An organization wants to ensure that all servers are configured consistently and that any changes are tracked. They have a mix of Windows and Linux servers. Which practice is most effective for maintaining a secure and consistent state?

Allow administrators to make changes as needed, but document them in a shared spreadsheet.

Apply a security baseline once during initial deployment and do not change it afterward.

Create a checklist for administrators to manually verify settings on each server monthly.

Use a configuration management tool that defines the desired state and automatically remediates any drift.

Why is it important to apply security baselines consistently across all systems?

To ensure that all systems meet the organization's minimum security requirements

To reduce the need for user training

When applying a security baseline to a new server, what is the first step?

Identify the appropriate baseline for the server's role

Disable all unnecessary services

Install all available updates immediately

Connect the server to the network

How do regular software updates contribute to system hardening?

They automatically configure all security settings

They fix known vulnerabilities and improve security features

They replace the need for antivirus software

They increase the system's processing speed

What is the primary purpose of configuration management in an organization?

To create and enforce password policies

To manage user access permissions and authentication

To track and control changes to system settings and software versions

To monitor network traffic for suspicious activity

Certified in Cybersecurity

Domain 5Objective 2

5.2 - Understand System Hardening CC Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

18%of the exam

Questions 6–10

6application · medium
An organization wants to ensure that all servers are configured consistently and that any changes are tracked. They have a mix of Windows and Linux servers. Which practice is most effective for maintaining a secure and consistent state?
Select an answer first
7foundation · easy
Why is it important to apply security baselines consistently across all systems?
Select an answer first
8foundation · easy
When applying a security baseline to a new server, what is the first step?
Select an answer first
9foundation · easy
How do regular software updates contribute to system hardening?
Select an answer first
10foundation · easy
What is the primary purpose of configuration management in an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.