5.2 - Understand System Hardening CC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following best describes the role of configuration management in system hardening?

   • AIt ensures that systems are configured consistently and securely according to organizational standards
   • BIt involves monitoring user activity for policy violations
   • CIt primarily focuses on installing the latest hardware components
   • DIt is used to encrypt data at rest and in transit
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is deploying a new fleet of Linux web servers. The security team wants to ensure each server starts with a consistent, secure configuration that meets organizational standards. They also need to apply critical security patches before the servers go live. Which approach best achieves this?

   • AInstall the OS, apply all available updates, then manually configure each server based on the administrator's experience.
   • BUse a configuration management tool to push the security baseline after deployment, but skip patching until after the servers are in production.
   • CDeploy servers from a hardened golden image that includes the security baseline and latest patches, then use configuration management to enforce the baseline.
   • DDeploy servers with default OS settings and rely on the network firewall to protect them until patches are applied later.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a policy that all servers must have the latest security updates installed. However, a critical application is incompatible with a recent update. What is the best approach to handle this situation?

   • ASkip the update permanently for that server to avoid any disruption.
   • BWork with the application vendor to resolve the compatibility issue, then install the update.
   • CInstall the update and then fix the application compatibility issues.
   • DDo not install the update on the server running the critical application, and document the exception.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is deploying a new web application. The security team has defined a security baseline for the web servers. However, the application requires a specific configuration that conflicts with the baseline. What is the best approach?

   • AApply the baseline and then manually adjust the application's configuration after deployment.
   • BApply the baseline and do not allow any exceptions.
   • CWork with the application team to find a configuration that meets both the baseline and the application's requirements.
   • DApply the application's configuration and ignore the baseline.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of configuration change control?

   • ATo monitor user activity for policy violations
   • BTo manage and document changes to system configurations in a controlled manner
   • CTo encrypt all configuration files
   • DTo automatically apply all changes without review
   Reveal Solution Discussion Select an answer first