Administrative Application Security CND Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which practice is essential for effective user access management in applications?

   • APeriodically reviewing user accounts and permissions to ensure they are still appropriate
   • BSharing administrator accounts among team members to reduce the number of accounts
   • CGranting temporary access to all users during system maintenance
   • DDisabling password expiration to reduce user inconvenience
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the goal of secure configuration management for applications?

   • ATo allow administrators to change configurations without documentation
   • BTo ensure that all users have the same configuration settings
   • CTo maximize application performance by disabling all security features
   • DTo ensure that applications are configured securely and consistently to reduce vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   An organization's incident response plan is activated after a suspected data breach in a customer-facing application. The plan requires preserving evidence for potential legal action. The administrator is tasked with collecting logs. What is the most important consideration?

   • ADelete logs that contain sensitive customer data to protect privacy.
   • BOnly collect logs from the application server, ignoring network and database logs.
   • CCollect logs from all relevant systems and store them in a secure, tamper-evident manner to maintain chain of custody.
   • DWait until the investigation is complete before collecting any logs.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which activity is an example of administrative application security?

   • AReviewing application source code for SQL injection vulnerabilities
   • BConfiguring an application's access control list to restrict user permissions
   • CPerforming penetration testing on the application to find vulnerabilities
   • DDesigning a new authentication protocol for the application
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company uses a configuration management tool to deploy application settings to multiple servers. A recent change to a configuration file caused an application outage. The administrator needs to prevent this from happening again while still allowing configuration changes. What is the best approach?

   • AAllow administrators to make changes directly in production without review.
   • BImplement a change management process that requires configuration changes to be tested in a staging environment before deployment.
   • CDisable all configuration changes and use only the default settings.
   • DUse a configuration management tool that automatically rolls back any change that causes an error.
   Reveal Solution Discussion Select an answer first