A Linux server is running a web application that must be accessible on port 443. The security team wants to restrict outbound connections from the server to only the necessary update repositories and DNS servers. Which tool should they use to enforce this?

SELinux boolean settings to restrict network access.

sudoers configuration to restrict commands that can open network connections.

iptables with OUTPUT chain rules that allow only specific destinations and ports.

AppArmor profile to deny network access.

Which Windows built-in tool can be used to create inbound and outbound rules that allow or block network traffic based on ports, programs, or IP addresses?

Windows Defender Firewall with Advanced Security

A SOC analyst is investigating a Windows server that was compromised. The analyst needs to determine whether an attacker used a valid account to log on and what commands were executed. Which event logs should the analyst examine?

ForwardedEvents log and Microsoft-Windows-AppLocker/Operational log.

Setup log and Windows Defender operational log.

System log for service failures and Application log for application errors.

Security log for logon events (4624, 4625) and PowerShell operational log for script blocks.

EC-CouncilSOC Essentials

Domain 1Objective 4

Windows and Unix/Linux Security SCE Practice Questions (Page 6)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

11concepts

11 Concepts in This Objective

Windows Security Architecture
Windows Authentication and Authorization
Windows Security Policies and Group Policy
Windows Auditing and Logging
Windows Defender and Built-in Security Tools
Unix/Linux Security Architecture
Unix/Linux Authentication and PAM
Unix/Linux File Permissions and Access Control
Unix/Linux Security Hardening
Unix/Linux Auditing and Logging
Unix/Linux Security Tools

Questions 26–30

26expert · medium
A Linux server is running a web application that must be accessible on port 443. The security team wants to restrict outbound connections from the server to only the necessary update repositories and DNS servers. Which tool should they use to enforce this?
Select an answer first
27foundation · easy
Which Windows built-in tool can be used to create inbound and outbound rules that allow or block network traffic based on ports, programs, or IP addresses?
Select an answer first
28foundation · easy
Which Windows feature allows an administrator to centrally define and apply security settings, such as password policies and software restrictions, to multiple computers in an Active Directory domain?
Select an answer first
29foundation · easy
Which command changes the owner and group of a file in Linux?
Select an answer first
30expert · medium
A SOC analyst is investigating a Windows server that was compromised. The analyst needs to determine whether an attacker used a valid account to log on and what commands were executed. Which event logs should the analyst examine?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Windows and Unix/Linux Security SCE Practice Questions (Page 6)

Questions 26–30

A Linux server is running a web application that must be accessible on port 443. The security team wants to restrict outbound connections from the server to only the necessary update repositories and DNS servers. Which tool should they use to enforce this?

Which Windows built-in tool can be used to create inbound and outbound rules that allow or block network traffic based on ports, programs, or IP addresses?

Which Windows feature allows an administrator to centrally define and apply security settings, such as password policies and software restrictions, to multiple computers in an Active Directory domain?

Which command changes the owner and group of a file in Linux?

A SOC analyst is investigating a Windows server that was compromised. The analyst needs to determine whether an attacker used a valid account to log on and what commands were executed. Which event logs should the analyst examine?

Keep studying — Computer Network and Security Fundamentals