Free Practice Quiz Question List

3 Hardening Systems and Networks Online Quiz Questions

Use this free practice quiz with 20 questions to review 3 Hardening Systems and Networks, test your knowledge, and prepare for your next test or exam.

20 questions

True or false

1 point

True or false: Effective hardening means applying every available security setting to every system, regardless of its role or operating environment.

A
True
B
False

Choose one

1 point

A database server needs to accept database connections from authorized application systems and administrators. It also runs an unused file-sharing service. Which change most directly reduces unnecessary exposure while preserving the server's intended function?

A
Disable database access so that no service is exposed.
B
Disable the unused file-sharing service while retaining authorized database access.
C
Allow all systems to access the database so administrators do not need remote management.
D
Give the database service broad administrative permissions to simplify maintenance.

Choose one

1 point

An organization wants a reference for building systems and checking later changes. Which description best fits a secure configuration baseline?

A
An approved, documented set of specifications describing a system's expected secure state at a particular time.
B
A list of every security feature a product offers, whether or not it is needed.
C
A network test that checks whether a service can be reached.
D
An informal set of preferences that can be changed without review.

Choose all

1 point

A company wants to reduce the network paths available to an attacker if a public-facing service is compromised. Select all the measures that directly support this goal.

A
Place all systems in one unrestricted network so that services can communicate without firewall rules.
B
Separate public-facing services from internal user devices and sensitive databases.
C
Allow every network device's management interface to be reached from any network zone.
D
Use firewall or access-control rules to permit only necessary communications between systems.

Choose all

1 point

A team is writing a baseline for a specific server product. Select all the details that help make the baseline applicable and verifiable.

A
Specify the product, version, system role, and environments covered.
B
Avoid documenting operational consequences so that settings appear universally applicable.
C
Describe how to check whether each requirement is met.
D
Leave the system's role and covered environment undefined.

True or false

1 point

True or false: A scanner can report a setting as noncompliant even when an approved exception exists, so findings need interpretation.

A
True
B
False

Written response

1 point

What term names an approved, documented set of specifications describing a system's expected secure state at a particular point in time? Enter the term in lowercase.

Fill in the blank

1 point

Before broad deployment, apply hardening changes in a environment that is of the target systems.

Fill in the blank

1 point

The principle of gives users, administrators, and services only the permissions necessary for their tasks.

Choose one

1 point

A server baseline requires its remote administration interface to be reachable only from the management network. Which verification approach best checks that the requirement is actually met?

A
Inspect the server's local setting and treat it as conclusive proof that no other network zone can reach the interface.
B
Check the local setting and use an authorized network test to confirm the interface is unreachable from unapproved zones.
C
Ask the server's owner whether remote administration is restricted, without checking the configuration or network.
D
Run a network test only from the approved management network.

Written response

1 point

What threat pathway can network segmentation limit if one system is compromised? Enter the two-word term in lowercase.

Choose one

1 point

A team is preparing to harden a fleet that includes different product versions and system roles. Which sequence best reduces the risk of applying unsuitable settings?

A
Deploy a generic baseline to all systems, then identify their roles if a setting causes a problem.
B
Choose settings based only on the most restrictive available benchmark, without checking whether they fit the systems.
C
Inventory assets and roles, choose and tailor an appropriate baseline, then test the changes before broad deployment.
D
Rely on a scanner to select and deploy settings without documenting requirements or exceptions.

Choose one

1 point

A database server also runs a file-sharing service that is not needed for its intended role. Which action best applies hardening while preserving required functionality?

A
Disable the unused file-sharing service after confirming the change will not affect required operations.
B
Disable the database service because every listening service creates risk.
C
Keep both services enabled, since services on a server do not affect its attack surface.
D
Disable all network access to the server, including authorized database access.

True or false

1 point

True or false: A hardening team should apply every available security setting to every system, regardless of that system’s role or operating environment.

A
True
B
False

Written response

1 point

An administrator identifies the ways an attacker could gain access, increase privileges, move through a network, or disrupt operations. What is the collective exposure being reduced called?

Choose one

1 point

A service needs to read a specific application directory but does not need to change system settings. Which configuration best applies least privilege?

A
Run every service with administrator permissions so it can complete any task.
B
Give a service only the permissions necessary for its function.
C
Give services the same permissions as the most privileged administrator.
D
Grant broad permissions by default and review them only after an incident.

Choose one

1 point

An organization wants to reduce the paths an attacker could use to move laterally after compromising a public-facing service. Which network design best supports that goal?

A
Place all systems on one unrestricted network so they can communicate directly.
B
Allow public-facing services unrestricted access to internal user devices and databases.
C
Place public-facing services in a separate network zone from internal users and sensitive databases.
D
Disable network segmentation and rely only on endpoint updates.

Written response

1 point

An organization is changing an already approved secure configuration baseline. What process should manage that change?

Choose one

1 point

A team is selecting configuration guidance for a specialized server. What should it prioritize when choosing a benchmark or checklist?

A
Choose the most restrictive checklist available, regardless of product or version.
B
Select guidance that matches the exact product, version, and operational context.
C
Use one benchmark for every system because baselines should be identical.
D
Choose a checklist based only on the organization’s network size.

Open ended

1 point

A specialized application stops functioning when a proposed hardening setting is applied. The organization confirms that the application is still required. What should the team do about the setting, and what should it document and arrange before accepting a deviation?