Test
Final
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (47)
1Kane was transferring files from a file transfer protocol (FTP) server to his local machine simultaneously. He sniffed the traffic to find that only the control port commands are encrypted, and the data port is not encrypted. What protocol did Kane use to transfer the files?
- ATFTP
- BFTPS
- CSFTP
- DFTP
2In an interview, Tom was asked to give a brief on how containers perform virtualization. How should Tom reply?
- AContainers use Type I hypervisors for virtualization
- BContainers use hardware hypervisors for virtualization
- CContainers use dedicated physical storage for virtualization
- DContainers use OS components for virtualization
3Which of the following protects SNMP-managed devices from unauthorized access?
- ACommunity string
- BX.500
- CX.500 lite
- DResource records
4David is asked to test a new configuration on a virtual machine; if it does not work, it should roll back to the older state. What should David do before testing the new configuration so he can roll it back to the previous state if needed?
- ATake a screenshot of the virtual machine before testing the configuration
- BTake a snapshot of the virtual machine before testing the configuration
- CEnable "roll back" on the previous configuration before testing the new configuration
- DUse sandboxing in the virtual machine before testing the configuration
5Which of the following is a virtualization instance that uses OS components for virtualization?
- AVM escape protection
- BContainer
- CHost OS
- DHypervisor
6Which of the following tools can be used for virtual machine sprawl avoidance?
- AVirtual desktop infrastructure
- BSoftware-defined visibility
- CVirtual machine manager
- DVirtual machine escape protection
7Which of the following is a feature of secrets management?
- ADecreased latency
- BData redundancy
- CData availability
- DDefault encryption
8Marnus is working as a cloud administrator, and he has been asked to perform segmentation on specific cloud networks. Which of the following should be done by Marnus?
- AUse automated inspection and integration services for authentication, authorization, encryption,
availability, and policy compliance. - BCreate network rules for the services permitted between accessible zones to make sure endpoints belonging to other approved zones can reach them.
- CCreate a virtual network that connects services and resources such as virtual machines and database applications.
- DRemove individual accounts on file servers, machines, or authentication servers to restrict access and free up disc space, ports, and certificates.
- AUse automated inspection and integration services for authentication, authorization, encryption,
9You are a security consultant. An enterprise client contacted you because their mail domain is blocked due to an unidentified entity using it to send spam. How should you advise them to prevent this from happening in the future?
- AConfigure the SMTP relay to limit relays to only local users
- BConfigure the IMAP to store emails on the email server
- CConfigure the POP3 so that it listens on port 25
- DConfigure the POP to monitor incoming and outgoing emails
10Which of the following protocols can be used for secure video and voice calling?
- AVPN
- BSNMP
- CSRTP
- DS/MIME
11In an interview, you were asked to choose the least vulnerable password from the following list. Which of the following should you choose?
- A#International$
- Bhonesty
- Cearthwaterforesttreemanworldkid
- Dn2(f!%^*%:(r)!#$
12Which of the following is an authentication system that issues a ticket after verifying the credentials by which you can authenticate other services?
- ARADIUS
- BTACACS+
- CSAML
- DKerberos
13You are working as a security expert in an e-commerce enterprise. Your company recently decided on a short-term collaboration with a small business named BuyMe, and the following issue arose. Whenever your customers purchase any product from BuyMe, the e-commerce website redirects them to the BuyMe website, asking for additional authentication. This results in customers abandoning their purchases. To solve this issue, both enterprises agree to use a single authentication process wherein the users, once logged in to your website, can purchase from BuyMe without additional steps.
How should you implement this without storing the customers' credentials on the BuyMe server?- AUse SAML
- BUse Using Kerberos authentication
- CUse TACACS+
- DUse RADIUS authentication
14You are a cyber forensic specialist, and you are asked to retrieve the password of an employee account suspected of being an imposter. As you are provided with the enterprise's strong password policy, which of the following methods will be the easiest for you to use when retrieving the password?
- ADictionary attack
- BBrute force attack
- CHybrid attack
- DRule attack
15How does the single sign-on enhance secure authentication?
- AImplementing a single sign-on will reduce the number of passwords needing to be remembered.
- BImplementing a single sign-on will reduce the probability of a brute force attack.
- CImplementing a single sign-on will reduce the time required for authentication.
- DImplementing a single sign-on will make the entity completely invulnerable.
16In an interview, you were asked to explain the steps involved in a successful authentication by a RADIUS server. How should you answer?
- AThe supplicant prompts the user for the credentials. On entering the credentials, the supplicant sends a request to the access point (AP). The AP then sends an authentication request to the RADIUS server.
If verified, the server sends an authentication acknowledgment to the AP. The user is then authorized to join the network. - BThe access point (AP) prompts the user for credentials. On entering the credentials, the AP sends a request to the supplicant. The supplicant sends an authentication request to the RADIUS server.
If verified, the server sends an authentication acknowledgment to the AP. The user is then authorized to join the network. - CThe supplicant sends a request to the access point (AP). The AP prompts the user for credentials. Once credentials are entered, the AP sends an authentication request to the RADIUS server. If verified, the server sends the authentication acknowledgment to the AP. The user is then authorized to join the network.
- DThe access point (AP) sends a request to the supplicant. The supplicant prompts the user for the credentials. On entering the credentials, the supplicant sends an authentication request to the RADIUS server. If verified, the server sends an authentication acknowledgment to the supplicant, and the user is authorized to join the network.
- AThe supplicant prompts the user for the credentials. On entering the credentials, the supplicant sends a request to the access point (AP). The AP then sends an authentication request to the RADIUS server.
17Which of the following human characteristic is used for authentication?
- ABreathing pattern
- BFacial expression
- CHeight
- DVeins
18Windows picture password belongs to which of the following?
- APhysiological biometrics
- BPsychological biometrics
- CCognitive biometrics
- DBehavioral biometrics
19Which of the following is an authentication system that uses UDP over TCP?
- ARADIUS.
- BOAuth
- CShibboleth
- DTACACS+
20Which of the following is a motherboard chip that provides cryptographic services?
- ASecurity key
- BHardware security module
- CWindowed token
- DTrusted platform module
21Which of the following can protect a password digest from attackers?
- AArgon2
- BPassword vault
- CSecure key
- DKeystroke dynamics
22Which of the following best describes skimming?
- AAltering the condition of a secure key by using hardware
- BAltering the condition of a secure key by using software
- CCapturing information from the magnetic stripe of a smartcard
- DIntercepting the OTP to gain unauthorized access
23An attacker collected many usernames from a website and tried to login into the accounts using the password "passw0rd". What type of attack was this?
- APass the hash attack
- BPassword spraying
- CPassword phishing
- DBrute force attack
24The following data is being used for a password attack: "?u ?l ?l ?l ?l ?d ?d ?d ?d."
Which of the following types of attack is this?- ADictionary attack
- BRule attack
- CPassword spraying
- DBrute force attack
25Which of the following is a hardware-based solution for password security?
- APassword vault
- BPassword digest
- CSalts
- DPassword key
26While analyzing a security breach, you found the attacker followed these attack patterns:
The attacker initially tried the commonly used password "passw0rd" on all enterprise user accounts and then started trying various intelligible words like "passive," "partner," etc.
Which of the following attacks was performed by the attacker?- AInitially, a password spraying attack and then a brute force attack.
- BInitially, a dictionary attack and then a rule attack.
- CInitially, a brute force attack and then a dictionary attack.
- DInitially, a brute force attack and then a password spraying attack.
27You want to manage your passwords for different accounts to optimally secure passwords from compromise. Which of the following password management methods should you use?
- APassword generator
- BPassword vault
- CPassword digest
- DPassword key
28Which of the following is a legal complication related to forensics that should be considered when creating a cloud platform?
- ATotal unavailability of digital evidence
- BHigh legal expenses
- CJurisdictional applicability
- DTime elapsed before noticing an incident
29You are a cybersecurity investigator who needs query log files for faster analysis during an incident investigation. Which of the following log management tools should you use?
- Asyslog-ng
- Brsyslog
- Cjournalctl
- Dnxlog
30In a security meeting, you were asked about which response method would require less manual intervention per response. Which of the following should you choose?
- ARunbook
- BPlaybook
- CThe Diamond Model of Intrusion Analysis
- DCyber Kill Chain
31You are working as a security admin in an enterprise and have been asked to choose an access control method so that all users can access multiple systems without crossing their limit of access. Which of the following access control methods is the best fit?
- AMandatory access control
- BRole-based access control
- CRule-based access control
- DDiscretionary access control
32You are a data steward. You have been asked to restrict User A, who has an access clearance of "top secret" in a MAC-enabled network, from accessing files with the access label "secret." This, in turn, does not affect any other user.
What action should you take?- AChange the access label of the files to "top secret"
- BChange the access clearance of User A to "secret"
- CChange the access clearance of User A to "confidential"
- DChange the access label of the files to "confidential"
33After a disaster disrupted your organization's functioning, you were assigned to determine the sequence for reinstating systems. Which of the following documents should you refer to when deciding the restoration order?
- ASingle point of failure
- BData recovery plan
- CBusiness impact analysis
- DCOOP plan
34What is the power supply device that can ensure a correct and constant power level is delivered to a server?
- ASAN
- BOffline UPS
- COnline UPS
- DDual power supply
35Which of the following RAID configurations have no fault tolerance?
- ARAID level 10
- BRAID level 5
- CRAID level 1
- DRAID level 0
36Which of the following allows high-speed storage and transmission of large volumes of data?
- APDU
- BRAID
- CNIC teaming
- DSAN
37Which of the following best describes an acceptable use policy?
- AA policy that addresses assigning labels based on the use and importance of information
- BA policy that defines the actions users may perform while accessing systems and networking equipment
- CA policy that defines the tasks associated with hiring a new employee
- DA policy that allows only the minimum number of privileges necessary to perform a job or function should be allocated
38Your company has hired a contractor to build fences surrounding the office building perimeter and install signs that say "premises under 24-hour video surveillance." When do these controls occur?
- AThe fence should be built before an attack, and the signs erected after an attack
- BThe fence and the signs should both be installed before an attack
- CThe fence and the signs should both be installed after an attack
- DThe fence should be built after an attack, and the signs installed before an attack
39In 2016, your enterprise issued an end-of-life notice for a product. In 2020, an end-of-service notice was issued for the same product. What does this mean?
- AThe product manufactured by your company expired in 2016, and it stopped functioning in 2020.
- BYour company stopped manufacturing a product in 2016, and all maintenance services for the product stopped in 2020.
- CAll legacy systems in your enterprise were prevented from functioning in 2016 and completely replaced in 2020.
- DThe product's expected lifetime ended in 2016, and it was removed from all enterprise services in 2020.
40How do phishing simulations contribute to enterprise security?
- APhishing simulations train employees on how to recognize phishing attacks.
- BPhishing simulations secure an enterprise network from all application-based attacks.
- CPhishing simulations secure an enterprise network from all network-based attacks.
- DPhishing simulations train employees on how to conduct phishing attacks.
41Which of the following is NOT a method for destroying data stored on paper media?
- APulping
- BDegaussing
- CShredding
- DPulverizing
42What does the end-of-service notice indicate?
- AThe enterprise is halting the manufacturing of a product.
- BThe nondisclosure agreement with a service vendor has expired.
- CThe enterprise will no longer offer support services for a product.
- DThe service-level agreement with a vendor has expired.
43Several quantitative tools like mean time between failure (MTBF), mean time to recovery (MTTR), mean time to failure (MTTF), and failure in time (FIT) can be used to predict the likelihood of the risk. Which of these tools perform similar functions?
- AMTBF and FIT
- BMTTF and MTTR
- CFIT and MTTR
- DMTBF and MTTF
44Which risk remains after additional controls are applied?
- AInternal risk
- BControl risk
- CInherent risk
- DResidual risk
45Which control discourages security violations before their occurrence?
- ADeterrent control
- BCorrective control
- CCompensating control
- DPreventive control
46In a security review meeting, you are asked to calculate the single loss expectancy (SLE) of an enterprise building worth $100,000,000, 75% of which is likely to be destroyed by a flood. Flood insurance data suggest that a severe flood is likely to occur once every 100 years. Which formula should you use to calculate the SLE?
- A100,000,000/100 * 0.75
- B100,000,000 * 0.75/.01
- C100,000,000/0.75 * 100
- D100,000,000 * 0.75
47Which of the following methods can be used to destroy data on paper?
- APulping
- BWiping
- CMasking
- DDegaussing
Información
- Descripción
- Test sobre Final, creado por Jose Martinez el 25/05/2022.
- Autor
- Jose Martinez
- Idioma
- English
- Visitas
- 0
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test