A+ V14 Security Baseline and Hardening Checklists

1. HTTPS uses which protocols to ensure secure web communication?

HTTP and SSL/TLS

DNS and DHCP

FTP and SFTP

SNMP and SMTP

Submit

4. Which log file should be regularly reviewed to detect unauthorized access attempts?

Application logs only

Security logs and authentication logs

System performance logs

Temporary file logs

5. What is the primary goal of security patching?

Add new features to software

Fix vulnerabilities and improve stability

Improve system performance

Change the user interface

6. Which type of attack involves sending unsolicited bulk messages to compromise a system?

DDoS attack

Spam

SQL injection

Man-in-the-middle

7. What does SELinux (Security-Enhanced Linux) provide?

Password encryption only

Mandatory access control policies

Firewall functionality

Antivirus protection

8. Which file system attribute should be set on sensitive files to prevent unauthorized access?

Read-only

Hidden

Proper permissions (ACLs)

9. What is the purpose of disabling unnecessary services on a hardened system?

Improve system speed only

Reduce attack surface and resource consumption

Prevent user login

Enable remote access

10. Which backup strategy provides the fastest recovery time for critical systems?

Full backup only

Incremental backup only

Full backup with regular incremental backups

No backups needed

11. Which authentication method requires something you know, something you have, and something you are?

Single-factor authentication

Two-factor authentication

Multi-factor authentication

Biometric authentication only

12. What is the main benefit of implementing a password manager in an organization?

Eliminates the need for strong passwords

Stores credentials securely and reduces password reuse

Prevents all phishing attacks

Replaces multi-factor authentication

13. Which protocol should replace Telnet for secure remote administration?

SSH

HTTP

SMTP

FTP

14. What does TPM (Trusted Platform Module) primarily protect?

Network traffic

Encryption keys and system integrity

Application performance

User account passwords

15. Which Windows security feature prevents unsigned drivers from loading?

UAC

Driver Signature Enforcement

DEP

Windows Defender

16. What should be done immediately after discovering a security breach?

Document the incident and notify affected parties

Attempt to recover data without logging

Ignore it if no data was stolen

Blame the user

17. Which principle limits user access to only the resources needed for their job role?

Defense in depth

Least privilege

Zero trust

Separation of duties

18. What is the primary purpose of a firewall in network security?

Encrypt all data traffic

Filter network traffic based on rules

Prevent malware installation

Manage user accounts

19. Which encryption standard is recommended for protecting data at rest on modern systems?

DES

AES-256

MD5

SHA-1

20. What does BIOS/UEFI firmware need to prevent unauthorized changes to boot settings?

Boot password

Secure Boot enabled

Administrator credentials

All of the above

A+ V14 Security Baseline and Hardening Checklists Quiz