System Security Management GCIP Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A financial services company requires remote employees to access a critical internal application. The company wants to enforce strong authentication without requiring hardware tokens. Which authentication mechanism best meets this requirement?

   • AUse a single sign-on (SSO) solution with only username and password
   • BDeploy a mobile authenticator app that generates time-based one-time passcodes (TOTP) in addition to passwords
   • CImplement a password policy requiring 12-character passwords and no multi-factor authentication
   • DUse SMS-based one-time passcodes as the only authentication factor
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A financial services firm runs a critical trading application on a hardened Windows server. The application requires a specific Java version and frequently writes temporary files to a folder. The security team wants to prevent malicious code execution while minimizing operational disruption. What control is most appropriate?

   • ADisable the Java runtime and recompile the application as a native executable.
   • BInstall a host-based intrusion prevention system (HIPS) that blocks any process from writing to the temporary folder.
   • CEnable application whitelisting that allows only the trading application, its Java runtime, and necessary system processes to execute.
   • DRun a full antivirus scan daily and rely on signature updates to detect malicious code.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A defense contractor has a mixed environment of on-premises and cloud-based systems. They want to implement a unified authentication approach that supports strong authentication and simplifies account management. Which approach is most appropriate?

   • ACreate separate accounts for each system and sync passwords manually
   • BImplement federated identity with single sign-on (SSO) and MFA across both environments
   • CUse separate identity providers for on-premises and cloud systems
   • DUse the same password for all systems without MFA
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A water treatment facility has a legacy SCADA server that must remain reachable by a small set of field engineers. A recent vulnerability scan showed that the server is running an unnecessary web management interface on TCP 8080, and the local administrator account has a shared password. The facility manager wants to reduce the attack surface without disrupting the field engineers. Which action should be taken first?

   • ADisable the web management service and restrict its port in the host firewall
   • BApply the latest vendor security patches to the SCADA server
   • CConfigure the server to send logs to a central SIEM for monitoring
   • DChange the local administrator password and enforce a strong password policy
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A government agency's remote employees access a classified system from home. The agency requires strong authentication and must ensure that credentials are not reused across systems. What is the most appropriate authentication mechanism?

   • ARequire users to change their passwords every 90 days and use a password manager.
   • BUse a single sign-on (SSO) solution that synchronizes passwords across all systems.
   • CImplement a smart card-based PKI authentication with a PIN.
   • DAllow authentication using social media accounts for convenience.
   Reveal Solution Discussion Select an answer first