Security and Access Controls CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How does an intrusion prevention system (IPS) contribute to an organization's security monitoring?

   • ABy encrypting all network traffic
   • BBy only generating alerts for security analysts to review
   • CBy providing forensic evidence for legal proceedings
   • DBy automatically blocking malicious traffic in real time
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does a digital signature provide non-repudiation?

   • ABy using the sender's private key to sign the hash of the message
   • BBy using the recipient's public key to encrypt the message
   • CBy appending a timestamp to the message
   • DBy encrypting the entire message with a symmetric key
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of log correlation in log management and analysis?

   • ATo encrypt logs for secure transmission
   • BTo combine and analyze logs from multiple sources to identify patterns and anomalies
   • CTo compress logs to save storage space
   • DTo delete logs that are no longer needed
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is deploying a new Linux web server that will be publicly accessible. The security team wants to harden the system before it goes live. Which set of actions best represents a system hardening approach?

   • ASet all configuration files to default values and change the root password to a strong one.
   • BEnable all available services to ensure maximum functionality, and rely on the network firewall for protection.
   • CInstall the latest patches, disable unused services, and configure a host-based firewall to allow only necessary ports.
   • DInstall an antivirus and perform a full system scan before connecting to the network.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A large enterprise has a team of database administrators (DBAs) who have full access to production databases. The security team is concerned about the risk of a rogue DBA exfiltrating sensitive data. Which combination of controls would best mitigate this risk while maintaining operational efficiency?

   • AUse a single shared admin account for all DBAs and rotate the password monthly.
   • BImplement break-glass accounts with strict monitoring and require two-person approval for emergency access.
   • CGrant DBAs full access but require them to sign a non-disclosure agreement (NDA).
   • DRemove all DBA access and require developers to make database changes through a ticketing system.
   Reveal Solution Discussion Select an answer first