Cyber Defense Principles GMON Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is implementing a least privilege model for its IT staff. The helpdesk team needs to reset user passwords and manage user accounts, but should not be able to modify group memberships or access sensitive files. Which approach best meets these requirements?

   • AGive the helpdesk team the same permissions as the IT administrators, because they are all IT staff.
   • BAllow the helpdesk team to use a shared administrator account for all tasks.
   • CCreate a custom role for the helpdesk that includes only the specific permissions to reset passwords and manage user accounts, and assign that role to the helpdesk group.
   • DAdd the helpdesk team to the Domain Admins group so they can perform all necessary tasks.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst is reviewing the architecture of a small e-commerce application. The web server and database are on the same host, and the application service account has local administrator rights on that host. The analyst wants to reduce the impact if the web application is compromised. Which change best aligns with the principle of least privilege?

   • AMove the database to a separate host and grant the web service account only the specific database permissions it needs.
   • BKeep the current architecture but add a host-based intrusion detection system to alert on suspicious activity.
   • CChange the web service account password to a longer, complex value and enforce periodic rotation.
   • DPlace the web server behind a web application firewall (WAF) to filter malicious requests.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A small business runs its website on a single server that also hosts the company's email server. The owner is concerned about a single point of failure. Which change best demonstrates defense-in-depth?

   • ASeparate the web and email services onto different servers and place a firewall between them and the internet.
   • BCreate a backup of the server's configuration files and store them offsite.
   • CIncrease the server's RAM and CPU to handle higher loads.
   • DInstall antivirus software on the existing server and schedule daily scans.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is reviewing the security controls for a small business. The business has a single server that hosts a website and a database. The analyst wants to implement defense-in-depth without purchasing additional hardware. Which combination of controls is the most effective?

   • AEnable the host firewall, apply security patches, and use strong authentication for the database.
   • BDisable the host firewall to avoid interfering with the website's traffic.
   • CInstall antivirus software on the server and rely on the ISP to block attacks.
   • DUse a complex password for the administrator account and change it every month.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is evaluating the risk of a phishing attack. They estimate that the likelihood of an attack is high and the impact is moderate. The team has a limited budget and must choose between implementing email filtering, conducting security awareness training, or purchasing cyber insurance. Which combination best addresses the risk?

   • AImplement email filtering and conduct security awareness training, and purchase insurance to cover residual risk.
   • BImplement email filtering only, because it is the most effective control.
   • CPurchase cyber insurance only, because it is the most cost-effective option.
   • DConduct security awareness training only, because it addresses the root cause.
   Reveal Solution Discussion Select an answer first