ITPEC IP April 2018 Question 44

Topic: Security

Among the descriptions A through D concerning the operations management of a file server, which of the following is the list that contains all and only the items that are effective as a security measure?

A:The password of an accessing user is complex and of sufficient length.B:Access is enabled only from PCs with the permitted IP address.C:The guest user is also granted permission to access the server.D:The access log of the server is acquired and audited regularly.

Explanation

A, B and D — strong passwords, access only from permitted IP addresses, and regular log audits all protect the file server; a guest account weakens it.

  • •A — a long, complex password resists guessing and brute-force attacks (authentication)
  • •B — accepting connections only from permitted IP addresses limits which PCs can reach the server (access control)
  • •C — a guest account lets anyone in without an individual ID, so access can be neither restricted nor traced to a person
  • •D — auditing the access log regularly detects unauthorized access and deters it (monitoring)

Answer (a)

Why not others:

  • •(b) A, D — omits B, which is also effective
  • •(c) B, C — includes C, which widens access, and omits A and D
  • •(d) B, D — omits A, password strength

Key rule: Layer the controls: authenticate strongly, restrict who can connect and from where, give no shared or anonymous access, and monitor logs to catch what gets through.

Security · AI-written, may contain errors

Practice this exam

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.