Secure Configuration of Enterprise Assets and Software GCCC Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security team has implemented automated drift detection that flags any configuration change on servers. However, the team is overwhelmed by alerts because legitimate changes made through the change-management process are also flagged. The team wants to reduce alert fatigue while still detecting unauthorized changes. Which approach is most effective?

   • ARequire administrators to manually acknowledge each alert, even for approved changes.
   • BIncrease the threshold for drift detection so that only major changes are flagged.
   • CDisable drift detection on servers that have frequent legitimate changes.
   • DIntegrate the drift detection tool with the change-management system so that approved changes are automatically excluded from alerts, while unapproved changes trigger alerts.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has an asset inventory that is updated manually by IT staff. The security team wants to use the inventory to enforce secure configurations, but they have found that the inventory is often outdated, leading to new assets not receiving the baseline. The company is growing rapidly and cannot rely on manual updates. Which approach best addresses the inventory accuracy problem?

   • ADeploy an automated asset discovery tool that continuously scans the network and updates the inventory in real time, then integrate it with the configuration enforcement tool.
   • BPerform a quarterly audit of the inventory and correct any discrepancies.
   • CRequire IT staff to update the inventory at the end of each week.
   • DUse the configuration management tool's agent list as the inventory.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is deploying a commercial off-the-shelf (COTS) application that requires a configuration that conflicts with the organization's security baseline. Specifically, the application requires the use of a service account with domain admin privileges, which violates the baseline. The application is critical to business operations and cannot be replaced. The security team must find a way to deploy the application while minimizing risk. Which approach is most appropriate?

   • AWork with the vendor to identify a supported configuration that uses least privilege, and if not possible, implement compensating controls such as restricting the account's logon hours and network access.
   • BCreate a separate domain for the application and grant the service account domain admin in that domain only.
   • CRefuse to deploy the application until the vendor changes the requirement.
   • DAccept the risk and deploy the application with the required domain admin account.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A large enterprise has a change-management process that requires all configuration changes to be approved by a board. However, the process is slow, and administrators often make emergency changes without approval to resolve outages. The security team wants to improve compliance without hindering incident response. Which approach best balances control and agility?

   • ADisable drift detection during incident response to avoid alerts.
   • BImplement a pre-approved emergency change category with a post-change review and automated drift detection to ensure changes are documented and aligned with the baseline.
   • CRequire all emergency changes to be approved by the board before implementation, even if it delays the fix.
   • DAllow administrators to make changes freely and document them at the end of the month.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which action is an example of software configuration hardening?

   • AIncreasing the number of user accounts with administrative privileges
   • BDisabling unnecessary services and features in the software
   • CEnabling all default accounts and passwords
   • DInstalling the software with default settings
   Reveal Solution Discussion Select an answer first