CAS-002 · Question #182
An administrator has a system hardening policy to only allow network access to certain services, to always use similar hardware, and to protect from unauthorized application configuration changes…
The correct answer is D. Virtualization E. Host firewall. Virtualization enforces consistent hardware and configuration baselines while a host-based firewall restricts network access to only allowed services, together satisfying the hardening policy.
Question
An administrator has a system hardening policy to only allow network access to certain services, to always use similar hardware, and to protect from unauthorized application configuration changes. Which of the following technologies would help meet this policy requirement? (Select TWO).
Options
- ASpam filter
- BSolid state drives
- CManagement interface
- DVirtualization
- EHost firewall
How the community answered
(16 responses)- A13% (2)
- B6% (1)
- D81% (13)
Why each option
Virtualization enforces consistent hardware and configuration baselines while a host-based firewall restricts network access to only allowed services, together satisfying the hardening policy.
A spam filter addresses unsolicited email threats and does not control network service access or hardware standardization.
Solid state drives improve I/O performance but provide no security enforcement for network access restrictions or configuration integrity.
A management interface is an administrative tool for configuring systems and does not by itself enforce the service access restrictions or configuration change protections described.
Virtualization allows administrators to deploy identical, pre-hardened VM images ensuring hardware and software consistency, and hypervisor controls can prevent unauthorized changes to application configurations through snapshot and policy enforcement capabilities.
A host-based firewall enforces rules at the individual system level to allow or deny network access to specific services, directly implementing the policy requirement to restrict which services are reachable over the network.
Concept tested: System hardening with virtualization and host-based firewall
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security
Topics
Community Discussion
No community discussion yet for this question.