Font size
WorksheetsSecurity+ Phase 6
Total questions: 62
Worksheet time: 2hrs 4mins
You are a server virtualization consultant. During a planning meeting with a client, the issue of virtual machine point-in-time snapshots comes up. You recommend careful use of snapshots because of the security ramifications. Which security problem is the most likely to occur when using snapshots?
Snapshots can consume a large amount of disk space.
Snapshots could expose sensitive data.
Invoked snapshots will mean that the virtual machine is temporarily unavailable.
Invoked snapshots will have fewer patch updates than the currently running virtual machine.
A private medical practice hires you to determine the feasibility of cloud computing, whereby storage of e-mail and medical applications, as well as patient information, would be hosted by a public cloud provider. You are asked to identify potential problems related to sensitive data regulatory compliance. (Choose two.)
Data is stored on the cloud provider’s infrastructure, which is shared by other cloud tenants.
HTTPS will be used to access remote services.
Should the provider be served a subpoena, the possibility of full data disclosure exists.
Data will be encrypted in transit as well as when stored.
Which of the following are true regarding virtualization? (Choose two.)
Each virtual machine has one or more unique MAC addresses.
Virtual machine operating systems do not need to be patched.
Virtual machines running on the same physical host can belong to different VLANs.
A security compromise of one virtual machine means all virtual machines on the physical host are compromised.
Cloud computing offers which benefits? (Choose two.)
Scalability
Fewer hardware purchases
Better encryption
Local data storage
No requirement for on-premises antivirus software
You are responsible for three IaaS payroll servers that store data in the cloud. The chief financial officer (CFO) requests observation of access to a group of budget files by a particular user. What should you do?
Create file hashes for each budget file.
Encrypt the budget files.
Configure a HIDS to monitor the budget files.
Configure file system auditing for cloud storage.
As the database administrator for your company, you are evaluating various public cloud offerings to test customer database app code changes. Which category of cloud service should you research?
Software as a Service
Platform as a Service
Infrastructure as a Service
Anything as a Service
Your company hosts an on-premises Microsoft Active Directory server to authenticate network users. Mailboxes and productivity applications for users are hosted in a public cloud. You have configured identity federation to enable locally authenticated users to connect to their mailboxes and productivity applications seamlessly. What type of cloud deployment model is in use?
Public
Private
Hybrid
Community
What type of hypervisor would be required if you wanted to use an existing server with an existing operating system?
Type 1
Type 2
Type 3
Type 4
Your manager wants to run every application securely in its own virtualized environment while minimizing application startup time. What should be used for each application?
Virtual machine
Cloud access security broker
VM escape protection
Application container
Which cloud computing characteristic relates to how a service can grow in response to workloads?
Scalability
Pulverizing
Templates
Metered usage
You have replicated on-premises application servers and data to the cloud in the event of an on-premises network disruption. The servers are kept in sync through replication. Which term best describes the role of the cloud in this configuration?
Warm site
Hot site
Cold site
Glacier site
You have configured a cloud-based VDI solution in which client devices run a cloud-based Windows desktop. Which term best describes the connecting user device that may be generally used?
Thick client
Smartphone
Thin client
Tablet
You are configuring cloud-based virtual networks without having to connect directly to the cloud provider hardware routers to configure VLANs. What enables this capability?
Software-defined networking
Transit gateway
Software-defined visibility
Serverless architecture
Private cloud technicians have configured policies that will shut down and remove virtual machines with no activity for 30 days or more. What are technicians attempting to prevent?
VM escaping
VM resource policy exploitation
VM sprawl
VM services integration
You must ensure that cloud storage is available in the event of a regional disruption. What should you configure?
Cloud storage encryption
Cloud storage permissions
Cloud storage replication within a data center
Cloud storage replication across zones
You must control network traffic flow to specific Amazon Web Services (AWS) virtual machines. What should you configure?
Network ACL
Amazon machine image
Elastic IP address
Security group
You have deployed a database in an AWS virtual private cloud. You need to limit database access to other AWS resources while ensuring that network traffic does not leave the Amazon network. What should you configure?
VPC endpoint
Transit gateway
Elastic IP address
Security group
Which type of provider specializes in providing IT security service offerings?
Microservice API
CASB
MSP
MSSP
A cloud firewall solution examines packet headers to allow or deny traffic based on IP addresses and port numbers. To which layer of the OSI model does the type of firewall apply?
2
3
4
7
You have configured a content-filtering firewall for traffic leaving a cloud virtual network. To which layer of the OSI model does this type of firewall apply?
2
3
4
7
Which strategy involves using network edge devices to process and move data into and out of the cloud?
Quantum computing
Fog computing
Hybrid cloud
Private cloud
Which strategy increases the security of cloud-based containerized applications?
Use a private cloud to host containerized applications.
Run the containers only on physical servers.
Create containers only from anonymous public repositories.
Create containers only from private repositories
Your software developers use security keys to access cloud services. What should you do to harden the use of security keys?
Rotate cloud keys.
Use symmetric instead of asymmetric keys
Reduce the key length.
Send copies of keys to all developers via SMTP.
You need to deploy virtual machines in the cloud to support big data processing. The virtual machines must not be reachable from the Internet. Data processing summaries will be uploaded from the virtual machines to an on-premises database server. The on-premises network is already configured to allow incoming connections from the Internet. What should you do to allow the required functionality while maximizing security?
Deploy a public subnet in the cloud with firewall rules.
Deploy a private subnet in the cloud with an on-premises Internet gateway.
Deploy a private subnet in the cloud with an Internet gateway.
Deploy a client-to-site VPN.
Over time, you have noticed unauthorized configuration changes made to virtual machine cloud settings. You need a way to track who made these changes and when. What should you do?
Enable virtual machine API integration.
Rotate the cloud access keys.
Deploy an OSI layer 7 firewall.
Enable cloud resource activity auditing.
Which capabilities are offered by Next-generation Secure Web Gateways? (Choose two.)
Content filtering
Proxy server
Infrastructure as code
CI/CD
Which type of cloud service model is depicted in Figure 16-1?
PaaS
XaaS
SaaS
IaaS
Which type of cloud service model is depicted in Figure 16-2?
PaaS
XaaS
SaaS
IaaS
You have linked your on-premises and public cloud networks together with a site-to-site VPN. Which type cloud deployment model does this apply to?
Private
Community
Hybrid
Public
Which term best describes Figure 16-3?
Software-defined networking
SaaS
Infrastructure as code
Which type of replication does not wait for data to be committed to the primary replica before synchronizing additional replicas?
Asynchronous
Synchronous
Symmetric
Asymmetric
Which term describes breaking out of a virtual machine and attacking the hypervisor?
VM sprawl
VM escape
CASB
OSI layer 7 firewall
In the event of a server hard disk failure, you have been asked to configure server hard disks as depicted in Figure 18-1. What type of disk configuration is this?
RAID 0
RAID 1
RAID 5
RAID 5+1
A team leader assigns a server administrator the task of determining the business and financial effects that a failed e-mail server would have if it was down for two hours. What type of analysis must the server administrator perform?
Critical systems and components identification
Business impact analysis
Security audit
Risk assessment
An airline company has hired you to ensure that its customer reservation system is always online. The software runs and stores data locally on the Linux operating system. What should you do?
Install two Linux servers in a cluster. Cluster the airline software, with its data being written to shared storage.
Install a new Linux server. Ensure that the airline software runs from the first server. Schedule airline data to replicate to the new Linux server nightly.
Configure the Linux server with RAID 5.
Configure the Linux server with RAID 1.
A busy clustered web site regularly experiences congested network traffic. You must improve the web site response time. What should you implement?
Ethernet switch
Network load balancing
Fibre Channel switch
Proxy server
Your primary e-mail server uses three hot-swappable hard disks in a RAID 5 configuration. When one disk fails, other disks are readily available in the server room, which you can simply plug in while the server is still running. Which term best describes this scenario?
Disk clustering
Hardware fault tolerance
Disk striping
Disk mirroring
Your server tape backup routine consists of a full backup each Friday night and a nightly backup of all data changed since Friday’s backup. What type of backup schedule is this?
Full
Full and incremental
Full and differential
Disk snapshot
You are a network engineer for a San Francisco law firm. After the 1989 earthquake, an emphasis on continued business operation after future earthquakes dominated in the San Francisco business community. What type of plan focuses on ensuring that personnel, customers, and IT systems are minimally affected after a disaster?
Risk management
Fault tolerant
Disaster recovery
Business continuity
A server is configured with three hard disks as shown in Figure 18-2. What type of configuration is this?
RAID 0
RAID 1
RAID 5
RAID 5+1
Windows Server backups are scheduled as follows: full backups on Saturdays at 3 A.M. and incremental backups weeknights at 9 P.M. Write verification has been enabled. Backup tapes are stored off site at a third-party backup vendor location. What should be done to ensure the integrity and confidentially of the backups? (Choose two.)
Have a different person than the backup operator analyze each day’s backup logs.
Ensure the user performing the backup is a member of the Administrators group.
Encrypt the backup media.
Use SSL to encrypt the backup media.
You are an IT network architect. Your firm has been hired to perform a network security audit for a shipping company. One of the company’s warehouses has a server room containing one Windows server and two Linux servers. After interviewing the server administrators, you learn they have no idea what to do if the Linux servers cease to function. What is needed here?
Disaster recovery plan
Risk analysis
Windows servers
Server clustering
Which items should be considered when ensuring high availability for an e-commerce web site? (Choose two.)
Use TPM to encrypt server hard disks.
Use redundant Internet links.
Use network load balancing.
Upgrade the server CMOS to the latest version.
Which of the following are the most closely related to creating a disaster recovery plan? (Choose three.)
Determining which class of IP addresses are in use
Ranking risks
Disabling unused switch ports
Assigning recovery tasks to personnel
Establishing an alternate location to continue business operations
What should be used to make informed decisions regarding your specific disaster recovery plan?
DRP template freely downloaded from a web site
ROI analysis
TCO analysis
Business impact analysis
Identify the disaster recovery plan errors. (Choose two.)
Perform a business impact analysis first.
Base your DRP on an unchanged downloaded template.
Data backups are never tested; it costs the company too much money.
Keep existing backup solutions in place even though the software is two versions out of date.
You are creating a DRP for a small, independent car dealership. There are four employees who each use a desktop computer; there are no servers. All company data is stored on the four computers. A single high-speed DSL link is shared by all users. What are the best DRP solutions? (Choose two.)
Store data in the cloud instead of locally.
Ensure that employees know exactly what to do in the event of a disaster.
Purchase faster desktops.
Purchase a file server.
Your senior network administrator has decided that the five physical servers at your location will be virtualized and run on a single physical host. The five virtual guests are mission-critical and will use the physical hard disks in the physical host. The physical host has the hard disks configured with RAID 1. Identify the flaw in this plan.
The physical server should be using RAID 5.
The physical hard disks must not reside in the physical host.
You cannot run five virtual machines on a physical host simultaneously
The physical host is a single point of failure.
Your company is virtualizing DNS, DHCP, web, and e-mail servers at your location. Each of the four virtual machines will be spread out across two physical hosts. Virtual machines are using virtual hard disks, and these files exist on a SAN. Choose the best virtual machine backup strategy that will enable the quickest granular restore.
Back up the virtual machine hard disks at the SAN level.
Install a backup agent in each virtual machine and perform backups normally.
Duplicate your SAN disk array so that backups are not necessary
Run all four virtual machines on the same physical host to be backed up.
To ensure confidentiality, what should you do when storing server backup disks off site?
Encrypt backed up data.
Generate file hashes for each backed up file.
Place backup tapes in static shielding bags.
Never store backup disks off site.
You are the administrator for a recently patched virtual Windows Server running Active Directory Domain Services (AD DS). Recently the server has been randomly rebooting and now cannot boot at all. What should you do?
Run Windows update.
Format the hard disk, reinstall the server, and restore from tape.
Refer to your DRP.
Refer to your BCP.
You are the network administrator for a small IT consulting firm. All servers are located at the single site. Employees use a web browser to access their e-mail accounts. After testing the DRP and receiving management approval, you e-mail a copy to all employees for their reference in the event of a disaster. Identify the problem.
The e-mail should have been encrypted.
The e-mail should have been digitally signed.
Only executives should have received the message.
The mail server may not be available in the event of a disaster.
You are the network administrator for a small IT consulting firm. All servers are hosted externally in the public cloud. After analyzing threats, creating a DRP, and receiving management approval, you e-mail a copy to all employees for their reference in the event of a disaster. Identify the most serious problem.
The e-mail should have been encrypted
The DRP was not tested.
The e-mail should have been digitally signed.
Only executives should have received the message.
Which of the following regarding disaster recovery are true? (Choose two.)
Once the plan is complete, to save time it need never be revisited.
Once the plan is complete, it must have management approval.
The plan must evolve with the business.
The plan should include only IT systems.
You are a web site administrator. You need to minimize web site downtime in the event of a disaster or security compromise. Which of the following terms best describes the reliability of hard disks?
MTBF
MTTF
MTTR
RPO
As the IT director, you are comparing public cloud providers. Your company will no longer house on-premises mail or application servers. Which factors under your control must you consider to ensure that e-mail and applications are always available to users?
Updates applied to cloud provider hypervisors
Redundant network links
RAID level used on cloud provider servers
MTTF for cloud provider server hard disks
You have configured your enterprise cloud storage so that it continuously replicates to a cloud provider data center in a different region. Replication to the secondary region occurs only after data is written to the primary storage. Which term best describes this resilience configuration?
Synchronous replication
Geographic service dispersal
Dedicated circuit
Load balancing
Which storage area network term describes a host using more than one physical path to gain access to shared network storage?
Multipathing
App load balancing
RAID 0
RAID 1
Which configuration provides network traffic load balancing?
Multipath
UPS
NIC teaming
PDU
Your Windows server will no longer boot the operating system. No recent updates or configuration changes have been applied. What should you do first to attempt to resolve the problem?
Revert to the last known good configuration.
Reinstall the operating system.
Boot from a Windows Server live media disk and attempt to repair the installation.
Apply a corporate operating system image
Your IT security team has worked with executive management to determine that a company e-commerce web site must never remain down for more than two hours. To which disaster recovery term does this apply?
RPO
RTO
MTTR
MTBF
You company backs up on-premises data using a tape backup system that also replicates backup data to the cloud. You need to back data up daily while minimizing backup storage capacity on local backup tapes. What should you do?
Configure daily full backups.
Configure weekly full backups with daily differential backups.
Configure weekly incremental backups.
Configure daily incremental backups.
