Ensure Secure Installation CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of translating organizational security policies into technical controls?

   • ATo make the policies easier to read for management
   • BTo ensure that the policies are enforced through technical mechanisms
   • CTo simplify the process of writing new policies
   • DTo replace the need for user training
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a benefit of using automated tools and templates for secure configuration provisioning?

   • AThey eliminate the need for security testing
   • BThey ensure consistent and secure settings across multiple systems
   • CThey automatically patch all software vulnerabilities
   • DThey allow administrators to skip security reviews
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is deploying a new internal web server. The security team requires that the server be configured to a hardened baseline before it is connected to the production network. Which approach best ensures a consistent and secure configuration?

   • AInstall the operating system and immediately join it to the domain, then apply group policy.
   • BManually configure the server after connecting it to the network, following a checklist.
   • CDeploy the server with default settings and rely on the network firewall to protect it.
   • DUse a configuration management tool to apply a security baseline template to the server before network connection.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is deploying a new application that requires elevated privileges for certain operations. The security team wants to enforce least privilege while minimizing the risk of privilege escalation. Which approach is most effective?

   • AUse a privileged access management (PAM) solution to grant temporary elevated rights on a per-request basis.
   • BUse a single shared administrator account for all elevated operations.
   • CAllow users to escalate privileges by entering their own credentials when prompted.
   • DGrant all users local administrator rights to simplify access management.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A DevOps team is adopting Infrastructure as Code (IaC) to manage cloud resources. The security team requires that secrets used in IaC be rotated regularly and that no secrets be stored in plaintext. Which approach best meets these requirements?

   • AUse a shared secret for all environments to simplify rotation.
   • BStore secrets in environment variables in the CI/CD pipeline.
   • CUse a secrets management service that integrates with IaC to inject secrets at deployment time and supports automated rotation.
   • DEncrypt secrets with a key stored in the same repository.
   Reveal Solution Discussion Select an answer first