SSCP Systems and Application Security — All Questions With Answers

Question 1mediummultiple choice

Read the full Systems and Application Security explanation →

During a security assessment, it is discovered that a Linux server has unnecessary services running, including Telnet and FTP. The server is also missing critical security patches. Which of the following is the MOST effective approach to harden this server according to industry best practices?

Question 2easymultiple choice

Read the full Systems and Application Security explanation →

An organization wants to prevent unauthorized applications from running on Windows workstations. Which Windows feature should be used to enforce application whitelisting?

Question 3mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing security events on a Linux server and needs to ensure that all authentication attempts, including both successful and failed logins, are logged. Which configuration should be used?

Question 4hardmultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is deploying a new web application on an IaaS platform. According to the shared responsibility model, which of the following security tasks is the customer responsible for?

Question 5mediummultiple choice

Study the full virtualization explanation →

A company uses multiple virtual machines on a single hypervisor. To prevent a VM from escaping its virtualized environment and compromising the hypervisor, which of the following should be implemented?

Question 6easymultiple choice

Read the full Systems and Application Security explanation →

In Linux, which command is used to change file permissions to restrict access so that only the owner can read and write, and the group and others have no access?

Question 7mediummultiple choice

Read the full Systems and Application Security explanation →

An application security team is reviewing code for vulnerabilities. They find that user input is directly concatenated into an SQL query without sanitization. This is an example of which OWASP Top 10 vulnerability?

Question 8hardmultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is using Cloud Security Posture Management (CSPM) to identify misconfigurations. Which of the following scenarios is MOST likely to be detected by CSPM?

Question 9mediummultiple choice

Read the full Systems and Application Security explanation →

A Windows system administrator needs to enforce a security policy that prevents users from installing unauthorized software. Which feature should be configured via Group Policy?

Question 10easymultiple choice

Study the full virtualization explanation →

Which of the following is a primary security concern when using VM snapshots in a virtualized environment?

Question 11mediummultiple choice

Read the full Systems and Application Security explanation →

A security auditor discovers that a Linux server has a user who can execute any command as root via sudo without a password. Which file should be reviewed to verify this configuration?

Question 12hardmultiple choice

Read the full Systems and Application Security explanation →

An organization is migrating a legacy application to a PaaS cloud environment. According to the shared responsibility model, which security control is the organization still responsible for?

Question 13mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Windows server. Which TWO actions should be taken to reduce the attack surface? (Select TWO.)

Question 14hardmulti select

Read the full Systems and Application Security explanation →

A company is deploying a web application and wants to protect against OWASP Top 10 attacks. Which THREE controls should be implemented? (Select THREE.)

Question 15mediummulti select

Read the full Systems and Application Security explanation →

An organization uses Linux servers and wants to implement mandatory access control (MAC) to enhance security. Which TWO technologies can be used? (Select TWO.)

Question 16easymultiple choice

Read the full Systems and Application Security explanation →

An organization is hardening a new Windows server for production use. Which of the following is the most effective method to ensure that only approved applications can run?

Question 17mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing Linux server logs after a suspected breach. Which auditing tool should be used to examine detailed records of system calls and file access events?

Question 18hardmultiple choice

Read the full Systems and Application Security explanation →

A company uses Infrastructure as a Service (IaaS) for its production workloads. According to the shared responsibility model, which of the following security tasks is the customer responsible for?

Question 19mediummultiple choice

Study the full virtualization explanation →

To prevent VM escape attacks in a virtualized environment, which of the following is the most critical security measure?

Question 20mediummultiple choice

Read the full Systems and Application Security explanation →

An administrator wants to ensure that a Linux web server only allows the www-data user to run specific commands with elevated privileges. Which configuration file should be modified?

Question 21easymultiple choice

Read the full Systems and Application Security explanation →

Which of the following OWASP Top 10 vulnerabilities involves an attacker sending malicious data to an interpreter as part of a command or query?

Question 22mediummultiple choice

Read the full Systems and Application Security explanation →

A cloud security team wants to continuously monitor for misconfigured cloud resources that could expose data. Which tool category is specifically designed for this purpose?

Question 23hardmultiple choice

Read the full Systems and Application Security explanation →

An organization using PaaS (Platform as a Service) for application hosting wants to ensure the application code is secure. Which of the following is the customer's responsibility under the shared responsibility model?

Question 24easymultiple choice

Read the full Systems and Application Security explanation →

Which Windows feature allows an administrator to define security policies such as password complexity and account lockout across multiple systems in a domain?

Question 25mediummultiple choice

Read the full Systems and Application Security explanation →

A company is concerned about VM sprawl in its data center. Which of the following is the most effective mitigation strategy?

Question 26hardmultiple choice

Read the full Systems and Application Security explanation →

During an application security review, a penetration tester discovers that a web application allows users to view other users' profiles by changing an ID parameter in the URL (e.g., /profile?id=123). Which OWASP Top 10 vulnerability does this represent?

Question 27mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux system administrator needs to restrict network traffic to a server, allowing only HTTP and HTTPS from the internet. Which tool should be used to configure packet filtering rules?

Question 28mediummulti select

Read the full Systems and Application Security explanation →

An organization is implementing system hardening. Which TWO of the following actions are recommended by CIS Benchmarks? (Select two.)

Question 29hardmulti select

Read the full Systems and Application Security explanation →

A security engineer is evaluating cloud security tools. Which TWO of the following are primarily used to protect cloud workloads? (Select two.)

Question 30mediummulti select

Study the full virtualization explanation →

During a virtualized environment security assessment, which THREE of the following are considered risks associated with virtual machine snapshots? (Select three.)

Question 31easymultiple choice

Read the full Systems and Application Security explanation →

During a security assessment, you discover that a Windows server has the Telnet service running. Which of the following is the BEST action to harden the server against this finding?

Question 32mediummultiple choice

Read the full Systems and Application Security explanation →

An organization is implementing Windows Defender Application Control (WDAC) to prevent unauthorized applications from running on company workstations. Which of the following best describes the primary security benefit of this approach?

Question 33hardmultiple choice

Read the full Systems and Application Security explanation →

A security analyst notices that a Linux server has an unusual number of failed login attempts for the root account. To strengthen authentication security while preserving administrative access, which of the following configurations would be most effective?

Question 34mediummultiple choice

Read the full Systems and Application Security explanation →

A company is deploying virtual machines (VMs) in a private cloud environment. To prevent VM escape attacks, which of the following is the most critical security control?

Question 35easymultiple choice

Read the full Systems and Application Security explanation →

An organization uses Infrastructure as a Service (IaaS) in the public cloud. Which of the following security responsibilities is the customer responsible for?

Question 36hardmultiple choice

Read the full Systems and Application Security explanation →

During a code review, a developer identifies that a web application directly concatenates user input into SQL queries without sanitization. This vulnerability is classified under which OWASP Top 10 category?

Question 37mediummultiple choice

Read the full Systems and Application Security explanation →

A system administrator is hardening a Linux server. After installing the OS, which of the following steps should be taken to ensure that only authorized users can execute commands with elevated privileges?

Question 38mediummultiple choice

Read the full Systems and Application Security explanation →

An organization is experiencing VM sprawl, with many unmanaged virtual machines running in the environment. Which of the following is the most significant security risk associated with VM sprawl?

Question 39hardmultiple choice

Read the full Systems and Application Security explanation →

A security administrator is configuring Windows Firewall with Advanced Security for a web server. The requirement is to allow inbound HTTPS traffic but block all other inbound traffic. Which of the following rule configurations best meets this requirement?

Question 40mediummultiple choice

Read the full Systems and Application Security explanation →

Which of the following tools would best help a security team detect misconfigurations in a cloud environment, such as open storage buckets or overly permissive IAM roles?

Question 41easymultiple choice

Read the full Systems and Application Security explanation →

A company is implementing application whitelisting on all endpoints. Which of the following is a primary consideration for maintaining operational efficiency?

Question 42hardmultiple choice

Read the full Systems and Application Security explanation →

A forensic analyst needs to review security events from multiple Windows servers. To ensure that logs are centrally collected and resistant to tampering, which of the following should be implemented?

Question 43mediummulti select

Read the full Systems and Application Security explanation →

An organization is hardening a Linux server. Which TWO of the following are effective steps to reduce the attack surface?

Question 44mediummulti select

Read the full Systems and Application Security explanation →

A cloud security architect is designing a solution to protect workloads running in a public cloud. Which THREE of the following are key security controls that should be implemented?

Question 45hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing a web application for OWASP Top 10 vulnerabilities. Which THREE of the following are examples of injection flaws?

Question 46easymultiple choice

Read the full Systems and Application Security explanation →

An organization is hardening its Windows servers. Which built-in Windows feature can be used to enforce application whitelisting, ensuring only approved executables run?

Question 47mediummultiple choice

Read the full Systems and Application Security explanation →

A security administrator is reviewing Linux audit logs to detect unauthorized file access. Which Linux component is primarily responsible for generating these security audit logs?

Question 48mediummultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is implementing a Cloud Security Posture Management (CSPM) tool. What is the primary purpose of a CSPM solution?

Question 49hardmultiple choice

Read the full Systems and Application Security explanation →

An organization uses VMware ESXi in a production environment. Which of the following is the most effective mitigation against VM escape attacks?

Question 50easymultiple choice

Read the full Systems and Application Security explanation →

According to the shared responsibility model in cloud computing, which security responsibility belongs to the customer in a SaaS deployment?

Question 51mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing an OWASP Top 10 vulnerability report. Which vulnerability involves an attacker accessing unauthorized data by modifying URLs or API parameters?

Question 52mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux administrator needs to configure access controls so that a specific user can run certain commands with root privileges without entering a password. Which configuration file should be modified?

Question 53mediummultiple choice

Read the full Systems and Application Security explanation →

A company deploys a web application and wants to protect against SQL injection and XSS attacks. Which security control is specifically designed to inspect HTTP traffic and block such attacks?

Question 54hardmultiple choice

Read the full Systems and Application Security explanation →

During a vulnerability scan, a security team discovers that several virtual machine snapshots contain outdated software with known vulnerabilities. Which risk is most directly associated with this scenario?

Question 55easymultiple choice

Read the full Systems and Application Security explanation →

Which Windows feature provides mandatory integrity controls and helps prevent unauthorized changes to system settings by requiring administrator approval?

Question 56mediummultiple choice

Read the full Systems and Application Security explanation →

A security administrator is configuring a Linux server to enforce mandatory access control (MAC). Which of the following tools provides MAC on Linux?

Question 57hardmultiple choice

Read the full Systems and Application Security explanation →

An organization using AWS IAM wants to grant an EC2 instance permissions to access an S3 bucket without storing long-term credentials on the instance. Which IAM feature should be used?

Question 58mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Linux server. Which TWO actions are recommended to reduce the attack surface? (Select TWO.)

Question 59hardmulti select

Read the full Systems and Application Security explanation →

A company is migrating to a PaaS cloud environment. According to the shared responsibility model, which THREE security responsibilities remain with the customer? (Select THREE.)

Question 60mediummulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing application security and identifies risks related to the OWASP Top 10. Which THREE are examples of OWASP Top 10 vulnerabilities? (Select THREE.)

Question 61easymultiple choice

Read the full Systems and Application Security explanation →

A security analyst is hardening a new Windows server. Which configuration would MOST effectively reduce the attack surface by limiting the software that can execute?

Question 62mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux server is being hardened. The security team wants to enforce mandatory access control policies that confine processes to limited access to files and resources. Which technology should be implemented?

Question 63mediummultiple choice

Study the full virtualization explanation →

A company uses virtualization extensively. The security team discovers that developers have created many unmanaged virtual machines that are not tracked in the configuration management database (CMDB). Which risk is MOST directly associated with this situation?

Question 64hardmultiple choice

Read the full Systems and Application Security explanation →

A security architect is reviewing cloud security for a SaaS application used by the company. According to the shared responsibility model, which security controls are PRIMARILY the customer's responsibility?

Question 65easymultiple choice

Read the full Systems and Application Security explanation →

A web application is vulnerable to SQL injection. Which security control would be MOST effective at detecting and blocking such attacks at the network perimeter?

Question 66mediummultiple choice

Read the full Systems and Application Security explanation →

A system administrator is configuring a Linux server to ensure that only authorized users can execute commands with superuser privileges. Which file should be edited to control sudo access?

Question 67hardmultiple choice

Study the full virtualization explanation →

During a security assessment, an analyst finds that multiple snapshots of a critical virtual machine are stored on the hypervisor host. Some snapshots are several months old. Which risk is MOST likely?

Question 68mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Windows workstation. Which TWO configurations reduce the attack surface by limiting execution of unauthorized code? (Select TWO.)

Question 69mediummulti select

Read the full Systems and Application Security explanation →

A cloud security team is implementing CSPM (Cloud Security Posture Management) for their IaaS environment. Which THREE issues is CSPM MOST likely to detect? (Select THREE.)

Question 70hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing OWASP Top 10 vulnerabilities in a web application. Which TWO are injection-related attacks? (Select TWO.)

Question 71easymulti select

Read the full Systems and Application Security explanation →

A Linux administrator is hardening a server. Which TWO commands are used to manage file permissions? (Select TWO.)

Question 72mediummulti select

Read the full Systems and Application Security explanation →

A company is migrating to the cloud and wants to understand the shared responsibility model. For an IaaS deployment, which THREE are customer responsibilities? (Select THREE.)

Question 73hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing Linux audit logs with auditd. Which TWO events would be of greatest concern for a server that should not have interactive logins? (Select TWO.)

Question 74easymulti select

Read the full Systems and Application Security explanation →

A system administrator is applying CIS Benchmarks to a Windows server. Which TWO hardening measures are typically recommended by CIS? (Select TWO.)

Question 1mediummultiple choice

Read the full Systems and Application Security explanation →

During a security assessment, it is discovered that a Linux server has unnecessary services running, including Telnet and FTP. The server is also missing critical security patches. Which of the following is the MOST effective approach to harden this server according to industry best practices?

Question 2easymultiple choice

Read the full Systems and Application Security explanation →

An organization wants to prevent unauthorized applications from running on Windows workstations. Which Windows feature should be used to enforce application whitelisting?

Question 3mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing security events on a Linux server and needs to ensure that all authentication attempts, including both successful and failed logins, are logged. Which configuration should be used?

Question 4hardmultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is deploying a new web application on an IaaS platform. According to the shared responsibility model, which of the following security tasks is the customer responsible for?

Question 5mediummultiple choice

Study the full virtualization explanation →

A company uses multiple virtual machines on a single hypervisor. To prevent a VM from escaping its virtualized environment and compromising the hypervisor, which of the following should be implemented?

Question 6easymultiple choice

Read the full Systems and Application Security explanation →

In Linux, which command is used to change file permissions to restrict access so that only the owner can read and write, and the group and others have no access?

Question 7mediummultiple choice

Read the full Systems and Application Security explanation →

An application security team is reviewing code for vulnerabilities. They find that user input is directly concatenated into an SQL query without sanitization. This is an example of which OWASP Top 10 vulnerability?

Question 8hardmultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is using Cloud Security Posture Management (CSPM) to identify misconfigurations. Which of the following scenarios is MOST likely to be detected by CSPM?

Question 9mediummultiple choice

Read the full Systems and Application Security explanation →

A Windows system administrator needs to enforce a security policy that prevents users from installing unauthorized software. Which feature should be configured via Group Policy?

Question 10easymultiple choice

Study the full virtualization explanation →

Which of the following is a primary security concern when using VM snapshots in a virtualized environment?

Question 11mediummultiple choice

Read the full Systems and Application Security explanation →

A security auditor discovers that a Linux server has a user who can execute any command as root via sudo without a password. Which file should be reviewed to verify this configuration?

Question 12hardmultiple choice

Read the full Systems and Application Security explanation →

An organization is migrating a legacy application to a PaaS cloud environment. According to the shared responsibility model, which security control is the organization still responsible for?

Question 13mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Windows server. Which TWO actions should be taken to reduce the attack surface? (Select TWO.)

Question 14hardmulti select

Read the full Systems and Application Security explanation →

A company is deploying a web application and wants to protect against OWASP Top 10 attacks. Which THREE controls should be implemented? (Select THREE.)

Question 15mediummulti select

Read the full Systems and Application Security explanation →

An organization uses Linux servers and wants to implement mandatory access control (MAC) to enhance security. Which TWO technologies can be used? (Select TWO.)

Question 16easymultiple choice

Read the full Systems and Application Security explanation →

An organization is hardening a new Windows server for production use. Which of the following is the most effective method to ensure that only approved applications can run?

Question 17mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing Linux server logs after a suspected breach. Which auditing tool should be used to examine detailed records of system calls and file access events?

Question 18hardmultiple choice

Read the full Systems and Application Security explanation →

A company uses Infrastructure as a Service (IaaS) for its production workloads. According to the shared responsibility model, which of the following security tasks is the customer responsible for?

Question 19mediummultiple choice

Study the full virtualization explanation →

To prevent VM escape attacks in a virtualized environment, which of the following is the most critical security measure?

Question 20mediummultiple choice

Read the full Systems and Application Security explanation →

An administrator wants to ensure that a Linux web server only allows the www-data user to run specific commands with elevated privileges. Which configuration file should be modified?

Question 21easymultiple choice

Read the full Systems and Application Security explanation →

Which of the following OWASP Top 10 vulnerabilities involves an attacker sending malicious data to an interpreter as part of a command or query?

Question 22mediummultiple choice

Read the full Systems and Application Security explanation →

A cloud security team wants to continuously monitor for misconfigured cloud resources that could expose data. Which tool category is specifically designed for this purpose?

Question 23hardmultiple choice

Read the full Systems and Application Security explanation →

An organization using PaaS (Platform as a Service) for application hosting wants to ensure the application code is secure. Which of the following is the customer's responsibility under the shared responsibility model?

Question 24easymultiple choice

Read the full Systems and Application Security explanation →

Which Windows feature allows an administrator to define security policies such as password complexity and account lockout across multiple systems in a domain?

Question 25mediummultiple choice

Read the full Systems and Application Security explanation →

A company is concerned about VM sprawl in its data center. Which of the following is the most effective mitigation strategy?

Question 26hardmultiple choice

Read the full Systems and Application Security explanation →

During an application security review, a penetration tester discovers that a web application allows users to view other users' profiles by changing an ID parameter in the URL (e.g., /profile?id=123). Which OWASP Top 10 vulnerability does this represent?

Question 27mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux system administrator needs to restrict network traffic to a server, allowing only HTTP and HTTPS from the internet. Which tool should be used to configure packet filtering rules?

Question 28mediummulti select

Read the full Systems and Application Security explanation →

An organization is implementing system hardening. Which TWO of the following actions are recommended by CIS Benchmarks? (Select two.)

Question 29hardmulti select

Read the full Systems and Application Security explanation →

A security engineer is evaluating cloud security tools. Which TWO of the following are primarily used to protect cloud workloads? (Select two.)

Question 30mediummulti select

Study the full virtualization explanation →

During a virtualized environment security assessment, which THREE of the following are considered risks associated with virtual machine snapshots? (Select three.)

Question 31easymultiple choice

Read the full Systems and Application Security explanation →

During a security assessment, you discover that a Windows server has the Telnet service running. Which of the following is the BEST action to harden the server against this finding?

Question 32mediummultiple choice

Read the full Systems and Application Security explanation →

An organization is implementing Windows Defender Application Control (WDAC) to prevent unauthorized applications from running on company workstations. Which of the following best describes the primary security benefit of this approach?

Question 33hardmultiple choice

Read the full Systems and Application Security explanation →

A security analyst notices that a Linux server has an unusual number of failed login attempts for the root account. To strengthen authentication security while preserving administrative access, which of the following configurations would be most effective?

Question 34mediummultiple choice

Read the full Systems and Application Security explanation →

A company is deploying virtual machines (VMs) in a private cloud environment. To prevent VM escape attacks, which of the following is the most critical security control?

Question 35easymultiple choice

Read the full Systems and Application Security explanation →

An organization uses Infrastructure as a Service (IaaS) in the public cloud. Which of the following security responsibilities is the customer responsible for?

Question 36hardmultiple choice

Read the full Systems and Application Security explanation →

During a code review, a developer identifies that a web application directly concatenates user input into SQL queries without sanitization. This vulnerability is classified under which OWASP Top 10 category?

Question 37mediummultiple choice

Read the full Systems and Application Security explanation →

A system administrator is hardening a Linux server. After installing the OS, which of the following steps should be taken to ensure that only authorized users can execute commands with elevated privileges?

Question 38mediummultiple choice

Read the full Systems and Application Security explanation →

An organization is experiencing VM sprawl, with many unmanaged virtual machines running in the environment. Which of the following is the most significant security risk associated with VM sprawl?

Question 39hardmultiple choice

Read the full Systems and Application Security explanation →

A security administrator is configuring Windows Firewall with Advanced Security for a web server. The requirement is to allow inbound HTTPS traffic but block all other inbound traffic. Which of the following rule configurations best meets this requirement?

Question 40mediummultiple choice

Read the full Systems and Application Security explanation →

Which of the following tools would best help a security team detect misconfigurations in a cloud environment, such as open storage buckets or overly permissive IAM roles?

Question 41easymultiple choice

Read the full Systems and Application Security explanation →

A company is implementing application whitelisting on all endpoints. Which of the following is a primary consideration for maintaining operational efficiency?

Question 42hardmultiple choice

Read the full Systems and Application Security explanation →

A forensic analyst needs to review security events from multiple Windows servers. To ensure that logs are centrally collected and resistant to tampering, which of the following should be implemented?

Question 43mediummulti select

Read the full Systems and Application Security explanation →

An organization is hardening a Linux server. Which TWO of the following are effective steps to reduce the attack surface?

Question 44mediummulti select

Read the full Systems and Application Security explanation →

A cloud security architect is designing a solution to protect workloads running in a public cloud. Which THREE of the following are key security controls that should be implemented?

Question 45hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing a web application for OWASP Top 10 vulnerabilities. Which THREE of the following are examples of injection flaws?

Question 46easymultiple choice

Read the full Systems and Application Security explanation →

An organization is hardening its Windows servers. Which built-in Windows feature can be used to enforce application whitelisting, ensuring only approved executables run?

Question 47mediummultiple choice

Read the full Systems and Application Security explanation →

A security administrator is reviewing Linux audit logs to detect unauthorized file access. Which Linux component is primarily responsible for generating these security audit logs?

Question 48mediummultiple choice

Read the full Systems and Application Security explanation →

A cloud security team is implementing a Cloud Security Posture Management (CSPM) tool. What is the primary purpose of a CSPM solution?

Question 49hardmultiple choice

Read the full Systems and Application Security explanation →

An organization uses VMware ESXi in a production environment. Which of the following is the most effective mitigation against VM escape attacks?

Question 50easymultiple choice

Read the full Systems and Application Security explanation →

According to the shared responsibility model in cloud computing, which security responsibility belongs to the customer in a SaaS deployment?

Question 51mediummultiple choice

Read the full Systems and Application Security explanation →

A security analyst is reviewing an OWASP Top 10 vulnerability report. Which vulnerability involves an attacker accessing unauthorized data by modifying URLs or API parameters?

Question 52mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux administrator needs to configure access controls so that a specific user can run certain commands with root privileges without entering a password. Which configuration file should be modified?

Question 53mediummultiple choice

Read the full Systems and Application Security explanation →

A company deploys a web application and wants to protect against SQL injection and XSS attacks. Which security control is specifically designed to inspect HTTP traffic and block such attacks?

Question 54hardmultiple choice

Read the full Systems and Application Security explanation →

During a vulnerability scan, a security team discovers that several virtual machine snapshots contain outdated software with known vulnerabilities. Which risk is most directly associated with this scenario?

Question 55easymultiple choice

Read the full Systems and Application Security explanation →

Which Windows feature provides mandatory integrity controls and helps prevent unauthorized changes to system settings by requiring administrator approval?

Question 56mediummultiple choice

Read the full Systems and Application Security explanation →

A security administrator is configuring a Linux server to enforce mandatory access control (MAC). Which of the following tools provides MAC on Linux?

Question 57hardmultiple choice

Read the full Systems and Application Security explanation →

An organization using AWS IAM wants to grant an EC2 instance permissions to access an S3 bucket without storing long-term credentials on the instance. Which IAM feature should be used?

Question 58mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Linux server. Which TWO actions are recommended to reduce the attack surface? (Select TWO.)

Question 59hardmulti select

Read the full Systems and Application Security explanation →

A company is migrating to a PaaS cloud environment. According to the shared responsibility model, which THREE security responsibilities remain with the customer? (Select THREE.)

Question 60mediummulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing application security and identifies risks related to the OWASP Top 10. Which THREE are examples of OWASP Top 10 vulnerabilities? (Select THREE.)

Question 61easymultiple choice

Read the full Systems and Application Security explanation →

A security analyst is hardening a new Windows server. Which configuration would MOST effectively reduce the attack surface by limiting the software that can execute?

Question 62mediummultiple choice

Read the full Systems and Application Security explanation →

A Linux server is being hardened. The security team wants to enforce mandatory access control policies that confine processes to limited access to files and resources. Which technology should be implemented?

Question 63mediummultiple choice

Study the full virtualization explanation →

A company uses virtualization extensively. The security team discovers that developers have created many unmanaged virtual machines that are not tracked in the configuration management database (CMDB). Which risk is MOST directly associated with this situation?

Question 64hardmultiple choice

Read the full Systems and Application Security explanation →

A security architect is reviewing cloud security for a SaaS application used by the company. According to the shared responsibility model, which security controls are PRIMARILY the customer's responsibility?

Question 65easymultiple choice

Read the full Systems and Application Security explanation →

A web application is vulnerable to SQL injection. Which security control would be MOST effective at detecting and blocking such attacks at the network perimeter?

Question 66mediummultiple choice

Read the full Systems and Application Security explanation →

A system administrator is configuring a Linux server to ensure that only authorized users can execute commands with superuser privileges. Which file should be edited to control sudo access?

Question 67hardmultiple choice

Study the full virtualization explanation →

During a security assessment, an analyst finds that multiple snapshots of a critical virtual machine are stored on the hypervisor host. Some snapshots are several months old. Which risk is MOST likely?

Question 68mediummulti select

Read the full Systems and Application Security explanation →

A security engineer is hardening a Windows workstation. Which TWO configurations reduce the attack surface by limiting execution of unauthorized code? (Select TWO.)

Question 69mediummulti select

Read the full Systems and Application Security explanation →

A cloud security team is implementing CSPM (Cloud Security Posture Management) for their IaaS environment. Which THREE issues is CSPM MOST likely to detect? (Select THREE.)

Question 70hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing OWASP Top 10 vulnerabilities in a web application. Which TWO are injection-related attacks? (Select TWO.)

Question 71easymulti select

Read the full Systems and Application Security explanation →

A Linux administrator is hardening a server. Which TWO commands are used to manage file permissions? (Select TWO.)

Question 72mediummulti select

Read the full Systems and Application Security explanation →

A company is migrating to the cloud and wants to understand the shared responsibility model. For an IaaS deployment, which THREE are customer responsibilities? (Select THREE.)

Question 73hardmulti select

Read the full Systems and Application Security explanation →

A security analyst is reviewing Linux audit logs with auditd. Which TWO events would be of greatest concern for a server that should not have interactive logins? (Select TWO.)

Question 74easymulti select

Read the full Systems and Application Security explanation →