A security manager is responsible for hardening a fleet of Windows servers that will host a new customer-facing application. The organization has a compliance requirement to disable all unnecessary services and remove default accounts. The manager must also ensure that the servers are patched before they go live. What is the most effective approach?

Enable all Windows services to ensure the application functions correctly, and then create a new local admin account for each server.

Apply a security baseline configuration to the servers, disable unnecessary services, remove default accounts, and then apply the latest patches before deployment.

Install the application first, then apply the security baseline and patches after the servers are in production.

Deploy the servers with the default operating system installation, then install the application and schedule patches for the next maintenance window.

What is the first step in an effective patch and vulnerability management process?

Deploying patches to all systems immediately

Identifying and inventorying assets and their vulnerabilities

Reporting vulnerabilities to regulatory authorities

Disabling affected services until patches are available

A security manager is responsible for hardening a new Linux server that will be used as a web server. The organization has a policy that requires all unnecessary services to be disabled and all default accounts to be removed or locked. Which of the following actions is the most appropriate to take?

Install a web application firewall (WAF) and rely on it to protect the server.

Create a new user account for the administrator and leave the default accounts enabled.

Disable unused services, lock default accounts, and apply the latest security patches.

Enable all services to ensure the web server functions correctly, and then apply the security patches.

What is the primary goal of the incident response process?

To assign blame for the incident

To prevent all future security incidents

To minimize the impact of a security incident and restore normal operations

To identify the perpetrator and pursue legal action

A company's vulnerability management team has identified a critical vulnerability in a legacy application that is no longer supported by the vendor. The application is essential to business operations and cannot be replaced in the short term. The vulnerability is remotely exploitable. What is the most appropriate risk mitigation strategy?

Apply a virtual patch using an intrusion prevention system (IPS) or web application firewall (WAF) rule.

Disable the application until a replacement can be found.

Accept the risk because the application is essential and no patch is available.

Upgrade the application to the latest version, even though it is not supported.

GIAC Security Leadership

Domain 2Objective 1

Managing System Security GSLC Practice Questions (Page 7)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 31–35

31application · medium
A security manager is responsible for hardening a fleet of Windows servers that will host a new customer-facing application. The organization has a compliance requirement to disable all unnecessary services and remove default accounts. The manager must also ensure that the servers are patched before they go live. What is the most effective approach?
Select an answer first
32foundation · easy
What is the first step in an effective patch and vulnerability management process?
Select an answer first
33application · medium
A security manager is responsible for hardening a new Linux server that will be used as a web server. The organization has a policy that requires all unnecessary services to be disabled and all default accounts to be removed or locked. Which of the following actions is the most appropriate to take?
Select an answer first
34foundation · easy
What is the primary goal of the incident response process?
Select an answer first
35expert · hard
A company's vulnerability management team has identified a critical vulnerability in a legacy application that is no longer supported by the vendor. The application is essential to business operations and cannot be replaced in the short term. The vulnerability is remotely exploitable. What is the most appropriate risk mitigation strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Managing System Security GSLC Practice Questions (Page 7)

Questions 31–35

What is the first step in an effective patch and vulnerability management process?

A security manager is responsible for hardening a new Linux server that will be used as a web server. The organization has a policy that requires all unnecessary services to be disabled and all default accounts to be removed or locked. Which of the following actions is the most appropriate to take?

What is the primary goal of the incident response process?

Keep studying — Technical Security Management