CV0-002 · Question #121
An administrator is responsible for creating a new template that will be used to deploy servers in a virtual environment. Which of the following should be the LAST step in completing the template?
The correct answer is B. Installing security patches. When creating a server template for deployment in a virtual environment, installing the latest security patches should be the final step to ensure it is fully up-to-date and secure.
Question
An administrator is responsible for creating a new template that will be used to deploy servers in a virtual environment. Which of the following should be the LAST step in completing the template?
Options
- ARename the administrator account
- BInstalling security patches
- CConducting a system baseline
- DDisabling unneeded ports or services
How the community answered
(50 responses)- A2% (1)
- B94% (47)
- D4% (2)
Why each option
When creating a server template for deployment in a virtual environment, installing the latest security patches should be the final step to ensure it is fully up-to-date and secure.
Renaming the administrator account is a security hardening step that should be performed earlier in the template configuration process.
Installing security patches as the last step ensures that the template incorporates all the latest vulnerability fixes. This practice minimizes the attack surface from the moment new servers are deployed, making them secure from initial boot-up.
Conducting a system baseline is typically performed after initial configuration and hardening, but before the final patching, to establish a reference point.
Disabling unneeded ports or services is a security hardening measure that should be completed early in the template creation to reduce the attack surface.
Concept tested: VM template security hardening best practices
Source: https://learn.microsoft.com/windows-server/get-started/hardening-server
Topics
Community Discussion
No community discussion yet for this question.