MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which guideline phase from CERT-In focuses on ensuring secure application deployment and operations?
a. Phase I
b. Phase II
c. Phase III
d. Phase IV
Answer: d. Phase IVtestbook
Which of the following best defines the principle of least privilege during installation?
a. Grant users maximum privileges
b. Assign all permissions by default
c. Provide only minimum privileges necessary
d. Disable all privileges permanently
Answer: c. Provide only minimum privileges necessarytestbook
What is the purpose of secure configuration management tools during deployment?
a. To automate password resets
b. To establish secure, consistent configurations
c. To encrypt user data only
d. To manage source codes
Answer: b. To establish secure, consistent configurationstestbook
Which protocol is preferred over Telnet for secure connections?
a. FTP
b. HTTP
c. SSH
d. POP3
Answer: c. SSHtestbook
What is the main goal of system hardening?
a. To increase system performance
b. To reduce attack surface and vulnerabilities
c. To install third-party software
d. To open network ports
Answer: b. To reduce attack surface and vulnerabilitiestestbook
Which of the following is a critical step before system installation?
a. Disable firewalls
b. Install unauthorized software
c. Verify hardware and software authenticity
d. Share credentials
Answer: c. Verify hardware and software authenticitytestbook
Which factor ensures backward compatibility while applying patches?
a. Avoiding encryption
b. Maintaining documentation and version control
c. Ignoring dependencies
d. Disabling auditing
Answer: b. Maintaining documentation and version controltestbook
CERT-In recommends segregation between which environments during deployment?
a. Production and testing
b. Servers and databases only
c. Development and clients
d. None of the above
Answer: a. Production and testingtestbook
What is the first step in secure software deployment best practices?
a. Code reviews
b. User training
c. Database tuning
d. License validation
Answer: a. Code reviewsdevops
What is the role of automated security scans during installation?
a. Detect physical threats
b. Identify code vulnerabilities automatically
c. Increase processing speed
d. Reduce system costs
Answer: b. Identify code vulnerabilities automaticallydevops
Which service helps manage and monitor logs post-deployment?
a. DHCP
b. SIEM
c. DNS
d. NTP
Answer: b. SIEMcert-in
What is a required security practice for VPN configuration in enterprises?
a. Allow open connections
b. Enable multi-factor authentication
c. Disable encryption
d. Use public DNS
Answer: b. Enable multi-factor authenticationcert-in
Which network segmentation practice is critical during setup?
a. Disable all VLANs
b. Use uniform zone for all systems
c. Create isolated VLANs for different functions
d. Use single subnet for all users
Answer: c. Create isolated VLANs for different functionscert-in
Which tool can securely manage environment configurations?
a. Puppet
b. Notepad
c. Excel
d. Paint
Answer: a. Puppetpuppet
What is the recommended encryption protocol for web applications?
a. TLS/SSL
b. FTP
c. SMTP
d. None
Answer: a. TLS/SSLcert-in
Which practice mitigates unauthorized API usage?
a. Disable encryption
b. Implement rate limiting and key rotation
c. Open all APIs
d. Allow all third-party access
Answer: b. Implement rate limiting and key rotationtestbook
Why should default credentials be changed immediately after installation?
a. To simplify access
b. To prevent unauthorized access
c. To disable MFA
d. To allow guest users
Answer: b. To prevent unauthorized accesscert-in
What should be conducted prior to system commissioning?
a. Penetration testing
b. User onboarding
c. Firewall disabling
d. External browsing
Answer: a. Penetration testingtestbook
Which deployment mechanism prevents configuration drift?
a. Immutable deployments
b. Manual configurations
c. Unverified builds
d. Continuous coding
Answer: a. Immutable deploymentsdevops
What prevents buffer overflow vulnerabilities in installation scripts?
a. Memory management
b. Encryption
c. Hardcoding
d. Debugging off
Answer: a. Memory managementtestbook
What practice should IT administrators enforce for installation control?
a. System hardening
b. Public access
c. Disabled updates
d. Static vulnerabilities
Answer: a. System hardeningpuppet
Secure boot ensures what aspect of installation?
a. Speed performance
b. Integrity and authenticity of startup
c. User access control
d. None
Answer: b. Integrity and authenticity of startupgeeksforgeeks
Which logging mechanism enhances accountability?
a. Audit trails
b. Unverified snapshots
c. Debug codes
d. Restricted reports
Answer: a. Audit trailstestbook
CERT-In advises developing applications with which design approach?
a. Security by design
b. Functionality over security
c. Delay encryption
d. Post-deployment auditing
Answer: a. Security by designtestbook
Which operating system version policy is ideal for installations?
a. Always use unsupported versions
b. Maintain supported OS versions
c. Use pirated releases
d. Keep all versions active indefinitely
Answer: b. Maintain supported OS versionspuppet
What is a key objective of secure deployment configuration?
a. Maintain tested and secure hosting environment
b. Enable open communication
c. Reduce encryption load
d. Limit system logs
Answer: a. Maintain tested and secure hosting environmenttestbook
What should be enforced to detect vulnerabilities dynamically post installation?
a. DAST
b. Configuration reset
c. Malicious codes
d. Manual reviews only
Answer: a. DASTtestbook
What ensures authenticity of updates and patches?
a. Digital signing and secure distribution
b. Disabling authentication
c. Public mirroring
d. Manual approval only
Answer: a. Digital signing and secure distributiontestbook
What is the role of baselining in installation security?
a. Establish uniform system standards
b. Random configuration
c. Controlled open systems
d. Disable updates
Answer: a. Establish uniform system standardsdevops
Which key step helps prevent configuration drift during installation?
a. Immutable infrastructure
b. Multiple admins with same credentials
c. Ignoring documentation
d. Static patching
Answer: a. Immutable infrastructuredevops
CERT-In recommends audit logging retention for how long at minimum?
a. 90 days
b. 120 days
c. 180 days
d. 365 days
Answer: c. 180 dayscert-in
What is the purpose of secure update pipelines?
a. Prevent unverified code injection
b. Bypass checks
c. Ignore credentials
d. Disable logging
Answer: a. Prevent unverified code injectiontestbook
What type of vulnerability assessment ensures source code safety?
a. SAST
b. Open scan
c. Ping test
d. VPN tunnel
Answer: a. SASTtestbook
Which method restricts network traffic during installation?
a. Firewall whitelisting
b. Port enabling
c. Random connections
d. Disable filters
Answer: a. Firewall whitelistingcert-in
Secure DNS configuration should point to?
a. Public DNS only
b. Internal DNS servers
c. Random open DNS
d. None
Answer: b. Internal DNS serverscert-in
What prevents unauthorized remote connections?
a. Strong VPN with MFA
b. Default VPN settings
c. Open ports
d. Shared credentials
Answer: a. Strong VPN with MFAcert-in
What is required before granting live access to applications?
a. Review configuration controls
b. Ignore test results
c. Allow default access
d. Skip penetration testing
Answer: a. Review configuration controlstestbook
What prevents privilege escalation on new installations?
a. Role-based access control
b. Shared root passwords
c. Public admin panels
d. Guest user privileges
Answer: a. Role-based access controlcert-in
What role do digital certificates play in updates?
a. Ensure authenticity of source and integrity
b. Accelerate installation
c. Expand open access
d. Log failures only
Answer: a. Ensure authenticity of source and integritytestbook
What tool can continuously monitor configuration compliance?
a. Configuration management tool
b. Network switch
c. User spreadsheet
d. Telnet
Answer: a. Configuration management toolpuppet
CERT-In emphasizes disabling which type of account on installation systems?
a. Admin
b. Guest
c. Root
d. User
Answer: b. Guestcert-in
What is the function of supply-chain risk mitigation in deployments?
a. Prevent tampering of updates
b. Facilitate manual updates
c. Disable security scans
d. Ban patch management
Answer: a. Prevent tampering of updatestestbook
When must security audits be performed according to guidelines?
a. Every six months or during major updates
b. Annually only
c. Never
d. Randomly
Answer: a. Every six months or during major updatescert-in
What does environment hardening focus on?
a. Removing unnecessary services
b. Installing every available software
c. Turning off encryption
d. Allowing open ports
Answer: a. Removing unnecessary servicespuppet
Which CERT-In practice ensures network integrity post-installation?
a. MAC binding
b. Guest account access
c. DHCP relay
d. None of the above
Answer: a. MAC bindingcert-in
Why is patch testing crucial before deployment?
a. To identify incompatibility or new issues
b. To allow unsupervised updates
c. To undo audits
d. To remove version control
Answer: a. To identify incompatibility or new issuestestbook
What ensures system availability during installation?
a. Redundant configurations (HA mode)
b. Unverified failover
c. Script disabling
d. None
Answer: a. Redundant configurations (HA mode)cert-in
Why must logs be continuously monitored post-installation?
a. To detect anomalies or attacks
b. To store backups only
c. To reduce disk consumption
d. To slow response
Answer: a. To detect anomalies or attackstestbook
What does CERT-In recommend for handling untrusted environment inputs?
a. Validate inputs before use
b. Execute directly
c. Ignore evaluation
d. Store as plaintext
Answer: a. Validate inputs before usetestbook
Which post-installation control enhances accountability and transparency?
a. Regular audit trails and logging
b. Auto password resets
c. Disabling all logs
d. Open access for all users
Answer: a. Regular audit trails and loggingtestbook

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info