What is the main reason to keep software up to date as part of a hardening strategy?

To increase the number of available features

To protect against known security vulnerabilities

To make the system easier to use

To reduce the need for user passwords

A company wants to ensure that its servers are configured securely and that any changes are tracked. They have a small IT team and limited budget. Which approach is most practical?

Rely on the server vendors to provide secure default configurations.

Implement a configuration management tool that automates enforcement and provides audit logs.

Use a spreadsheet to track configuration changes made by administrators.

Hire a consultant to manually review server configurations quarterly.

A large organization has a mix of legacy and modern systems. The security team wants to implement a configuration management solution to enforce security baselines. However, the legacy systems cannot run the configuration management agent. What is the best approach?

Use a different tool that can manage legacy systems, even if it is less automated.

Apply baselines manually to legacy systems and use the configuration management tool for modern systems.

Do not enforce baselines on legacy systems because they cannot run the agent.

Replace all legacy systems with modern ones that can run the configuration management agent.

A security team discovers that a critical vulnerability exists in a widely used application. The vendor has released a patch, but the patch is known to cause compatibility issues with some internal tools. What is the best course of action?

Test the patch in a staging environment that mirrors production, then plan a phased rollout with rollback procedures.

Do not apply the patch because of the compatibility issues, and rely on other compensating controls.

Apply the patch to all systems immediately to fix the vulnerability, and deal with compatibility issues later.

Apply the patch only to systems that are not affected by compatibility issues, and leave vulnerable systems unpatched.

A security administrator discovers that a server's configuration has drifted from the security baseline. The drift was caused by a legitimate change made by another administrator, but the change was not documented. What is the best course of action?

Ignore the drift because the change was legitimate.

Disable the configuration management tool to prevent future drift.

Revert the server to the baseline configuration immediately.

Document the change retroactively and update the baseline if appropriate.

Certified in Cybersecurity

Domain 5Objective 2

5.2 - Understand System Hardening CC Practice Questions (Page 3)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

18%of the exam

Questions 11–15

11foundation · easy
What is the main reason to keep software up to date as part of a hardening strategy?
Select an answer first
12application · medium
A company wants to ensure that its servers are configured securely and that any changes are tracked. They have a small IT team and limited budget. Which approach is most practical?
Select an answer first
13expert · hard
A large organization has a mix of legacy and modern systems. The security team wants to implement a configuration management solution to enforce security baselines. However, the legacy systems cannot run the configuration management agent. What is the best approach?
Select an answer first
14application · medium
A security team discovers that a critical vulnerability exists in a widely used application. The vendor has released a patch, but the patch is known to cause compatibility issues with some internal tools. What is the best course of action?
Select an answer first
15expert · hard
A security administrator discovers that a server's configuration has drifted from the security baseline. The drift was caused by a legitimate change made by another administrator, but the change was not documented. What is the best course of action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.