ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 166 - SK0-005 discussion

Report
Export

The HIDS logs on a server indicate a significant number of unauthorized access attempts via USB devices at startup. Which of the following steps should a server administrator take to BEST secure the server without limiting functionality?

A.
Set a BIOS/UEFI password on the server.
Answers
A.
Set a BIOS/UEFI password on the server.
B.
Change the boot order on the server and restrict console access. C Configure the host OS to deny login attempts via USB.
Answers
B.
Change the boot order on the server and restrict console access. C Configure the host OS to deny login attempts via USB.
C.
Disable all the USB ports on the server.
Answers
C.
Disable all the USB ports on the server.
Suggested answer: B

Explanation:

Changing the boot order on the server and restricting console access would prevent unauthorized access attempts via USB devices at startup, as the server would not boot from any external media and only authorized users could access the console. Setting a BIOS/UEFI password on the server would also help, but it could be bypassed by resetting the CMOS battery or using a backdoor password. Configuring the host OS to deny login attempts via USB would not prevent booting from a malicious USB device that could compromise the system before the OS loads. Disabling all the USB ports on the server would limit functionality, as some peripherals or devices may need to use them.

Reference:

https://www.pcmag.com/how-to/dont-plug-it-in-how-to-prevent-a-usb-attack https://www.techopedia.com/definition/10362/boot-order

https://www.techopedia.com/definition/10361/console-access

https://www.techopedia.com/definition/102/bios-password

https://www.techopedia.com/definition/10363/cmos-battery

asked 02/10/2024
Jason Hicks
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first