System Security Management GCIP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A large logistics company has a policy that user accounts must be reviewed every six months. During a review, the security team finds that a former employee's account is still active. What should the team do first?

   • ADelete the account immediately without any further verification.
   • BDisable the account immediately and verify that the former employee no longer requires access.
   • CChange the account password and keep the account active in case the employee returns.
   • DLeave the account active but add a note to the review log to check it again in six months.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A hospital's IT team manages a mix of Windows servers and Linux-based medical devices. A critical remote-code-execution vulnerability was announced for the Linux kernel used by the medical devices, but the vendor has not yet released a patch. The Windows servers have a patch available for a separate high-severity issue. What should the team do to mitigate risk while awaiting the vendor patch?

   • AWait for the Linux vendor patch before deploying any updates to avoid inconsistent patch levels.
   • BDisable the Linux devices' network connectivity until the vendor patch is available.
   • CDeploy the Windows patch immediately and implement compensating controls for the Linux devices, such as network segmentation and enhanced monitoring.
   • DReplace the Linux kernel on the medical devices with the latest stable kernel from the open-source community.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A pharmaceutical company's IT team manages a mix of Windows and Linux servers. A critical vulnerability is announced for the Windows operating system, and a patch is available. However, the patch is known to conflict with the company's proprietary manufacturing execution system (MES) on some servers. The MES is essential for production. What is the most appropriate approach?

   • ADo not deploy the patch to any Windows server until the MES vendor provides a compatible update.
   • BDeploy the patch to all Windows servers except those running the MES, and implement compensating controls for the MES servers.
   • CTest the patch on a non-production MES server first, then deploy to production servers if no issues are found.
   • DDeploy the patch to all Windows servers immediately, including those running the MES, to mitigate the vulnerability.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A bank has a policy that no single employee should be able to initiate and approve a wire transfer. The current system allows a manager to both create and approve transfers. The security team needs to enforce separation of duties. Which action is most effective?

   • ARequire a second manager to review the transfer after approval
   • BIncrease the password complexity for the manager account
   • CModify the application's access control to require different users for initiation and approval
   • DUse a shared account for all wire transfers
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A healthcare provider is implementing remote access for physicians to view patient records. They want to enforce strong authentication while minimizing friction for users. Which approach best balances security and user experience?

   • AUse certificate-based authentication on managed devices and require MFA for unmanaged devices
   • BRequire a long password and no additional factors
   • CUse a single shared account for all physicians
   • DAllow any device with a valid username and password
   Reveal Solution Discussion Select an answer first