CGRC Control Implementation Practice Test 2 — 15 Questions

Question 1

When performing vulnerability management, what is the purpose of a 'credentialed scan'?

Accepted Answer

To identify missing patches and misconfigurations. Credentialed scans allow the tool to look inside the OS and application configuration, providing more accurate results.

Answer

To perform penetration testing

Answer

To automate the patching process

Answer

To bypass the firewall

Question 2

You are deploying an EDR (Endpoint Detection and Response) solution. Which configuration minimizes false positives while maintaining visibility?

Accepted Answer

Exclude known safe processes and signers. Tuning policies to exclude known safe administrative scripts and software reduces noise while maintaining core monitoring.

Answer

Only monitor server logs

Answer

Set to 'Block All' mode

Answer

Disable real-time scanning

Question 3

Which administrative control is essential before deploying a new security tool to production?

Accepted Answer

Change management approval. A formal change control process is required to ensure that changes are tested, documented, and approved.

Answer

Sharing administrator credentials

Answer

Disabling internal auditing

Answer

Immediate deployment to production

Question 4

Which type of control is an alarm system installed in a server room?

Accepted Answer

Detective. An alarm system is a detective control designed to alert staff of unauthorized presence.

Answer

Preventative

Answer

Corrective

Answer

Deterrent

Question 5

You are hardening a web server. You need to ensure that only secure ciphers are used for TLS connections. Where is this typically configured?

Accepted Answer

The server's TLS configuration file. The web server's SSL/TLS configuration file (e.g., httpd.conf or nginx.conf) defines the supported cipher suites.

Answer

The server's BIOS settings

Answer

The web application's root directory

Answer

The firewall access control list

Question 6

When configuring an email security gateway (e.g., Proofpoint), which record should be added to DNS to prevent domain spoofing?

Accepted Answer

SPF. SPF, DKIM, and DMARC are the trifecta of email authentication; SPF is the most foundational DNS record for authorized senders.

Answer

CNAME

Answer

A

Answer

MX

Question 7

You are managing access to a file server. You want to ensure that users can read files but not delete them. What is this an example of?

Accepted Answer

Read-Only permission. This is the principle of Least Privilege, specifically using NTFS permissions to restrict write/delete access.

Answer

Modify permission

Answer

Full Control

Answer

Write permission

Question 8

Which document is used to standardize the implementation of security controls across an organization?

Accepted Answer

Security Baseline. A Security Baseline (or Standard) provides the specific, actionable configuration requirements for assets.

Answer

Incident Response Plan

Answer

Risk Register

Answer

Acceptable Use Policy

Question 9

You are implementing Disk Encryption using BitLocker. You want to ensure that the recovery key is stored securely. Where should it be stored?

Accepted Answer

In Active Directory. Storing recovery keys in Active Directory Domain Services (AD DS) ensures central management and recovery capability for IT staff.

Answer

On a local USB drive

Answer

Printed on the side of the PC

Answer

In a text file on the desktop

Question 10

Which TWO of the following are examples of physical security controls?

Accepted Answer

Security cameras. Physical controls protect the physical facility and hardware.

Answer

Host-based firewall

Answer

Strong password policy

Answer

Encryption of database tables

Question 11

Which TWO of the following represent best practices for password management?

Accepted Answer

Using a password manager for unique, complex passwords. Complex, unique passwords and the use of a password manager are foundational security practices.

Answer

Forcing users to change passwords every 30 days

Answer

Allowing password sharing among team members

Answer

Logging passwords in a shared spreadsheet

Question 12

Which TWO of the following are considered 'technical' security controls?

Accepted Answer

Encryption of data in transit. Technical controls (also called logical controls) use technology to enforce security.

Answer

Annual risk assessment

Answer

Security policies

Answer

Fencing around the data center

Question 13

Which TWO of the following are recommended practices for managing firewall rules?

Accepted Answer

Documenting the business justification for each rule. Regular review and documentation of rules help maintain a secure and clean firewall configuration.

Answer

Disabling logging for all rules to improve performance

Answer

Applying rules in random order

Answer

Using 'Any' as the destination for all rules

Question 14

Which TWO of the following are examples of administrative security controls?

Accepted Answer

Data classification policy. Administrative controls are 'soft' controls involving policy and management, whereas technical controls are 'hard' controls.

Answer

Firewall configuration

Answer

Biometric locks

Answer

Intrusion detection systems

Question 15

Which TWO of the following are critical requirements for implementing an effective patch management program?

Accepted Answer

Automated patch testing in a staging environment. Patch management requires testing to prevent outages and a deployment strategy to ensure coverage.

Answer

Storing all patch files on a public FTP site

Answer

Manual approval for every single update

Answer

Disabling all automatic updates