nerdexam
CompTIA

CAS-002 · Question #675

A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the…

The correct answer is D. Solaris 10 with trusted extensions or SE Linux with a trusted policy. Solaris Trusted Extensions and SELinux with a trusted policy implement mandatory access control frameworks purpose-built for high-security environments like audit log storage.

Technical Integration of Enterprise Components

Question

A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the following is the BEST option for the server in this scenario?

Options

  • AA hardened Red Hat Enterprise Linux implementation running a software firewall
  • BWindows 7 with a secure domain policy and smartcard based authentication
  • CA hardened bastion host with a permit all policy implemented in a software firewall
  • DSolaris 10 with trusted extensions or SE Linux with a trusted policy

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    9% (4)
  • C
    18% (8)
  • D
    70% (31)

Why each option

Solaris Trusted Extensions and SELinux with a trusted policy implement mandatory access control frameworks purpose-built for high-security environments like audit log storage.

AA hardened Red Hat Enterprise Linux implementation running a software firewall

A standard RHEL implementation with only a software firewall lacks a formally enforced MAC policy framework and does not provide the high-assurance security required for audit log integrity.

BWindows 7 with a secure domain policy and smartcard based authentication

Windows 7 is an end-of-life operating system with no active security support and lacks a built-in MAC enforcement framework comparable to SELinux trusted policies.

CA hardened bastion host with a permit all policy implemented in a software firewall

A permit-all firewall policy on a bastion host directly contradicts hardening principles and would expose the security server to all inbound traffic, undermining its purpose.

DSolaris 10 with trusted extensions or SE Linux with a trusted policyCorrect

Solaris 10 Trusted Extensions and SELinux with a trusted policy both enforce mandatory access control (MAC), which provides kernel-level separation of security domains and prevents unauthorized access to audit logs even by privileged users. These platforms are specifically designed for environments requiring high assurance security, making them the strongest choice for a centralized security function server.

Concept tested: Hardened OS with mandatory access control for secure servers

Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/using_selinux/index

Topics

#hardened OS#trusted extensions#SE Linux#secure server configuration

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice