Server+ Server Hardening Best Practices Quiz

1. Which of the following is a key component of server logging for security?

Logging only successful connections

Centralized log aggregation with secure storage

Deleting logs weekly to save space

Logging only administrator activities

2. What is the primary benefit of implementing multi-factor authentication (MFA) on servers?

Slows down all server operations

Increases security even if passwords are compromised

Replaces the need for firewalls

Eliminates the need for encryption

3. Which backup strategy ensures the fastest recovery time?

Weekly full backups only

Incremental backups with frequent full backups

No backups if using RAID

Backups only for databases

4. What is the primary role of a load balancer in a hardened server environment?

Distribute traffic and provide high availability

Replace authentication mechanisms

Eliminate the need for backups

Increase server processing speed only

5. Which of the following is essential for compliance with security standards like CIS Benchmarks?

Regular hardening audits and documentation

Running servers without updates

Disabling all logging mechanisms

Allowing root access to all administrators

6. What is the significance of a vulnerability scan in server hardening?

It identifies missing patches and misconfigurations

It replaces the need for firewalls

It eliminates all security risks automatically

It is only needed before server deployment

7. Which practice reduces vulnerability to brute-force attacks?

Using simple passwords

Implementing account lockout policies and strong passwords

Disabling all authentication

Allowing unlimited login attempts

8. What is the purpose of a Bastion host?

To store all company backups

To serve as a hardened entry point for administrative access

To replace all firewalls

To monitor only web traffic

9. Which type of encryption should protect data in transit on a network?

No encryption needed for internal networks

TLS/SSL or IPsec

Only symmetric encryption

Encryption is only for databases

10. What is the primary purpose of SELinux or AppArmor?

Increase network bandwidth

Enforce mandatory access controls beyond standard Linux permissions

Replace firewall functionality

Manage user password complexity

11. Which of the following is the primary goal of server hardening?

Increase server processing speed

Reduce the attack surface by disabling unnecessary services

Maximize storage capacity

Improve user interface design

12. What does RTO stand for in disaster recovery planning?

Recovery Time Objective

Remote Troubleshooting Operations

Redundant Transmission Overflow

Real-Time Operating System

13. Which security control is most critical for disaster recovery?

Regular backups with tested restoration procedures

Disabling all network connections

Removing all user accounts

Deleting old log files

14. What is the primary benefit of implementing a web application firewall (WAF)?

Blocks application-layer attacks like SQL injection

Increases server RAM

Reduces disk I/O operations

Eliminates the need for OS patching

15. Which of the following should be disabled on a hardened server?

Critical security patches

Unnecessary services and open ports

Antivirus software

User authentication

16. What is the purpose of a firewall rule that denies all traffic by default?

To improve network speed

To implement a deny-all, allow-by-exception policy

To reduce hardware costs

To eliminate the need for encryption

17. Which port should typically be changed from its default to enhance SSH security?

Port 21

Port 80

Port 22

Port 443

18. What does DISA STIGs stand for?

Defense Information Systems Agency Security Technical Implementation Guides

Digital Infrastructure Security Administration Standards

Distributed Internet Systems and Gateway Standards

Data Integration Service Architecture Guidelines

19. Which authentication method is most secure for remote server access?

Telnet with passwords

SSH with key-based authentication

HTTP with basic authentication

FTP with username and password

20. What is the principle of least privilege?

Granting all users administrative access

Granting users only the minimum permissions needed to perform their job

Restricting network bandwidth to all users

Disabling all user accounts by default