application management. The policy must ensure that applications are kept up to date and configured securely. Which element should be included in the policy?

   • AA requirement to use the same password for all administrative accounts to simplify management.
   • BA requirement to apply security patches within a defined timeframe after vendor release, and to review configuration settings periodically.
   • CA requirement to disable all application logging to reduce storage costs.
   • DA requirement to allow all users to install software updates on their own workstations.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company's employees are required to attend security awareness training annually, but the company still experiences data breaches due to employees sharing passwords. What is the most effective additional measure to address this behavior?

   • ATerminate employees who are caught sharing passwords.
   • BPost reminders about password security in common areas.
   • CImplement a technical control that prevents password sharing, such as single sign-on with multi-factor authentication.
   • DIncrease the frequency of security awareness training to monthly sessions.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Why is patch management important for application security?

   • AIt fixes known vulnerabilities that could be exploited by attackers
   • BIt improves the application's user interface
   • CIt increases the application's processing speed
   • DIt reduces the need for user training
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the purpose of data protection measures in administrative application security?

   • ATo ensure that sensitive data is protected from unauthorized access and disclosure
   • BTo reduce storage costs by deleting old data
   • CTo improve application performance by caching data
   • DTo make data available to all users for easier collaboration
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which practice is part of secure configuration management?

   • AKeeping configuration files in plain text for easy access
   • BUsing configuration baselines and change management processes
   • CAllowing developers to change production configurations directly without review
   • DDisabling logging to reduce configuration complexity
   Reveal Solution Discussion Select an answer first