Day 8 - Server 1 - 2nd Review

What are two reasons for a systems administrator to implement BIOS/UEFI passwords on select servers? (Select TWO)

• To prevent access to BIOS/UEFI settings.

• To prevent unauthorized restarts.

• As a prerequisite to enable secure boot.

• As a prerequisite to enable full disk encryption.

• To provide a back door password into the system.

A security administrator discovered a social engineering attack after the fact during a security audit. The attacker impersonated part of an outside security team brought in to identify risky security practices and at risk data. The attacker convinced a user to transfer personally identifiable information from customers to a USB drive, telling the user that it was for data analysis.

What type of social engineering attack does this describe?

• Pretexting

• Phishing

• Baiting

• Quid pro quo

A technician has lost a password for a server BIOS. What should the administrator do to recover the password?

• Switch off MFA.

• Use the proper jumper sequence.

• Use RAID system to access BIOS settings.

• Request a temporary password using an online link or a web form.

What is the maximum uncompressed capacity of an LTO-4 backup tape?

• 400GB

• 200GB

• 800GB

• 1.6TB

Servers in a server farm show various signs of abnormal activity. What can be deployed to better understand the fluctuations and perform real-time analysis?

• Local logs

• Syslog

• DLP

• SIEM

A server administrator is hardening a Linux server to protect against insider threats. The administrator has closed unnecessary ports on the server and disabled unnecessary services on the server. The administrator wants to reduce the risk of data exfiltration from the server. The server is a tower enclosure located in an easily accessible area.

What should the administrator do?

• Update the antivirus and antimalware on the server.

• Increase the backup frequency.

• Disable the USB ports through BIOS settings.

• Configure file access auditing.

A company installs a patch on a server that adds a new functionality for end users, allowing them to identify personal data collected and how long it will be kept for. What has been protected here?

• Passwords

• PII

• MFA

• PCI DSS

What should a company use to keep crucial servers safe against Internet malware and stop harmful actions?

• DLP

• SSL

• IDS

• HIPS

What should be raised and approved before decommissioning a server?

• Change order

• SLA

• Security advisory

• BIA

Which of the following are effective ways to reduce the attack surface on a server? (Select TWO)

• Install an NTP role.

• Close open ports.

• Add SSL 2.0 for all web services.

• Disable unused services.

• Install a legacy system.