An administrator manages a fleet of servers running a third-party application. A critical vulnerability is announced for this application, and an emergency patch is released. What should the administrator do first?

Uninstall the application to eliminate the vulnerability.

Test the patch in a staging environment that mirrors production.

Apply the patch immediately to all production servers.

Wait for the next scheduled maintenance window, even if it is months away.

What is the goal of penetration testing?

To fix all vulnerabilities in the application code

To identify and exploit vulnerabilities in a controlled manner to assess the security of a system

To replace the need for code reviews

To ensure that the application meets functional requirements

What is the primary benefit of multi-factor authentication (MFA) over a password alone?

It ensures that only administrators can access the system

It provides an additional layer of security by requiring two or more independent credentials

It eliminates the need for passwords entirely

What is the primary difference between static application security testing (SAST) and dynamic application security testing (DAST)?

SAST is performed by external testers, while DAST is performed by developers

SAST is only used for web applications, while DAST is for all applications

SAST requires a running application, while DAST analyzes source code

SAST analyzes source code without executing it, while DAST tests the running application

LPI Security Essentials

Domain 3Objective 2

023.2 Application Security (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 4)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

Questions 16–20

16application · medium
An administrator manages a fleet of servers running a third-party application. A critical vulnerability is announced for this application, and an emergency patch is released. What should the administrator do first?
Select an answer first
17foundation · easy
Which of the following is a common threat to applications that occurs when an attacker submits malicious data that is then executed by the application, often targeting databases?
Select an answer first
18foundation · easy
What is the goal of penetration testing?
Select an answer first
19foundation · easy
What is the primary benefit of multi-factor authentication (MFA) over a password alone?
Select an answer first
20foundation · easy
What is the primary difference between static application security testing (SAST) and dynamic application security testing (DAST)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.