A security team is responsible for patch management across a diverse environment. They have a limited maintenance window each month. How can they ensure that critical patches are applied in a timely manner while minimizing the risk of outages?

Apply patches only to systems that are exposed to the internet.

Apply all patches during the monthly maintenance window, regardless of criticality.

Prioritize patches based on risk and apply critical patches as soon as possible, using emergency change requests if needed.

Wait for the vendor to release a cumulative update that includes all patches.

A system administrator is responsible for keeping servers updated. The organization has a policy that all security updates must be applied within 30 days of release. However, some updates require a reboot, which causes downtime. What is the best approach to comply with the policy while minimizing disruption?

Apply all updates immediately, even if it causes downtime during business hours.

Skip updates that require a reboot to avoid downtime, and only apply non-reboot updates.

Group updates into a monthly maintenance window and apply them during off-peak hours.

Apply updates only to test systems and not to production to avoid any risk.

Why is it important to document configuration changes?

To eliminate the need for user training

To reduce the need for security monitoring

To increase the speed of system performance

To provide an audit trail and support troubleshooting and compliance

A network administrator needs to change the firewall configuration to allow a new application. The change could impact security. What is the most appropriate process to follow?

Ask the application vendor if the change is safe, then implement it.

Submit a change request, get approval from the change advisory board, implement the change, and document it.

Implement the change and monitor the logs for any issues.

Make the change immediately and inform the security team after it is done.

A company is migrating its applications to new servers. The security policy requires that all servers meet a specific security baseline before handling production data. What is the best way to ensure the new servers meet this requirement?

Compare the new servers' settings to the old servers' settings and adjust as needed.

Apply the security baseline configuration to the servers and verify compliance with a configuration assessment tool before going live.

Ask the application team to confirm that the servers are configured correctly.

Run a vulnerability scanner on the new servers after they are in production to identify any missing settings.

Certified in Cybersecurity

Domain 5Objective 2

5.2 - Understand System Hardening CC Practice Questions (Page 5)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

18%of the exam

Questions 21–25

21expert · hard
A security team is responsible for patch management across a diverse environment. They have a limited maintenance window each month. How can they ensure that critical patches are applied in a timely manner while minimizing the risk of outages?
Select an answer first
22application · medium
A system administrator is responsible for keeping servers updated. The organization has a policy that all security updates must be applied within 30 days of release. However, some updates require a reboot, which causes downtime. What is the best approach to comply with the policy while minimizing disruption?
Select an answer first
23foundation · easy
Why is it important to document configuration changes?
Select an answer first
24application · medium
A network administrator needs to change the firewall configuration to allow a new application. The change could impact security. What is the most appropriate process to follow?
Select an answer first
25application · medium
A company is migrating its applications to new servers. The security policy requires that all servers meet a specific security baseline before handling production data. What is the best way to ensure the new servers meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.