Securing Operating Systems CSCU Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What should you do to ensure that backups are reliable?

   • ATest the restoration process periodically
   • BBack up only once a year
   • CNever update the backup software
   • DStore backups only on the same hard drive
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is setting up new Windows 10 workstations for employees who only need to browse the web and use office applications. The security team wants to minimize the risk of exploitation. Which approach is most effective?

   • AGive each user administrator rights to install any software they need.
   • BInstall a standard hardened image with only necessary applications, enable the firewall, and apply security baselines.
   • CDisable the firewall to avoid blocking any legitimate traffic.
   • DInstall all available applications and features to ensure users have everything they need.
   Reveal Solution Discussion Select an answer first
4. 18expert · medium

   A company has a file server that stores sensitive HR documents. The compliance team requires that data be encrypted at rest. The server is running Windows Server and uses NTFS. Which approach is the most appropriate?

   • AUse EFS (Encrypting File System) on the HR folder.
   • BEnable BitLocker on the server's system and data volumes.
   • CSet NTFS permissions to deny access to unauthorized users.
   • DCompress the HR folder to protect the data.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to enforce a consistent security configuration across all Windows 10 workstations, including password complexity, account lockout, and disabling guest accounts. What is the most efficient method?

   • ACreate a script that each user runs at logon to change their own settings.
   • BManually configure each workstation using the Local Security Policy editor.
   • CUse the Windows Settings app to change settings on each computer.
   • DApply a Group Policy Object (GPO) to the organizational unit containing the workstations.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a recommended firewall configuration practice?

   • AOnly block traffic from known malicious IP addresses
   • BDisable the firewall to improve performance
   • CBlock all incoming traffic that is not explicitly allowed
   • DAllow all incoming traffic to simplify connectivity
   Reveal Solution Discussion Select an answer first