Cyber Defense Principles GMON Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A system administrator is configuring access controls for a file share that contains financial reports. The finance team needs read/write access, the internal audit team needs read-only access, and no other users should have access. Which approach best applies the principle of least privilege?

   • AGrant the finance team full control and give the audit team read/write access because they need to review reports.
   • BGrant each individual user the exact permissions they need on the file share.
   • CPlace all users in a single group and grant that group read/write access, then rely on user training to prevent unauthorized changes.
   • DCreate two groups (Finance and Audit) and assign the appropriate permissions to each group, then add the respective users to the groups.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is reviewing the access rights of employees in a company. The analyst finds that many employees have access to shared drives that they no longer use. Which action best aligns with the principle of least privilege?

   • AGrant all employees access to all shared drives to ensure they have what they need.
   • BChange the shared drive permissions to allow read-only access for all employees.
   • CRemove access to shared drives that are not needed for the employee's current job.
   • DLeave the access in place because it is easier to manage.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying a new internal application. The security team has limited budget and must choose between two controls: a network intrusion detection system (IDS) and a host-based security agent that blocks malicious processes. The company's primary concern is a targeted attack that could compromise a server. Which control should the team prioritize?

   • ABoth controls, because defense-in-depth requires multiple layers.
   • BThe host-based security agent, because it can block malicious activity directly on the server.
   • CThe network IDS, because it can see all traffic and detect attacks before they reach the server.
   • DNeither control, because the company should rely on the cloud provider's security.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security engineer is configuring a new server. The server will host a public-facing web application. The engineer wants to ensure that the server is protected even if the application has vulnerabilities. Which configuration best supports this goal?

   • ADisable the host firewall to avoid interfering with the application.
   • BRun the application as root to ensure it has all necessary permissions.
   • CRun the application with the least privileges necessary and use a web application firewall (WAF).
   • DUse only a network intrusion detection system (IDS) and no other controls.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A security analyst is configuring access controls for a new application. The goal is to grant each user only the permissions required to perform their job functions. Which cyber defense principle does this directly implement?

   • ALeast privilege
   • BRisk management
   • CFail-safe defaults
   • DDefense-in-depth
   Reveal Solution Discussion Select an answer first