Unit 3 System Hardening Quiz

What is the purpose of a vulnerability assessment?

• To identify and mitigate vulnerabilities in a system

• To analyze the security of digital products

• To reduce the attack surface of a system

• To harden a system against cyber attacks

William, a cybersecurity student, is working on a project to analyze vulnerability data. He needs to use a database that is commonly used as an industry repository of vulnerability data. Which database should he use?

• Common Vulnerability and Exposure (CVE) database

• National Vulnerability Database (NVD)

• Microsoft Baseline Security Analyzer (MBSA)

• Cybersecurity & Infrastructure Security Agency (CISA)

What is the purpose of system hardening?

• To secure user access and backups

• To identify and mitigate vulnerabilities

• To analyze the security of digital products

• To reduce the attack surface of a system

Noah, Nora, and Maya are working together to harden the security of their school's computer system. Which of the following actions, if taken by them, would NOT be a step towards hardening the system?

• Performing regular software updates on all the computers

• Restricting user access based on the least privilege principle

• Backing up important data regularly

• Keeping third-party applications up to date

What is the purpose of user access control (UAC) settings?

• To restrict user actions and limit vulnerabilities

• To secure user access and backups

• To analyze the security of digital products

• To reduce the attack surface of a system

Abigail received an email warning about the increasing threat of ransomware and data loss. She wants to know, what is the first level of defense she should consider?

• Creating system images of her computer

• Using sync services like Dropbox or Google Drive

• Performing regular software updates

• Maintaining regular backups of her data

Charlotte, Anika, and Mason are part of the IT team in a company. They are discussing the best practices for securing user access. Which of the following practices mentioned by them is NOT recommended?

• Severely restrict administrative rights

• Implement strong password policies

• Grant unlimited access to all users

• Follow the least privilege principle

What is the purpose of system images?

• To restrict user actions and limit vulnerabilities

• To secure user access and backups

• To analyze the security of digital products

• To create backups that include the operating system

Benjamin, Abigail, and Samuel are working on securing third-party applications for their school's computer lab. Which of the following is NOT a recommended practice they should follow?

• Regularly update and patch applications

• Review and harden application settings

• Disable unnecessary services

• Keep applications running with default configurations

Jackson, Benjamin, and Grace are working on a school project to create a digital product. What is the purpose of them conducting a vulnerability scan on their project?

• To identify and mitigate vulnerabilities in their project

• To analyze the security of their digital product

• To reduce the attack surface of their project

• To harden their project against cyber attacks