{ "questions": [ { "question": "Based on the lastest advice from the National Institute of Standards and Technology (NIST), when should regular users be required to change their passwords?", "answers": { "A": "Only if the current password is compromised", "B": "Every 90 days", "C": "Every 30 days", "D": "Every 60 days" }, "solution": "A" }, { "question": "Which of the following is a best practice for creating strong passwords?", "answers": { "A": "Using common words or phrases", "B": "Using the same password for multiple accounts", "C": "Setting a password expiration period of 3 years", "D": "Including a mix of uppercase, lowercase, numbers, and special characters" }, "solution": "D" }, { "question": "What is the purpose of encryption in the context of data protection?", "answers": { "A": "To protect data while in transit or at rest", "B": "To compress data for efficient storage", "C": "To hide data from authorized users", "D": "To corrupt sensitive data" }, "solution": "A" }, { "question": "What is the minimum effective key strength recommended for strong cryptography?", "answers": { "A": "112-bits", "B": "80-bits", "C": "128-bits", "D": "64-bits" }, "solution": "C" }, { "question": "Which of the following is an example of a social engineering attack in cybersecurity?", "answers": { "A": "Denial-of-service (DoS) attack", "B": "Brute force attack", "C": "Phishing attack", "D": "SQL injection attack" }, "solution": "C" }, { "question": "Which of the following is necessary to create a security association (SA) in IPSec?", "answers": { "A": "Security parameter index (SPI)", "B": "Keys used by the transform algorithm", "C": "Both A and B ", "D": "None of the above" }, "solution": "C" }, { "question": "Which component is responsible for validating access to every resource before granting access requests in a secure system?", "answers": { "A": "Router", "B": "Firewall", "C": "Intrusion Detection System", "D": "Security kernel" }, "solution": "D" }, { "question": "What structure is used to prevent cars from ramming a building?", "answers": { "A": "Honeypot", "B": "Gates", "C": "Bollard", "D": "Fences" }, "solution": "C" }, { "question": "An organization is concerned about the risk of a car driving from the parking lot through the entrance of the building. Which of the following security measures would best help address this concern?", "answers": { "A": "Badge system", "B": "RBAC", "C": "Bollards", "D": "Biometrics" }, "solution": "C" }, { "question": "What is the primary aim of Risk Management in cyber security?", "answers": { "A": "To transfer risks to a third party", "B": "To complicate operations to deter attackers", "C": "To completely eliminate all security risks", "D": "To balance security controls with available resources and potential threats" }, "solution": "D" }, { "question": "What is the most important security concern when an organization moves to cloud computing, particularly in terms of server security?", "answers": { "A": "Improper encryption of SQL databases", "B": "Expensive operational costs", "C": "Loss of physical control of the organization’s data", "D": "All of the above" }, "solution": "C" }, { "question": "What is the loopback address in IPv6?", "answers": { "A": "0.0.0.0", "B": "0:0:0:0:0:0:0:1", "C": "127.0.0.1", "D": "::1" }, "solution": "D" }, { "question": "What is the process of producing the cipher text from the plain text by adding a 'random' stream of 1s and 0s to the plain text stream known as?", "answers": { "A": "Modulo 2 addition", "B": "Hashing", "C": "Stream cipher operation", "D": "HMAC" }, "solution": "C" }, { "question": "In contract law, which term refers to a communication by a potential customer to a supplier seeking a contract?", "answers": { "A": "Transmission request", "B": "Assembled communication", "C": "Order", "D": "Demand order" }, "solution": "C" }, { "question": "What technique involves reducing the precision with which data is shared, aiming to reduce the accuracy of an adversary’s inferences?", "answers": { "A": "Generalization", "B": "Dummy addition", "C": "Suppression", "D": "Perturbation" }, "solution": "A" }, { "question": "What is the primary principle behind job rotation in an organization from a security perspective?", "answers": { "A": "To increase operational efficiency by allowing a single person to control a process from initiation through to completion.", "B": "To reduce staff costs and expenses.", "C": "To prevent promotion of staff members.", "D": "To enhance the training of key personnel and reduce risks through lack of trained personnel during vacations or illnesses." }, "solution": "D" }, { "question": "What is the primary advantage of the Kerberos authentication protocol?", "answers": { "A": "It uses symmetric encryption to transmit keys and passwords securely", "B": "It requires frequent password transmissions for access", "C": "It stores passwords openly as hashes for easy validation", "D": "It sends the password in clear text for authentication" }, "solution": "A" }, { "question": "What is the term used for the computational method that determines all primes less than or equal to a given number by removing the multiples of preceding integers?", "answers": { "A": "Euler's Theorem", "B": "RSA Algorithm", "C": "The Sieve of Eratosthenes", "D": "RSA Encryption" }, "solution": "C" }, { "question": "In cybersecurity, which of the following best describes integrity as part of the CIA triad?", "answers": { "A": "Ensuring data is available when needed", "B": "Ensuring that data is only accessible by authorized individuals", "C": "Encrypting data to prevent unauthorized access", "D": "Protecting data from unauthorized modification" }, "solution": "D" }, { "question": "What is one reason why terrorists may despise America and the West?", "answers": { "A": "Wealth and leading industrial power", "B": "Because of their geographic isolation", "C": "Because of their conformity with religious values", "D": "Perceived lack of influence over the actions of other governments" }, "solution": "A" }, { "question": "What is the principle of granting programs or people access only to those resources necessary to complete a specific task or their job?", "answers": { "A": "Data hiding", "B": "Abstraction", "C": "Layering", "D": "Least privilege" }, "solution": "D" }, { "question": "In a rotor machine, what happens when the rotor is rotated counterclockwise by 5 positions?", "answers": { "A": "The substitution mapping is shifted by 5 positions in the same direction.", "B": "The substitution mapping remains unchanged.", "C": "The rotor stops functioning.", "D": "The substitution mapping is shifted by 5 positions in the opposite direction." }, "solution": "A" }, { "question": "Which term best describes an outcome of the use of privacy policies that is both unexpected and leads to either the provider or the consumer or both experiencing a loss?", "answers": { "A": "Positive unexpected outcome", "B": "Negative expected outcome", "C": "Unexpected negative outcome", "D": "Expected mutual benefit" }, "solution": "C" }, { "question": "Which security practice focuses on ensuring that default settings and configurations are secure and require deliberate changes to weaken security measures?", "answers": { "A": "Principle of Least Authority", "B": "Defense in Depth", "C": "Least Privilege", "D": "Secure by Default" }, "solution": "D" }, { "question": "Which post-quantum signature schemes are based on the hardness of the learning with errors problem?", "answers": { "A": "RSA and DSA", "B": "DH and ECDSA", "C": "NTRU and Ring-LWE", "D": "Lattice and ECC" }, "solution": "C" }, { "question": "What is the term for the maximum amount of time a system or process can be offline before the business can no longer recover?", "answers": { "A": "Maximum Tolerable Downtime (MTD)", "B": "Recovery Time Objective (RTO)", "C": "Business Continuity Deadline (BCD)", "D": "System Outage Tolerance (SOT)" }, "solution": "A" }, { "question": "In a Linux/UNIX environment, which command is used to change the permissions mode of a file or directory?", "answers": { "A": "chown", "B": "usermod", "C": "cacls", "D": "chmod" }, "solution": "D" }, { "question": "What is the main objective of using the nbtstat command?", "answers": { "A": "To troubleshoot name-resolution issues", "B": "To gather user and group information remotely", "C": "To change account passwords remotely", "D": "To perform a zone transfer" }, "solution": "A" }, { "question": "Which of the following authentication methods involves the use of a combination of something the user knows and something the user has?", "answers": { "A": "RADIUS authentication", "B": "Single sign-on", "C": "Biometrics", "D": "Two-factor authentication" }, "solution": "D" }, { "question": "Which type of application control policy allows only certain applications to run on client computers and denies everything else?", "answers": { "A": "Blacklisting", "B": "Whitelisting", "C": "Patching", "D": "Hotfixing" }, "solution": "B" }, { "question": "What is the process of changing the order of some characters in an encryption key?", "answers": { "A": "Transrelation", "B": "Transposition", "C": "Substitution", "D": "Subtraction" }, "solution": "B" }, { "question": "Which learning level focuses on creating a minimum standard understanding of security issues across the entire organization?", "answers": { "A": "Awareness", "B": "Education", "C": "Certification", "D": "Training" }, "solution": "A" }, { "question": "A cloud environment can be in which of the following configurations except?", "answers": { "A": "PaaS", "B": "IaaS", "C": "LaaS", "D": "SaaS" }, "solution": "C" }, { "question": "A CISSP is expected to be capable of establishing and maintaining security awareness and training to help in the prevention of ____?", "answers": { "A": "Escalation from an Incident to a Disaster", "B": "Social Engineering Attacks", "C": "Lack of Due Care and Diligence", "D": "Privilege Escalation" }, "solution": "B" }, { "question": "What is the primary threat to medical privacy?", "answers": { "A": "Physical theft of medical records", "B": "Computer networks compromised by malware", "C": "Insufficient encryption", "D": "Insider abuse of authorized access" }, "solution": "D" }, { "question": "Which book listed basic operating instructions for the PURPLE machine?", "answers": { "A": "Ko codebook", "B": "Suruga codebook", "C": "Iwakura codebook", "D": "Otsu codebook" }, "solution": "A" }, { "question": "What does PGP use to encrypt messages for transmission and storage?", "answers": { "A": "CAST-128, IDEA, and 3DES", "B": "DES and Diffie-Hellman", "C": "MAC and DSS", "D": "RSA and SHA-1" }, "solution": "A" }, { "question": "What is the purpose of a data dictionary in the context of an application system?", "answers": { "A": "To record data structures used by an application", "B": "To enforce the organization's security policy and procedures", "C": "To provide checks for data consistency and accuracy", "D": "To maintain program comments and database consistency" }, "solution": "A" }, { "question": "What type of network architecture is designed to factor in the different stages of an attack life cycle and provide visibility into the environment for monitoring?", "answers": { "A": "Defensible Network Architecture", "B": "Defense in Depth", "C": "Defense in Breadth", "D": "Unified Threat Management" }, "solution": "A" }, { "question": "Which of the security triad properties does the Biba security model relate to?", "answers": { "A": "Availability", "B": "All of them", "C": "Confidentiality", "D": "Integrity" }, "solution": "D" }, { "question": "What aspect of a computer room design might be omitted in a distributed environment?", "answers": { "A": "Special air conditioning systems", "B": "Cable chase-ways", "C": "Power conditioning", "D": "Raised flooring" }, "solution": "D" }, { "question": "What is the main function of virus signature scanning in antivirus software?", "answers": { "A": "To monitor network traffic", "B": "To prevent unauthorized access to the system", "C": "To identify known patterns of malicious code", "D": "To optimize system memory usage" }, "solution": "C" }, { "question": "What does the term 'bug bounty' refer to in the context of cybersecurity?", "answers": { "A": "A malicious software program designed to exploit system vulnerabilities", "B": "A type of denial-of-service attack targeting network infrastructure", "C": "A reward paid to individuals for reporting valid security vulnerabilities", "D": "A security standard for IoT devices" }, "solution": "C" }, { "question": "Which attack type is primarily motivated by political interests, typically organizing themselves into groups and using tools like DDoS attacks?", "answers": { "A": "Business attack", "B": "Thrill attack", "C": "Grudge attack", "D": "Hacktivist attack" }, "solution": "D" }, { "question": "Which practice should be followed when vulnerabilities are identified by vulnerability scanners?", "answers": { "A": "Lower the severity of the findings to reduce unnecessary actions", "B": "Identify a remediation plan for any identified vulnerabilities", "C": "Ignore the results to avoid causing failures in the target systems", "D": "Increase the severity of the findings to ensure they are addressed" }, "solution": "B" }, { "question": "What should be the main focus of strategy development in continuity planning?", "answers": { "A": "To determine which risks are acceptable and require no mitigation.", "B": "To develop a continuity of operations plan (COOP).", "C": "To identify alternate sites for business operations.", "D": "To create mechanisms and procedures for protection against identified risks." }, "solution": "D" }, { "question": "Which of the following protocols can be support both IPv4 and IPv6?", "answers": { "A": "Transmission Control Protocol (TCP)", "B": "Encapsulating Security Payload (ESP)", "C": "Labeled IPsec", "D": "All of the above" }, "solution": "D" }, { "question": "What is the primary goal of the birthday paradox in the context of cryptography?", "answers": { "A": "Finding collisions in hash functions", "B": "Generating cryptographic keys", "C": "Breaking symmetric encryption", "D": "Cracking digital signatures" }, "solution": "A" }, { "question": "What is the goal of electronic warfare?", "answers": { "A": "To control the electromagnetic spectrum", "B": "To intercept and analyze enemy communications", "C": "To protect friendly communications from interception", "D": "To physically destroy the enemy's communications networks" }, "solution": "A" }, { "question": "What is the main purpose of enumeration?", "answers": { "A": "To initiate connections to a system to find vulnerable points", "B": "To execute directed queries at a host to extract additional information", "C": "To gather information from various open source locations", "D": "To determine the open and closed ports on a target system" }, "solution": "B" }, { "question": "What is the technique used in an IV attack?", "answers": { "A": "Manipulating the source MAC address in network traffic", "B": "Sending numerous packets to a switch with different source MAC addresses", "C": "Observing the operation of a cipher using several different keys", "D": "Masking the MAC address of a computer's network adapter" }, "solution": "C" }, { "question": "When confidential documents are exposed to unauthorized entities, which element of STRIDE is used to reference that violation?", "answers": { "A": "I - Information disclosure", "B": "R - Repudiation", "C": "S - Spoofing", "D": "T - Tampering" }, "solution": "A" }, { "question": "What is CPTED?", "answers": { "A": "Community Policing and Traffic Enforcement Department", "B": "Crime Prevention Through Environmental Design", "C": "Crisis Preparedness and Threat Evaluation Directive", "D": "Criminal Prevention and Threat Elimination Division" }, "solution": "B" }, { "question": "What is the main benefit of a honeypot with respect to an incident investigation?", "answers": { "A": "It captures evidence in the form of digital fingerprints for incident investigation.", "B": "It allows potential vulnerabilities to be patched before they are exploited in a live environment.", "C": "It offers real services and vulnerabilities to entice inbound attacks.", "D": "It provides an isolated environment for testing and analyzing system vulnerabilities." }, "solution": "A" }, { "question": "What is the purpose of encrypting data?", "answers": { "A": "To increase data accessibility", "B": "To compress the data", "C": "To make the data unreadable to unauthorized users", "D": "To track data usage" }, "solution": "C" }, { "question": "What conclusion can be drawn if a primary data center resides within a 100-year flood plain?", "answers": { "A": "The last significant flood to hit the area was more than 100 years ago.", "B": "The last flood of any kind to hit the area was more than 100 years ago.", "C": "The odds of a flood at this level are 1 in 100 in any given year.", "D": "The area is expected to be safe from flooding for at least 100 years." }, "solution": "C" }, { "question": "What does a complete set of subcribs of a crib in columnar transposition allow for?", "answers": { "A": "Partial determination of the transposition", "B": "Determining the plaintext directly", "C": "Encrypting the ciphertext", "D": "Randomizing the encryption process" }, "solution": "A" }, { "question": "Which network security control system is used to detect the signature of known attacks at the network level?", "answers": { "A": "Intrusion Detection System (IDS)", "B": "Anti-virus System", "C": "Firewall", "D": "Virtual Private Network (VPN)" }, "solution": "A" }, { "question": "The Clark-Wilson model focuses on data's:", "answers": { "A": "Format", "B": "Availability", "C": "Integrity", "D": "Confidentiality" }, "solution": "C" }, { "question": "ARP broadcasts messages on the LAN to find what?", "answers": { "A": "MAC address", "B": "Router", "C": "Hostname", "D": "IP address" }, "solution": "A" }, { "question": "Which of the following manages digital certificates?", "answers": { "A": "Certificate authority", "B": "Hub", "C": "Public key", "D": "Police" }, "solution": "A" }, { "question": "What does a firewall protect against in a network?", "answers": { "A": "Physical break-ins", "B": "Power outages", "C": "Unauthorized access", "D": "Data corruption" }, "solution": "C" }, { "question": "What is the purpose of Mobile Device Management (MDM) in an enterprise environment?", "answers": { "A": "To push security policies and manage mobile devices", "B": "To remote lock and wipe personal devices", "C": "To encourage the use of unsecured devices", "D": "To track users' personal activities on their devices" }, "solution": "A" }, { "question": "What is the main purpose of region coding in DVD technology?", "answers": { "A": "To minimize the cost of producing physical film prints for use in movie theatres", "B": "To restrict DVDs to specific regions for global release planning", "C": "To prevent unauthorized access to DVD content", "D": "To enable cross-compatibility among different DVD players" }, "solution": "B" }, { "question": "What is the primary function of the Configuration Control Board (CCB) in Configuration Control?", "answers": { "A": "To serve as a central directing entity for the change process", "B": "To maintain configuration status accounting reports", "C": "To minimize the negative impact of system changes", "D": "To supervise documentation change control" }, "solution": "A" }, { "question": "How did the initial GSM security mechanisms' protection level compare to that of wireline networks in the context of A5/1 usage?", "answers": { "A": "Provided slightly better protection in countries allowed to use A5/1, but slightly worse elsewhere", "B": "Offered uniform protection across all countries, irrespective of A5/1 usage", "C": "Provided significantly higher protection in countries not using A5/1", "D": "Offered less protection than wireline networks regardless of A5/1 usage." }, "solution": "A" }, { "question": "What is the primary function of a Network layer in the OSI model?", "answers": { "A": "Ensuring the transport of data is successful", "B": "Identifying established system sessions", "C": "Determining the path of data packets", "D": "Providing a translation of data" }, "solution": "C" }, { "question": "What cryptographic method is implemented through a key that consists of a random set of non-repeating characters?", "answers": { "A": "Transposition cipher", "B": "Book or Running Key Cipher", "C": "Vernam Cipher (One-Time Pad)", "D": "Steganography" }, "solution": "C" }, { "question": "NIST developed the Risk Management Framework (RMF). What is the second step of the RMF?", "answers": { "A": "Perform a Business Impact Analysis", "B": "Assess the security controls", "C": "Select an initial set of baseline security controls", "D": "Categorize the information system" }, "solution": "C" }, { "question": "Which of the following best identifies the benefit of a passphrase?", "answers": { "A": "It is easy to crack.", "B": "It is short.", "C": "It includes a single set of characters.", "D": "It is easy to remember." }, "solution": "D" }, { "question": "What is an essential consideration when evaluating the costs and benefits of security measures?", "answers": { "A": "Minimization of all costs", "B": "Potential for personal gain", "C": "Solely monetary costs", "D": "Direct and indirect costs" }, "solution": "D" }, { "question": "What is the purpose of using concatenation as an obfuscation technique in cyber attacks?", "answers": { "A": "To encrypt the data", "B": "To compress the data", "C": "To add redundant data for confusion", "D": "To divide and make the code difficult to understand" }, "solution": "D" }, { "question": "Which wireless networking standard operates solely at 5 GHz?", "answers": { "A": "802.11ac", "B": "802.11ax", "C": "802.11n", "D": "802.11g" }, "solution": "A" }, { "question": "Which organization initiated efforts to develop the network communication model?", "answers": { "A": "IETF", "B": "W3C", "C": "ISO", "D": "IEEE" }, "solution": "C" }, { "question": "What technique does nonstatistical sampling rely on to help focus on specific events?", "answers": { "A": "Clipping Levels", "B": "Syslog", "C": "Traffic Analysis", "D": "Monitoring Tools" }, "solution": "A" }, { "question": "Which organization provides the Trustworthy Software Framework?", "answers": { "A": "Software Engineering Institute (SEI)", "B": "National Cyber Security Centre (NCSC)", "C": "Trustworthy Software Foundation (TSF)", "D": "US National Institute of Standards and Technology (NIST)" }, "solution": "C" }, { "question": "What was one of the significant consequences of the Morris worm's spread?", "answers": { "A": "It highlighted the vulnerability of the Internet to self-sustaining worm attacks", "B": "Many system administrators panicked and disconnected their systems", "C": "It prompted the establishment of the Computer Emergency Response Team (CERT)", "D": "All of the above" }, "solution": "D" }, { "question": "What is the primary function of a network Intrusion Detection System (IDS)?", "answers": { "A": "To authenticate users before allowing network access", "B": "To encrypt all data passing through the network", "C": "To block unauthorized access to the network", "D": "To monitor and analyze network traffic for potential security threats" }, "solution": "D" }, { "question": "What method may an organization use to ensure ongoing compliance with PCI DSS requirements while also maintaining business operations?", "answers": { "A": "Annual PCI DSS assessment", "B": "Third-party validation", "C": "Customized approach", "D": "Implementation of compensating controls" }, "solution": "C" }, { "question": "In the context of the RED cipher machines, what does cryptanalysis entail?", "answers": { "A": "Searching for normalized kappa values", "B": "Evaluating the performance characteristics of the machine", "C": "Decrypting the ciphertext without prior knowledge of the plaintext or key", "D": "Applying letter substitutions to ciphertext" }, "solution": "C" }, { "question": "Why is the Communications Decency Act relevant in the context of cybersecurity?", "answers": { "A": "To promote access to uncensored information online", "B": "To protect children from harmful content on the Internet", "C": "To secure government communication networks", "D": "To regulate ethical practices during online communication" }, "solution": "B" }, { "question": "When assessing risks quantitatively, multiplying asset value by exposure factor (EF) yields what result?", "answers": { "A": "Actual cost evaluation (ACV)", "B": "Annualized loss expectancy (ALE)", "C": "Risk elimination", "D": "Single loss expectancy (SLE)" }, "solution": "D" }, { "question": "Which components comprise an extranet?", "answers": { "A": "LAN and WAN", "B": "Public Internet only", "C": "Private network only", "D": "Public Internet and private network" }, "solution": "D" }, { "question": "Which of the following is a key element of incident response in cybersecurity?", "answers": { "A": "Blaming employees for security incidents", "B": "Quickly identifying and resolving security incidents", "C": "Ignoring security incidents to avoid panic", "D": "Denying the existence of security incidents" }, "solution": "B" }, { "question": "Which of the following is a function provided by an SSO product to support the use of smart card security tokens for increased security?", "answers": { "A": "Ability to Support Scripting", "B": "Support a Standard Primary loginid Format", "C": "Support Masking/Generics", "D": "Smart Card Tokens" }, "solution": "D" }, { "question": "In the context of encryption, which type of key is used for both encryption and decryption of the same data?", "answers": { "A": "Symmetrical key", "B": "Private key", "C": "Public key", "D": "Asymmetrical key" }, "solution": "A" }, { "question": "What schedule is recommended for the ethical hacking testing?", "answers": { "A": "Testing periodically to keep up with advancements in hacker technology and system changes.", "B": "Testing once a year to ensure thorough testing.", "C": "Testing randomly and infrequently to avoid disrupting daily operations.", "D": "Testing bi-annually to allow for significant system changes to occur." }, "solution": "A" }, { "question": "What does firewalking involve in terms of probing a firewall's configuration?", "answers": { "A": "Modifying the settings of a firewall to allow unauthorized traffic", "B": "Sending TCP and UDP packets at the firewall to determine ACL configurations", "C": "Sending multiple spoofed requests to the firewall to overwhelm its resources", "D": "Analyzing the content of packets to discern firewall rules" }, "solution": "B" }, { "question": "When should the risk and cost findings be summarized in the Information Security Risk Document?", "answers": { "A": "At the Certification Checkpoint", "B": "At the end of the Analyze stage", "C": "At the Requirements stage", "D": "At the beginning of the SDSM process" }, "solution": "B" }, { "question": "Which protocol provides integrity, authentication, sequence integrity, and non-repudiation, but not confidentiality?", "answers": { "A": "Internet Security Association and Key Management Protocol (ISAKMP)", "B": "Encapsulating Security Payload (ESP)", "C": "Authentication Header (AH)", "D": "Public Key Infrastructure (PKI)" }, "solution": "C" }, { "question": "Which of the following is a critical component of cryptography to ensure secure data transmission?", "answers": { "A": "Residue class of integers", "B": "Complexity of the encryption algorithm", "C": "Correct mapping or function", "D": "Probabilistic encryption" }, "solution": "C" }, { "question": "Which framework offers guidelines specifically addressed towards information security, with widely-known standards such as BS 7799 and its descendants?", "answers": { "A": "ISO 27000", "B": "Committee of Sponsoring Organizations of the Treadway Commission", "C": "Basel II", "D": "Balanced Scorecard" }, "solution": "A" }, { "question": "What is the preferred encryption option for sending large amounts of data?", "answers": { "A": "Asymmetric encryption", "B": "Public Key Cryptography", "C": "Diffie-Hellman scheme", "D": "Symmetric encryption" }, "solution": "D" }, { "question": "What is the process of converting sensitive data into an unreadable form to prevent unauthorized access?", "answers": { "A": "Decryption", "B": "Hashing", "C": "Encryption", "D": "Obfuscation" }, "solution": "C" }, { "question": "What method is recommended to protect e-mail servers from virus-infected messages that enter the internal networks through portable computing devices and remote access to remote email accounts?", "answers": { "A": "Upgrading the e-mail clients with the latest security patches", "B": "Installing antivirus software on all workstations", "C": "Scanning all email messages on the internal e-mail servers", "D": "Blocking IMAP and POP TCP ports on the firewalls" }, "solution": "C" }, { "question": "What is the primary method of propagation for a worm?", "answers": { "A": "Moving from one systems to another across networks.", "B": "Infecting system memory and continuously reinfecting files.", "C": "Self-replication within the same file.", "D": "Infecting documents through macro scripts." }, "solution": "A" }, { "question": "Which of the following is a valid reason for an organization to consider using the customized approach to meet a PCI DSS requirement?", "answers": { "A": "To define a compensating control", "B": "Legitimate and documented technical or business constraints", "C": "Simplification of the annual PCI DSS assessment process", "D": "To avoid the need for ongoing monitoring of controls" }, "solution": "B" }, { "question": "What should be included in the Security Plan/Concept of Operations in the C&A process?", "answers": { "A": "Guidance on potential threats and vulnerabilities", "B": "Security measures to address system security requirements", "C": "List of system deficiencies", "D": "An analysis of the system architecture" }, "solution": "B" }, { "question": "Which of the following would lower the level of password security?", "answers": { "A": "After a set number of failed attempts, the server will lock the user out, forcing her to call the administrator to re-enable her account.", "B": "All passwords are set to expire after 30 days.", "C": "Passwords must be greater than eight characters and contain at least one special character.", "D": "Complex passwords that users cannot change are randomly generated by the administrator." }, "solution": "D" }, { "question": "Which domain would be considered suspicious and potentially fraudulent?", "answers": { "A": "login.microsoft.com", "B": "www.microsoft.com", "C": "secure-login.microsoft.com", "D": "microsoft.secure-login.com" }, "solution": "D" }, { "question": "What is the main purpose of server enumeration in the context of cybersecurity?", "answers": { "A": "Determining what services are running and extracting information from those services", "B": "Scanning for system vulnerabilities", "C": "Identifying network protocols and port numbers", "D": "Extracting user information from a network" }, "solution": "A" }, { "question": "What is the primary objective of an injection attack?", "answers": { "A": "To obtain sensitive information of users", "B": "To overload the server with massive amounts of data", "C": "To test the server's response time", "D": "To pass exploit code to the server through poorly designed input validation" }, "solution": "D" }, { "question": "What technology is used to control access both to wired and wireless LANs under the IEEE 802.1x standard?", "answers": { "A": "Authentication servers", "B": "Dynamic WEP keys", "C": "MAC address checking", "D": "Router filters" }, "solution": "A" }, { "question": "Which action capability in panels grants the ability to insert a new row?", "answers": { "A": "Add", "B": "Update/Display All", "C": "Update/Display", "D": "Correction" }, "solution": "A" }, { "question": "Which cryptographic algorithm is commonly used as the asymmetric component in a hybrid cryptosystem?", "answers": { "A": "CBC (Cipher Block Chaining)", "B": "DES (Data Encryption Standard)", "C": "AES (Advanced Encryption Standard)", "D": "RSA (Rivest‐Shamir‐Adleman)" }, "solution": "D" }, { "question": "What is the objective of risk management when risks are deemed tolerable?", "answers": { "A": "To replace or abandon the aspect of the system at risk.", "B": "To reduce risks with reasonable methods to a level as low as reasonably possible (ALARP).", "C": "To utilize risks for pursuing opportunities and achieving desirable outcomes.", "D": "To embrace and accept the risks without any intervention." }, "solution": "B" }, { "question": "What is the essential requirement for the security of the Discrete Logarithm Integrated Encryption Scheme (DLIES) to be maintained?", "answers": { "A": "The order q of the base point P should be at least q ≥ 1024.", "B": "Randomly choose two primes p and q such that p*q > 2048 bits.", "C": "The length of the prime number p should be at least 3000 bits.", "D": "All of the above" }, "solution": "C" }, { "question": "What is the primary objective of a Web Application Firewall (WAF) in cybersecurity?", "answers": { "A": "To encrypt network traffic between web servers", "B": "To prevent unauthorized access to network services", "C": "To protect web applications from security threats", "D": "To manage user authentication and authorization for web services" }, "solution": "C" }, { "question": "What is the most basic and minimum step for securing WLANs according to best practices?", "answers": { "A": "Enable WPA2 encryption on all access points as a minimum security measure", "B": "Change the default SSID", "C": "Turn off the 2.4GHz frequency band and switch exclusively to the 5GHz band", "D": "All of the above" }, "solution": "A" }, { "question": "Which cryptographic technique is used to create a secure channel for communication over the internet?", "answers": { "A": "Steganography", "B": "Public key encryption", "C": "Digital signatures", "D": "Hashing" }, "solution": "B" }, { "question": "What is the primary security objective of a one-time pad?", "answers": { "A": "Confidentiality", "B": "Data integrity", "C": "Availability", "D": "Authentication" }, "solution": "A" }, { "question": "Which type of transmission media uses a pair of parabolic antennas to transmit and receive signals?", "answers": { "A": "Microwave", "B": "Optical fibers", "C": "Infrared", "D": "Coaxial cables" }, "solution": "A" }, { "question": "Which of the following is a good practice for detecting unauthorized changes on payment pages?", "answers": { "A": "Implementing intrusion detection systems", "B": "Reviewing audit logs once a month", "C": "Regularly monitoring the system clock", "D": "Installing additional antivirus software" }, "solution": "A" }, { "question": "What is the term used to refer to an algorithm that can perform encryption or decryption?", "answers": { "A": "Symmetric key", "B": "Asymmetric key", "C": "Key", "D": "Cipher" }, "solution": "D" }, { "question": "What information does a buffer overflow intend to control?", "answers": { "A": "Buffer pointer", "B": "Frame pointer", "C": "Instruction pointer", "D": "Stack pointer" }, "solution": "C" }, { "question": "Which symmetric encryption scheme is recommended for use in SRTP?", "answers": { "A": "AES in ECB mode", "B": "DES in CBC mode", "C": "RC4", "D": "AES in GCM mode" }, "solution": "D" }, { "question": "What is one key element in an IT security awareness program?", "answers": { "A": "Supported and led by example from management", "B": "Entirely outsourced to external vendors", "C": "Quadratically linked with IT system patching", "D": "Complex and technical in its delivery" }, "solution": "A" }, { "question": "What must an information protection department continually provide to the entire organization to promote awareness of information protection issues?", "answers": { "A": "No communication", "B": "Restricted access to information", "C": "Boring and infrequent memos", "D": "Information and training" }, "solution": "D" }, { "question": "Which biometric property is concerned with the ability of users to resist or refuse to participate in a system that uses biometric identification?", "answers": { "A": "Autonomy of the users", "B": "Secondary use", "C": "Characteristic replacement", "D": "Ease of use" }, "solution": "A" }, { "question": "What is the term for the practice of requesting sensitive information from individuals in order to gain unauthorized access or misuse of their personal information?", "answers": { "A": "Phishing", "B": "Denial of Service (DoS)", "C": "Malware", "D": "Hacking" }, "solution": "A" }, { "question": "During a Xmas tree scan what indicates a port is closed?", "answers": { "A": "A single RST packet", "B": "ACK", "C": "No return response", "D": "SYN" }, "solution": "A" }, { "question": "What security benefit is derived from the use of smartcard chips alongside magnetic strips in ATM cards?", "answers": { "A": "Increased physical durability", "B": "Ease of use", "C": "Protection against chip malfunctions", "D": "Enhanced tamper resistance" }, "solution": "D" }, { "question": "What is the role of the librarian in an operations setting?", "answers": { "A": "Daily operations of the systems and applications", "B": "Recovering aged backups for reuse", "C": "Providing first-level support for the users", "D": "Maintaining various media and protecting organization from corrupt or contaminated media" }, "solution": "D" }, { "question": "What best characterizes a flaw in hardware, firmware, communication, or software that exposes a computer processing system to potential exploitation?", "answers": { "A": "Ransomware", "B": "Phishing", "C": "Technical vulnerability", "D": "Buffer Overflow" }, "solution": "C" }, { "question": "What system resource is typically used as bait for attackers in order to gather relevant information about attack processes and new malicious code?", "answers": { "A": "Honeypot", "B": "Firewall", "C": "Virtual Private Network (VPN)", "D": "Intrusion Prevention System" }, "solution": "A" }, { "question": "When segmenting internal traffic between layer 2 devices on the LAN, which network design element is most likely to be used?", "answers": { "A": "VLAN", "B": "DMZ", "C": "Routing", "D": "NAT" }, "solution": "A" }, { "question": "Which choice is NOT an accurate description of C.I.A.?", "answers": { "A": "I stands for integrity.", "B": "A stands for authorization.", "C": "A stands for availability.", "D": "C stands for confidentiality." }, "solution": "B" }, { "question": "What record would you use to obtain the list of mail servers for a domain?", "answers": { "A": "dig domain.com @mx", "B": "whois mx zone= domain.com", "C": "netstat zone= domain.com mx", "D": "dig mx domain.com" }, "solution": "D" }, { "question": "Which tool is commonly used to perform wireless network hacking?", "answers": { "A": "Nmap", "B": "WireShark", "C": "AirCrack-ng", "D": "Metasploit" }, "solution": "C" }, { "question": "What determines the value of the tweak in XTS-AES mode for a specific block of data?", "answers": { "A": "The symmetric key used for encryption", "B": "The length of the plaintext block", "C": "The block number within the data unit", "D": "A unique value assigned to each data unit" }, "solution": "C" }, { "question": "Which option is NOT a reason to update the business continuity plan?", "answers": { "A": "Personnel changes", "B": "Infrastructure changes", "C": "Organizational changes", "D": "Budget changes" }, "solution": "D" }, { "question": "What is the primary requirement for the secure time service used in a Kerberos implementation?", "answers": { "A": "Strictly Synchronized Clocks", "B": "Automatic Failover", "C": "Real-Time Propagation", "D": "Secure Remote Administration" }, "solution": "A" }, { "question": "Which protocol for wireless ad hoc networks is based on link state protocols and uses signatures to protect link state updates?", "answers": { "A": "WEP", "B": "ARAN", "C": "SPINS", "D": "SLSP" }, "solution": "D" }, { "question": "Which feature of IKEv1 is now an integral part of the IKEv2 core specification?", "answers": { "A": "Aggressive mode", "B": "Revised mode", "C": "Main mode", "D": "NAT traversal" }, "solution": "D" }, { "question": "What type of system could you use to trap and monitor an attacker?", "answers": { "A": "Honeypot", "B": "Next-generation firewall", "C": "Web application firewall", "D": "DMZ" }, "solution": "A" }, { "question": "What is the first function specified by NIST in its Cybersecurity Framework?", "answers": { "A": "Defend", "B": "Identify", "C": "Risk management", "D": "Protect" }, "solution": "B" }, { "question": "What are the properties that fingerprints need to present in order to achieve practical implementations?", "answers": { "A": "Universality, impermanence, and collectability", "B": "Universality, uniqueness, and impermanence", "C": "Uniqueness, impermanence, and collectability", "D": "Universality, uniqueness, and permanence" }, "solution": "D" }, { "question": "What term is used to describe the authority to regulate activities and make decisions about a specific subject matter?", "answers": { "A": "Subject matter jurisdiction.", "B": "Territorial jurisdiction.", "C": "Enforcement jurisdiction.", "D": "Prescriptive jurisdiction." }, "solution": "A" }, { "question": "Which concept refers to making sure no one gets unauthorized access to information and can be achieved through the use of encryption?", "answers": { "A": "Availability", "B": "Possession", "C": "Integrity", "D": "Confidentiality" }, "solution": "D" }, { "question": "What type of attack occurs when an attacker captures, modifies, and retransmits data over a network to impersonate the sender or receiver?", "answers": { "A": "Replay attack", "B": "Smurf attack", "C": "Hijacking", "D": "Man-in-the-middle attack" }, "solution": "D" }, { "question": "What is one reason for using a scan like an ACK scan as mentioned in the content?", "answers": { "A": "It may get through firewalls and IDS devices.", "B": "The code in nmap is more robust.", "C": "It is better supported.", "D": "An ACK scan is needed for scripting support." }, "solution": "A" }, { "question": "What is the primary purpose of a stream cipher?", "answers": { "A": "To encipher data one bit at a time", "B": "To encipher data in fixed-size blocks", "C": "To compress data for efficient storage", "D": "To secure data transmission over public networks" }, "solution": "A" }, { "question": "In a layered defense, what does deterrence aim to achieve?", "answers": { "A": "Simulate additional layers of protection", "B": "Delay unauthorized access attempts", "C": "Discourage attempts by making the prize less appealing than the risk", "D": "Increase the number of access control systems" }, "solution": "C" }, { "question": "Which organization provides a Cybersecurity Framework for highlighting phases in which businesses should consider implementing security controls?", "answers": { "A": "IEEE", "B": "ISO", "C": "NIST", "D": "ISC" }, "solution": "C" }, { "question": "In the context of trade secrets, what does DTSA refer to?", "answers": { "A": "Domestic Trade Secret Act", "B": "Defend Trade Secrets Act", "C": "Duty to Safeguard Trade Secrets", "D": "Digital Trade Secrets Authority" }, "solution": "B" }, { "question": "What is a potential approach for firms to ensure security when investing in a serious firewall system?", "answers": { "A": "To use a simple filtering router that requires little maintenance.", "B": "To create multiple networks with different security policies based on department needs.", "C": "To have a single large corporate firewall for the entire organization.", "D": "To invest in elaborate central installations that impose greater operational costs." }, "solution": "B" }, { "question": "How can a security professional detect unexplained changes in system files that may indicate the presence of a rootkit?", "answers": { "A": "Rely on system audit logs to identify unauthorized modifications to system files.", "B": "Manually review the size and attributes of all system files in the directory.", "C": "Using multiple hashing algorithms and comparing the hash values from different points in time.", "D": "Depend exclusively on anti-virus software to identify changes in system files." }, "solution": "C" }, { "question": "What cryptographic concept does the paper 'High Confidence Visual Recognition of Persons by a Test of Statistical Independence' focus on?", "answers": { "A": "Hash Functions", "B": "Steganography", "C": "Biometrics", "D": "Digital Signatures" }, "solution": "C" }, { "question": "What attack is related to ARP and involves altering the domain-name-to-IP-address mappings in a DNS system?", "answers": { "A": "Hyperlink spoofing", "B": "Impersonation", "C": "DNS spoofing", "D": "Replay attack" }, "solution": "C" }, { "question": "In a Public Key Infrastructure (PKI), what is the mechanism used to validate the identity of certificate subjects in a decentralized model for verification?", "answers": { "A": "Certificate revocation", "B": "Nonverifiability", "C": "Centralized authority", "D": "Web of trust" }, "solution": "D" }, { "question": "Which cryptographic primitive provides information-theoretic security?", "answers": { "A": "One-Time Pad", "B": "DLP", "C": "PRF", "D": "RSA" }, "solution": "A" }, { "question": "What makes network administrators constantly change security protocols?", "answers": { "A": "Evolution of cyber threats", "B": "Stagnant security solutions", "C": "Decrease in technology advancements", "D": "Limited network infrastructure" }, "solution": "A" }, { "question": "Which protocol can be used to determine port openness?", "answers": { "A": "IPSec", "B": "ICMP", "C": "FTP", "D": "HTTP" }, "solution": "B" }, { "question": "Why do proponents of closed source software argue that many eyes reviewing open source code does not necessarily lead to improved security?", "answers": { "A": "Even if reviewed, many developers cannot understand security at a deep enough level to find problems.", "B": "Open source code is often messy and difficult to review thoroughly.", "C": "None of the above.", "D": "Both A and B." }, "solution": "D" }, { "question": "In a symmetric cryptosystem, what is used to ensure an attacker can't merely continue altering the plaintext to determine the key?", "answers": { "A": "Transposition", "B": "Confusion", "C": "Polymorphism", "D": "Diffusion" }, "solution": "D" }, { "question": "What is the process for establishing the controls required to protect the organization?", "answers": { "A": "Management support", "B": "Policy development", "C": "Continuous improvement", "D": "Procedure writing" }, "solution": "B" }, { "question": "How often should user accounts and access privileges to in-scope system components be reviewed under PCI DSS 4.0 to ensure they are appropriate based on job functions?", "answers": { "A": "At least once every six months", "B": "At least once every 18 months", "C": "At least once every three months", "D": "At least once every 12 months" }, "solution": "A" }, { "question": "Which aspect does the Detect function of the NIST Cybersecurity Framework primarily focus on?", "answers": { "A": "Isolating incidents and applying mitigation steps", "B": "Identifying anomalies and events", "C": "Restoring normal business operations", "D": "Identifying risk to the business" }, "solution": "B" }, { "question": "Which essential characteristic of cloud computing refers to the ability to expand and reduce resources according to specific service requirements?", "answers": { "A": "On-demand self-service", "B": "Measured service", "C": "Rapid elasticity", "D": "Broad network access" }, "solution": "C" }, { "question": "What is the primary purpose of a firewall in a network infrastructure?", "answers": { "A": "To encrypt wireless traffic", "B": "To authenticate users", "C": "To manage network traffic", "D": "To enforce access control policies" }, "solution": "D" }, { "question": "What is the term for a group that is commutative?", "answers": { "A": "Cyclic group", "B": "Permutation group", "C": "Normal group", "D": "Abelian group" }, "solution": "D" }, { "question": "In Pretty Good Privacy (PGP), what cryptographic technique is used for encrypting data?", "answers": { "A": "DES algorithm", "B": "Asymmetric encryption", "C": "Symmetric encryption", "D": "A hybrid cryptosystem merges symmetric and public-key encryption." }, "solution": "D" }, { "question": "What is the function of a stateful inspection firewall?", "answers": { "A": "Monitors and matches network packets to a set of rules", "B": "Performs deep packet inspection", "C": "Enforces security policy at the application layer", "D": "Inspects the state of network connections" }, "solution": "D" }, { "question": "What is another term for technical controls?", "answers": { "A": "Logical controls", "B": "Access controls", "C": "Preventative controls", "D": "Detective controls" }, "solution": "A" }, { "question": "Which of the following is a common biometric factor used for authentication?", "answers": { "A": "Account password", "B": "Email challenge", "C": "Device fingerprinting", "D": "Retina scans" }, "solution": "D" }, { "question": "Which mode is more vulnerable to a cut-and-paste attack?", "answers": { "A": "Block Cipher mode", "B": "Stream cipher mode", "C": "Cipher Block Chaining (CBC) mode", "D": "Electronic Codebook (ECB) mode" }, "solution": "D" }, { "question": "What is the main focus of the Vulnerability Analysis task in Information Risk Management?", "answers": { "A": "To determine the current status of information security in the target environment and ensure associated risk is managed", "B": "To identify threats that may adversely impact the target environment", "C": "To identify weaknesses in risk-reducing safeguards", "D": "To measure the magnitude of loss or impact on the value of an asset" }, "solution": "C" }, { "question": "What are the four basic threats to consider when using Internet, intranet, and Web technologies?", "answers": { "A": "Unauthorized use, data loss, hardware failure, system breach", "B": "Malicious software, password breaches, data theft, unauthorized modification", "C": "Unauthorized access, eavesdropping, data alteration, impersonation", "D": "Phishing, malware, hacking, eavesdropping" }, "solution": "C" }, { "question": "What type of encryption protocol uses elliptic curve cryptography and can establish a secure connection with lesser key lengths?", "answers": { "A": "ECC", "B": "Diffie-Hellman", "C": "RSA", "D": "Twofish" }, "solution": "A" }, { "question": "What is the principal purpose of using a three-level approach for distributing session keys in a public-key infrastructure?", "answers": { "A": "To provide secure means of distributing master keys", "B": "To improve the performance of the system", "C": "To enhance backward compatibility", "D": "All of the above" }, "solution": "D" }, { "question": "In which mode is an Initialization Vector (IV) necessary for the encryption and decryption process?", "answers": { "A": "Stream cipher mode", "B": "Electronic Codebook (ECB) mode", "C": "Block Cipher mode", "D": "Cipher Block Chaining (CBC) mode" }, "solution": "D" }, { "question": "What is the concept of 'least privilege' in cybersecurity?", "answers": { "A": "Granting every user unlimited access to system resources", "B": "Ignoring any privilege constraints for operational efficiency", "C": "Granting only top-level management access to critical resources", "D": "Granting each user the most restricted set of privileges needed for their task" }, "solution": "D" }, { "question": "What is the purpose of an API?", "answers": { "A": "To map network layer addresses onto media-specific addresses", "B": "To provide a set of calling conventions for invoking a service", "C": "To authenticate users", "D": "To identify network vulnerabilities" }, "solution": "B" }, { "question": "What is the goal of Business Continuity Planning (BCP) in the context of information security strategy?", "answers": { "A": "To conduct regular awareness training for employees", "B": "To implement disaster recovery plans for the data center", "C": "To ensure the ability to continue essential business operations at an alternate site", "D": "To develop strategies for minimizing loss of life and property damage" }, "solution": "C" }, { "question": "Which of the following is a fundamental practice to protect against social engineering attacks?", "answers": { "A": "Installing antivirus software", "B": "Conducting regular security awareness training", "C": "Using strong encryption algorithms", "D": "Enforcing strict password complexity rules" }, "solution": "B" }, { "question": "What is the objective of differential cryptanalysis in the context of cybersecurity?", "answers": { "A": "To improve the authentication of the encrypted data", "B": "To create a more efficient encryption process", "C": "To enhance the randomness of the ciphertext", "D": "To attempt to identify the unknown key from corresponding plain/ciphertext differentials" }, "solution": "D" }, { "question": "Why do attackers actively search for software flaws?", "answers": { "A": "To improve software performance", "B": "To take advantage of the security implications", "C": "To get recognition in the software community", "D": "To help normal users fix bugs" }, "solution": "B" }, { "question": "Which layer of the OSI model is the primary focus for network layer security?", "answers": { "A": "Transport layer", "B": "Application layer", "C": "Data link layer", "D": "Network layer" }, "solution": "D" }, { "question": "When is a cyber operation treated as a 'cyber attack' under international law?", "answers": { "A": "When it constitutes an action that is expected to cause injury or death to persons or damage or destruction to objects.", "B": "When it involves the use of force that is unreasonable or excessive.", "C": "When it violates the principles of humanity within the law of armed conflict.", "D": "When it involves the exercise of military necessity." }, "solution": "A" }, { "question": "Which type of attack involves an attacker forcing an end user to execute unwanted actions on a web application in which they are currently authenticated?", "answers": { "A": "Cross-Site Scripting (XSS) attack", "B": "Buffer Overflow attack", "C": "SQL injection attack", "D": "Cross-Site Request Forgery (CSRF) attack" }, "solution": "D" }, { "question": "What is the purpose of port mirroring/SPAN on a switch?", "answers": { "A": "To forward packets between different VLANs", "B": "To establish a secure connection between two devices", "C": "To duplicate traffic from one port to another for analysis", "D": "To increase the network transmission speed" }, "solution": "C" }, { "question": "While most symmetric key encryption systems function as block ciphers, what does a block cipher do?", "answers": { "A": "Is an asymmetric key algorithm.", "B": "Breaks a message into fixed length units for encryption.", "C": "Converts a variable-length of plaintext into a fixed length ciphertext.", "D": "Encrypts by operating on a continuous data stream." }, "solution": "B" }, { "question": "Which of the following is NOT considered a type of motion detector?", "answers": { "A": "Audio detection", "B": "Smoke detection", "C": "Capacitance detection", "D": "Wave pattern detection" }, "solution": "B" }, { "question": "What type of attack attempts to disrupt normal traffic flow to a web server?", "answers": { "A": "Man-in-the-Middle (MITM)", "B": "Denial-of-Service (DoS)", "C": "SQL Injection", "D": "Cross-Site Scripting (XSS)" }, "solution": "B" }, { "question": "What is the label typically used for information that, if breached, would cause serious damage to the organization's mission?", "answers": { "A": "Sensitive", "B": "Public", "C": "Private", "D": "Confidential/Proprietary" }, "solution": "D" }, { "question": "What property must a cryptographic hash function provide?", "answers": { "A": "Block size and cipher mode", "B": "One-way, weak collision resistance, and strong collision resistance", "C": "Compression and efficiency", "D": "Randomness and large output size" }, "solution": "B" }, { "question": "What is the purpose of the Unsolicited Electronic Mail Act?", "answers": { "A": "To regulate unsolicited commercial email by prohibiting false or misleading information in the content and subject line.", "B": "To define the legal consequences of unsolicited email messages.", "C": "To ban all unsolicited commercial email messages sent to Washington residents.", "D": "To require spammers to register their email accounts with the Washington Association of Internet Service Providers (WAISP)." }, "solution": "A" }, { "question": "What type of Intrusion Detection System (IDS) watches activity on a local system?", "answers": { "A": "Host-based IDS", "B": "Unified Threat Management", "C": "Application Layer Firewall", "D": "Network IDS" }, "solution": "A" }, { "question": "What is an ICMP echo scan?", "answers": { "A": "A Xmas tree scan", "B": "Part of a UDP scan", "C": "A ping sweep", "D": "A SYN scan" }, "solution": "C" }, { "question": "What is the primary purpose of FTP?", "answers": { "A": "Securing network connections", "B": "Sending and receiving emails", "C": "Programming complex applications", "D": "Sharing files" }, "solution": "D" }, { "question": "What do Unified Threat Management (UTM) devices do?", "answers": { "A": "Provide encryption for all network traffic", "B": "Consolidate various security functions into a single system", "C": "Focus only on intrusion detection", "D": "Implement advanced deep packet inspection" }, "solution": "B" }, { "question": "Which organization oversees the consistent interpretation and application of the Common Criteria/CEM?", "answers": { "A": "National Evaluation Authority", "B": "Common Criteria Implementation Management Board", "C": "Common Criteria Testing Laboratories", "D": "Customers or end users" }, "solution": "B" }, { "question": "What is the role of a VPN (Virtual Private Network) in cybersecurity?", "answers": { "A": "To boost network performance by bypassing firewalls and filters", "B": "To provide access to confidential data without authentication", "C": "To establish secure and encrypted connections over a public network, such as the internet", "D": "To create a secluded network for non-sensitive data" }, "solution": "C" }, { "question": "What attribute of a ticket ensures that it can be used by an intermediate service on behalf of the client?", "answers": { "A": "Forwardable", "B": "Proxiable", "C": "Managable", "D": "Session Key" }, "solution": "B" }, { "question": "What kind of data is created by analyzing groups of dynamic transactions over time to build a profile of one's behavior?", "answers": { "A": "Dynamic data", "B": "Derived data", "C": "Financial data", "D": "Static data" }, "solution": "B" }, { "question": "Your organization has decided that the organization needs to implement password policies for better security. Which password policy will likely REDUCE network security?", "answers": { "A": "Requiring users to change passwords in 60 days rather than 90 days", "B": "Requiring users to increase the length of their passwords from six characters to eight characters", "C": "Requiring users to use easily remembered passwords", "D": "Requiring users to use symbols such as the $ character and the % character in their passwords" }, "solution": "C" }, { "question": "Which area is likely to experience continual growth in national policy related to privacy and data protection?", "answers": { "A": "Real ID Act", "B": "Computer Emergency Response Teams", "C": "Privacy and confidentiality of information", "D": "ISO17799 and BS7799" }, "solution": "C" }, { "question": "Which tool is used to discover hosts on a network and can perform a ping scan, port scan, and OS fingerprinting?", "answers": { "A": "OpenVAS", "B": "Metasploit", "C": "Wireshark", "D": "Nmap" }, "solution": "D" }, { "question": "Which type of rootkit targets the system service descriptor table (SSDT) to alter kernel mode function calls on the system?", "answers": { "A": "Source code rootkit", "B": "Kernel mode rootkit", "C": "Bootloader rootkit", "D": "User mode rootkit" }, "solution": "B" }, { "question": "What is the definition of the Internet of Things (IoT)?", "answers": { "A": "A group of devices that operate independently, lacking the use of sensors and electronic components for the purpose of gathering data.", "B": "The Internet of Things (IoT) operates entirely offline, without the need for any internet connectivity or network communication.", "C": "A term associated with IP-enabled wearables such as smart watches and Internet-enabled earrings.", "D": "A network of devices with IP addresses that have the capability of sensing, collecting, and sending data to each other." }, "solution": "D" }, { "question": "What are the fundamental components of security policies and procedures?", "answers": { "A": "Physical controls, administrative controls, technical controls.", "B": "Assessing risk, business impact analysis, threat analysis.", "C": "Protection of the physical environment, monitoring and control of access, security monitoring and metrics.", "D": "Policies related to data security, network security, and physical security." }, "solution": "A" }, { "question": "Which action can an adversary perform in the Dolev-Yao adversary model?", "answers": { "A": "Forge", "B": "Delete", "C": "Eavesdrop", "D": "All of the above" }, "solution": "D" }, { "question": "Which of the following can prevent session hijacking?", "answers": { "A": "SandroProxy", "B": "DroidSheep", "C": "FaceNiff", "D": "Psiphon" }, "solution": "D" }, { "question": "Which method for finding prime factors of an integer involves the selection of a random function f, followed by the generation of a sequence based on the rule xi = f(xi-1)?", "answers": { "A": "Pollard's p-1 Method", "B": "Floyd's Cycle Detection Algorithm", "C": "The Sieve of Eratosthenes", "D": "Pollard's rho Algorithm" }, "solution": "D" }, { "question": "What is the purpose of a ping sweep in network scanning?", "answers": { "A": "To identify live systems on the network", "B": "To identify vulnerabilities in network protocols", "C": "To gather information about network devices", "D": "To check for insecure wireless networks" }, "solution": "A" }, { "question": "Which tool can be used to clone a legitimate website for social engineering attacks?", "answers": { "A": "Metasploit", "B": "cURL", "C": "WinHTTrack", "D": "FiercePhish" }, "solution": "C" }, { "question": "What is the primary purpose of the CAPTCHA system in cybersecurity?", "answers": { "A": "To differentiate between human and machine users", "B": "To encrypt and protect password information", "C": "To prevent unauthorized access to sensitive information", "D": "To authenticate user identities through facial recognition" }, "solution": "A" }, { "question": "What is the term for measures in place to prevent, detect, or correct impacts from risks?", "answers": { "A": "Threats", "B": "Controls", "C": "Vulnerabilities", "D": "Assets" }, "solution": "B" }, { "question": "Which cybersecurity measure hides a network node or device's presence to reduce the chances of being targeted by an attacker?", "answers": { "A": "Intrusion Detection System (IDS)", "B": "Firewall", "C": "Stealth Mode", "D": "Honeypot" }, "solution": "C" }, { "question": "Which security principle requires that processes should be executed in user mode whenever possible to minimize potential vulnerabilities?", "answers": { "A": "Abstraction", "B": "Least Privilege", "C": "State Machine Model", "D": "Noninterference Model" }, "solution": "B" }, { "question": "Which of the following are primary categories of network security threats?", "answers": { "A": "Phishing and malware", "B": "Unauthorized access and disruptive", "C": "Adware and spam", "D": "Denial of service and data theft" }, "solution": "B" }, { "question": "What is the primary purpose of a Virtual Private Network (VPN) in cybersecurity?", "answers": { "A": "To create a secure, encrypted connection over a less secure network", "B": "To disguise the user's physical location", "C": "To provide instant messaging inside a network", "D": "To improve online gaming performance" }, "solution": "A" }, { "question": "Which of the following is a common social engineering technique used by cyber attackers?", "answers": { "A": "Data encryption", "B": "Antivirus software", "C": "Phishing", "D": "Two-factor authentication" }, "solution": "C" }, { "question": "What is the process of formal acceptance of a certified configuration called?", "answers": { "A": "Evaluation", "B": "Certification", "C": "Accreditation", "D": "Validation" }, "solution": "C" }, { "question": "What does the term 'SPIM' refer to in the context of instant messaging?", "answers": { "A": "Inappropriate use of IM language", "B": "Encrypted IM communication", "C": "Spam over instant messaging", "D": "Secure privacy in instant messaging" }, "solution": "C" }, { "question": "The Take-Grant model:", "answers": { "A": "Focuses on confidentiality", "B": "Specifies the levels of availability", "C": "Specifies the rights that a subject can transfer to an object", "D": "Specifies the levels of integrity" }, "solution": "C" }, { "question": "Which Act established a Federal Chief Information Officers Council to oversee government information and services?", "answers": { "A": "The Enhanced Border Security and Visa Entry Reform Act of 2002", "B": "The E-Government Act of 2002", "C": "The Homeland Security Act of 2002", "D": "The Public Health Security, Bioterrorism Preparedness & Response Act of 2002" }, "solution": "B" }, { "question": "What are the three fundamental information security concerns described in the context of application systems development?", "answers": { "A": "Confidentiality, availability, integrity", "B": "Confidentiality, reliability, authentication", "C": "Integrity, visibility, authorization", "D": "Confidentiality, redundancy, availability" }, "solution": "A" }, { "question": "Which type of firewall looks beyond the headers and inspects the payload of the packet?", "answers": { "A": "Unified Threat Management", "B": "Deep Packet Inspection", "C": "Packet Filter", "D": "Stateful Filter" }, "solution": "B" }, { "question": "Which knowledge-based AI system seeks to embody the accumulated knowledge of experts on a particular subject and apply it in a consistent fashion to future decisions?", "answers": { "A": "Neural Networks", "B": "Expert Systems", "C": "Machine Learning", "D": "Data Analytics" }, "solution": "B" }, { "question": "Regularly updating software and systems helps to mitigate:", "answers": { "A": "Data breach incidents", "B": "Phishing attempts", "C": "Denial-of-Service attacks", "D": "Ransomware attacks" }, "solution": "A" }, { "question": "What is used to keep subjects accountable for their actions while they are authenticated to a system?", "answers": { "A": "Access controls", "B": "Performance reviews", "C": "Account lockout", "D": "Monitoring" }, "solution": "D" }, { "question": "What type of system performs or controls a function as an integral element of a larger system?", "answers": { "A": "Discretionary Access Control System", "B": "Distributed Routing System", "C": "Electronic Vaulting System", "D": "Embedded System" }, "solution": "D" }, { "question": "What technique is primarily used to gain illegitimate access to a system by learning the username and password of an authorized user?", "answers": { "A": "XSS attack", "B": "Password guessing attacks", "C": "Rootkit attacks", "D": "Dictionary attacks" }, "solution": "B" }, { "question": "What technique involves lowering the pulse repetition frequency to capture the receiver and then moving the fake pulses out of phase?", "answers": { "A": "Monopulse", "B": "Range Gate Pull-Off (RGPO)", "C": "Burn-Through", "D": "Passive Coherent Location" }, "solution": "B" }, { "question": "What factor determines the role of trusted third parties in the surveys approach for creating personal privacy policies?", "answers": { "A": "The trust and reliability associated with the resulting community consensus.", "B": "The capability of the third party to safeguard personally identifiable information (PII).", "C": "The level of authority held by the third party within the organization.", "D": "The potential errors or limitations in policy formulation by the third party." }, "solution": "A" }, { "question": "What does the term 'ransomware' refer to in the context of cybersecurity?", "answers": { "A": "Malicious software used for surveillance purposes", "B": "Phishing emails used to spread computer viruses", "C": "A type of malware that encrypts files and demands payment for decryption", "D": "Unauthorized access to private networks" }, "solution": "C" }, { "question": "Which protocol ensures guaranteed delivery of messages?", "answers": { "A": "Internet Control Message Protocol (ICMP)", "B": "Transmission Control Protocol (TCP)", "C": "Dynamic Host Configuration Protocol (DHCP)", "D": "User Datagram Protocol (UDP)" }, "solution": "B" }, { "question": "Which biometric characteristic is vital to a system meeting high security requirements?", "answers": { "A": "Uniqueness of the biometric organ and action", "B": "Resistance to counterfeiting", "C": "Acceptability to users", "D": "Data storage requirements" }, "solution": "B" }, { "question": "What is the primary focus of a well-run vertical organization?", "answers": { "A": "Compliance and loyalty to leaders", "B": "Dependence on the leadership", "C": "Family-like membership", "D": "Top-down accountability or authority" }, "solution": "D" }, { "question": "Which mode is used for PC-to-PC direct communication in a WLAN?", "answers": { "A": "Infrastructure mode", "B": "5 GHz mode", "C": "Ad hoc mode", "D": "None of the above" }, "solution": "C" }, { "question": "Which method is commonly used to authenticate and authorize users for network access in a centralized manner?", "answers": { "A": "VPN", "B": "Kerberos", "C": "SSH", "D": "PKI" }, "solution": "B" }, { "question": "What should a preventive control aim to do?", "answers": { "A": "Mitigate the damage from an incident", "B": "Report untoward activity", "C": "Stop an event from happening", "D": "Detect an event that has taken place" }, "solution": "C" }, { "question": "You are tasked with updating your organization's data policy and need to identify the responsibilities of different roles. Which data role is responsible for implementing the protections defined by the security policy?", "answers": { "A": "Data controller", "B": "Data user", "C": "Data processor", "D": "Data custodian" }, "solution": "D" }, { "question": "What is the fundamental principle behind mandatory vacations in an organization from a security perspective?", "answers": { "A": "To promote job rotation and skill development", "B": "To prevent fraudulent or malicious activities", "C": "To facilitate better job performance and satisfaction", "D": "To encourage employees to take time off for rest and relaxation" }, "solution": "B" }, { "question": "What is the name of the seventh layer of the OSI model?", "answers": { "A": "Network", "B": "Presentation", "C": "Application", "D": "Session" }, "solution": "C" }, { "question": "What role does the Common Vulnerability Scoring System (CVSS) play in cybersecurity?", "answers": { "A": "It provides a standard for risk assessment and compliance.", "B": "It is used to classify vulnerabilities based on their severity.", "C": "It rates the impact of vulnerabilities with a synthetic numerical score.", "D": "It offers a way to identify common mitigation and prevention strategies for threats." }, "solution": "C" }, { "question": "What is the main advantage of capabilities over ACLs?", "answers": { "A": "Granular control over user privileges.", "B": "Ease of enforcement of access control rules.", "C": "Ability to easily delegate privileges.", "D": "Simple implementation and lower overhead." }, "solution": "C" }, { "question": "What is the primary focus of security policies?", "answers": { "A": "Setting the overall direction and requirements", "B": "Daily operational procedures", "C": "Long-term network maintenance", "D": "Implementation of technology solutions" }, "solution": "A" }, { "question": "What is the Elliptic Curve Integrated Encryption Scheme (ECIES)?", "answers": { "A": "A hybrid encryption scheme based on the Diffie-Hellman algorithm for asymmetric encryption", "B": "A hybrid encryption scheme based on the Elliptic Curve Diffie-Hellman algorithm for asymmetric encryption", "C": "A hybrid encryption scheme based on the RSA algorithm for asymmetric encryption", "D": "A symmetric encryption scheme for encrypting data using elliptic curves" }, "solution": "B" }, { "question": "Why may access controls be compromised in development environments?", "answers": { "A": "To increase system performance", "B": "To conform to regulatory requirements", "C": "To prevent unauthorized access", "D": "To enhance user convenience" }, "solution": "D" }, { "question": "What is the primary objective of a Cyber Incident Response Plan?", "answers": { "A": "To prevent unauthorized access to sensitive information", "B": "To coordinate an organized response to cyber incidents", "C": "To recover data after a security breach", "D": "To identify potential vulnerabilities in information systems" }, "solution": "B" }, { "question": "As a security professional, what should be your foremost objective in line with the CIA triad?", "answers": { "A": "Auditing", "B": "Confidentiality", "C": "Non-repudiation", "D": "Integrity" }, "solution": "B" }, { "question": "What is the purpose of exchanging public keys in GPG?", "answers": { "A": "To sign and timestamp emails", "B": "To securely encrypt emails", "C": "To protect the private key", "D": "To authenticate the recipient" }, "solution": "B" }, { "question": "What is the function of MegaPing in a network troubleshooting context?", "answers": { "A": "Identifying systems that are unresponsive", "B": "Running a port scanning tool", "C": "Incorporating multiple functions into a single interface", "D": "Performing a UDP scan" }, "solution": "C" }, { "question": "What is the critical issue in identifying a friend from foe in a scenario involving multiple friendly and hostile platforms?", "answers": { "A": "The effective range of radar", "B": "The number of specialist support vehicles with dedicated equipment", "C": "The impact of jamming on the system issues", "D": "The reliable methodology for distinguishing friend from foe" }, "solution": "D" }, { "question": "Which security measure should be used to prevent malicious access to unmanned aerial vehicles (UAVs)?", "answers": { "A": "Enhance biometric authentication techniques", "B": "Increase reliance on physical security methods", "C": "Utilize advanced network access control", "D": "Employ geofencing policies" }, "solution": "D" }, { "question": "Which protocol is used for securely transferring files over a network?", "answers": { "A": "HTTP", "B": "SSH", "C": "SMTP", "D": "DNS" }, "solution": "B" }, { "question": "What file is instrumental in preventing dictionary attacks against Unix systems?", "answers": { "A": "/etc/shadow", "B": "/etc/pwlog", "C": "/etc/passwd", "D": "/etc/security" }, "solution": "A" }, { "question": "What device best protects access to an organization’s internal resources while allowing all external traffic to access the front-end servers?", "answers": { "A": "VLAN", "B": "DMZ", "C": "Virtualization", "D": "Cloud computing" }, "solution": "B" }, { "question": "Which of the following controls protect data from unauthorized disclosure?", "answers": { "A": "Operational safeguards", "B": "Integrity controls", "C": "Audit and variance detection", "D": "Confidentiality controls" }, "solution": "D" }, { "question": "What is the role of the initial and final permutations in the DES algorithm?", "answers": { "A": "Initial permutation changes the key and final permutation changes the plaintext", "B": "Initial permutation rearranges the bits and final permutation reconstitutes the key", "C": "Initial permutation redistributes the bits and final permutation inverses the key", "D": "Initial permutation shuffles the bits and final permutation selects the key" }, "solution": "B" }, { "question": "What does the Common Vulnerability Scoring System (CVSS) provide?", "answers": { "A": "A method for automating vulnerability management", "B": "A classification for controlling inbound and outbound traffic", "C": "A way to capture the characteristics of a vulnerability", "D": "A ranking system for network security zones" }, "solution": "C" }, { "question": "What is the primary function of firewalls in a cybersecurity infrastructure?", "answers": { "A": "To encrypt network traffic for secure transmission", "B": "To secure physical access to network devices", "C": "To monitor and control incoming and outgoing network traffic", "D": "To prevent unauthorized use of data storage devices" }, "solution": "C" }, { "question": "Credentials are composed of which of the following elements?", "answers": { "A": "Something you know and something you have", "B": "Username and password", "C": "PIN code + certificate ", "D": "All of the above" }, "solution": "D" }, { "question": "What is the primary goal of Configuration Status Accounting?", "answers": { "A": "To trace system changes and establish the history of any developmental problems and associated fixes", "B": "To monitor the status of current changes as they move through the configuration control process", "C": "Both A and B", "D": "Only B is correct" }, "solution": "C" }, { "question": "What is a good protection strategy for the expensive electronics and operational tape backups within a computer room?", "answers": { "A": "Fire suppression systems", "B": "Stand-alone air conditioning", "C": "Uninterruptible power supply", "D": "Raised flooring" }, "solution": "A" }, { "question": "What does the term 'Phishing' refer to in cybersecurity?", "answers": { "A": "A method of stealing physical documents", "B": "A type of hacking attack", "C": "A form of biometric authentication", "D": "A fraudulent attempt to obtain sensitive information" }, "solution": "D" }, { "question": "What authentication scheme is based on the fact that finding a square root modulo N is comparable in difficulty to factoring?", "answers": { "A": "Fiege, Fiat, and Shamir protocol", "B": "Bob’s Cave protocol", "C": "Zero Knowledge Proof protocol", "D": "Fiat-Shamir protocol" }, "solution": "D" }, { "question": "What is an effective method to restrict access based on the principle of least privilege?", "answers": { "A": "Assigning all users the same access privileges.", "B": "Enabling 'allow all' access by default.", "C": "Implementing role-based access control.", "D": "Allowing unrestricted access to system components." }, "solution": "C" }, { "question": "Which international standard defines principles for incident management?", "answers": { "A": "NIST SP800-53", "B": "ISO/IEC 27005", "C": "ISO/IEC 27035-1", "D": "FAIR" }, "solution": "C" }, { "question": "Which tool is used to test a system for known security vulnerabilities and weaknesses?", "answers": { "A": "Firewall", "B": "Vulnerability scanner", "C": "Honey pot", "D": "Padded cell" }, "solution": "B" }, { "question": "What is an effective way to train users in choosing and remembering passwords?", "answers": { "A": "Conducting background checks on users", "B": "Issuing random passwords to users", "C": "Implementing password encryption for secure data transfer", "D": "Providing negative feedback for poor password choices" }, "solution": "D" }, { "question": "What is the main purpose of implementing separation of duties in cybersecurity?", "answers": { "A": "To increase employee resistance to information sharing", "B": "To assign multiple tasks to one person for efficiency", "C": "To avoid the risk of a single person having too much control", "D": "To allow single users to have specific set of privileges" }, "solution": "C" }, { "question": "What is the key concept underlying the principle of confidentiality in cybersecurity?", "answers": { "A": "Data classification", "B": "Data encryption", "C": "Integrity of data", "D": "Availability of information" }, "solution": "B" }, { "question": "Which of the following is a best practice to secure a wireless network?", "answers": { "A": "Share the network SSID openly", "B": "Use default network settings", "C": "Disable encryption", "D": "Change default passwords" }, "solution": "D" }, { "question": "What was the purpose of the development of the Colossus machine during World War II?", "answers": { "A": "To encrypt military communications", "B": "To communicate securely between parties", "C": "To protect high-level communications", "D": "To analyze German ciphertext" }, "solution": "D" }, { "question": "Which of the following is not a VPN protocol?", "answers": { "A": "IPSec", "B": "L2F", "C": "SLIP", "D": "PPTP" }, "solution": "C" }, { "question": "As part of access control mechanism, the project team should consider what type of requirement?", "answers": { "A": "Reliability of service", "B": "Encryption requirements", "C": "User communities specification", "D": "Authorization" }, "solution": "D" }, { "question": "What was the primary lesson learned from the pay-TV industry's response to piracy?", "answers": { "A": "It is better to let a pirate build up a substantial user base before taking legal action", "B": "Legal enforcement alone is adequate for copyright protection", "C": "Engineering and legal aspects of copyright protection should work independently", "D": "Engineering and legal aspects of copyright protection should work together" }, "solution": "D" }, { "question": "A cybersecurity policy should address:", "answers": { "A": "Guidelines for acceptable use of technology", "B": "Methods for hacking into computer systems", "C": "Means to install unauthorized software", "D": "Techniques to exploit software vulnerabilities" }, "solution": "A" }, { "question": "What is the central task of Information Risk Management in project sizing?", "answers": { "A": "The identification of background, scope, constraints, objectives, responsibilities, approach, and management support", "B": "Identifying threats that may adversely impact the target environment", "C": "Identifying and valuing assets, both tangible and intangible, and their replacement costs", "D": "Evaluating vulnerabilities that could increase the frequency or impact of threat events" }, "solution": "A" }, { "question": "According to the Internet Activities Board (IAB), which activity is considered a violation of ethical behavior on the Internet?", "answers": { "A": "Wasting resources", "B": "Appropriating other people’s intellectual output", "C": "Using a computer to bear false witness", "D": "Using a computer to steal" }, "solution": "A" }, { "question": "Why is persistent connection important for HTTP/1.1?", "answers": { "A": "To increase the reliability of web servers", "B": "To reduce the need for frequent TCP connections for each object transfer", "C": "To enhance the security of website transactions", "D": "To improve compatibility with older web browsers" }, "solution": "B" }, { "question": "What is the traditional approach to risk analysis?", "answers": { "A": "Using avoidance strategies to prevent potential risks.", "B": "Observing the frequency and magnitude of events to make predictions.", "C": "Predicting security incidents based on historical data.", "D": "Focusing on preventative measures to reduce all possible risks." }, "solution": "B" }, { "question": "What does the Java standard applet security policy restrict an applet from doing?", "answers": { "A": "Loading native libraries", "B": "All provided answers.", "C": "Adding classes to system packages", "D": "Listening on socket connections" }, "solution": "B" }, { "question": "Which cloud service model allows for the deployment of cloud-based firewalls, load balancers, VLANs, and network services?", "answers": { "A": "Platform as a Service (PaaS)", "B": "Cloud Storage as a Service", "C": "Software as a Service (SaaS)", "D": "Infrastructure as a Service (IaaS)" }, "solution": "D" }, { "question": "Which wireless access point (WAP) security strategy involves creating a virtual fence around the organization's premises to control wireless network access based on the physical location of the user's device?", "answers": { "A": "802.1X authentication", "B": "MAC filtering", "C": "Rogue AP detection", "D": "Geofencing" }, "solution": "D" }, { "question": "In which maturity level are comprehensive policies, standards, and guidelines reviewed and updated annually, with compliance being monitored?", "answers": { "A": "Level 2", "B": "Level 1", "C": "Level 3", "D": "Level 4" }, "solution": "D" }, { "question": "An ethical hacker is hired to test the security of a business network. The CEH is given no prior knowledge of the network and has a specific framework in which to work, defining boundaries, nondisclosure agreements, and the completion date. Which of the following is a true statement?", "answers": { "A": "A black hat is attempting a gray-box test", "B": "A white hat is attempting a white-box test", "C": "A white hat is attempting a black-box test", "D": "A black hat is attempting a black-box test" }, "solution": "C" }, { "question": "What principle recommends that many security controls are preferable to a single point of protection?", "answers": { "A": "Defense-in-depth", "B": "Least privilege", "C": "Single point of failure", "D": "Security through obscurity" }, "solution": "A" }, { "question": "What is the main goal of electronic monitoring in the workplace?", "answers": { "A": "To discourage communication among employees", "B": "To ensure compliance with ethical guidelines", "C": "To promote creativity and freedom of expression", "D": "To monitor employees' activities and protect company interests" }, "solution": "D" }, { "question": "Which category of situational crime prevention proposes mitigations such as blocking suspicious payments or parcels to reduce rewards for criminals?", "answers": { "A": "Remove excuses", "B": "Reduce rewards", "C": "Increase the risk of crime", "D": "Increase the effort of crime" }, "solution": "B" }, { "question": "What is the primary purpose of using hashdump or mimikatz in the context of system hacking?", "answers": { "A": "To capture network traffic for hash cracking", "B": "To identify the user accounts present on the system", "C": "To retrieve configuration details of the target system", "D": "To obtain password hashes from the Windows operating system" }, "solution": "D" }, { "question": "What network appliance senses irregularities and plays an active role in stopping that irregular activity from continuing?", "answers": { "A": "System administrator", "B": "Firewall", "C": "IPS", "D": "IDP" }, "solution": "C" }, { "question": "What is the primary purpose of a disaster recovery plan?", "answers": { "A": "To provide consistent actions to be taken before, during, and after a disruptive event", "B": "To minimize operational costs for the organization", "C": "To conduct regular security audits of the organization's systems", "D": "To recover from system software failure" }, "solution": "A" }, { "question": "What is the examination of critical versus noncritical functions called in a Business Impact Analysis?", "answers": { "A": "Criticality Assessment", "B": "Mission-Critical Analysis", "C": "Operational Cost Analysis", "D": "Functionality Prioritization" }, "solution": "A" }, { "question": "Which hardware vendor uses the term SPAN on switches?", "answers": { "A": "3COM", "B": "Cisco", "C": "Juniper", "D": "HP" }, "solution": "B" }, { "question": "Which encryption technique uses the same key for both encryption and decryption?", "answers": { "A": "Symmetric Encryption", "B": "RSA Algorithm", "C": "Hash Function", "D": "Asymmetric Encryption" }, "solution": "A" }, { "question": "Which type of attack uses a list of passwords in a text file to compare their hashes for password cracking?", "answers": { "A": "Passive online attack", "B": "Brute-force attack", "C": "Dictionary attack", "D": "Hybrid attack" }, "solution": "C" }, { "question": "What type of attack aims to obtain passwords without directly engaging a target?", "answers": { "A": "Nontechnical Attacks", "B": "Password Guessing", "C": "Active Online Attacks", "D": "Passive Online Attacks" }, "solution": "D" }, { "question": "What is the fundamental entity in a relational database?", "answers": { "A": "Relation", "B": "Pointer", "C": "Cost", "D": "Domain" }, "solution": "A" }, { "question": "Which access control model is based on the concept of classification and clearance for subjects and objects?", "answers": { "A": "Mandatory access control", "B": "Rule-based access control", "C": "Discretionary access control", "D": "Role-based access control" }, "solution": "A" }, { "question": "While completing the business impact analysis the committee discovers that a human resources application relies on the following two servers: 1) a human resources server managed by the human resources Department and 2) a database server managed by the IT department. What is this an example of?", "answers": { "A": "A backup strategy", "B": "A preventative control", "C": "A reciprocal agreement", "D": "An interdependency" }, "solution": "D" }, { "question": "Which of the following is NOT a fundamental type of malicious code?", "answers": { "A": "Viruses", "B": "Spam", "C": "Trojan Horses", "D": "Worms" }, "solution": "B" }, { "question": "While guards and dogs are both good for physical security, which of the following is a concern with dogs?", "answers": { "A": "Liability", "B": "Multifunction", "C": "Discernment", "D": "Dual role" }, "solution": "A" }, { "question": "What is the purpose of performing a Bluetooth scan?", "answers": { "A": "Identifying available profiles", "B": "Identifying open ports", "C": "Identifying endpoints", "D": "Identifying vendors" }, "solution": "C" }, { "question": "What type of information is the particular key chosen by the correspondents in a cryptographic system?", "answers": { "A": "Decrypted Information", "B": "Public Information", "C": "Encrypted Information", "D": "Private Information" }, "solution": "D" }, { "question": "Which Intel processor feature caused controversy due to privacy concerns and its potential use in hardware-based digital rights management?", "answers": { "A": "Trusted Platform Module (TPM)", "B": "Virtualization support", "C": "Processor serial number", "D": "Curtained memory features" }, "solution": "C" }, { "question": "Which of the following describes the use of personal privacy policies?", "answers": { "A": "Automating the collection of user data for marketing purposes.", "B": "Ensuring the privacy of e-service users or consumers.", "C": "Developing privacy legislation for online services.", "D": "Protecting the privacy of e-service providers." }, "solution": "B" }, { "question": "What is the term used to describe the process of encoding information to make it secure from unauthorized access?", "answers": { "A": "Encryption", "B": "Encoding", "C": "Decryption", "D": "Hashing" }, "solution": "A" }, { "question": "What is the term used to describe the phenomenon where a change in one input bit results in many output bits of a block cipher changing?", "answers": { "A": "Confusion", "B": "Permutation", "C": "Substitution", "D": "Diffusion" }, "solution": "D" }, { "question": "Which type of malware exists in files on disk but never leaves any artifacts on the file system to evade detection?", "answers": { "A": "Fileless Malware", "B": "Polymorphic Malware", "C": "Dropper", "D": "Trojan" }, "solution": "A" }, { "question": "What is a data warehouse?", "answers": { "A": "A table in a relational database system", "B": "A remote facility used for storing backup tapes", "C": "A repository of information from heterogeneous databases", "D": "A hot backup building" }, "solution": "C" }, { "question": "Which component of cloud computing refers to running applications without the need to provision and manage underlying infrastructure?", "answers": { "A": "Platform as a service (PaaS)", "B": "Serverless", "C": "Infrastructure as code (IaC)", "D": "Elastic Compute Cloud (EC2)" }, "solution": "B" }, { "question": "Why are service-denial attacks less effective when principals are anonymous or when there is no name service to identify them?", "answers": { "A": "They require specialized packet-washing hardware.", "B": "They can be traced and arrested by law enforcement.", "C": "They make selective attacks ineffective.", "D": "They prevent the server from establishing connections." }, "solution": "C" }, { "question": "What is the main purpose of a VPN in cybersecurity?", "answers": { "A": "To secure and encrypt internet connections", "B": "To bypass firewalls", "C": "To block spam emails", "D": "To display web pages" }, "solution": "A" }, { "question": "What is the autocorrelation function of a Bernoulli process in the context of the output of a linear feedback shift register (LFSR) with a characteristic polynomial p(z)?", "answers": { "A": "The autocorrelation function is always 1", "B": "It is the difference between the probabilities of an agreement and disagreement in the ith and (i + t)th outcomes of the LFSR output", "C": "It is not possible to define the autocorrelation function for LFSR outputs", "D": "The autocorrelation function is zero for all time intervals" }, "solution": "B" }, { "question": "How does UNIX typically verify the integrity of the filesystem after a system crash?", "answers": { "A": "Using internal consistency checks", "B": "Cross-referencing user files", "C": "Running checksum calculations", "D": "Verifying user passwords" }, "solution": "A" }, { "question": "What is a characteristic of malware that changes each instance to avoid detection?", "answers": { "A": "Virus", "B": "Polymorphic malware", "C": "Packed malware", "D": "Botnet" }, "solution": "B" }, { "question": "Management wants to ensure that an IT network supports accountability. Which of the following is necessary to meet this requirement?", "answers": { "A": "Authentication", "B": "Integrity", "C": "Confidentiality", "D": "Identification" }, "solution": "A" }, { "question": "What is the purpose of HIPAA?", "answers": { "A": "To facilitate electronic payments in healthcare", "B": "To secure health information and ensure privacy", "C": "To regulate pharmaceutical industry", "D": "To promote free health insurance" }, "solution": "B" }, { "question": "What is the purpose of two-channel authentication in cybersecurity?", "answers": { "A": "To incorporate a shared password and key exchange protocol to prevent phishing attacks", "B": "To send an access code to the user via a separate channel, such as their mobile phone, for additional security", "C": "To switch between multiple authentication methods for better user experience", "D": "To restrict the number of password guesses for enhanced security" }, "solution": "B" }, { "question": "Which of the following is a key aspect of 'incident response' in cybersecurity?", "answers": { "A": "Reacting to and mitigating the impact of security breaches or incidents", "B": "Identifying potential vulnerabilities in systems", "C": "Proactively managing security policies and controls", "D": "Securing network communication channels" }, "solution": "A" }, { "question": "An attacker performs a whois search against a target organization and discovers the technical point of contact (POC) and site ownership e-mail addresses. He then crafts an e-mail to the owner from the technical POC, with instructions to click a link to see web statistics for the site. Instead, the link goes to a fake site where credentials are stolen. Which attack has taken place?", "answers": { "A": "Man in the middle", "B": "Phishing", "C": "Spear phishing", "D": "Human based" }, "solution": "C" }, { "question": "What is the primary function of the National Software Reference Library (NSRL) in digital forensics?", "answers": { "A": "Maintaining a repository of known software, file profiles, and file signatures for computer forensic investigations", "B": "Developing cryptographic algorithms for secure communications", "C": "Providing tools to automatically repair damaged files in forensic investigations", "D": "Creating a database of unidentified malware for cybersecurity research" }, "solution": "A" }, { "question": "What is the primary purpose of a spamming attack in cybersecurity?", "answers": { "A": "To gain unauthorized access to system resources and data", "B": "To detect known security vulnerabilities and weaknesses", "C": "To flood a victim's e-mail inbox or other messaging system with unwanted messages", "D": "To interrupt the activity of other users on the same subnet or ISP" }, "solution": "C" }, { "question": "Which security measure ensures communication through appropriate measures against jamming?", "answers": { "A": "Use suitable frequency band management", "B": "Detection of communication problems", "C": "Use of intrusion detection systems", "D": "Radiation monitoring in threatous areas" }, "solution": "A" }, { "question": "Which encryption machine was popularly used in World War II by the Nazis?", "answers": { "A": "Transposition cipher", "B": "Running Key cipher", "C": "Enigma machine", "D": "Poly-alphabetic cipher" }, "solution": "C" }, { "question": "Which cryptographic algorithm was designed by NIST and NSA and is used in the digital signature standard officially known as the Secure Hash Standard (SHS)?", "answers": { "A": "SHA-1", "B": "SHA-256", "C": "MD2", "D": "MD5" }, "solution": "A" }, { "question": "Which of the following is used to control access between two networks or network segments?", "answers": { "A": "Firewall", "B": "E-mail filter", "C": "Intrusion detection system (IDS)", "D": "Antivirus software" }, "solution": "A" }, { "question": "What is the primary function of a Certificate Authority (CA) in a PKI system?", "answers": { "A": "To prevent unauthorized access to a network", "B": "To verify the integrity of data transmissions", "C": "To issue and manage digital certificates", "D": "To authenticate users during login" }, "solution": "C" }, { "question": "A password that is the same for each logon is called a:", "answers": { "A": "Static password", "B": "Dynamic password", "C": "One-time pad", "D": "Passphrase" }, "solution": "A" }, { "question": "What is one propagation technique used by viruses to penetrate systems and spread their malicious payloads?", "answers": { "A": "File infection", "B": "DDoS attacks", "C": "Firewall evasion", "D": "Port scanning" }, "solution": "A" }, { "question": "What is the standard protocol used to communicate between IKE and IPsec in BSD-based systems?", "answers": { "A": "PF_KEYv2", "B": "NETLINK", "C": "API_KEYv2", "D": "XFRM" }, "solution": "A" }, { "question": "What is the main type of key algorithm that uses a single key for both encryption and decryption?", "answers": { "A": "Public key algorithm", "B": "Asymmetric key algorithm", "C": "Symmetric key algorithm", "D": "Private key algorithm" }, "solution": "C" }, { "question": "What does bluesnarfing refer to in cybersecurity?", "answers": { "A": "Successfully accessing a Bluetooth-enabled device and remotely using its features.", "B": "A tool used for blackjacking attacks.", "C": "The actual theft of data from a mobile device due to an open connection.", "D": "Collecting device information over Bluetooth." }, "solution": "C" }, { "question": "Which type of intrusion detection system (IDS) involves monitoring activity on the network medium?", "answers": { "A": "Network-based IDS", "B": "Knowledge-based IDS", "C": "Behavior-based IDS", "D": "Host-based IDS" }, "solution": "A" }, { "question": "Which security compliance term refers to a comprehensive evaluation of the technical and non-technical security features of an information system?", "answers": { "A": "Compliance", "B": "Accreditation", "C": "Certification", "D": "Compliance Audit" }, "solution": "C" }, { "question": "What did VISA introduce to reduce fraud losses in the 1990s?", "answers": { "A": "Payment Card Industry Data Security Standard (PCI DSS)", "B": "Intrusion detection systems", "C": "Biometric authentication for online credit card transactions", "D": "Card verification values (CVVs)" }, "solution": "D" }, { "question": "What type of packet marking involves marking the packet at the interface closest to the source of the packet on the edge ingress router?", "answers": { "A": "ICMP traceback", "B": "Deterministic Packet Marking (DPM)", "C": "Probabilistic Packet Marking (PPM)", "D": "Algebraic Packet Marking (APM)" }, "solution": "B" }, { "question": "Which principle indicates that, as a rule and all other things being equal, controls should be as close to the resource as possible?", "answers": { "A": "Prefer broad security solutions", "B": "Design top down, implement bottom up", "C": "Prefer simplicity; hide complexity", "D": "Place controls close to the resource" }, "solution": "D" }, { "question": "What should management consider when evaluating whether safeguards are necessary for protecting the organization against exploitation of vulnerabilities?", "answers": { "A": "The cost of implementing the safeguards versus the estimated loss resulting from exploitation of the vulnerability.", "B": "Employee satisfaction with existing security measures.", "C": "The potential publicity the incident may generate.", "D": "Whether the incident should be reported to law enforcement." }, "solution": "A" }, { "question": "What are the properties that a digital signature must have?", "answers": { "A": "All provided answers.", "B": "It must be verifiable by third parties, to resolve disputes.", "C": "It must verify the author and the date and time of the signature.", "D": "It must authenticate the contents at the time of the signature." }, "solution": "A" }, { "question": "Which biometric technology has been used with the U.S. government STU-III encrypting telephone and achieved an equal error rate of about 1%?", "answers": { "A": "Fingerprints", "B": "Iris Codes", "C": "Facial recognition", "D": "Voice Recognition" }, "solution": "D" }, { "question": "Which of the following attacks aims to use up the memory on the switch and can result in broadcasting data on all ports like a hub?", "answers": { "A": "DNS cache poisoning", "B": "ARP spoofing", "C": "MAC flooding", "D": "MAC spoofing" }, "solution": "C" }, { "question": "Which runlevel is the single-user mode in Linux?", "answers": { "A": "Runlevel 0", "B": "Runlevel 1", "C": "Runlevel 2", "D": "Runlevel 3" }, "solution": "B" }, { "question": "What is one of the primary challenges in constructing ciphers?", "answers": { "A": "Balancing the trade-off between diffusion and confusion properties", "B": "Focusing only on the speed of encryption", "C": "Increasing the number of rounds to improve security", "D": "Simplifying the round structure to reduce complexity" }, "solution": "A" }, { "question": "What does eavesdropping attack consist of?", "answers": { "A": "Unauthorized interception of network traffic", "B": "Denial of service attack", "C": "Creating a covert signaling channel", "D": "Tampering with a transmission" }, "solution": "A" }, { "question": "The Wireless Transport Layer Security Protocol (WTLS) in the Wireless Application Protocol (WAP) stack provides for security:", "answers": { "A": "Between the WAP gateway and the content server", "B": "Between the Internet and the content server", "C": "Between the WAP client and the gateway", "D": "Between the WAP content server and the WAP client" }, "solution": "C" }, { "question": "Which type of policy consists of a set of nonbinding recommendations regarding how management would like its employees to behave?", "answers": { "A": "Regulatory Policy", "B": "Behind-the-scenes Policy", "C": "Informative Policy", "D": "Advisory Policy" }, "solution": "D" }, { "question": "What is a system employed to control and maintain object integrity?", "answers": { "A": "Clean power", "B": "Clustering", "C": "Code", "D": "Clark-Wilson model" }, "solution": "D" }, { "question": "Which security principle focuses on limiting access to only authorized individuals?", "answers": { "A": "Data encryption", "B": "Firewall protection", "C": "Multi-factor authentication", "D": "Least privilege" }, "solution": "D" }, { "question": "What is the purpose of access control systems in a security system?", "answers": { "A": "To restrict access for all personnel.", "B": "To monitor and control access to facilities.", "C": "To provide unrestricted entry and exit.", "D": "To eliminate the need for physical barriers." }, "solution": "B" }, { "question": "Which layer of the OSI model provides encryption, decryption, and data formatting?", "answers": { "A": "Presentation layer", "B": "Session layer", "C": "Physical layer", "D": "Network layer" }, "solution": "A" }, { "question": "Java security employs a(n) ___ so an applet is restricted and fairly safe.", "answers": { "A": "ActiveX", "B": "Deadlock situation", "C": "Artificial neural network", "D": "Sandbox" }, "solution": "D" }, { "question": "Which phase of the Penetration Testing Execution Standard (PTES) involves obtaining authorization and defining the scope of the test?", "answers": { "A": "Intelligence gathering", "B": "Reporting", "C": "Vulnerability analysis", "D": "Pre-engagement interactions" }, "solution": "D" }, { "question": "What is the term for Security as a Service (SECaaS)?", "answers": { "A": "The implementation of intrusion detection systems and prevention systems in a cloud environment", "B": "A modern protocol solution designed to secure communications in the cloud through encryption", "C": "A suite of security offerings provided by the cloud service provider to offload security responsibility from the client", "D": "A comprehensive set of standards and recommendations for cloud computing security" }, "solution": "C" }, { "question": "Of which control is WPA TKIP an example?", "answers": { "A": "Detective controls", "B": "Administrative controls", "C": "Technical controls", "D": "Physical controls" }, "solution": "C" }, { "question": "What is one of the principal threats involving wireless access points?", "answers": { "A": "Unintentional association", "B": "Change in WLAN configurations", "C": "Malicious association", "D": "Dispatching extra messages" }, "solution": "C" }, { "question": "Which perspective focuses on establishing security requirements, realisation approaches, and composition of subsystems/solutions at different layers in a distributed system?", "answers": { "A": "Distribution perspective", "B": "Construction perspective", "C": "Realisation perspective", "D": "Layered perspective" }, "solution": "B" }, { "question": "Which access control model allows an authorizing entity to specify the objects that can be accessed within certain limitations?", "answers": { "A": "Discretionary access control", "B": "Non-discretionary access control", "C": "Mandatory access control", "D": "Role-based access control" }, "solution": "A" }, { "question": "Why is it important to tailor information security awareness sessions to the vocabulary and skill set of the audience?", "answers": { "A": "To stress the positive and business side of security", "B": "To establish the key elements of an effective information security program", "C": "To better present the message to the audience", "D": "To tap into the method most used by the audience to receive information" }, "solution": "C" }, { "question": "What is the aim of conducting a cybersecurity risk assessment?", "answers": { "A": "To determine the financial impact of a cybersecurity incident.", "B": "To identify and prioritize potential security risks to an organization's assets.", "C": "To initiate legal action against cybercriminals.", "D": "To test the speed of the internet connection of a network." }, "solution": "B" }, { "question": "What is the error rate of voice recognition systems typically used for forensics to match a recorded telephone conversation to speech samples of suspects?", "answers": { "A": "Zero", "B": "10%", "C": "1%", "D": "5%" }, "solution": "C" }, { "question": "What is the distinguishing characteristic of symmetric-key cryptography?", "answers": { "A": "It tends to be CPU intensive", "B": "It uses the same key for encryption and decryption", "C": "It provides integrity protection to data", "D": "It uses different but related keys for encryption and decryption" }, "solution": "B" }, { "question": "What is the practice of minimizing the number of access points into a network to reduce potential security breaches called?", "answers": { "A": "Protocol hardening.", "B": "Firewall optimization.", "C": "Network segregation.", "D": "Security obfuscation." }, "solution": "C" }, { "question": "Which topology requires the IDS sensor to physically sit in the path of the network traffic?", "answers": { "A": "Passive", "B": "Inline", "C": "De-centralized", "D": "Out-of-line" }, "solution": "B" }, { "question": "How can unexpected negative outcomes in personal privacy policies be prevented?", "answers": { "A": "By ensuring the policies lead to mutual benefit for both providers and consumers.", "B": "By specifying well-formed policies to avoid unexpected negative outcomes.", "C": "By requiring the consumers to have full control over the policies without any restrictions.", "D": "By allowing the policies to be adjusted dynamically based on the situation." }, "solution": "B" }, { "question": "What does the rule 'alert tcp any any -> any 27374 (msg:\"SubSeven Connection Attempt\";' detect?", "answers": { "A": "Port scanning", "B": "Stealth activity", "C": "SubSeven connection attempt", "D": "Directory traversal attack" }, "solution": "C" }, { "question": "What is a common method used by hackers to guess user passwords?", "answers": { "A": "Social engineering", "B": "Buffer overflow", "C": "Dictionary attacks", "D": "Polymorphism" }, "solution": "C" }, { "question": "What is the primary advantage of passfaces authentication in cybersecurity?", "answers": { "A": "It prevents automated attacks by recognizing image points", "B": "It provides an effective defense against shoulder surfing attacks", "C": "It leverages the natural capability of humans to recognize faces", "D": "It strengthens security by confirming user identity through facial recognition" }, "solution": "C" }, { "question": "What does the 'syslog' facility in UNIX allow?", "answers": { "A": "Logging only emergency situations", "B": "Recording all system reboots", "C": "Sequential logging of user commands", "D": "Highly configurable logging of messages from different programs" }, "solution": "D" }, { "question": "What type of attack is the greatest risk involved in a scenario where a single web server is connected to three other distribution servers?", "answers": { "A": "Fraggle attack", "B": "Denial-of-service attack", "C": "Man-in-the-middle attack", "D": "Single point of failure" }, "solution": "D" }, { "question": "What knowledge and experience has been relatively scarce in security engineering?", "answers": { "A": "Expertise in developing new technology for electronic record and transaction security.", "B": "Understanding of mathematical and chemical expertise for designing ciphers and banknote inks.", "C": "Expertise in effectively applying well-understood security technologies such as cryptography or software reliability", "D": "None of the above" }, "solution": "C" }, { "question": "What is the goal of a Virtual Private Network (VPN)?", "answers": { "A": "Ensuring physical security of data centers", "B": "Securing communication over a public network", "C": "Implementing secure web browsing", "D": "Improving network performance" }, "solution": "B" }, { "question": "What port range is an obscure third-party application most likely to use?", "answers": { "A": "49152 to 65535", "B": "32768 to 49151", "C": "1025 to 32767", "D": "1 to 1024" }, "solution": "A" }, { "question": "What is the purpose of establishing an IRM methodology and tools in Information Risk Management?", "answers": { "A": "To determine the current status of information security in the target environment and ensure associated risk is managed", "B": "To develop high-level IRM policy statements and objectives", "C": "To identify and measure risk associated with various strategic alternatives", "D": "To assure that risk is managed effectively before funds are expended on a specific change in the IT environment" }, "solution": "A" }, { "question": "Which cybersecurity practice involves analyzing events against time to determine the sequence of events?", "answers": { "A": "Steganography", "B": "Forensic analysis", "C": "Cryptanalysis", "D": "Data acquisition" }, "solution": "B" }, { "question": "Which source can be used to establish replacement costs for data in the risk assessment process?", "answers": { "A": "Intangible Assets", "B": "Tangible Assets ", "C": "Both A and B ", "D": "None of the above" }, "solution": "A" }, { "question": "What is the purpose of the 'Name Constraints' extension in the X.509 certificate format?", "answers": { "A": "Specifies constraints that may require explicit certificate policy identification or inhibit policy mapping for the remainder of the certification path", "B": "If the subject may act as a Certification Authority (CA) and the maximum path length of a certification path", "C": "Indicate the algorithm used to sign the certificate", "D": "Indicates a name space within which all subject names in subsequent certificates must be located" }, "solution": "D" }, { "question": "What is software reverse engineering (SRE) also known as?", "answers": { "A": "Code analysis", "B": "Reverse code engineering", "C": "Code reversal", "D": "Software decoding" }, "solution": "B" }, { "question": "What is the key principle of administrative security?", "answers": { "A": "Ensuring accountability for system activities", "B": "Managing constraints and operational procedures", "C": "Preventing unauthorized access", "D": "Protecting sensitive data" }, "solution": "B" }, { "question": "In the context of elliptic curves over Zp, what is the condition that needs to be met to define a finite abelian group based on the set E p(a, b)?", "answers": { "A": "a3 + 27b2 ≠ 0", "B": "4a3 + 27b2 ≠ 0 mod p", "C": "4a3 + 27b2 = 0", "D": "a3 + 27b2 ≡ 0 (mod p)" }, "solution": "B" }, { "question": "What is a potential drawback of using a single stage of an LFSR as the keystream in a stream cipher?", "answers": { "A": "High computational complexity", "B": "Statistically unbiased keystream", "C": "Linearity of the sequence of stages", "D": "Nonlinear relationship to the cryptovariable" }, "solution": "C" }, { "question": "What is the approximate number of security defects per thousand lines of code in software products?", "answers": { "A": "1500", "B": "10-15", "C": "100-150", "D": "1000" }, "solution": "B" }, { "question": "Which worm started to make its mark in late September 2000 following an e-mail message distributed from various forged addresses?", "answers": { "A": "Melissa", "B": "Jerusalem", "C": "Morris Worm", "D": "Hybris" }, "solution": "D" }, { "question": "What is a critical consideration when designing the monitoring process in cybersecurity?", "answers": { "A": "Enabling flexible access control for sensitive information.", "B": "Outsourcing the monitoring role to third-party products.", "C": "Recording log entries for each triggered event.", "D": "Identifying how to be notified in the event an alarm is triggered." }, "solution": "D" }, { "question": "What is the recommended practice for handling suspicious emails or attachments?", "answers": { "A": "Ignoring suspicious emails", "B": "Deleting suspicious emails and attachments", "C": "Forwarding suspicious emails to colleagues", "D": "Opening attachments without verifying the source" }, "solution": "B" }, { "question": "What is a common entry vector to execute phishing attacks?", "answers": { "A": "HTTPS secured websites", "B": "File format exploitation", "C": "WPA2 authentication", "D": "WEP‐encrypted wireless networks" }, "solution": "B" }, { "question": "What is the main objective of CastleCops in securing a safe and smart computing experience for everyone online?", "answers": { "A": "To work with industry experts and law enforcement to reach a safe and smart computing experience", "B": "To provide training for volunteer staff in anti-malware, phishing, and rootkit academies", "C": "To update the PIRT database with suspected phishing emails", "D": "To provide essential information for interpreting the log files of Hijack This" }, "solution": "A" }, { "question": "Which type of computer crime involves the intercepting of RF signals generated by computers or terminals?", "answers": { "A": "Network intrusions.", "B": "Emanation eavesdropping.", "C": "Theft of passwords.", "D": "Denial of Service attacks." }, "solution": "B" }, { "question": "Sometimes basic fencing does not provide the level of protection a company requires. Which of the following combines the functions of intrusion detection systems and fencing?", "answers": { "A": "PIDAS", "B": "PERIMETER", "C": "Closed-circuit TV", "D": "Acoustical seismic detection system" }, "solution": "A" }, { "question": "What is the characteristic of a network technology that uses a single carrier frequency and requires all stations attached to the network to participate in every transmission?", "answers": { "A": "GSM technology", "B": "Multiband", "C": "Baseband", "D": "None of the above" }, "solution": "C" }, { "question": "What is the main purpose of W⊕X memory policy in operating systems?", "answers": { "A": "Restricting the userspace from accessing kernel memory", "B": "Preventing unauthorized access to kernel memory", "C": "Preventing execution of instructions in the data area", "D": "Randomizing memory locations" }, "solution": "C" }, { "question": "How can remote attestation for detecting malware in embedded systems be categorized?", "answers": { "A": "Software-based attestation, firmware-based attestation, and hybrid attestation.", "B": "Network-based attestation, software-based attestation, and hardware-based attestation.", "C": "Software-based attestation, hardware-assisted attestation, and hybrid attestation.", "D": "Program-based attestation, hardware-based attestation, and hybrid attestation." }, "solution": "C" }, { "question": "What wireless attack would you use to take a known piece of information in order to be able to decrypt wireless traffic?", "answers": { "A": "Evil twin", "B": "Key reinstallation", "C": "Sniffing", "D": "Deauthentication" }, "solution": "B" }, { "question": "Which form of DBMS primarily supports the establishment of one-to-many relationships?", "answers": { "A": "Relational", "B": "Mandatory", "C": "Distributed", "D": "Hierarchical" }, "solution": "A" }, { "question": "Which authentication protocol uses a challenge-response mechanism with one-way encryption and is used for dial-up connections?", "answers": { "A": "CHAP", "B": "MS-CHAPv2", "C": "EAP", "D": "RADIUS" }, "solution": "A" }, { "question": "If you were checking on the IP addresses for a company in France, what RIR would you be checking with for details?", "answers": { "A": "ARIN", "B": "RIPE", "C": "AfriNIC", "D": "LACNIC" }, "solution": "B" }, { "question": "In terms of cryptography, what is the work function defined by Claude Shannon?", "answers": { "A": "The strength of the encryption algorithm", "B": "A quantitative measure of the strength of encipherment", "C": "The minimum work required to maintain confidentiality", "D": "The amount of computational effort needed to produce keys" }, "solution": "B" }, { "question": "What is the primary security concern with wireless e-mail communication?", "answers": { "A": "Interception of emails over the wireless link", "B": "Unauthorized access to the wireless network", "C": "Physical theft of wireless devices", "D": "Interference with wireless signals" }, "solution": "A" }, { "question": "What is the key to maintaining an appropriate level of functionality while properly securing the system?", "answers": { "A": "Properly securing the system to maintain confidentiality, integrity, and availability", "B": "Installing the latest service pack", "C": "Reducing the number of user accounts", "D": "Conducting regular security assessments" }, "solution": "A" }, { "question": "What is necessary in order to install a hardware keylogger on a target system?", "answers": { "A": "Physical access to the system", "B": "Telnet access to the system", "C": "The administrator username and password", "D": "The IP address of the system" }, "solution": "A" }, { "question": "What is used to monitor system access and use as per ISO 17799?", "answers": { "A": "Security of system files", "B": "Event logging", "C": "Password management system", "D": "Automatic terminal identification" }, "solution": "B" }, { "question": "What is the type of attack aimed at the detection and alerting of cyberattacks?", "answers": { "A": "Trace", "B": "Replication", "C": "Sensor", "D": "Meterpreter" }, "solution": "C" }, { "question": "Which transformation is applied to the message right block R in the LUCIFER block cipher?", "answers": { "A": "Left-shift transformation", "B": "Nonlinear substitution S-box", "C": "P-box transformation", "D": "L1 addition with carry" }, "solution": "B" }, { "question": "What type of standard is X.509?", "answers": { "A": "Electronic data exchange standards", "B": "Financial standards", "C": "Specifications for information processing systems", "D": "Interconnection standards" }, "solution": "C" }, { "question": "What does a plaintext represent in the context of cryptography?", "answers": { "A": "The encrypted form of a message", "B": "Data stored in a file system", "C": "A message intercepted during communication", "D": "The original, unencrypted message" }, "solution": "D" }, { "question": "What is a potential advantage of keypad access control systems?", "answers": { "A": "Includes features like hostage and error alarms, enhancing security and resistance to tampering.", "B": "They provide remote control", "C": "They are difficult to duplicate", "D": "None of the above" }, "solution": "A" }, { "question": "Which function can a protocol analyzer perform to identify the source of a broadcast storm on a LAN?", "answers": { "A": "Analyzing header manipulation", "B": "Identifying network traffic vulnerabilities", "C": "Determining the network adapter causing the storm", "D": "Capturing packets in non-promiscuous mode" }, "solution": "C" }, { "question": "What is the primary purpose of security engineering?", "answers": { "A": "To protect property and privacy using traditional methods such as locks and fences.", "B": "To create measures that control potential threats to a system and protect it from intelligent and malicious adversaries.", "C": "To design systems that prevent malfunctions caused by random errors and mistakes.", "D": "To develop mechanisms that secure electronic records and transactions from unauthorized access." }, "solution": "B" }, { "question": "Which biometric property refers to the characteristic existing in all individuals in the population being measured?", "answers": { "A": "Permanence", "B": "Unalterable", "C": "Uniqueness", "D": "Universality" }, "solution": "D" }, { "question": "What is a common first line of defense in cybersecurity to prevent unauthorized access to a system?", "answers": { "A": "Firewall", "B": "Public Wi-Fi", "C": "Open access policy", "D": "Intrusion detection system" }, "solution": "A" }, { "question": "What is the best approach for handling a computer damaged in an automobile accident?", "answers": { "A": "Cut power from the drives to prevent further damage and involve a computer forensic expert.", "B": "Conduct a thorough evaluation of the damaged drives without powering them up.", "C": "Assess the external damage, power up the drive, and initiate data capture.", "D": "Immediately dismantle and assess the drives to determine the extent of damage." }, "solution": "A" }, { "question": "Which of the following elements are key components of computer forensics investigations?", "answers": { "A": "Recovering the evidence, backing up the data, and ensuring data accuracy.", "B": "Preserving the integrity of the data, establishing the relevance of the extracted evidence, and authenticating the validity of the data.", "C": "Acquiring the evidence, analyzing the data, and interpreting the observations.", "D": "Documenting the evidence, verifying the authenticity, and outlining the observations." }, "solution": "B" }, { "question": "What type of device operates in such a way that an administrator is alerted to unusual network activity?", "answers": { "A": "IDS", "B": "Stateful packet filtering", "C": "Firewall", "D": "IPS" }, "solution": "A" }, { "question": "Which of the following is associated with microservices?", "answers": { "A": "Independent deployment of small self-contained functions", "B": "Exclusive reliance on monolithic security solutions", "C": "Utilization of pure serverless computing architecture", "D": "High dependency on centralized computing resources" }, "solution": "A" }, { "question": "What is the primary purpose of better filters and improved shielding in sensors?", "answers": { "A": "To increase the speed of sensor data transmission.", "B": "To prevent transduction attacks caused by external signals.", "C": "To enhance the sensor's visual display quality.", "D": "To reduce sensor data storage space." }, "solution": "B" }, { "question": "What kind of honeypot is focused on gaining intelligence information about attackers and their technologies and methods?", "answers": { "A": "Medium-interaction honeypot", "B": "Deception honeypot", "C": "High-interaction honeypot", "D": "Low-interaction honeypot" }, "solution": "C" }, { "question": "What term refers to the occurrence of a security mechanism being bypassed or thwarted by a threat agent?", "answers": { "A": "Breach", "B": "Esposure", "C": "Sabotage", "D": "Event" }, "solution": "A" }, { "question": "What does ATM stand for in the context of data communications?", "answers": { "A": "Analog Transfer Mode", "B": "Automated Technical Management", "C": "Asynchronous Transfer Mode", "D": "Automatic Transmission Mechanism" }, "solution": "C" }, { "question": "What are the key size options supported in the AES algorithm?", "answers": { "A": "64, 192, and 256 bits", "B": "64, 128, and 256 bits", "C": "128, 192, and 256 bits", "D": "56, 128, and 192 bits" }, "solution": "C" }, { "question": "Which operating system design choice involves applications running together with a minimal 'library operating system' that contains a bare minimum of code?", "answers": { "A": "Single domain", "B": "Multi-server OS", "C": "Unikernel / Library OS", "D": "Monolithic OS" }, "solution": "C" }, { "question": "What is the main value of the Chinese Wall model in access control?", "answers": { "A": "It allows centralized control of access and permissions.", "B": "It introduces mandatory access control for all users.", "C": "It provides separation of duty in access control.", "D": "It enables free choice in access control decisions." }, "solution": "C" }, { "question": "What are the two critical properties enforced by the Bell-LaPadula model?", "answers": { "A": "No read up (NRU) and no write down (NWD)", "B": "No read up (NRU) and no read down (NRD)", "C": "No write up (NWU) and no read down (NRD)", "D": "No write up (NWU) and no write down (NWD)" }, "solution": "A" }, { "question": "Which encryption algorithm is commonly referred to as Rijndael?", "answers": { "A": "RSA", "B": "AES", "C": "MD5", "D": "3DES" }, "solution": "B" }, { "question": "Which type of botnet represents a major shift towards a more stealthy control method and provides anonymity to the botmaster by appearing as just another node in the network?", "answers": { "A": "Centralized botnets using HTTP", "B": "Peer-to-peer (P2P) botnets", "C": "Trojan horse botnets", "D": "Centralized botnets using IRC" }, "solution": "B" }, { "question": "What is the main function of a DHCP server?", "answers": { "A": "Managing encryption keys for secure communication", "B": "Assigning unique IP addresses to devices on a network", "C": "Transferring files between different devices", "D": "Controlling the flow of data packets" }, "solution": "B" }, { "question": "Which IEEE 802.11 standard offers a transmission speed of 54 Mbps and uses the 5 GHz frequency band?", "answers": { "A": "802.11e", "B": "802.11g", "C": "802.11a", "D": "802.11b" }, "solution": "C" }, { "question": "Which security measure protects against loss/theft of equipment and/or media?", "answers": { "A": "Creating a radiation-protected environment", "B": "Integration of security area/restricted zone", "C": "Theft protection of mobile devices", "D": "Ensuring integrity check of the software supply chain" }, "solution": "C" }, { "question": "The cost of mitigating a risk should not exceed the:", "answers": { "A": "Cost to the perpetrator to exploit the weakness", "B": "Value of the physical asset", "C": "Expected benefit to be derived", "D": "Annual loss expectancy" }, "solution": "C" }, { "question": "What is the basic objective of penetration testing?", "answers": { "A": "To crash the system using DoS attacks", "B": "To measure the effectiveness of the security of the organization's Internet presence", "C": "To conduct risk assessments for security policies", "D": "To hack into the system and plant backdoors" }, "solution": "B" }, { "question": "What is the key focus of the U.S. government in developing security management and resilience in the event of a disaster or terrorist attack?", "answers": { "A": "To provide continuous real-time security management information.", "B": "To maintain order and support local and state forces during a disaster.", "C": "To develop software for security risk management and compliance monitoring.", "D": "To guarantee prevention of subsequent attacks." }, "solution": "B" }, { "question": "What marks the major difference between a hacker and an ethical hacker (pen test team member)?", "answers": { "A": "Ethical hackers never exploit vulnerabilities; they only point out their existence.", "B": "Nothing.", "C": "The predefined scope and agreement made with the system owner.", "D": "The tools they use." }, "solution": "C" }, { "question": "Which mode of operation involves wireless stations communicating directly with each other without using an access point or any connection to a wired network?", "answers": { "A": "IBSS", "B": "ESS", "C": "BSS", "D": "WAP" }, "solution": "A" }, { "question": "What best describes the ideal approach to securing an infrastructure?", "answers": { "A": "Identify the vulnerabilities and threats that the infrastructure faces", "B": "Organize the risks in a hierarchy that reflects the business needs of the organization", "C": "Both A and B are essential steps for effectively securing an infrastructure", "D": "None of the above" }, "solution": "C" }, { "question": "What is physical security?", "answers": { "A": "The prevention of natural disasters caused by environmental factors.", "B": "The protection of data from hacker attacks.", "C": "The enforcement of technical security controls to prevent data breaches.", "D": "The act of securing a building or location to prevent unauthorized access, theft, or damage to physical assets." }, "solution": "D" }, { "question": "Information Warfare is A. Attacking information infrastructure of a nation to gain military and/or economic advantages.", "answers": { "A": "Signal intelligence", "B": "Developing weapons based on artificial intelligence technology", "C": "Attacking information infrastructure of a nation to gain military and/or economic advantages", "D": "Generating and disseminating propaganda material" }, "solution": "C" }, { "question": "What is the benefit of encryption on mobile devices?", "answers": { "A": "Prevention of malware", "B": "Protection of data on lost or stolen devices", "C": "Protection of data being sent to websites", "D": "Protection against stolen devices" }, "solution": "B" }, { "question": "What is the general advice for determining legitimacy while encountering an unknown, unsolicited e-mail?", "answers": { "A": "Check the address in the 'To' line", "B": "Verify the phone number provided in the e-mail", "C": "Be aware of who sent the e-mail", "D": "All of the above" }, "solution": "D" }, { "question": "What is a common technique used to capture card details for a service denial attack on payment systems?", "answers": { "A": "Cyber-espionage", "B": "Capturing card details from a genuine terminal or cable bug", "C": "Phishing", "D": "Brute force attack" }, "solution": "B" }, { "question": "Which of the following is a suitable method for encrypting a message using RSA?", "answers": { "A": "RSA-KEM-DEM", "B": "RSA-OAEP", "C": "RSA-PASS", "D": "RSA-KEM" }, "solution": "B" }, { "question": "Which encryption mode provides confidentiality and authenticity by combining encryption and authentication?", "answers": { "A": "Electronic CodeBook mode", "B": "XOR mode", "C": "Counter mode", "D": "GCM (Galois/Counter Mode)e" }, "solution": "D" }, { "question": "The P1363 Standard Specifications are related to which area of computer network security?", "answers": { "A": "Electronic Data Exchange", "B": "Interconnection", "C": "Financial standards", "D": "Public-Key Cryptography" }, "solution": "D" }, { "question": "What is the primary purpose of steganography?", "answers": { "A": "To perform secure key exchange.", "B": "To increase the complexity of the encryption process.", "C": "To hide the existence of a message.", "D": "To provide authentication in communication." }, "solution": "C" }, { "question": "What is the characteristic of a weak key in DES?", "answers": { "A": "It results in an invertible transformation", "B": "It has a long key length", "C": "It results in internal keys with special regularity", "D": "It is designed to use the key bits in a uniform manner" }, "solution": "C" }, { "question": "What testing method performs run-time verification of compiled or packaged software, checking functionality that is only apparent when all components are integrated and running?", "answers": { "A": "Perform Threat Modelling", "B": "Perform Penetration Testing", "C": "Perform Dynamic Analysis Security Testing (DAST)", "D": "Perform Static Analysis Security Testing (SAST)" }, "solution": "C" }, { "question": "What type of attack aims to take an application out of service so legitimate users can't use it?", "answers": { "A": "Command Injection", "B": "Denial-of-Service", "C": "SQL Injection", "D": "Directory or File Traversal" }, "solution": "B" }, { "question": "Which technology can be used to detect and prevent phishing attacks?", "answers": { "A": "Strong password policies", "B": "Web-based email clients", "C": "Intrusion detection systems", "D": "Inbound spam filters" }, "solution": "D" }, { "question": "What is the main purpose of steganography in cybersecurity?", "answers": { "A": "Preventing unauthorized access to a network", "B": "Encrypting sensitive data during transmission", "C": "Hiding the existence of secret information", "D": "Detecting and eliminating malware" }, "solution": "C" }, { "question": "Which of the following is a detective control when not used in real time?", "answers": { "A": "Fences", "B": "CCTV", "C": "Locks", "D": "Alarms" }, "solution": "D" }, { "question": "What is the ultimate goal of good security engineering?", "answers": { "A": "To develop mechanisms that secure electronic records and transactions from unauthorized access.", "B": "To create measures that control potential threats to a system and protect it from intelligent and malicious adversaries.", "C": "To design systems that prevent malfunctions caused by random errors and mistakes.", "D": "To protect property and privacy using traditional methods such as locks and fences." }, "solution": "B" }, { "question": "What distributed platform should be used to enforce a consistent network security policy at all entry points to the internal network, including the remote VPN user connection?", "answers": { "A": "Server-based firewalls", "B": "Distributed firewalls", "C": "Distributed desktop intrusion detection systems", "D": "Personal firewalls" }, "solution": "B" }, { "question": "Where is the trust placed when using raw public key digital signatures for authentication?", "answers": { "A": "In the administrator", "B": "In the CA", "C": "In the public key itself", "D": "In the private key" }, "solution": "C" }, { "question": "Which type of attack floods a network, rendering it inaccessible to its intended users?", "answers": { "A": "Phishing attack", "B": "Brute force attack", "C": "Denial of service (DoS) attack", "D": "Cross-site scripting" }, "solution": "C" }, { "question": "What is the main reason why governments find it harder to censor information on the Internet compared to the past?", "answers": { "A": "The technology now allows rapid dissemination of information, making it difficult for governments to control and suppress news events.", "B": "The Internet is used by a small fraction of the population in authoritarian states, limiting the reach of uncensored information.", "C": "The public opinion is now in thrall to media managers who control the flow of information online.", "D": "The Internet provides multiple layers of defenses through perimeter defenses, application-level defenses, and social defenses." }, "solution": "A" }, { "question": "Using pre-numbered forms to initiate a transaction is an example of what type of control?", "answers": { "A": "Application control", "B": "Detective control", "C": "Deterrent control", "D": "Preventative control" }, "solution": "D" }, { "question": "What type of key is used when the same key is used for the encryption and decryption of the data?", "answers": { "A": "Diffie–Hellman key", "B": "Asymmetrical key", "C": "Symmetrical key", "D": "RSA key" }, "solution": "C" }, { "question": "Which hashing algorithm generates a 160 bit hashing value?", "answers": { "A": "HAVAL", "B": "MD5", "C": "SHA", "D": "Tiger" }, "solution": "C" }, { "question": "How does the challenge of dealing with centralized health databases relate to privacy protection in medical records?", "answers": { "A": "It involves balancing the rights of individuals with centralized data management", "B": "It necessitates setting up additional authorization processes for data access", "C": "It requires implementing more advanced access controls for medical records", "D": "It pertains to determining the level of centralized encryption for data protection" }, "solution": "A" }, { "question": "What is the main function of a public key in cryptography?", "answers": { "A": "Deriving symmetric keys", "B": "Encrypting messages", "C": "Decrypting encrypted data", "D": "Signing digital messages" }, "solution": "B" }, { "question": "Which protocol is used for accessing electronic mail or bulletin board data?", "answers": { "A": "IMAP", "B": "POP", "C": "SMTP", "D": "HTTP" }, "solution": "A" }, { "question": "What is the primary purpose of a hash in digital signatures and file authentication?", "answers": { "A": "Encrypting and decrypting data", "B": "Exchanging secret keys securely", "C": "Protecting the integrity of data", "D": "Implementing public key cryptography" }, "solution": "C" }, { "question": "What are the two types of wireless networks?", "answers": { "A": "Star and ring", "B": "Bus and hybrid", "C": "Infrastructure and hybrid", "D": "Infrastructure and ad hoc" }, "solution": "D" }, { "question": "Which malware type requires the user to execute its code, but then can spread to other files or systems on its own?", "answers": { "A": "Rootkit", "B": "Virus", "C": "Worm", "D": "Trojan" }, "solution": "B" }, { "question": "Which of the following is NOT part of the CIA triad?", "answers": { "A": "Integrity", "B": "Utility", "C": "Confidentiality", "D": "Availability" }, "solution": "B" }, { "question": "Which type of attack exploits user interface weaknesses of both web and mobile clients to steal sensitive information including login credentials and credit card numbers from victims?", "answers": { "A": "Phishing & Clickjacking", "B": "SQL Injection", "C": "XML External Entity (XXE)", "D": "Cross-Site Scripting (XSS)" }, "solution": "A" }, { "question": "What is the most effective solution to prevent excessive privilege and creeping privileges?", "answers": { "A": "Increasing the number of end-user privileges", "B": "Automating the user account maintenance process", "C": "Regular user training", "D": "Developing a principle of least privilege" }, "solution": "D" }, { "question": "What is a key encrypting key used for in key management?", "answers": { "A": "Encrypting other keys", "B": "Generating keys", "C": "Encrypting data", "D": "Controlling keys" }, "solution": "A" }, { "question": "What is the primary benefit of using a content-dependent access control mechanism in a database?", "answers": { "A": "To prevent updates to the existing data", "B": "To limit access to specific fields or cells based on their content", "C": "To simplify database management procedures", "D": "To restrict access based on the user's context" }, "solution": "B" }, { "question": "The secure path between a user and the Trusted Computing Base (TCB) is called:", "answers": { "A": "Trusted distribution", "B": "Trusted facility management", "C": "The security perimeter", "D": "Trusted path" }, "solution": "D" }, { "question": "How does the kernel or nucleus of the operating system relate to security?", "answers": { "A": "It physically protects the hardware components of the server hosts", "B": "It is a critical part of the operating system that makes the entire system run", "C": "It provides visual user interfaces for end users to access the system", "D": "It controls the transmission of data over the network" }, "solution": "B" }, { "question": "Which technology can help organizations automatically cross-check data from a threat feed with logs tracking incoming and outgoing traffic?", "answers": { "A": "Firewalls", "B": "Intrusion Detection and Prevention Systems (IDPSs)", "C": "Antimalware software", "D": "Security Orchestration, Automation, and Response (SOAR) technologies" }, "solution": "D" }, { "question": "What is the primary difference between computer forensics and network forensics?", "answers": { "A": "Computer forensics analyzes data from the computer's disks, while network forensics retrieves data on network ports", "B": "Computer forensics investigates incidents after they occur, while network forensics prevents incidents from happening", "C": "Computer forensics hides evidence, while network forensics reveals it", "D": "Computer forensics traces evidence from the source to the courtroom, while network forensics traces evidence within the network" }, "solution": "A" }, { "question": "In public-key cryptography, what are the two distinct uses of public-key cryptosystems?", "answers": { "A": "Key distribution and certificate management", "B": "Symmetric encryption and decryption", "C": "Data compression and decompression", "D": "Encryption and decryption" }, "solution": "A" }, { "question": "What is the objective of configuring an 'access control system' to enforce permissions based on job classification and function?", "answers": { "A": "To restrict all user access to system components.", "B": "To provide unrestricted permissions for all users.", "C": "To allow broad access to all system components.", "D": "To enforce permissions assigned to individuals and systems." }, "solution": "D" }, { "question": "Which approach prevents Cross-Site Scripting (XSS) attacks by randomizing HTML tags and attributes to distinguish between untrusted and trusted content?", "answers": { "A": "Input Validation", "B": "Database Encryption", "C": "Randomization of HTML Elements", "D": "Content Security Policy (CSP)" }, "solution": "C" }, { "question": "Which of the following is responsible for performing and testing backups, validating data integrity, deploying security solutions, and managing data storage based on classification?", "answers": { "A": "Data Owner", "B": "Senior Manager", "C": "Security Professional", "D": "Data Custodian" }, "solution": "D" }, { "question": "What is the main purpose of incident handling in an organization's network security plan?", "answers": { "A": "To prevent all security incidents from occurring", "B": "To minimize the loss from security incidents and recover from them", "C": "To ensure no system interruptions occur", "D": "To identify and hire new employees" }, "solution": "B" }, { "question": "What is the primary objective of incident management within ITIL?", "answers": { "A": "To control production configurations such as standardization, status monitoring, and asset identification", "B": "To minimize disruption to the business by restoring service operations to agreed levels as quickly as possible", "C": "To resolve the root cause of incidents to minimize the adverse impact of incidents and problems on the business", "D": "To standardize and authorize the controlled implementation of IT changes" }, "solution": "B" }, { "question": "What is the primary purpose of a virtual private network (VPN)?", "answers": { "A": "To conceal network topography from the Internet", "B": "To provide sequentially reserved connections", "C": "To establish secure communication tunnels over untrusted networks", "D": "To hide the identity of internal clients" }, "solution": "C" }, { "question": "Where does an ISMS live within an organization?", "answers": { "A": "Only in data centers where sensitive information is stored", "B": "In multiple places and instances based upon functional areas or information security domains", "C": "Only in the board room, managed by executive staff", "D": "Exclusively in service-oriented departments within the organization" }, "solution": "B" }, { "question": "What is a list of serial numbers of digital certificates that have not expired but should be considered invalid?", "answers": { "A": "CRL", "B": "KDC", "C": "CA", "D": "UDP" }, "solution": "A" }, { "question": "What is the primary purpose of the evidence retention phase in operational forensics?", "answers": { "A": "To provide assistance in identifying unauthorized intrusions.", "B": "To develop cost-effective investigative methods.", "C": "To maintain maximum system availability.", "D": "To preserve information that may be needed as evidence." }, "solution": "D" }, { "question": "What is the best reason to implement a security policy?", "answers": { "A": "It decreases security.", "B": "It increases security.", "C": "It removes the employee’s responsibility to make judgments.", "D": "It makes security harder to enforce." }, "solution": "C" }, { "question": "What is the concept of 'least privilege' in the context of cybersecurity?", "answers": { "A": "Granting users unlimited access to all system resources", "B": "Granting users the same level of access to all system resources", "C": "Granting users the highest level of access to all system resources", "D": "Granting users only the access rights that are necessary to perform their work" }, "solution": "D" }, { "question": "Which protocol is used for transferring files between systems and uses port 21 for communication by default?", "answers": { "A": "SMTP", "B": "SNMP", "C": "HTTP", "D": "FTP" }, "solution": "D" }, { "question": "How does the principle of data minimization apply to managing payment information in healthcare systems?", "answers": { "A": "By minimizing the need for access controls to payment data", "B": "By minimizing the amount of payment data retained after processing", "C": "By minimizing the risk of statistical analysis of payment data", "D": "By minimizing unauthorized access to payment data" }, "solution": "B" }, { "question": "Which of the following best describes TCSEC?", "answers": { "A": "A criteria to validate the security and assurance provided in products", "B": "A penetration testing method", "C": "The red book", "D": "European assurance evaluation criteria" }, "solution": "A" }, { "question": "What is the purpose of hashing in the cryptographic process?", "answers": { "A": "To create a scrambled output that can be reversed", "B": "To detect changes in information and validate its integrity", "C": "To authenticate individuals and entities", "D": "To ensure confidentiality of information" }, "solution": "B" }, { "question": "Which type of malicious code is triggered by a specific occurrence, such as a specific time or date?", "answers": { "A": "Polymorphic virus", "B": "Trojan horse", "C": "Worm", "D": "Logic bomb" }, "solution": "D" }, { "question": "What is implemented from a server to configure a centrally managed multiple client computer’s browsers?", "answers": { "A": "Proxy and content filter", "B": "Advanced browser security", "C": "Policies", "D": "Temporary browser files" }, "solution": "C" }, { "question": "What is the purpose of establishing a Configuration Management Plan (CMP) and configuring the Configuration Control Board (CCB) in the CM process?", "answers": { "A": "To correlate CM to the International Standards Organization (ISO) 9000 series of quality systems criteria", "B": "To support the implementation of a new Configuration Management methodology", "C": "To maintain control over the established work product configurations and ensure the human element functions properly", "D": "To ensure all configuration items are maintained under strict configuration control" }, "solution": "C" }, { "question": "How can social engineering be mitigated?", "answers": { "A": "Educating employees", "B": "Using only technical controls", "C": "Requiring physical security measures", "D": "Ignoring human behavior" }, "solution": "A" }, { "question": "What were some of the primary objectives of the early Internet that did not prioritize commerce and security?", "answers": { "A": "Providing a means for computers from different manufacturers and different networks to talk to one another", "B": "Providing a vast communication medium to share electronic information", "C": "Creating a multiple-path network that could survive localized outages", "D": "All of the above" }, "solution": "D" }, { "question": "What is the main limitation of the one-time pad encryption scheme?", "answers": { "A": "It is computationally intensive", "B": "It provides computational security only", "C": "The key length must be as long as the message and can only be used once", "D": "It is vulnerable to brute force attacks" }, "solution": "C" }, { "question": "What is the term for the unauthorized access or use of information from a computer system?", "answers": { "A": "Hacking", "B": "Vulnerability", "C": "Phishing", "D": "Denial-of-service attack" }, "solution": "A" }, { "question": "In an asymmetric instance authentication, what does the prover use to calculate a tag for a random value sent by the verifier?", "answers": { "A": "Public key", "B": "Symmetric key", "C": "Hash function", "D": "Private key" }, "solution": "D" }, { "question": "How is a covert channel exploited?", "answers": { "A": "By following standard data transfer protocols.", "B": "By creating and executing a process to transfer information through unintended paths.", "C": "By using authorized means of communication.", "D": "By explicitly designing the channel for information transfer." }, "solution": "B" }, { "question": "Which type of system storage is the MOST volatile during forensic investigations?", "answers": { "A": "Virtual memory", "B": "RAM", "C": "Hard drive", "D": "CPU cache" }, "solution": "D" }, { "question": "What is the main purpose of cryptography in data communication?", "answers": { "A": "To authenticate the sender and receiver", "B": "All provided answers", "C": "To ensure data integrity and confidentiality", "D": "To provide nonrepudiation" }, "solution": "B" }, { "question": "At which protocol layer does the Berkeley Packet Filter operate?", "answers": { "A": "Protocol", "B": "Transport", "C": "Data Link", "D": "Internetwork" }, "solution": "C" }, { "question": "Principle of need to know and the least privilege principle are part of what fundamental security concept?", "answers": { "A": "Confidentiality", "B": "Integrity", "C": "Availability", "D": "Authentication" }, "solution": "A" }, { "question": "What is the most complex and challenging task related to Security Information Management (SIM) implementation?", "answers": { "A": "Network segmentation", "B": "Vulnerability assessment", "C": "Access control configuration", "D": "Event filtering" }, "solution": "D" }, { "question": "What does the Object-Oriented Security Model (OOSM) focus on?", "answers": { "A": "Supporting control of all direct access to objects in the system", "B": "Encryption of data during transmission", "C": "Access control at the user interface level", "D": "Providing physical access control to computer equipment" }, "solution": "A" }, { "question": "Which technique involves reducing the radar cross-section of a vehicle so that it can be detected only at very much shorter range?", "answers": { "A": "Stealth", "B": "Burst Communications", "C": "Terrain Bounce", "D": "Chaff" }, "solution": "A" }, { "question": "Why should a Windows workstation be shut down when not in use, if possible?", "answers": { "A": "To avoid software conflicts and system errors.", "B": "To reduce the risk of physical theft of the workstation.", "C": "To disconnect from the Internet and prevent unauthorized access.", "D": "To conserve energy and reduce electricity consumption." }, "solution": "C" }, { "question": "What is a possible result of an attacker gaining access to a limited user account with impersonation privileges?", "answers": { "A": "Physical damage to the host machine", "B": "High system performance", "C": "Increase in virtual memory allocation", "D": "System compromise" }, "solution": "D" }, { "question": "What is one main function that determines a password's strength?", "answers": { "A": "Expiration period", "B": "Length and complexity combined", "C": "Complexity only", "D": "Length only" }, "solution": "B" }, { "question": "What type of protection is provided by real-time scanning in antivirus software?", "answers": { "A": "Protection from file deletion or modification", "B": "Protection from unauthorized network access", "C": "Protection against phishing attacks", "D": "Protection against malware when executing processes" }, "solution": "D" }, { "question": "What should the investigative team assess before executing the plan for a computer crime?", "answers": { "A": "All provided answers", "B": "If the computer is active", "C": "If the system is proctected by any security system", "D": "Whether the suspect is near the system" }, "solution": "A" }, { "question": "What are the three address types used in IPv6?", "answers": { "A": "Unicast, Anycast, Multicast", "B": "Public, Private, Loopback", "C": "Host, Network, Gateway", "D": "Dynamic, Static, Virtual" }, "solution": "A" }, { "question": "What should be the focus when designing security components in the Design stage?", "answers": { "A": "Focus on the overall capability and the associated risk factors", "B": "Avoid security for security’s sake", "C": "All provided answers", "D": "Favor mature and proven security technologies" }, "solution": "C" }, { "question": "Dave is developing a key escrow system that requires multiple people to retrieve a key but does not depend on every participant being present. What type of technique is he using?", "answers": { "A": "M of N", "B": "Work function", "C": "Control", "D": "Split knowledge" }, "solution": "A" }, { "question": "What role does enrollment of users play in controlling access and usage in an Instant Messaging system?", "answers": { "A": "Ensuring that the passphrase used for authentication is forgery-resistant", "B": "Limiting the access to directory entries of the enrolled users", "C": "Validating multiple users from outside the system", "D": "Ensuring that the system permits automatic log-on and connectivity without time-outs" }, "solution": "B" }, { "question": "Which of the following is an important aspect of cybersecurity risk management?", "answers": { "A": "Ignoring potential risks", "B": "Sharing sensitive data openly", "C": "Regular risk assessments", "D": "Overlooking compliance regulations" }, "solution": "C" }, { "question": "What does the term 'Safeguard Effectiveness' represent in the context of Information Risk Management?", "answers": { "A": "The measure of the magnitude of loss or impact on the value of an asset", "B": "The degree to which a safeguard may be characterized as effectively mitigating a vulnerability", "C": "The frequency with which a threat is expected to occur annually", "D": "The potential for harm or loss" }, "solution": "B" }, { "question": "Which term best describes a system composed of simple processing elements and weighted connections between them?", "answers": { "A": "Connected Computation Graphs", "B": "Neural networks", "C": "Weighted Matrices", "D": "All of the above" }, "solution": "B" }, { "question": "What is the term for the shared resources in cloud environments?", "answers": { "A": "Virtualization", "B": "Broad network access", "C": "Resource pooling", "D": "Multi-tenancy" }, "solution": "C" }, { "question": "What is the characteristic of a botnet?", "answers": { "A": "It uses infected computers to send out large volumes of spam or viruses", "B": "It secures the network against intrusion attempts", "C": "It operates as an independent entity outside of the network", "D": "It only consists of centrally controlled computers" }, "solution": "A" }, { "question": "What does near-field communication commonly refer to in the context of wireless communication?", "answers": { "A": "Communication for satellite navigation systems", "B": "Communication within large networks", "C": "Communication between two smartphones", "D": "Communication between distant devices" }, "solution": "C" }, { "question": "What is the primary function of a network-based IDS (NIDS)?", "answers": { "A": "To watch traffic coming into and leaving the network", "B": "To manage DHCP servers and IP address leases", "C": "To analyze the subnet local to you", "D": "To monitor traffic on individual hosts" }, "solution": "A" }, { "question": "What is the main concern surrounding the surveillance of Instant Messaging by management?", "answers": { "A": "Pervasive or routine surveillance may stifle the use of IM and diminish its value", "B": "Ensuring that disciplined behavior among users is maintained within IM discussions", "C": "The potential for offensive content and risks of fraud being perpetuated through IM", "D": "Automated surveillance records become a target of attack and may leak information" }, "solution": "A" }, { "question": "Which term is used to describe the unauthorized disclosure of information?", "answers": { "A": "Availability", "B": "Authentication", "C": "Confidentiality", "D": "Integrity" }, "solution": "C" }, { "question": "Which of the following is a primary security concern associated with the use of help systems in application systems?", "answers": { "A": "Introducing system vulnerabilities", "B": "Potential exposure of sensitive information", "C": "Overloading application resources", "D": "Incompatibility with network protocols" }, "solution": "B" }, { "question": "What is the purpose of the Cross-Origin Resource Sharing (CORS) protocol in web applications?", "answers": { "A": "To enforce access control policies based on attributes rather than identities.", "B": "To establish secure connections for exchanging cryptographic keys between servers.", "C": "To facilitate secure transmission of access requests and policies between nodes.", "D": "To prevent unauthorized access to resources outside the origin of a web page." }, "solution": "D" }, { "question": "What is the primary goal of an effective security awareness program?", "answers": { "A": "To monitor compliance of employees with the security program", "B": "To enforce strict adherence to policies and procedures", "C": "To reduce losses associated with intentional or accidental information disclosure", "D": "To make the message important to employees" }, "solution": "C" }, { "question": "In the Williams Quadratic Encipherment, if J(2x + 1/N) = 1, what action is taken when x is odd?", "answers": { "A": "x is replaced by 4(2x+1) modulo N", "B": "x is multiplied by 2 modulo N", "C": "x is squared modulo N", "D": "x is unchanged" }, "solution": "A" }, { "question": "Which characteristic differentiates active sniffing from passive sniffing in a switched network environment?", "answers": { "A": "Active sniffing works without requiring specific permissions on the network", "B": "Active sniffing is dependent on broadcast and multicast frames", "C": "Active sniffing requires manipulating devices to send all traffic to the sniffer", "D": "Active sniffing is less invasive and easier to implement than passive sniffing" }, "solution": "C" }, { "question": "What does an asset value primarily compose of?", "answers": { "A": "Only the initial and on-going financial costs to the organization.", "B": "Fitness for purpose and ease of communication.", "C": "Level of Manual Operations and Auditability and Accountability Features.", "D": "The asset's value to the organization’s production operations, research and development, and business model viability." }, "solution": "D" }, { "question": "What are the goals of the Configuration Management Plan (CMP) and the Configuration Control Board (CCB) as 'tools' in the CM process?", "answers": { "A": "To coordinate with suppliers for the development of automated Configuration Management tools", "B": "To establish well-thought-out plans and the capability for additions and changes, but only when completely implemented to provide appropriate assurances", "C": "To evaluate and approve any potential new tool to be used for CM", "D": "To pursue the attainment of a CMII Certification for automated tools" }, "solution": "B" }, { "question": "What standard is commonly referred to as the most widely used wireless LAN specification standard?", "answers": { "A": "IEEE 802.15", "B": "IEEE 802.3", "C": "Bluetooth", "D": "IEEE 802.11" }, "solution": "D" }, { "question": "Which of the following is often a disadvantage of using a closed system?", "answers": { "A": "Lack of end user support.", "B": "The source code is provided by the Internet community at large.", "C": "The source code cannot be verified.", "D": "Lack of product functionality." }, "solution": "C" }, { "question": "What is the primary purpose of a data warehouse or data mart?", "answers": { "A": "To replace operational databases", "B": "To support business goals and decisions", "C": "To serve as a backup for main databases", "D": "To store raw data without transformation" }, "solution": "B" }, { "question": "Which element is not necessary to establish subject accountability?", "answers": { "A": "Identification verification", "B": "Privacy", "C": "Authorization", "D": "Logging" }, "solution": "B" }, { "question": "What is an example of a fundamental cybersecurity risk related to wireless access and remote network connectivity?", "answers": { "A": "Physical theft of devices", "B": "Phishing attacks through email", "C": "Eavesdropping on wireless communications", "D": "Social engineering attacks" }, "solution": "C" }, { "question": "Which DoS attack sends large amounts of ICMP Echo traffic to a broadcast IP address with a spoofed source address of a victim?", "answers": { "A": "SYN flood attack", "B": "Ping of Death", "C": "Smurf attack", "D": "Botnet attack" }, "solution": "C" }, { "question": "You identify a security risk that you do not have in-house skills to address. You decide to procure contract resources to mitigate this security risk. Which type of risk response strategy are you demonstrating?", "answers": { "A": "Mitigation", "B": "Transference", "C": "Acceptance", "D": "Avoidance" }, "solution": "B" }, { "question": "What is one of the main challenges in providing transparent access for remote employees accessing the internal network?", "answers": { "A": "Keeping detailed logs of system utilization", "B": "Policies that are difficult to implement", "C": "Predicting individual work habits and network usage", "D": "Ensuring all users have the same level of access" }, "solution": "C" }, { "question": "What is the primary responsibility of the SSH Transport Layer Protocol during the key exchange phase?", "answers": { "A": "Exchanging client and server keys / client authentication", "B": "Establishing a TCP connection / client authentication", "C": "Encrypting the communication / Exchanging client and server keys", "D": "All provided answer" }, "solution": "A" }, { "question": "What is the primary purpose of a low-interaction honeypot?", "answers": { "A": "To provide detailed information on the steps involved in exploitation and post-compromise activity.", "B": "To lure attackers and malicious code without being compromised.", "C": "To emulate services and vulnerabilities to attract inbound exploit attempts from attackers.", "D": "To capture the full extent of post-compromise activity for analysis." }, "solution": "C" }, { "question": "If you were to see the following in a packet capture, what would you think was happening? ]]>", "answers": { "A": "Command injection", "B": "XML external entity injection", "C": "Cross‐site scripting", "D": "SQL injection" }, "solution": "B" }, { "question": "At what level of Evaluation Assurance Level (EAL) is extensive formal analysis applied to security TOE?", "answers": { "A": "EAL6", "B": "EAL3", "C": "EAL1", "D": "EAL7" }, "solution": "D" }, { "question": "Why are covert channels a concern in multilevel secure systems?", "answers": { "A": "They allow unauthorized access to sensitive information", "B": "They pose a risk of software tampering", "C": "They can be used to communicate information across security levels", "D": "They create performance bottlenecks in the system" }, "solution": "C" }, { "question": "Which of the following features ensures that information that flows between end users and security servers is not intercepted through spying or eavesdropping?", "answers": { "A": "Access Control", "B": "Encryption", "C": "Application Control", "D": "Authentication" }, "solution": "B" }, { "question": "What does IPsec stand for?", "answers": { "A": "Internet Protocol Security", "B": "Internet Protocol Service", "C": "Internet Privacy and Security", "D": "Internet Protocol Standard" }, "solution": "A" }, { "question": "What is the primary purpose of conducting regular cybersecurity training and awareness programs?", "answers": { "A": "To reduce employee productivity", "B": "To educate users about potential security risks", "C": "To increase the complexity of security measures", "D": "To introduce new software" }, "solution": "B" }, { "question": "What is used to refer to a program that is set up to run in a quiescent state but to activate its payload under specific conditions?", "answers": { "A": "Macro Virus", "B": "Hoax", "C": "DDoS Zombie", "D": "Logic Bomb" }, "solution": "D" }, { "question": "What is an effective measure for obtaining fault tolerance with leased lines or connections to carrier networks?", "answers": { "A": "Deploying a single redundant connection with two different service providers.", "B": "Purchasing connections from two different telcos or service providers, ensuring they connect to the same regional backbone.", "C": "Ensuring that all communication lines from the building are centrally located to prevent single points of failure.", "D": "Considering a nondedicated connection to provide partial availability in the event of a primary leased line failure." }, "solution": "B" }, { "question": "What is the primary goal of security patches in the context of cybersecurity?", "answers": { "A": "To fix known security vulnerabilities and protect against potential exploits.", "B": "To improve the performance of the network infrastructure.", "C": "To introduce new security vulnerabilities for testing purposes.", "D": "To upgrade hardware components to enhance security." }, "solution": "A" }, { "question": "Which term refers to the act of a user professing an identity to the system, such as a logon ID?", "answers": { "A": "Identification", "B": "Accountability", "C": "Authentication", "D": "Authorization" }, "solution": "A" }, { "question": "What is the purpose of MAC Flooding in the context of network sniffing?", "answers": { "A": "To cause the switch to malfunction and send all messages to all ports", "B": "To generate fake MAC addresses for unauthorized access", "C": "To flood the switch with random MAC addresses", "D": "To send excessive traffic to the switch to overload it" }, "solution": "A" }, { "question": "Which information security service verifies the claimed identity of an individual, workstation, or process?", "answers": { "A": "Authentication", "B": "Accountability", "C": "Assurance", "D": "Authorization" }, "solution": "A" }, { "question": "What does a full-open scan do during a port scan?", "answers": { "A": "Attempts to establish a full connection with the target port", "B": "Sends a packet with the FIN flag set to determine if a port is open", "C": "Sends a packet with the SYN flag set to determine if a port is open", "D": "Sends a packet with the ACK flag set to determine if a port is open" }, "solution": "A" }, { "question": "Which standard is used to describe how to call a Web service and where to find the service?", "answers": { "A": "SAML", "B": "WSDL", "C": "WS-Security", "D": "UDDI" }, "solution": "B" }, { "question": "What does the term 'forensics' refer to in the context of information security?", "answers": { "A": "Monitoring network traffic for security threats", "B": "Implementation of secure coding practices", "C": "Investigation of data breaches and security incidents", "D": "Analysis of security logs and audit trails" }, "solution": "C" }, { "question": "Which one of the following tools can be used to launch a distributed denial of service attack against a system or network?", "answers": { "A": "Trinoo", "B": "Satan", "C": "Nmap", "D": "Saint" }, "solution": "A" }, { "question": "What is the protocol used for remote authentication and related services, such as event logging, in a network environment?", "answers": { "A": "Secure Socket Layer", "B": "Uniform Resource Locator", "C": "Synchronous Optical NETwork", "D": "Remote Authentication Dial-In User Service" }, "solution": "D" }, { "question": "How does HTTP serve as a potential protocol for tunneling data?", "answers": { "A": "By allowing a large area for payload content within the request and reply messages.", "B": "By using strong encryption that makes it difficult to inspect the payload content.", "C": "By providing strict access control and limited space for payload content.", "D": "By limiting the types of data that can be transmitted through the protocol." }, "solution": "A" }, { "question": "In asymmetric key cryptography, what is the relationship between the encrypting and decrypting keys?", "answers": { "A": "They have no mathematical relationship", "B": "They have a fixed mathematical relationship", "C": "They have the same value and are interchangeable", "D": "They have a variable mathematical relationship" }, "solution": "B" }, { "question": "When should the emergency response instructions and checklists be arranged in order of priority?", "answers": { "A": "In reverse order of priority", "B": "With the least important task first", "C": "With the most important task first", "D": "Based on the preferences of the first responders" }, "solution": "C" }, { "question": "In the context of cybersecurity, what is the primary purpose of a smart card?", "answers": { "A": "To contain an embedded chip for secure identification and authentication", "B": "To protect against DoS attacks", "C": "To provide authentication for network access", "D": "To store sensitive information and personal data" }, "solution": "A" }, { "question": "Which method involves enumerating through all possible keys until the proper key is found to decrypt a given cipher text?", "answers": { "A": "Decryption", "B": "Frequency analysis", "C": "Brute-force attack", "D": "Cryptanalysis" }, "solution": "C" }, { "question": "What is the purpose of a security audit in cybersecurity?", "answers": { "A": "To validate compliance with industry regulations and security policies", "B": "To assess the performance of network hardware", "C": "To enhance system speed and efficiency", "D": "To manage software licenses" }, "solution": "A" }, { "question": "Which algorithm is known for its compact design and reduced computational power requirement?", "answers": { "A": "Diffie-Hellman", "B": "Elliptic Curve", "C": "RSA", "D": "RC4" }, "solution": "B" }, { "question": "Which type of vulnerability is identified when the application fails to check the user's permission during a session?", "answers": { "A": "TOCTTOU", "B": "Buffer overflow", "C": "SQL injection", "D": "Backdoor" }, "solution": "A" }, { "question": "What is the primary purpose of access controls in a security infrastructure?", "answers": { "A": "To encrypt all sensitive data in the network", "B": "To manage system backups and recovery processes", "C": "To supervise and monitor employee activities", "D": "To authenticate users and confirm their identities" }, "solution": "D" }, { "question": "Which encryption algorithm operates on a block of data rather than each character?", "answers": { "A": "Triple DES", "B": "RSA", "C": "RC4", "D": "None of the above" }, "solution": "A" }, { "question": "The termination of selected, non-critical processing when a hardware or software failure occurs and is detect.", "answers": { "A": "Capable of detecting and correcting the fault", "B": "Capable of terminating operations in a safe mode", "C": "Capable of only detecting the fault", "D": "Capable of a cold start" }, "solution": "B" }, { "question": "What is the purpose of monitoring in cybersecurity?", "answers": { "A": "To ensure compliance with regulations.", "B": "To review the patterns and trends of data rather than the actual content.", "C": "To inform would-be intruders or those who attempt to violate the security policy that their intended activities are restricted and will be audited and monitored.", "D": "To detect abnormalities, unauthorized occurrences, or outright crimes." }, "solution": "D" }, { "question": "What is the main advantage of an operational forensics program?", "answers": { "A": "Developing cost-effective investigative methods.", "B": "Quickly restoring system operations without losing crucial information.", "C": "Reconstructing data after an intrusion.", "D": "Resolving system malfunctions without proper investigation." }, "solution": "B" }, { "question": "What tasks fall under the category of 'risky' user behavior on a Windows workstation?", "answers": { "A": "Document writing, photo processing, and Web site maintenance.", "B": "Simple gaming, e-mail and instant messaging, and finance management.", "C": "E-mail, Web browsing, and multimedia activities.", "D": "Web browsing with frequent downloads, IRC chat, multimedia experiments, and risky game downloads." }, "solution": "D" }, { "question": "Which principle suggests that security controls should rely on well-specified secrets and not on secrecy about how they operate?", "answers": { "A": "Economy of mechanism", "B": "Fail-safe defaults", "C": "Open design", "D": "Complete mediation" }, "solution": "C" }, { "question": "Which steganography technique involves inserting blocks of data into a host file at consistent locations?", "answers": { "A": "Pattern-based steganography", "B": "Grammar-based steganography", "C": "Insertion-based steganography", "D": "Algorithmic-based steganography" }, "solution": "C" }, { "question": "What is the process of disguising a message to prevent unauthorized access or use?", "answers": { "A": "Firewalling", "B": "Authentication", "C": "Access control", "D": "Encryption" }, "solution": "D" }, { "question": "An SYN attack uses which protocol?", "answers": { "A": "UDP", "B": "TCP", "C": "Telnet", "D": "HTTP" }, "solution": "B" }, { "question": "What should be done to restrict information provided in headers and error messages from web servers?", "answers": { "A": "Displaying server version numbers", "B": "Enabling directory listings", "C": "Restricting information provided", "D": "Using appropriate access control" }, "solution": "C" }, { "question": "What kind of attack uses targeted phishing to lure activists and companies into installing malware that is later used to spy on them?", "answers": { "A": "Espionage", "B": "Ransomware", "C": "Disinformation", "D": "Data leaks" }, "solution": "A" }, { "question": "What network technology makes sniffing harder for attackers?", "answers": { "A": "Mail servers", "B": "Switches", "C": "Hubs", "D": "DHCP" }, "solution": "B" }, { "question": "What is the primary control technology used to limit what devices can connect to a network?", "answers": { "A": "Network access control (NAC)", "B": "Intrusion prevention system (IPS)", "C": "Firewall", "D": "Virtual private network (VPN)" }, "solution": "A" }, { "question": "Which one of the following encryption algorithm modes suffers from the undesirable characteristic of errors propagating between blocks?", "answers": { "A": "Electronic Code Book", "B": "Output Feedback", "C": "Counter", "D": "Cipher Block Chaining" }, "solution": "D" }, { "question": "What potential countermeasure can be implemented to mitigate NFC vulnerabilities?", "answers": { "A": "Shield the NFC devices", "B": "Enhance the protocol with two-factor authentication", "C": "None of the above", "D": "Both A and B are correct" }, "solution": "D" }, { "question": "Which approach is used by the IBM KryptoKnight SSO system to securely transmit secret keys?", "answers": { "A": "Hybrid cryptography", "B": "RSA encryption", "C": "Public key cryptography", "D": "Symmetric key cryptography" }, "solution": "C" }, { "question": "Which type of encryption technology is used with the BitLocker application?", "answers": { "A": "Symmetric", "B": "WPA2", "C": "Asymmetric", "D": "Hashing" }, "solution": "A" }, { "question": "In which stage of an ethical hack would the attacker actively apply tools and techniques to gather more in-depth information on the targets?", "answers": { "A": "Passive reconnaissance", "B": "Gaining access", "C": "Active reconnaissance", "D": "Scanning and enumeration" }, "solution": "D" }, { "question": "What is the purpose of encryption?", "answers": { "A": "To increase network speed", "B": "To improve user experience", "C": "To prevent unauthorized access to data", "D": "To identify network vulnerabilities" }, "solution": "C" }, { "question": "What is the term for the percentage of loss that a realized threat event would have on a specific asset in Risk Analysis?", "answers": { "A": "Single Loss Expectancy (SLE)", "B": "Annualized Loss Expectancy (ALE)", "C": "Exposure Factor (EF)", "D": "Annualized Rate of Occurrence (ARO)" }, "solution": "C" }, { "question": "What is the purpose of Network File System (NFS) in storage networking?", "answers": { "A": "To secure sensitive data on removable media", "B": "To ensure physical environment security", "C": "To allow file systems to be accessed by other computers in the network", "D": "To prevent hardware failure" }, "solution": "C" }, { "question": "What is the primary mechanism used by rootkits to avoid detection?", "answers": { "A": "Encryption of malicious actions to prevent detection.", "B": "Causing system crashes to distract administrators from discovering the rootkit.", "C": "Self-replication to avoid being easily identified.", "D": "Stealth techniques to hide all indications of the attacker's presence on victim systems." }, "solution": "D" }, { "question": "What security mechanism is designed to prevent unauthorized data access and protect the integrity of processes?", "answers": { "A": "Firewall", "B": "Encryption", "C": "Virtualization", "D": "Process isolation" }, "solution": "D" }, { "question": "What mitigation technique in modern processors marks certain areas of memory as nonexecutable to prevent buffer overflow attacks?", "answers": { "A": "Stack cookies", "B": "Address space layout randomization (ASLR)", "C": "Antivirus protection", "D": "Data execution prevention (DEP)" }, "solution": "D" }, { "question": "What is the purpose of risk management in information security?", "answers": { "A": "To implement avoidance strategies for preventing security breaches.", "B": "To assess and address risks in dynamic computing environments.", "C": "To predict the frequency and magnitude of security incidents.", "D": "To protect against theoretical security threats." }, "solution": "B" }, { "question": "What do most VPNs use to protect transmitted data?", "answers": { "A": "Encryption", "B": "Obscurity", "C": "Transmission logging", "D": "Encapsulation" }, "solution": "A" }, { "question": "Which type of fire might a CO2-based fire extinguishing system be most suitable for?", "answers": { "A": "Electrical fires", "B": "Class B fires", "C": "Class A fires", "D": "Combustible metals fire" }, "solution": "A" }, { "question": "Which of these is an example of an application layer gateway?", "answers": { "A": "Runtime application firewall", "B": "Next‐generation firewall", "C": "Email filtering device", "D": "Web application firewall" }, "solution": "D" }, { "question": "Which of the following is NOT considered an authentication factor?", "answers": { "A": "Fingerprint scan", "B": "Username and password", "C": "Log files and audit trail", "D": "Smartcard and PIN" }, "solution": "C" }, { "question": "In switching, decisions about forwarding messages are made based on the:", "answers": { "A": "Hostname", "B": "Physical address", "C": "Port number", "D": "IP address" }, "solution": "B" }, { "question": "What is the purpose of the procurement and contracts policy in information security management?", "answers": { "A": "To ensure consistent security controls with third parties", "B": "To address employee privacy rights", "C": "To establish the process of outsourcing security controls", "D": "To dictate the frequency of vulnerability assessments" }, "solution": "A" }, { "question": "What tool can be used to establish a connection to a remote host by an attacker?", "answers": { "A": "Netcat", "B": "PsExec", "C": "Pwdump", "D": "Winrtgen" }, "solution": "A" }, { "question": "What are the three main goals of cryptography?", "answers": { "A": "Authentication, access control, and authorization", "B": "Confidentiality, integrity, and non-repudiation", "C": "Availability, encryption, and confidentiality", "D": "Integrity, encryption, and authentication" }, "solution": "B" }, { "question": "What is the primary focus of a computer forensic practitioner when testifying in court?", "answers": { "A": "Defending the actions of the defendant", "B": "Focusing on simply answering the questions that demand to be answered", "C": "Ensuring the outcome of the case", "D": "Demonstrating uncertainty in all aspects of evidence" }, "solution": "B" }, { "question": "What is the primary function of Network Address Translation (NAT)?", "answers": { "A": "To create a logical pathway or circuit over a packet-switched network", "B": "To provide exclusive use of a communication path to the current communication partners", "C": "To convert internal IP addresses found in packet headers into public IP addresses for transmission over the Internet", "D": "To encrypt data transmission over a network" }, "solution": "C" }, { "question": "What is a common impact of intranet security breaches on organizations?", "answers": { "A": "Financial loss and reputational damage", "B": "Improved market share", "C": "Increased customer trust", "D": "Decreased competition" }, "solution": "A" }, { "question": "What type of capability does a clustered server provide in terms of fault tolerance?", "answers": { "A": "Automatic rollover or failover", "B": "Data storage redundancy", "C": "Hot rollover for human safety", "D": "Remote journaling for backups" }, "solution": "A" }, { "question": "Which type of encryption protects entire communications circuits by creating a secure tunnel between two points and encrypting all traffic entering and exiting the tunnel?", "answers": { "A": "Link Encryption", "B": "End-to-End Encryption", "C": "SSH Encryption", "D": "IPSec Encryption" }, "solution": "A" }, { "question": "How are permissions defined in the mandatory access control model?", "answers": { "A": "Access control lists", "B": "Defined by the user", "C": "User roles", "D": "Predefined access privileges" }, "solution": "D" }, { "question": "What is the main purpose of a Security Target (ST) in the Common Criteria?", "answers": { "A": "To specify security mechanisms and features that meet the requirements of a PP", "B": "To communicate the security requirements of a consumer to potential developers", "C": "To perform independent evaluations of IT security products", "D": "To demonstrate the completeness of the security function of a TOE" }, "solution": "A" }, { "question": "Why might residential users experience limitations when using VPNs on their ISP networks?", "answers": { "A": "Restrictions imposed by broadband providers to segment allowed services on their networks", "B": "Technical limitations in the deployment of VPN clients on home networks", "C": "Regulatory constraints on using VPNs for residential internet connections", "D": "Increased vulnerability to distributed denial-of-service attacks due to network congestion" }, "solution": "A" }, { "question": "What is the main advantage of using optical fiber as a transmission medium?", "answers": { "A": "Flexibility", "B": "Easier installation", "C": "Low cost", "D": "High bandwidth" }, "solution": "D" }, { "question": "What security measure is typically used by wireless routers for router-to-router traffic?", "answers": { "A": "Service set identifier broadcasting", "B": "Encryption", "C": "Weakening of signal strength", "D": "Unauthorized access point detection" }, "solution": "B" }, { "question": "Which choice below is the BEST description of an audit trail?", "answers": { "A": "An audit trail is a device that permits simultaneous data processing of two or more security levels without risk of compromise.", "B": "Audit trails are used to prevent access to sensitive systems by unauthorized personnel.", "C": "Audit trails are used to detect penetration of a computer system and to reveal usage that identifies misuse.", "D": "An audit trail mediates all access to objects within the network by subjects within the network." }, "solution": "C" }, { "question": "Which type of access control list (ACL) is typically used to specify the criteria for filtering packets by source and destination IP addresses, as well as the type of application used?", "answers": { "A": "Protocol ACL", "B": "IP ACL", "C": "Firewall ACL", "D": "MAC address ACL" }, "solution": "B" }, { "question": "What is the main purpose of SQL injection attack?", "answers": { "A": "To extract sensitive information transmitted over the internet", "B": "To bypass authentication and gain unauthorized access to databases", "C": "To manipulate HTTP response data and redirect users to malicious sites", "D": "To execute denial of service attacks on web servers" }, "solution": "B" }, { "question": "What is the primary security goal of configuration management?", "answers": { "A": "To identify and mitigate security vulnerabilities", "B": "To monitor employee security awareness", "C": "To accurately roll back to a previous version of a system", "D": "To ensure that changes do not unintentionally diminish security" }, "solution": "D" }, { "question": "What is the best defense against sniffing attacks?", "answers": { "A": "Utilizing a switch instead of a hub to create a LAN.", "B": "Encrypting data in transit.", "C": "Applying system patches in a timely manner.", "D": "Conducting periodic vulnerability scans." }, "solution": "B" }, { "question": "What does the *-property in the Biba model indicate?", "answers": { "A": "A subject can only save an object at the same or higher classification level", "B": "A subject cannot send logical service requests to an object of higher integrity", "C": "A subject cannot modify an object of a higher integrity level", "D": "A subject cannot observe an object of a lower integrity level" }, "solution": "C" }, { "question": "Which of the following communication systems within cells engages in the process of endocytosis and exocytosis, facilitating secure transport, communication, and routing between organelles?", "answers": { "A": "Gap junctions", "B": "Extracellular matrix", "C": "Endo- and exocytosis", "D": "Membrane channels" }, "solution": "C" }, { "question": "What is the most effective security countermeasure for dealing with potential data loss from malware infections?", "answers": { "A": "Running software firewalls", "B": "Installing multiple antivirus software", "C": "Frequent system reboots", "D": "Regular system and data backups" }, "solution": "D" }, { "question": "What technology is used to generate a new password every 60 seconds for secure dial-in authentication?", "answers": { "A": "Biometrics", "B": "Static Password", "C": "Time Synchronous", "D": "Dynamic Access Control" }, "solution": "C" }, { "question": "What is the primary purpose of Risk Analysis?", "answers": { "A": "To assess the annual security budget", "B": "To quantify the impact of potential threats", "C": "To eliminate all risks within an organization", "D": "To determine the CEO's salary" }, "solution": "B" }, { "question": "In the context of network attacks, what is the primary purpose of encryption?", "answers": { "A": "To secure communication over the network and authenticate data.", "B": "To prevent attacks from happening in the first place.", "C": "To limit the scope of compromise in a network.", "D": "To mitigate the noise in the internet environment." }, "solution": "A" }, { "question": "In the TCP/IP suite, which layer's function is to ensure the transport or sending of data is successful?", "answers": { "A": "Transport", "B": "Session", "C": "Physical", "D": "Network" }, "solution": "A" }, { "question": "Which of the following refers to the process of disguising a message so that its meaning is not obvious?", "answers": { "A": "Non-repudiation", "B": "Cryptography", "C": "Integrity", "D": "Authentication" }, "solution": "B" }, { "question": "What is the primary purpose of the scripting engine in nmap?", "answers": { "A": "To identify open ports", "B": "To extend the functionality of nmap through custom scripts", "C": "To randomize the hosts being scanned", "D": "To encrypt scan results" }, "solution": "B" }, { "question": "Which encryption method is recommended for SRTP?", "answers": { "A": "RC4", "B": "AES in Galois/Counter Mode", "C": "DES", "D": "SHA1-based HMAC" }, "solution": "B" }, { "question": "Which measurement property of biometric systems must be able to accurately verify an employee throughout the entire length of employment?", "answers": { "A": "Feature analysis", "B": "Consistency over time", "C": "Autonomy of the users", "D": "Accuracy" }, "solution": "B" }, { "question": "What is vishing?", "answers": { "A": "A form of malware that spreads through voice calls", "B": "A social media influence campaign", "C": "A form of phishing attack using voice calls", "D": "A type of attack targeting physical security" }, "solution": "C" }, { "question": "What type of malware was Ramen?", "answers": { "A": "Trojan", "B": "Virus", "C": "Worm", "D": "Ransomware" }, "solution": "C" }, { "question": "According to the FBI’s National Security Threat List, which of the following is listed as an issue?", "answers": { "A": "Perception management", "B": "All provided answers", "C": "Terrorism", "D": "Economic espionage" }, "solution": "B" }, { "question": "In what situation would you employ a proxy server?", "answers": { "A": "You want to filter Internet traffic for internal systems.", "B": "You want to allow outside customers into a corporate website.", "C": "You want to provide IP addresses to internal hosts.", "D": "You wish to share files inside the corporate network." }, "solution": "A" }, { "question": "What is the main purpose of conducting security assessments?", "answers": { "A": "Conducting regular vulnerability scans", "B": "Auditing network bandwidth utilization", "C": "Ensuring compliance with regulations", "D": "Evaluating the effectiveness of security controls" }, "solution": "D" }, { "question": "What is the main purpose of the Code of Fair Information Practices?", "answers": { "A": "Preventing unauthorized access to the internet", "B": "Ensuring that there are no secret record-keeping systems", "C": "Governing personal conduct in the realm of business", "D": "Protecting personal information in a responsible manner" }, "solution": "D" }, { "question": "What does an effective information security awareness program require from employees?", "answers": { "A": "Strict adherence to complex security protocols", "B": "Active participation and awareness", "C": "Involvement in decision-making for the program", "D": "Regularly scheduled group meetings" }, "solution": "B" }, { "question": "How does antivirus software protect the computer?", "answers": { "A": "By installing the latest service pack", "B": "By controlling user rights, permissions, and password policies", "C": "By disabling unnecessary services", "D": "By checking every process as it attempts to execute" }, "solution": "D" }, { "question": "What is the term for the process of redirecting workload to a backup system when the primary system fails?", "answers": { "A": "Failover", "B": "Remote journaling", "C": "Data shadowing", "D": "Server mirroring" }, "solution": "A" }, { "question": "What is the primary purpose of ensuring the authenticity and integrity of a digital certificate?", "answers": { "A": "To establish trust in the certificate and its owner", "B": "To confirm the data contained in the certificate", "C": "To allow multiple sessions over a single connection", "D": "To prevent unauthorized access to the certificate" }, "solution": "A" }, { "question": "Which of the following is a fundamental principle of cybersecurity to ensure system integrity?", "answers": { "A": "Ignoring system alerts", "B": "Using outdated software versions", "C": "Disabling system firewalls", "D": "Regularly verifying system files and configurations" }, "solution": "D" }, { "question": "Which system is customized for forensic usage and includes tools for use in a Windows environment?", "answers": { "A": "Penguin Sleuth", "B": "EnCase®", "C": "Knoppix", "D": "Helix" }, "solution": "D" }, { "question": "Which theorem states that a^p ≡ a (mod p) for any integer a, where p is a prime number?", "answers": { "A": "Euler's Theorem", "B": "RSA Theorem", "C": "Fermat’s Little Theorem", "D": "Merkle's Theorem" }, "solution": "C" }, { "question": "What does the least privilege principle focus on?", "answers": { "A": "Special privileges", "B": "Security incidents", "C": "Administrator accounts", "D": "Access permissions" }, "solution": "D" }, { "question": "In the Cellular Network Vulnerability Assessment Toolkit (CAT), what is the main purpose of the attack graph?", "answers": { "A": "To provide a state transition representation of the paths through a system, starting with the conditions of the attack, followed by attack action, and ending with its cascading effects.", "B": "To pinpoint the specific vulnerabilities in the cellular network configuration.", "C": "To provide a high-level representation of the cellular network specifications.", "D": "To define the different types of attacks that can occur in a cellular network." }, "solution": "A" }, { "question": "Which characteristic of biometric technology is related to the users' ability to decline or not participate in biometric identification systems?", "answers": { "A": "Ease of use", "B": "Privacy concerns", "C": "Social acceptability", "D": "Autonomy of the users" }, "solution": "D" }, { "question": "As the new CISO of his organization, Norbert decided to initiate a comprehensive set of scans. The scans reported that nearly all of his endpoints have known operating system vulnerabilities. What is the most likely root cause of this situation?", "answers": { "A": "The endpoints do not have up-to-date antimalware software installed", "B": "The organization is the victim of an advanced persistent threat", "C": "Brute force attack", "D": "The endpoints have not been kept up-to-date with the latest security patches" }, "solution": "D" }, { "question": "Why is it essential to implement a data retention and disposal policy as part of protecting stored account data?", "answers": { "A": "To ensure that data that is no longer needed is securely deleted or rendered unrecoverable to prevent unnecessary retention of data.", "B": "To complicate data access for authorized personnel.", "C": "To make it easier for malicious individuals to access unnecessary data.", "D": "To maintain an excessive amount of stored data for future reference." }, "solution": "A" }, { "question": "What is the role of Trusted Computing Base (TCB) in a computer system?", "answers": { "A": "It enforces a unified security policy over a product or system", "B": "It manages access control lists", "C": "It ensures compliance with industry regulations", "D": "It performs vulnerability assessments" }, "solution": "A" }, { "question": "Which threat is characterized by unauthorized access to sensitive data through the use of software vulnerabilities and malicious code?", "answers": { "A": "Brute Force Attack", "B": "Phishing", "C": "Man-in-the-Middle (MitM) Attack", "D": "Malware" }, "solution": "D" }, { "question": "Which regional Internet registry is responsible for managing IP addresses in the United States and Canada?", "answers": { "A": "African Network Information Center (AfriNIC)", "B": "Asia Pacific Network Information Centre (APNIC)", "C": "American Registry for Internet Numbers (ARIN)", "D": "Réseaux IP Européens Network Coordination Centre (RIPE NCC)" }, "solution": "C" }, { "question": "What type of controls are often used for controlling access to restricted areas?", "answers": { "A": "Biometric access controls", "B": "Smart cards", "C": "Antivirus software", "D": "Access control software" }, "solution": "A" }, { "question": "Which of the following is the best example of “need-to-know”?", "answers": { "A": "The operators’ duties are frequently rotated.", "B": "Two operators have administrative privileges.", "C": "An operator does not know more about the system than the minimum required to do the job.", "D": "The operators have varied responsibilities to prevent a single individual from compromising the system." }, "solution": "C" }, { "question": "What is the purpose of performing regular software updates and patch management?", "answers": { "A": "To ensure compatibility with new hardware", "B": "To add new features to the software", "C": "To fix security vulnerabilities and bugs", "D": "To enhance system performance" }, "solution": "C" }, { "question": "What is the purpose of separation of duties and responsibilities in security operations?", "answers": { "A": "To ensure that users have access only to data they need to know for their job", "B": "To assess and mitigate the vulnerabilities of security architectures, designs, and solution elements", "C": "To access applications written by someone else", "D": "To prevent fraud and reduce risk by requiring collusion between two or more people to perform unauthorized activity" }, "solution": "D" }, { "question": "What is the purpose of implementing a security policy for mobile computing devices?", "answers": { "A": "To mitigate inherent security risks associated with mobile devices", "B": "To ensure all employees have access to mobile devices", "C": "To prioritize use of personal rather than company-owned mobile devices", "D": "To restrict the use of mobile devices in the network" }, "solution": "A" }, { "question": "Whenever an organization works with a third party, its supply chain risk management (SCRM) processes should be applied. One of the common requirements is the establishment of minimum security requirements of the third party. What should these requirements be based on?", "answers": { "A": "Third-party audit", "B": "Existing security policy", "C": "On-site assessment", "D": "Vulnerability scan results" }, "solution": "B" }, { "question": "What is the percentage of false alarms generated by a system known as?", "answers": { "A": "False-positive rate", "B": "True-positive rate", "C": "False-negative rate", "D": "True-negative rate" }, "solution": "A" }, { "question": "Which social engineering technique involves manipulating a person into providing information or a service they otherwise would never have given?", "answers": { "A": "Phishing", "B": "Impersonation", "C": "Pretexting", "D": "Tailgating" }, "solution": "C" }, { "question": "What is the role of a Certificate Repository in the Public Key Infrastructure (PKI)?", "answers": { "A": "To enroll and generate certificates or the public–private key pair for users", "B": "To hold all public keys in a repository and manage the distribution and revocation of certificates", "C": "To hold all public keys in a repository", "D": "To manage the distribution and revocation of certificates" }, "solution": "B" }, { "question": "Why is it important to limit user access to only necessary network resources?", "answers": { "A": "To improve network speed", "B": "To make the network more accessible", "C": "To reduce the risk of unauthorized access and data breaches", "D": "To encourage collaboration among users" }, "solution": "C" }, { "question": "In the context of cybersecurity, what is steganography?", "answers": { "A": "A method of concealing a message inside another medium so that only the sender and recipient know of its existence.", "B": "The practice of breaking cryptographic algorithms to compromise the security of data.", "C": "The process of reconstructing digital files to ensure their integrity and authenticity.", "D": "A method of encrypting data during transmission to ensure it remains confidential." }, "solution": "A" }, { "question": "Cloud technologies are used to accomplish which of the following?", "answers": { "A": "Cut costs", "B": "Increase management options", "C": "Offload operations onto a third party", "D": "All of the above" }, "solution": "D" }, { "question": "What does precision measure in the context of Intrusion Detection Systems?", "answers": { "A": "The completeness of the detection", "B": "The usefulness of the alerts", "C": "The fraction of real alerts in all alerts", "D": "The fraction of real alerts over all relevant information" }, "solution": "C" }, { "question": "What is the purpose of hashing in cryptography?", "answers": { "A": "To scramble data during transmission", "B": "To convert cipher text into plain text", "C": "To generate a fixed-size string of characters to represent data", "D": "To implement public key encryption" }, "solution": "C" }, { "question": "Which resource record in DNS specifies the authoritative name server for the domain?", "answers": { "A": "A", "B": "NS", "C": "PTR", "D": "SOA" }, "solution": "B" }, { "question": "What type of malicious code is a self-replicating program that spreads from system to system?", "answers": { "A": "Companion Virus", "B": "Polymorphic Virus", "C": "Worm", "D": "Trojan Horse" }, "solution": "C" }, { "question": "Which of the following accurately describes the organization's responsibilities during an unfriendly termination?", "answers": { "A": "To ensure the retention of cryptographic keys by the terminated employee", "B": "To terminate system access for the departing employee as quickly as possible", "C": "To physically remove employees from the premises", "D": "To give employees time to remove necessary files from the network" }, "solution": "B" }, { "question": "Which WAN technology provides high-speed cell switching and is capable of allocating bandwidth upon demand?", "answers": { "A": "Asynchronous Transfer Mode (ATM)", "B": "Frame Relay", "C": "Voice over IP (VoIP)", "D": "X.25" }, "solution": "A" }, { "question": "Which security measure is designed to track and record individuals who access specific areas within a physical location?", "answers": { "A": "Logic-based access control", "B": "Biometric identification", "C": "Authorization tokens", "D": "Surveillance cameras" }, "solution": "D" }, { "question": "What approach is fragile as it restricts who may audit a security control and is ineffective against insider threats or controls that can be reverse-engineered?", "answers": { "A": "Least privilege", "B": "Least common mechanism", "C": "Fail-safe defaults", "D": "Security by obscurity" }, "solution": "D" }, { "question": "Why should IT infrastructure security audits or security reviews be conducted with frequency?", "answers": { "A": "Based on the frequency of cyber attacks.", "B": "Based on the level of risk to warrant the expense and interruption caused by a security audit.", "C": "Based on the availability of new software patches.", "D": "Based on the size of the organization's IT infrastructure." }, "solution": "B" }, { "question": "Where is the optimal place to have a proxy server?", "answers": { "A": "In between a private network and a public network", "B": "In between two public networks", "C": "In between two private networks", "D": "On all of the servers" }, "solution": "A" }, { "question": "How do blacklists help prevent spam?", "answers": { "A": "By encrypting all incoming e-mails", "B": "By modifying the content of incoming e-mails", "C": "By adding sensitive information to the spam database", "D": "By filtering out e-mails from specific IP addresses" }, "solution": "D" }, { "question": "Which type of ticket should be used to obtain a proxy ticket for an end service if the client does not possess a proxiable ticket for the end service?", "answers": { "A": "Backup", "B": "Full", "C": "Blanket", "D": "Direct" }, "solution": "D" }, { "question": "Which of the following protocols enables secure connection to a private trusted network through a public untrusted network, such as the Internet?", "answers": { "A": "TLS", "B": "VPN", "C": "SSL", "D": "HTTP" }, "solution": "B" }, { "question": "Digital signatures encrypt the message hash with which of the following keys?", "answers": { "A": "Sender’s private key", "B": "Receiver’s private key", "C": "Receiver’s public key", "D": "Sender’s public key" }, "solution": "A" }, { "question": "Which of the following is NOT a recommended key agreement protocol for asymmetric schemes?", "answers": { "A": "RSA with PKI", "B": "Diffie-Hellman key exchange without authentication", "C": "DH key exchange with authentication via PKI", "D": "Pre-shared keys" }, "solution": "B" }, { "question": "Which best describes the term 'biometrics'?", "answers": { "A": "The science of measuring and analyzing biological information.", "B": "The study of computer systems and software.", "C": "The analysis of market trends and consumer behavior.", "D": "The process of creating unique digital signatures for authentication." }, "solution": "A" }, { "question": "Which cryptographic algorithm is the U.S. government standard for the secure exchange of sensitive but unclassified data?", "answers": { "A": "Twofish", "B": "Skipjack", "C": "AES", "D": "CAST" }, "solution": "C" }, { "question": "Which method can be used to generate a lot of traffic to take a service offline?", "answers": { "A": "Firewall configurations", "B": "Amplification attacks", "C": "Phishing attacks", "D": "Buffer overflows" }, "solution": "B" }, { "question": "What does DDoS stand for?", "answers": { "A": "Distributed Denial of Service", "B": "Double Denial of Service", "C": "Dual Denial of Services", "D": "Denial of Distributed Services" }, "solution": "A" }, { "question": "What is a weakness that enables a risk to have an impact?", "answers": { "A": "Vulnerability", "B": "Control", "C": "Threat", "D": "Exposure" }, "solution": "A" }, { "question": "What is the purpose of a perimeter breach detection system?", "answers": { "A": "To detect unauthorized activities and notify the authorities", "B": "To sense movement or sound in a specific area", "C": "To engage additional locks and shut doors to prevent intrusion", "D": "To monitor for significant changes in visible light levels for the monitored area" }, "solution": "A" }, { "question": "Which of these is not an advantage of using automation in a cloud environment?", "answers": { "A": "Consistency", "B": "Testability", "C": "Fault tolerance", "D": "Repeatability" }, "solution": "C" }, { "question": "What is the first step of an organization's incident response process?", "answers": { "A": "Identification", "B": "Validation", "C": "Transport encryption", "D": "Follow-up" }, "solution": "A" }, { "question": "Why is upper-level management support critical for the implementation of a security program?", "answers": { "A": "To gain approval for system updates", "B": "To allocate budget for threat intelligence sharing", "C": "To ensure compliance with international security standards", "D": "To establish a focus on security within the organization" }, "solution": "D" }, { "question": "Which protocol uses the concept of flags in the header of a packet?", "answers": { "A": "HTTP", "B": "TCP", "C": "UDP", "D": "IP" }, "solution": "B" }, { "question": "What is the main reason for businesses to prioritize security in deploying and maintaining technology?", "answers": { "A": "To comply with federal regulations", "B": "To gain the trust of customers", "C": "To reduce operational costs", "D": "To ensure the availability of data" }, "solution": "B" }, { "question": "What is the practical implication of the fact that with DSA, even if the same message is signed twice on different occasions, the signatures will differ?", "answers": { "A": "It ensures that the integrity of the message remains intact", "B": "It increases the computational overhead of the signing process", "C": "It allows the recipient to independently verify the authenticity of each signature", "D": "It introduces a potential vulnerability in the signature verification process" }, "solution": "C" }, { "question": "What is the most effective method for controlling dial-up access to a computer system?", "answers": { "A": "Intercepting calls and verifying the identity of the caller (using a dynamic password mechanism)", "B": "Adding modems to personal computers", "C": "Implementing call-back systems", "D": "Using a different phone number each time" }, "solution": "A" }, { "question": "What is the purpose of using groups and roles in access control?", "answers": { "A": "To assign access permissions based on specific user actions", "B": "To manage individual access permissions for each user", "C": "To provide a way to delegate access permissions to multiple users simultaneously", "D": "To limit access to resources based on a user's position in the organization" }, "solution": "C" }, { "question": "What term is used to describe the process of enciphering plaintext to produce ciphertext using a predetermined algorithm and key?", "answers": { "A": "Decoding", "B": "Encoding", "C": "Decryption", "D": "Encryption" }, "solution": "D" }, { "question": "Which type of controls operates after the fact and can be used to track an unauthorized transaction for prosecution or lessen an error's impact by identifying it quickly?", "answers": { "A": "Corrective controls", "B": "Detective controls", "C": "Deterrent controls", "D": "Preventative controls" }, "solution": "B" }, { "question": "According to the HIPAA-CMM, which practice involves administering physical security controls for information systems protection?", "answers": { "A": "Develop Disaster Recovery and Business Continuity Plans", "B": "Administer Physical Security Controls", "C": "Establish Patient Health Care Information Security Controls", "D": "Administer Patient Health Care Information Controls" }, "solution": "B" }, { "question": "Which protocol suite uses cryptography to ensure the confidentiality and integrity of data over a network?", "answers": { "A": "HTTP", "B": "IPsec", "C": "SMTP", "D": "TLS" }, "solution": "B" }, { "question": "Which of the following terms can be used in a description of asymmetric key encryption?", "answers": { "A": "Multifactor", "B": "Single factor", "C": "Public key", "D": "Private key" }, "solution": "C" }, { "question": "What is the main purpose of retaining audit log history for at least 12 months?", "answers": { "A": "To support historical investigations", "B": "To comply with mandatory data retention laws", "C": "To avoid legal liabilities", "D": "To reduce storage requirements" }, "solution": "A" }, { "question": "What is the primary role of the IT director or CIO within an organization?", "answers": { "A": "Handling day-to-day IT operations and support.", "B": "Leading marketing and sales initiatives.", "C": "Facilitating business operations and understanding the direction and technology needs of the corporation.", "D": "Managing financial transactions and accounting processes." }, "solution": "C" }, { "question": "In 2016, which web server technology was estimated to be running on 60% of web servers worldwide?", "answers": { "A": "nginx", "B": "Apache", "C": "IIS", "D": "Netscape" }, "solution": "B" }, { "question": "Which character is the best choice to start a SQL injection attempt?", "answers": { "A": "Colon", "B": "Double quote", "C": "Semicolon", "D": "Single quote" }, "solution": "D" }, { "question": "Imprisonment is a possible sentence under", "answers": { "A": "Civil (tort) law", "B": "Both civil and criminal law", "C": "Criminal law", "D": "Neither civil or criminal law" }, "solution": "C" }, { "question": "Which system does Kerberos primarily authenticate?", "answers": { "A": "Web servers", "B": "Client-server applications and user identities", "C": "Database systems", "D": "Only User accounts" }, "solution": "B" }, { "question": "Which device is used to connect two or more hosts or network segments together at the physical and link layer level?", "answers": { "A": "Router", "B": "Firewall", "C": "Hub", "D": "Bridge" }, "solution": "D" }, { "question": "What does 'cyber stalking' refer to in the context of cybersecurity?", "answers": { "A": "Using electronic media to stalk another person", "B": "Monitoring the Web for illegal activities", "C": "Threatening electronic mail messages", "D": "Sending unsolicited advertising emails" }, "solution": "A" }, { "question": "Why is it important to assign least privileges based on job classification and function?", "answers": { "A": "To prevent unauthorized access or accidental changes to application configuration.", "B": "To grant access to all system components and data.", "C": "To restrict individual access rights.", "D": "To grant maximum access for efficient operations." }, "solution": "A" }, { "question": "What is the HIPAA-CMM based on?", "answers": { "A": "Healthcare administration standards", "B": "Systems security engineering", "C": "Federal healthcare legislation", "D": "Software development quality" }, "solution": "B" }, { "question": "What is an example of a potential consequence of a buffer overflow?", "answers": { "A": "Causing denial of service (DoS) by consuming excessive CPU resources", "B": "Bypassing the authentication process in a program", "C": "Gaining unauthorized access to sensitive files", "D": "All the listed options are possible consequences of a buffer overflow" }, "solution": "D" }, { "question": "What is the purpose of applying the function F in a Feistel cipher?", "answers": { "A": "To derive the subkey", "B": "To split the plaintext into left and right halves", "C": "To generate the keystream", "D": "To process each block of the ciphertext" }, "solution": "D" }, { "question": "How does an ISMS protect by degrees according to the key principles outlined in the security management handbook?", "answers": { "A": "By eliminating all forms of risk", "B": "By reducing residual risk to an acceptable level", "C": "By implementing stringent controls", "D": "By insulating the organization from all vulnerabilities" }, "solution": "B" }, { "question": "What is a potential vulnerability associated with the use of dynamic linked libraries (DLLs) in application systems?", "answers": { "A": "Introduction of malicious code through substitution of trusted components", "B": "Causing system crashes", "C": "Slowing down system performance", "D": "Exposing sensitive data to unauthorized access" }, "solution": "A" }, { "question": "What is the purpose of screening potential personnel prior to hiring in accordance with PCI DSS?", "answers": { "A": "To minimize the risk of attacks from internal sources.", "B": "To ensure shorter onboarding times for new personnel.", "C": "To prevent corporate espionage.", "D": "To maintain a diverse workplace environment." }, "solution": "A" }, { "question": "What was the Internet worm of November 1988 known for?", "answers": { "A": "It exploited a number of vulnerabilities to spread from one machine to another", "B": "It was the first famous case of a service denial-attack", "C": "It was a program written by Robert Morris Jr", "D": "All provided answers are correct" }, "solution": "D" }, { "question": "Which of the following human capabilities and limitations is relevant to usable security?", "answers": { "A": "Cultural diversity", "B": "Physical strength and agility", "C": "Limited attention and memory", "D": "Social networking skills" }, "solution": "C" }, { "question": "Where is the SAM file stored on a Windows 7 system?", "answers": { "A": "/etc/", "B": "C:\\Windows\\System32\\Config\\", "C": "C:\\Windows\\System32\\Drivers\\Config", "D": "C:\\Windows\\System32\\etc\\" }, "solution": "B" }, { "question": "What is the main focus of anti-gundecking measures according to the context?", "answers": { "A": "Preventing staff from applying seals carelessly", "B": "Ensuring that all compartments of baggage are properly sealed", "C": "Detecting staff who pretend to have inspected seals", "D": "Improving the adhesion of tape seals on checked bags" }, "solution": "C" }, { "question": "What is necessary to decrypt a message encrypted with RSA?", "answers": { "A": "The public key", "B": "The decryption exponent", "C": "The encryption exponent", "D": "The product of the prime numbers p and q" }, "solution": "B" }, { "question": "What should employees do to minimize the risk of phishing attacks?", "answers": { "A": "Share their passwords with colleagues for convenience", "B": "Regularly undergo cybersecurity training to recognize phishing attempts", "C": "Click on links and attachments in emails without verifying the source", "D": "Provide personal information over email or the phone when requested" }, "solution": "B" }, { "question": "In the context of cryptography, what is the purpose of a digital signature?", "answers": { "A": "To obscure the content of a message or file, making it unreadable to unauthorized users.", "B": "To encrypt data for secure transmission over the internet.", "C": "To verify the authenticity and integrity of a message or digital document.", "D": "To protect a network from unauthorized access and cyber threats." }, "solution": "C" }, { "question": "In TCP/IP networking, which protocol is used to ask what IP address corresponds to the URL a user enters?", "answers": { "A": "DNS", "B": "TCP", "C": "ARP", "D": "IP" }, "solution": "A" }, { "question": "Which of the following best defines phishing?", "answers": { "A": "A social engineering technique to fraudulently acquire sensitive information", "B": "A technique used to hack into email servers", "C": "A form of hacking that targets computer networks", "D": "A criminal activity using malware to steal sensitive information" }, "solution": "A" }, { "question": "Why is two-factor authentication considered more secure than traditional password-based authentication methods?", "answers": { "A": "It associates each user with a unique digital certificate that serves as an additional layer of identity verification.", "B": "It combines something the user knows (e.g., password) with something the user has (e.g., a mobile device or security token) for authentication.", "C": "It limits access to sensitive information based on user roles and permissions within the network infrastructure.", "D": "It requires users to use a combination of upper and lower case letters, numbers, and special characters to create strong passwords." }, "solution": "B" }, { "question": "What are the three basic elements of protection provided by security technology?", "answers": { "A": "Confidentiality, integrity, availability", "B": "Firewalls, intrusion detection systems, antivirus software", "C": "Authentication, accountability, audit", "D": "Encryption, checksums, digital signatures" }, "solution": "A" }, { "question": "What is the primary goal of the reconnaissance phase during a penetration test?", "answers": { "A": "To survey the scene and collect information about the target location", "B": "To establish the target as a base of operations", "C": "To gain entry into the site or system", "D": "To perform social engineering and exploit vulnerabilities in the process controls" }, "solution": "A" }, { "question": "What is the role of an assessor in the customized approach to PCI DSS requirements?", "answers": { "A": "Defining the compensating controls", "B": "Independently developing appropriate testing procedures for validating the implemented controls", "C": "Documenting the controls matrix", "D": "Replacing the need for ongoing internal reviews of controls" }, "solution": "B" }, { "question": "Which of the following is a common social engineering tactic used to obtain sensitive information?", "answers": { "A": "Denial-of-service attack", "B": "Malware", "C": "Phishing", "D": "Firewall breach" }, "solution": "C" }, { "question": "Which of the following is an example of security issues that can occur within the system development life cycle?", "answers": { "A": "Lack of senior management support", "B": "Security is not involved in the requirements development", "C": "Network latency", "D": "Vendor interoperability" }, "solution": "B" }, { "question": "In a Signature-based Intrusion Detection System, what are used to compare monitored traffic against known threat signatures?", "answers": { "A": "Threat patterns", "B": "DNS queries", "C": "Host names", "D": "Port numbers" }, "solution": "A" }, { "question": "What does an intrusion detection system (IDS) identify an attack as if it does not have the attack's signature in its database?", "answers": { "A": "Legitimate activity", "B": "Behavioral attacks", "C": "Phishing attempts", "D": "Malicious activity" }, "solution": "A" }, { "question": "TLS primarily uses which encryption method for message confidentiality?", "answers": { "A": "AES", "B": "RSA", "C": "Blowfish", "D": "IDEA" }, "solution": "A" }, { "question": "What is the main reason electronic locks are gaining market share?", "answers": { "A": "They are considered more aesthetically pleasing.", "B": "They are less expensive than traditional mechanical locks.", "C": "They have been proven to be impenetrable.", "D": "They enable monitoring of people and devices in real-time." }, "solution": "D" }, { "question": "What is the term used to describe the situation when a security breach occurs due to human error or negligence?", "answers": { "A": "Zero-day exploit", "B": "Insider threat", "C": "Phishing attack", "D": "Unpatched vulnerability" }, "solution": "B" }, { "question": "What does Physical-Layer Identification aim to achieve?", "answers": { "A": "Identifying devices based on their visual appearance", "B": "Classifying devices based on their wireless communication technology", "C": "Fingerprinting the digital circuitry of devices", "D": "Identifying devices by unique characteristics of their analogue circuitry" }, "solution": "D" }, { "question": "What is one of the most important features of access lists, which provides data flow control based on matching criteria contained in the packet?", "answers": { "A": "Packet forwarding", "B": "Packet filtering", "C": "Packet relaying", "D": "Packet inspection" }, "solution": "B" }, { "question": "A Security Parameter Index (SPI) and the identity of the security protocol (AH or ESP) are the components of:", "answers": { "A": "SSL", "B": "S-HTTP", "C": "SSH-2", "D": "IPSec" }, "solution": "D" }, { "question": "Which is the preferred approach for handling new Internet services considered to have unacceptable vulnerabilities?", "answers": { "A": "Deny the service until the firewall vendor develops a secure proxy", "B": "Allow the service and monitor for potential vulnerabilities", "C": "Pass the service through the firewall without a security review", "D": "Immediately integrate the service into the firewall configuration" }, "solution": "A" }, { "question": "What is the primary function of OpenVAS in the context of cybersecurity?", "answers": { "A": "To perform vulnerability assessments", "B": "To encrypt network traffic", "C": "To detect malware threats", "D": "To manage network devices" }, "solution": "A" }, { "question": "What is the vulnerability in Unix where a privileged instruction can be attacked halfway through the process by renaming an object on which it acts?", "answers": { "A": "Deadlock", "B": "Race condition", "C": "Time of check to time of use (TOCTTOU)", "D": "Replay attack" }, "solution": "C" }, { "question": "Which framework is presented as a tool for analyzing architectural conditions and operations in business and does not address specific security practices?", "answers": { "A": "Zachman Framework", "B": "Balanced Scorecard", "C": "NIST", "D": "Federal Information Systems Management Act" }, "solution": "A" }, { "question": "What does the acronym 'VPN' stand for in the context of network security?", "answers": { "A": "Virus Protection Network", "B": "Virtual Personal Network", "C": "Very Private Network", "D": "Virtual Private Network" }, "solution": "D" }, { "question": "What are the key elements of an effective security function?", "answers": { "A": "Password management, obstruction, and retrieval", "B": "Firewall implementation, data encryption, and system patching", "C": "Prevention, detection, containment, and recovery", "D": "Documentation, authorization, and process automation" }, "solution": "C" }, { "question": "What type of secondary memory is a special type managed by the operating system to appear like real memory?", "answers": { "A": "Pagefile", "B": "Cache RAM", "C": "EPROM", "D": "Virtual Memory" }, "solution": "D" }, { "question": "What is the most widely used and effective injection attack globally?", "answers": { "A": "SQL injection", "B": "LDAP injection", "C": "Buffer Overflow", "D": "SOAP injection" }, "solution": "A" }, { "question": "Which level of FIPS 140-2 requires tamper resistance in addition to tamper evidence?", "answers": { "A": "Level 4", "B": "Level 2", "C": "Level 1", "D": "Level 3" }, "solution": "D" }, { "question": "What fundamental principle is emphasized when discussing backups best practices?", "answers": { "A": "Backup data in every month", "B": "Limiting the number of backups to minimize storage cost", "C": "Testing the backup recovery process", "D": "Initializing a backup before each use" }, "solution": "C" }, { "question": "Which of the following enables an attacker to float a domain registration for a maximum of five days?", "answers": { "A": "Kiting", "B": "Domain hijacking", "C": "DNS poisoning", "D": "Spoofing" }, "solution": "A" }, { "question": "Which of the following is a common point of compromise for attackers to go after?", "answers": { "A": "The organization's web server, susceptible to multiple vulnerabilities", "B": "E-mail protocols", "C": "Social network", "D": "All of the above" }, "solution": "A" }, { "question": "Which access control technique allows the owner of an object to control subject access?", "answers": { "A": "TBAC", "B": "MAC", "C": "RBAC", "D": "DAC" }, "solution": "D" }, { "question": "What does SQL stand for in the context of database management?", "answers": { "A": "Systematic Query Listings", "B": "System Qualification Language", "C": "Secure Query Link", "D": "Structured Query Language" }, "solution": "D" }, { "question": "What is the primary purpose of the Gramm–Leach–Bliley Act (GLBA)?", "answers": { "A": "To establish trade secret protection", "B": "To prevent unethical activities", "C": "To promote competitors' intelligence", "D": "To provide data protection measures for financial service organizations" }, "solution": "D" }, { "question": "What is the primary purpose of designating an individual responsible for compliance assurance oversight?", "answers": { "A": "To ensure that the security compliance assurance activities are performed.", "B": "To avoid interaction with other business units.", "C": "To disregard the changes in supporting technical specifications and areas of concern.", "D": "To eliminate the need for a security management governing body." }, "solution": "A" }, { "question": "What is the purpose of URL tracking on a website?", "answers": { "A": "To track when, how often, and who is viewing the website", "B": "To track the amount of content viewed by the user", "C": "To identify the location of the user", "D": "To determine the type of browser used by the user" }, "solution": "A" }, { "question": "What is the aim of cryptographers in complicating the lives of block cipher designers, based on the given content?", "answers": { "A": "To prevent linear and differential cryptanalysis completely.", "B": "To diminish the effectiveness of chosen plaintext attacks.", "C": "To ensure the complete elimination of known attacks such as brute force and dictionary attacks.", "D": "To make it harder to recover the entire key after a successful linear or differential attack." }, "solution": "D" }, { "question": "What is a potential security risk concerning Wi-Fi networks and mobile devices?", "answers": { "A": "Wi-Fi networks are not compatible with mobile devices and may cause connectivity issues.", "B": "Wi-Fi networks may not provide signal strength information to mobile devices.", "C": "Wi-Fi networks are not encrypted, exposing mobile devices to security threats.", "D": "Wi-Fi networks may not have network access control to restrict device connections." }, "solution": "D" }, { "question": "What security concern arises from the reuse of physical hardware in cloud environments?", "answers": { "A": "Availability of virtual machines", "B": "Data confidentiality", "C": "Hardware integrity", "D": "Integrity of data" }, "solution": "B" }, { "question": "What is the purpose of legislative history in some legal systems?", "answers": { "A": "To create a set of guidelines for interpreting legislation", "B": "To replace the existing legislation", "C": "To serve as a binding authority in legal cases", "D": "To provide the intent, purpose, and scope of the law" }, "solution": "D" }, { "question": "What kind of behavior would most likely indicate a host is infected with Storm-Worm, according to the Network for Education and Research in Oregon?", "answers": { "A": "Connection to a Storm-Worm C&C network", "B": "One-way or two-way traffic", "C": "Presence of Internet Control Messaging Protocol errors", "D": "Lack of FINS" }, "solution": "A" }, { "question": "What is the main purpose of a virtual private network (VPN)?", "answers": { "A": "To restrict network access to authorized users", "B": "To create a secure and encrypted connection over a public network", "C": "To block all incoming network traffic", "D": "To monitor network traffic for security threats" }, "solution": "B" }, { "question": "What is the primary advantage of capabilities in managing access control compared to access control lists (ACLs)?", "answers": { "A": "Capabilities provide more efficient runtime security checking and capabilities are easier to delegate", "B": "Capabilities allow for easier tracking of user access permissions", "C": "There is no difference between capabilities and ACLs, and their strengths and weaknesses are essentially the same", "D": "Capabilities simplify the management of large access control lists" }, "solution": "A" }, { "question": "What is the main purpose of a firewall's default catch-all rule at the end of a policy?", "answers": { "A": "To deny all packets", "B": "To allow all packets", "C": "To log all packets", "D": "To prevent rule shadowing" }, "solution": "A" }, { "question": "Why is it important to cease any action on a computer immediately after realizing that a file has been deleted?", "answers": { "A": "To prevent overwriting or further damaging the deleted file.", "B": "To ensure the file is completely deleted from the computer.", "C": "To avoid losing the file permanently.", "D": "To recover the file from the recycle bin." }, "solution": "A" }, { "question": "What form of social engineering attack involves setting up a scenario to get the target to call you with the information needed?", "answers": { "A": "Inside-outside communication", "B": "Reverse social engineering", "C": "Backstopping", "D": "Forward social engineering" }, "solution": "B" }, { "question": "What is a characteristic of a security program at maturity level 4?", "answers": { "A": "Tactical response is mostly under control, allowing the security manager to focus more on strategic efforts", "B": "Senior business management evinces full support for security objectives and includes information risk in the business's overall risk management planning", "C": "No outside assessments of the organization's security posture are performed", "D": "Compliance is monitored in some areas but not in others, resulting in increased risk" }, "solution": "B" }, { "question": "What is the role of the 64-bit value Wt used in each of the 80 rounds in SHA-512?", "answers": { "A": "It represents the output of the final hash value after processing all message blocks.", "B": "A 64-bit value derived from the current 1024-bit block being processed, using a message schedule.", "C": "It signifies a constant value that remains the same across all rounds and all message blocks.", "D": "It is used exclusively for padding the message blocks to ensure they are 1024 bits in length" }, "solution": "B" }, { "question": "What is known as a behavioral or physiological characteristic unique to a subject and used to establish identity or provide authentication?", "answers": { "A": "Dynamic passwords", "B": "Declassification", "C": "Digest access control", "D": "Biometric factor" }, "solution": "D" }, { "question": "Snort is an open-source Intrusion Detection System (IDS) consisting of four components. Which component is responsible for detecting anomalous network traffic?", "answers": { "A": "Preprocessor", "B": "Alerts", "C": "Sniffer", "D": "Detection Engine" }, "solution": "A" }, { "question": "What is the primary advantage of using a public key cryptosystem over a secret key cryptosystem?", "answers": { "A": "It eliminates the need for secure key exchange.", "B": "It provides faster encryption and decryption.", "C": "It ensures higher complexity in the encryption process.", "D": "It offers greater resistance to brute force attacks." }, "solution": "A" }, { "question": "Which element of risk management capability ensures effective coordination between risk management-related groups?", "answers": { "A": "Culture", "B": "Knowledge Management", "C": "Risk Functions", "D": "Training" }, "solution": "C" }, { "question": "What is the primary purpose of iDisk in an Apple environment?", "answers": { "A": "To allow employees to store and access their files from anywhere using a Web browser", "B": "To facilitate the transfer of files within the company's internal network", "C": "To provide centralized storage for employee's personal documents", "D": "To back up important files on the employee's personal computer" }, "solution": "A" }, { "question": "How many permutations were implemented in the VOW-stepper in the PURPLE machine?", "answers": { "A": "20", "B": "25", "C": "30", "D": "6" }, "solution": "B" }, { "question": "What is a potential use of egress filtering mentioned in the text?", "answers": { "A": "Monitoring and controlling software 'phoning home'", "B": "Ensuring that bad things do not enter a network", "C": "Preventing mail with classified content from leaving a network", "D": "Detecting and stopping service denial attacks" }, "solution": "A" }, { "question": "What potential vulnerability may arise when using containers in cloud-native design?", "answers": { "A": "Exposing additional HTTP methods to trigger serverless functions.", "B": "Reduced flexibility and scalability of cloud-based services.", "C": "Inadvertent exposure of ports and shell access to the container image.", "D": "Increased reliance on centralized authentication mechanisms." }, "solution": "C" }, { "question": "What is the primary reason for watermarking an image using invisible watermarking?", "answers": { "A": "To reduce the file size of the image.", "B": "To make the image more aesthetically pleasing.", "C": "To apply a pattern that is invisible to the human eye but detectable by computer programs for authentication and ownership verification.", "D": "To enhance the visual details of the image." }, "solution": "C" }, { "question": "What security measure can prevent data alteration and theft even if an unauthorized remote user gains access to a computer system?", "answers": { "A": "Biometrics", "B": "Physical Devices", "C": "Encryption", "D": "Dynamic Access Control" }, "solution": "C" }, { "question": "Which of the following provides the highest security when it comes to memory?", "answers": { "A": "Hardware segmentation", "B": "Protection rings", "C": "Memory mapping", "D": "Virtual machines" }, "solution": "A" }, { "question": "What is the purpose of the message authentication code (MAC) in IPsec?", "answers": { "A": "To prevent replay attacks", "B": "To provide confidentiality for data", "C": "To facilitate peer authentication", "D": "To ensure data integrity" }, "solution": "D" }, { "question": "Which encryption algorithm is commonly used in secure Wi-Fi communication?", "answers": { "A": "WEP (Wired Equivalent Privacy)", "B": "AES (Advanced Encryption Standard)", "C": "DES (Data Encryption Standard)", "D": "3DES (Triple DES)" }, "solution": "B" }, { "question": "Which type of evaluation was developed by the NSA to assess an organization's security posture and combines a subset of the SSE-CMM with a specialized criticality matrix?", "answers": { "A": "NIACAP (National Information Assurance Certification and Accreditation Process)", "B": "Infosec Assessment Methodology (IAM)", "C": "DITSCAP (DoD Information Technology Security Certification and Accreditation Process)", "D": "OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation)" }, "solution": "B" }, { "question": "What is the main objective of DLP (Data Loss Protection) applications?", "answers": { "A": "To identify anything that leaves the organization that could harm the organization.", "B": "To conduct a thorough risk analysis on an organization's current processes.", "C": "To allow the 'bad guys' out while letting normal, efficient business processes occur.", "D": "To prevent employees from job hunting or posting resumes while working." }, "solution": "A" }, { "question": "What is the purpose of a File Integrity-Checking Mechanism (FIM)?", "answers": { "A": "To check for trojan horses and unauthorized file modifications", "B": "To detect intrusions through protocol anomaly detection", "C": "To monitor log files created by network services", "D": "To analyze application information for packet transmissions" }, "solution": "A" }, { "question": "Which tool would you use if you want to view the contents of a packet?", "answers": { "A": "Loopback adapter", "B": "TDR", "C": "Protocol analyzer", "D": "Port scanner" }, "solution": "C" }, { "question": "When was the first message sent on the Internet?", "answers": { "A": "1982", "B": "1975", "C": "1990", "D": "1969" }, "solution": "D" }, { "question": "Why should an information security program provide meaningful performance data?", "answers": { "A": "To increase the speed of vulnerability assessments", "B": "To prepare for regulatory audits", "C": "To enhance network throughput", "D": "To justify the allocation of resources" }, "solution": "D" }, { "question": "What is the degree to which the information system has safeguards in place to protect it from risk known as?", "answers": { "A": "Vulnerability management", "B": "Security posture", "C": "Integrated risk management", "D": "Resilience" }, "solution": "B" }, { "question": "Which process is used to come up with a believable story to use in a social engineering attack?", "answers": { "A": "Pharming", "B": "Phishing", "C": "Pretexting", "D": "Vishing" }, "solution": "C" }, { "question": "Which of the following is a primary function of DNS in networking?", "answers": { "A": "Monitoring network traffic", "B": "Analyzing web server logs", "C": "Translating names to IP addresses and vice versa", "D": "Creating secure network connections" }, "solution": "C" }, { "question": "What is the main role of a router in a network? (Choose the most suitable option)", "answers": { "A": "To route data from one location to another on Internet", "B": "To change an IP address in transit", "C": "To connect two or more networks to form an internetwork", "D": "To provide voice communication for users" }, "solution": "C" }, { "question": "What is the primary purpose of using a debugger in malware analysis?", "answers": { "A": "To execute and observe malware behavior in real-time.", "B": "To analyze malware source code for vulnerabilities.", "C": "To manipulate malicious code for forensic analysis.", "D": "To dynamically analyze malware without executing it." }, "solution": "A" }, { "question": "What security method, mechanism, or model reveals a capabilities list of a subject across multiple objects?", "answers": { "A": "Biba", "B": "Access control matrix", "C": "Separation of duties", "D": "Clark–Wilson" }, "solution": "B" }, { "question": "What is the main activity of configuration management?", "answers": { "A": "Status accounting", "B": "Configuration control", "C": "Identifying configuration structures and items within the scope of IT infrastructure", "D": "Planning" }, "solution": "C" }, { "question": "Which authentication technology is used to connect hosts to a LAN or WLAN and defines the EAP?", "answers": { "A": "Kerberos", "B": "802.1X", "C": "RADIUS", "D": "LDAP" }, "solution": "B" }, { "question": "How can Windows workstations protect against session hijacking and replay?", "answers": { "A": "By using strong encryption for all network traffic", "B": "By not providing sensitive information in a public forum", "C": "By limiting unnecessary applications on the workstation", "D": "By installing a personal firewall" }, "solution": "A" }, { "question": "Which of the following is a cloud service that provides various software solutions to organizations, especially the ability to develop applications in a virtual environment without the cost or administration of a physical platform?", "answers": { "A": "Software as a Service (SaaS)", "B": "Infrastructure as a Service (IaaS)", "C": "Platform as a Service (PaaS)", "D": "Security as a Service (SECaaS)" }, "solution": "C" }, { "question": "How might a publisher benefit financially by framing a competitor for click fraud?", "answers": { "A": "Improve their reputation", "B": "Harm the competitor", "C": "Increase their ad revenue", "D": "Avoid detection by ad networks" }, "solution": "C" }, { "question": "What is the implication of finding a fragment of ciphertext that matches the pattern of a known plaintext in cryptanalysis of RED cipher machines?", "answers": { "A": "It reveals the number of active pins in the breakwheel", "B": "It identifies the number of inactive breakwheel pins", "C": "It indicates successful performance evaluation of the machine", "D": "It aids in the derivation of letter substitutions for plaintext characters" }, "solution": "D" }, { "question": "Which type of P2P protocol is mainly used for data dissemination applications and does not use a structured addressing scheme?", "answers": { "A": "Unstructured P2P", "B": "Hybrid P2P", "C": "Hierarchical P2P", "D": "Structured P2P" }, "solution": "A" }, { "question": "Which type of site is an alternate processing facility with most supporting peripheral equipment, but without the principal computing platforms?", "answers": { "A": "Warm site", "B": "Hot site", "C": "Mutual aid agreement", "D": "Cold site" }, "solution": "A" }, { "question": "Why is it challenging to predict security incidents in dynamic computing environments?", "answers": { "A": "Trends in computing change rapidly and historical data is limited.", "B": "It is impossible to collect data on security incidents.", "C": "Criminal attacks are difficult to anticipate due to their contrarian nature.", "D": "Avoidance strategies cannot be accurately implemented." }, "solution": "A" }, { "question": "What does CCTV stand for?", "answers": { "A": "Controlled-Channel Television", "B": "Closed-Circuit Television", "C": "Centralized Camera Technology", "D": "Covert Control Transmission" }, "solution": "B" }, { "question": "What is a common method to authenticate remote users in a network environment?", "answers": { "A": "SMTP (Simple Mail Transfer Protocol)", "B": "VPN (Virtual Private Network)", "C": "WEP (Wired Equivalency Protocol)", "D": "Token Ring" }, "solution": "B" }, { "question": "What is the primary purpose of a VPN protocol?", "answers": { "A": "To establish communication sessions between trusted partners", "B": "To transmit data over asynchronous serial connections", "C": "To provide authentication and access control for remote users", "D": "To establish secured tunnels for communications across an untrusted network" }, "solution": "D" }, { "question": "What is the purpose of ARP spoofing in cybersecurity?", "answers": { "A": "To protect against malware attacks", "B": "To encrypt and decrypt network traffic", "C": "To mitigate DDoS attacks", "D": "To intercept and manipulate network traffic on a local network" }, "solution": "D" }, { "question": "Which of the following functions ensures that users have access only to appropriate resources based on the security policy of the enterprise?", "answers": { "A": "Authentication", "B": "Non-repudiation", "C": "Access Control", "D": "Privacy" }, "solution": "C" }, { "question": "What principle of cybersecurity is exemplified by the use of dual control in bank ATM security systems?", "answers": { "A": "Least privilege", "B": "Separation of duties", "C": "Defense in depth", "D": "Security through obscurity" }, "solution": "B" }, { "question": "Which programming language system type generally two different processes are involved before a program is ready for execution?", "answers": { "A": "Compiled languages", "B": "High-level languages", "C": "Interpreted languages", "D": "Hybrid systems" }, "solution": "A" }, { "question": "What should a well-constructed job description address?", "answers": { "A": "The office layout and furniture", "B": "The required security classification for the position", "C": "The personal details of the employee", "D": "The employee's training needs" }, "solution": "B" }, { "question": "What is an anomaly that occurs when a rule in the firewall policy matches every packet that another lower rule also matches?", "answers": { "A": "Half shadowing", "B": "Rule masking", "C": "Rule duplication", "D": "Shadowing" }, "solution": "D" }, { "question": "What is the significance of implementing multi-factor authentication (MFA) in cybersecurity?", "answers": { "A": "Improves system speed and performance", "B": "Reduces the need for regular password changes", "C": "Enhances the complexity of password requirements", "D": "Adds an extra layer of security beyond just a username and password" }, "solution": "D" }, { "question": "Fred, an administrator, has been working within an organization for over 10 years. He previously maintained database servers while working in a different division. He now works in the programming department but still retains privileges on the database servers. He recently modified a setting on a database server so that a script he wrote will run. Unfortunately, his change disabled the server for several hours before database administrators discovered the change and reversed it. Which of the following could have prevented this outage?", "answers": { "A": "Logging", "B": "Account access review", "C": "Multifactor authentication", "D": "A policy requiring strong authentication" }, "solution": "B" }, { "question": "What should individuals do when they receive suspicious emails in the context of cybersecurity best practices?", "answers": { "A": "Reply to the email asking for more information", "B": "Forward the email to other colleagues to spread awareness", "C": "Click on any links or download any attachments in the email", "D": "Delete the email and not engage with the content" }, "solution": "D" }, { "question": "How does a SYN flood attack impact a target computer?", "answers": { "A": "It exposes the computer's IP address to the attacker", "B": "It induces a buffer overflow and a denial-of-service situation", "C": "It leads to the encryption of all data on the computer", "D": "It causes the system to reboot repeatedly" }, "solution": "B" }, { "question": "Which cryptographic algorithm is commonly used for secure communication over the Internet, providing encryption and authentication?", "answers": { "A": "MIPS (Million Instructions Per Second)", "B": "IDEA (International Data Encryption Algorithm)", "C": "RSA (Rivest, Shamir, and Adleman)", "D": "RC5 (Rivest Cipher 5)" }, "solution": "C" }, { "question": "What does BS 25999-1:2006 cover?", "answers": { "A": "Process, principles, and terminology for business continuity management.", "B": "A framework for IT security assurance.", "C": "Best practices for implementing security measures.", "D": "Guidelines for initiating and maintaining information security in an organization." }, "solution": "A" }, { "question": "What is the primary distinguishing feature between a cryptographic hash function used for message authentication and a hash function used for digital signatures?", "answers": { "A": "The type of encryption used with the hash function", "B": "The purpose and context in which the hash value is used", "C": "The length of the hash value", "D": "The method of accessing the hash function" }, "solution": "B" }, { "question": "In CIDR notation, how are network blocks designated?", "answers": { "A": "Indicating a subnet mask", "B": "Using a number of prefix bits", "C": "Setting the host bit to 0", "D": "Using an octet decimal value" }, "solution": "B" }, { "question": "What is the importance of a change-detection mechanism in protecting e-commerce payment pages?", "answers": { "A": "To protect against automation attacks on the payment-processing server.", "B": "To detect and respond to unauthorized changes or tampering with the payment pages as seen by the consumer's browser.", "C": "To monitor customer interactions with the payment pages.", "D": "To control the access privileges for payment page administrators." }, "solution": "B" }, { "question": "What is the primary goal of the disaster recovery plan during a business disruption?", "answers": { "A": "To negotiate individual agreements with employees", "B": "To avoid commercial advertising about the disaster", "C": "To prioritize communication and collaboration", "D": "To resume operations with as little operational impact on critical systems as possible" }, "solution": "D" }, { "question": "Which of the following is an essential part of proper media control?", "answers": { "A": "The proper environmental storage of the media", "B": "Accurately and promptly marking all data storage media", "C": "Assuring the accuracy of the backup data", "D": "All of the above" }, "solution": "D" }, { "question": "What is a fundamental best practice to ensure cybersecurity resilience in case of system compromise or failure?", "answers": { "A": "Network segmentation", "B": "Antivirus scanning", "C": "Intrusion Detection System", "D": "Regular data backups" }, "solution": "D" }, { "question": "What is the purpose of a risk assessment in Information Risk Management?", "answers": { "A": "To fund and establish an IRM team", "B": "To establish a common format for corporate policies and documents", "C": "To determine the current status of information security in the target environment and ensure associated risk is managed", "D": "To develop high-level IRM policy statements and objectives" }, "solution": "C" }, { "question": "In which business continuity planning task would you design procedures and mechanisms to mitigate unacceptable risks?", "answers": { "A": "Business impact analysis", "B": "Strategy development", "C": "Resource prioritization", "D": "Provisions and processes" }, "solution": "D" }, { "question": "In which layer of security should an organization control access to the network and the PeopleSoft applications and reports?", "answers": { "A": "Database security", "B": "Network security", "C": "Operating system security", "D": "Application security" }, "solution": "B" }, { "question": "What is the purpose of a network front end?", "answers": { "A": "Monitoring network traffic and utilization", "B": "Controlling the evolution of a network", "C": "Enabling computers to access each other's files", "D": "Implementing network protocols for attachment to a network" }, "solution": "D" }, { "question": "Which transformation in AES involves shifting each row to the left?", "answers": { "A": "ShiftRows", "B": "AddRoundKey", "C": "MixColumns", "D": "SubBytes" }, "solution": "A" }, { "question": "What is the primary purpose of a message authentication code (MAC) in cryptography?", "answers": { "A": "Data Protection", "B": "Message Encryption", "C": "Ensuring Message Integrity", "D": "Preventing Unauthorized Access" }, "solution": "C" }, { "question": "When should information about an incident be communicated to the public?", "answers": { "A": "When the incident affects customer systems or data", "B": "When a vulnerability that affects many people is discovered", "C": "When it is necessary to convey information about new threats", "D": "All the above options could be viable depending on the specifics of the incident" }, "solution": "D" }, { "question": "How many keys exist in a public/private key pair?", "answers": { "A": "2", "B": "1", "C": "3", "D": "4" }, "solution": "A" }, { "question": "What is the purpose of the functionality requirement related to identification and authentication in the MSR document?", "answers": { "A": "To support encryption of authentication data transmitted over networks", "B": "To outline the security features and assurances provided by the system", "C": "To specify how user identification and authentication should be managed", "D": "To define the environmental assumptions for system security" }, "solution": "C" }, { "question": "What is the primary function of a sniffer in cybersecurity?", "answers": { "A": "To log and intercept network traffic", "B": "To restrict access to sensitive network resources", "C": "To remove malware from the network", "D": "To filter out spam emails" }, "solution": "A" }, { "question": "Which programming language is meant to be interpreted at runtime and has a C-inspired syntax?", "answers": { "A": "Java", "B": "JavaScript", "C": "C++", "D": "Python" }, "solution": "B" }, { "question": "What is the tool used to enumerate users, themes, and plugins in a WordPress installation?", "answers": { "A": "wpscan", "B": "dirb", "C": "nmap", "D": "metasploit" }, "solution": "A" }, { "question": "What mode has to be enabled on a network interface to allow all headers in wireless traffic to be captured?", "answers": { "A": "Monitor", "B": "Radio", "C": "Wireless LAN", "D": "Promiscuous" }, "solution": "A" }, { "question": "What is used to decrease the number of false alarms in a cryptanalytic TMTO attack? (Select the most appropriate option)", "answers": { "A": "The use of separate functions for different chains", "B": "The use of permutations as random functions", "C": "Decreasing the number of cycling and merging chains", "D": "Randomly selected starting points for encryption chains" }, "solution": "C" }, { "question": "In the context of symmetric keys, which method is used for combining multiple keys and other data, as per NIST SP 800-133 REV. 2?", "answers": { "A": "All provided answers", "B": "Concatenating two or more keys", "C": "A key-extraction process", "D": "Exclusive-ORing one or more keys and other data" }, "solution": "A" }, { "question": "Which technique uses an algorithm to determine whether a file is performing unauthorized activities, such as writing to the system registry or activating its own built-in email program?", "answers": { "A": "File Integrity Checkers", "B": "Heuristic scanning", "C": "Worm Detection", "D": "Sandboxing" }, "solution": "B" }, { "question": "Which of the following best describes a blue team?", "answers": { "A": "Security team members defending a network", "B": "Security team members with full knowledge of the internal network", "C": "Security team members attacking a network", "D": "A performance group at Universal Studios in Orlando" }, "solution": "A" }, { "question": "Which of the following best describes a relation in a relational database?", "answers": { "A": "A relation represents a collection of tuples with unique values.", "B": "A relation represents a collection of attributes with unique values.", "C": "A relation represents a collection of attributes with distinct values.", "D": "A relation represents a strict mapping from A to B." }, "solution": "A" }, { "question": "What is the main advantage of emulated systems in active malicious code analysis?", "answers": { "A": "They are undetectable by malicious code", "B": "Execute malicious code quicker than standard OSes by only simulating the OS convincingly without fully supporting each API", "C": "They provide direct access to the network packets for real-time monitoring", "D": "They physically sit in the path of the network traffic and can block malicious activity" }, "solution": "B" }, { "question": "Which network topology are you most likely to run across in a large enterprise network?", "answers": { "A": "Ring topology", "B": "Star‐bus hybrid", "C": "Bus topology", "D": "Full mesh" }, "solution": "B" }, { "question": "What SMTP command would you use to get the list of users in a mailing list?", "answers": { "A": "EXPD", "B": "EXPN", "C": "VRML", "D": "VRFY" }, "solution": "B" }, { "question": "What Bluetooth attack involves gaining access to sensitive data on a victim's Bluetooth-enabled device without requiring the pairing process?", "answers": { "A": "Bluetooth eavesdropping", "B": "Bluejacking", "C": "Bluesnarfing", "D": "Bluebugging" }, "solution": "C" }, { "question": "What does the DNS resource record type AAAA represent in the DNS database?", "answers": { "A": "IPv6 address mapping", "B": "Canonical domain name", "C": "Domain verification record", "D": "IPv4 address mapping" }, "solution": "A" }, { "question": "Why are shared secrets and key agreement protocols important in cybersecurity?", "answers": { "A": "To secure mobile devices", "B": "For encryption and decryption of data", "C": "To prevent phishing attacks", "D": "For preventing DDoS attacks" }, "solution": "B" }, { "question": "Which security practice focuses on limiting the scope of an individual's access to the bare minimum necessary to perform their job functions?", "answers": { "A": "Need to Know", "B": "Constrained Delegation", "C": "Least Privilege", "D": "Principle of Least Authority" }, "solution": "C" }, { "question": "How can an organization ensure secure traffic between mobile devices and the organization's network?", "answers": { "A": "By using only company-issued mobile devices for network access", "B": "By using SSL or IPsec VPN tunnel for traffic encryption", "C": "By enforcing two-layer authentication exclusively", "D": "By implementing restrictions on third-party applications and cloud-based storage" }, "solution": "B" }, { "question": "What does SQL stand for?", "answers": { "A": "Secondary Query Language", "B": "Sequential Query Logic", "C": "Structured Query Language", "D": "Systematic Query Logic" }, "solution": "C" }, { "question": "What is the main purpose of machine learning applied to cybersecurity?", "answers": { "A": "To automate the process of recording information logs.", "B": "To automate incident response and execute predefined actions.", "C": "To create a baseline of normal activities and traffic on a network.", "D": "To replace human analysts in cybersecurity operations." }, "solution": "C" }, { "question": "What is an essential aspect of physical security in an organization?", "answers": { "A": "Asset inventory management", "B": "Biometric authentication", "C": "Security awareness training", "D": "A, B, and C each serve distinct functions, yet all three can be essential components of a comprehensive physical security strategy" }, "solution": "D" }, { "question": "Which configuration file is used for specifying DNS spoofing mappings in Ettercap?", "answers": { "A": "/etc/dns-spoof.conf", "B": "/etc/ettercap/etter.dns", "C": "/etc/resolv.conf", "D": "/etc/hosts" }, "solution": "B" }, { "question": "In the vertical organization archetype, which characteristic defines that continuation of membership is dependent upon compliance and loyalty to leaders?", "answers": { "A": "Ideal leader", "B": "Membership from familial system", "C": "Leadership as inspiration", "D": "Compliance and loyalty to leaders" }, "solution": "D" }, { "question": "Which type of firewall analyzes each packet individually in relation to the state of the connection?", "answers": { "A": "UDPFirewall", "B": "Proxy Firewall", "C": "Packet-Filtering Firewall", "D": "Stateful Inspection Firewall" }, "solution": "D" }, { "question": "How can a sandbox be described in the context of cybersecurity?", "answers": { "A": "It isolates and executes potentially malicious software for analysis.", "B": "It is a place for secure data storage.", "C": "It performs routine maintenance tasks on a system.", "D": "It monitors network traffic for any suspicious activity." }, "solution": "A" }, { "question": "What is the purpose of network segmentation in a security control?", "answers": { "A": "Increase network performance", "B": "Create more barriers for hackers", "C": "Group portions of the network into segments for which rules can be defined and access controlled", "D": "Prevent all network communication" }, "solution": "C" }, { "question": "What is the primary goal of creating infrastructure flexibility in the context of security management and resilience?", "answers": { "A": "To recover from supply disruption and adapt to demand fluctuations.", "B": "To outsource key functions to flexible service providers.", "C": "To reduce costs of redundancy in business operations.", "D": "To focus solely on preventing the next attack." }, "solution": "A" }, { "question": "What is the role of the U.S. Department of Justice (DOJ) Computer Crime and Intellectual Property Section (CCIPS) in criminal investigations?", "answers": { "A": "To provide expert help in the conduct of suspect interrogations", "B": "To issue guidelines for searching and seizing computers in connection with criminal investigations", "C": "To institute protection measures against computer crimes within organizations", "D": "To conduct investigations of computer crimes in corporate environments" }, "solution": "B" }, { "question": "What does the term 'vulnerability' refer to in the context of cybersecurity?", "answers": { "A": "A measure of the effectiveness of security controls implemented in an organization", "B": "A weakness in a system or its controls that could be exploited by a threat", "C": "An incident response plan to mitigate the impact of a security breach", "D": "The process of identifying security gaps in a system through testing" }, "solution": "B" }, { "question": "What type of attack spreads from system to system under its own power, potentially consuming massive amounts of resources?", "answers": { "A": "Logic bomb attack", "B": "Rootkit attack", "C": "Worm attack", "D": "Trojan horse attack" }, "solution": "C" }, { "question": "What is the role of HR in a support team of a CIRT?", "answers": { "A": "Assisting in data and system recovery after an incident", "B": "Handling legal matters related to incidents", "C": "Managing technical aspects of an incident", "D": "Assisting in the collection of relevant information and discussion with the employee's manager" }, "solution": "D" }, { "question": "What is the main advantage of using Cipher-Block Chaining (CBC) in encryption?", "answers": { "A": "It enables the use of a variable block size in encryption.", "B": "It allows for more efficient resource utilization during encryption.", "C": "It helps in linking the previous block's ciphertext with the next block's plaintext for encryption.", "D": "It provides greater resistance against statistical analysis of the ciphertext." }, "solution": "C" }, { "question": "What type of data acquisition involves obtaining data directly from hardware media, without the mediation of any third-party software?", "answers": { "A": "Block-level acquisition", "B": "Pseudo-physical data acquisition", "C": "Logical data acquisition", "D": "Physical data acquisition" }, "solution": "D" }, { "question": "What is the main source of information about events on a computer system or network provided by intrusion detection systems (IDSs)?", "answers": { "A": "Firewall logs", "B": "System logs", "C": "Operating systems logs", "D": "Intrusion detection systems (IDSs)" }, "solution": "D" }, { "question": "Which term describes the absence or weakness of a safeguard or countermeasure?", "answers": { "A": "Threat", "B": "Vulnerability", "C": "Risk", "D": "Asset" }, "solution": "B" }, { "question": "What is the primary role of vulnerability tracking processes focusing on maximizing performance?", "answers": { "A": "Minimizing error rate", "B": "Reducing system downtime", "C": "Decreasing time to resolution", "D": "Improving operational effectiveness" }, "solution": "C" }, { "question": "What type of communication applies to a command and control server in a botnet, providing management and control of bots?", "answers": { "A": "IRC or HTTP", "B": "FTP or SMTP", "C": "SSH or Telnet", "D": "RDP or UDP" }, "solution": "A" }, { "question": "Which Linux command enables the owner to assign security rights to the user, group, and others for any resource?", "answers": { "A": "secure", "B": "chmod", "C": "chgrp", "D": "chown" }, "solution": "B" }, { "question": "What is the fundamental purpose of logging and monitoring in an organization's security measures?", "answers": { "A": "To track, record, and review activity to detect and respond to security incidents", "B": "To store backups of critical data", "C": "To manage and enforce user access controls", "D": "To create a record of all employee activities" }, "solution": "A" }, { "question": "What does Kerckhoff's principle state about encryption algorithms?", "answers": { "A": "All encryption algorithms should be kept secret.", "B": "Encryption algorithms are irrelevant for security.", "C": "Encryption algorithms should be publicly known.", "D": "Encryption algorithms should be limited to government use only." }, "solution": "C" }, { "question": "Which of the following processes comes at the end of the system development life cycle?", "answers": { "A": "Development", "B": "Certification", "C": "Logical configuration", "D": "Accreditation" }, "solution": "D" }, { "question": "What is the primary significance of the concept of discrete logarithms in public-key cryptography?", "answers": { "A": "It enables secure and efficient key exchange and digital signature algorithms", "B": "It allows for efficient generation of prime numbers for generating cryptographic keys", "C": "It forms the basis for secure encryption and decryption processes", "D": "It ensures that the cryptographic keys are calculated modulo a prime number" }, "solution": "A" }, { "question": "Which of the following best describes social engineering in the context of cybersecurity?", "answers": { "A": "A technique for encrypting sensitive data", "B": "A type of attack that targets vulnerabilities in computer networks", "C": "A strategy for securing physical premises", "D": "The manipulation of individuals to divulge confidential information" }, "solution": "D" }, { "question": "What legal standard of proof is most commonly used in civil cases?", "answers": { "A": "Preponderance of evidence.", "B": "Probable cause.", "C": "Clear convincing evidence.", "D": "Beyond a reasonable doubt." }, "solution": "A" }, { "question": "What is the main purpose of a military and intelligence attack on a computer system?", "answers": { "A": "To compromise the security of an organization for personal motives", "B": "To extract secret information for military or intelligence purposes", "C": "To disrupt normal life and cause public panic", "D": "To obtain financial gains by stealing money or valuable information" }, "solution": "B" }, { "question": "What is a primary reason for the chronic tendency of overclassification in multilevel secure systems?", "answers": { "A": "Automatic upgrade of new files to the highest label", "B": "Inadequate implementation of mandatory access controls", "C": "Inconvenience in dealing with 'blind write-up'", "D": "Frequent challenges in managing information flow controls" }, "solution": "A" }, { "question": "Which organisation developed the first globally-applicable security standard for consumer IoT?", "answers": { "A": "ETSI", "B": "IEEE", "C": "NIST", "D": "IETF" }, "solution": "A" }, { "question": "What cryptographic principle does the Elliptic Curve Integrated Encryption Scheme (ECIES) use?", "answers": { "A": "SHA-256 hashing", "B": "MD5 hashing", "C": "Diffie-Hellman key exchange", "D": "AES encryption" }, "solution": "C" }, { "question": "In the context of accountability, what is the term used for the process that supports non-repudiation, deterrence, fault isolation, intrusion detection and prevention, and after-action recovery and legal action?", "answers": { "A": "Privacy", "B": "Membership service", "C": "Audit", "D": "Logging" }, "solution": "C" }, { "question": "What is the purpose of DNS Security Extensions (DNSSEC)?", "answers": { "A": "To provide end-to-end protection through the use of digital signatures.", "B": "To protect DNS clients from accepting forged or altered DNS resource records.", "C": "To prevent unauthorized access to SMTP servers.", "D": "To authenticate TLS client and server entities without a certificate authority." }, "solution": "B" }, { "question": "What is the purpose of the Public Key Infrastructure (PKI) in the context of network security?", "answers": { "A": "To manage trust in public key certificates and enable secure communication over insecure networks.", "B": "To provide a standard application layer protocol for secure email transmission.", "C": "To facilitate secure time synchronization between network devices.", "D": "To authenticate the correspondents in a Transport Layer Security (TLS) handshake." }, "solution": "A" }, { "question": "What is one of the potential risks associated with using a passive optical splitter for fiber-optic networks?", "answers": { "A": "Rogue Access Points", "B": "Interference from microwaves and cell towers", "C": "Weak Passwords", "D": "Chromatic Dispersion" }, "solution": "D" }, { "question": "Which of the following refers to a situation where an employee intentionally or unintentionally causes a data breach?", "answers": { "A": "Spyware", "B": "Insider threat", "C": "Phishing", "D": "Denial of Service" }, "solution": "B" }, { "question": "Why is it important to have long periods without repetition in the sequence of keystreams generated by a stream cipher?", "answers": { "A": "To maximize functional complexity", "B": "To avoid repeating the keystream", "C": "To minimize statistical unpredictability", "D": "To ensure high computational complexity" }, "solution": "B" }, { "question": "What is the purpose of a Business Impact Assessment (BIA) in the BCP process?", "answers": { "A": "It estimates the Maximum Tolerable Downtime (MTD)", "B": "It defines the critical support areas of a business", "C": "It assesses the impact of a disruptive event on the business", "D": "It identifies all possible natural and man-made disasters" }, "solution": "C" }, { "question": "What is a key-derivation function (KDF) used in conjunction with?", "answers": { "A": "Decrypting data", "B": "Transforming secret input values into cryptographic keys", "C": "Encrypting data", "D": "Digital signatures" }, "solution": "B" }, { "question": "Which best describes a confined or constrained process?", "answers": { "A": "A process that can run only for a limited time", "B": "A process that controls access to an object", "C": "A process that can access only certain memory locations", "D": "A process that can run only during certain times of the day" }, "solution": "C" }, { "question": "What does the 'Basic Constraints' extension in the X.509 certificate format indicate?", "answers": { "A": "Identify the Certificate Authority (CA) that created and signed the certificate", "B": "Indicate the algorithm used to sign the certificate", "C": "If the subject may act as a Certification Authority (CA) and the maximum path length of a certification path", "D": "Identify the public key being certified" }, "solution": "C" }, { "question": "What method should be used to ensure account data is securely deleted or rendered unrecoverable upon completion of the authorization process?", "answers": { "A": "Rely on automated system processes for data deletion.", "B": "Implement a dedicated secure deletion function or application.", "C": "Use the system's general deletion function.", "D": "Archive the data for future reference." }, "solution": "B" }, { "question": "What is the purpose of minimizing the storage of sensitive authentication data (SAD) after authorization?", "answers": { "A": "To ensure backup copies are available for quick recovery.", "B": "To reduce the potential for unauthorized access and misuse of the data.", "C": "To avoid the need for regular data protection verifications.", "D": "To comply with industry best practices without actual risk reduction." }, "solution": "B" }, { "question": "Which wireless network technology requires a fixed infrastructure to enable communication?", "answers": { "A": "Wireless sensor networks", "B": "CDMA", "C": "GSM", "D": "802.11" }, "solution": "C" }, { "question": "What type of testing is carried out by examining the code without executing the program?", "answers": { "A": "Dynamic Analysis", "B": "Static Code Analysis", "C": "Black-Box Testing", "D": "Fuzz Testing" }, "solution": "B" }, { "question": "What kind of incidents have strengthened support for the implementation of information security best practices?", "answers": { "A": "Incidents not initially detected by companies", "B": "Incidents that have gone through the legal system and had laws upheld", "C": "Cases with small percentage of case law", "D": "Incidents handled outside the legal system" }, "solution": "B" }, { "question": "In the discretionary portion of the Bell-LaPadula model that is based on the access matrix, how the access rights are defined and evaluated is called:", "answers": { "A": "Identification", "B": "Validation", "C": "Authentication", "D": "Authorization" }, "solution": "D" }, { "question": "What is the purpose of testing object events in object-based applications?", "answers": { "A": "To regulate the flow of data between objects", "B": "To determine the response of the object to user interactions", "C": "To identify defects in the application's architecture", "D": "To standardize the appearance of the object across all user interfaces" }, "solution": "B" }, { "question": "Which type of malicious detection software would detect a polymorphic virus by comparing the function of the application rather than comparing it to a known signature?", "answers": { "A": "Heuristic scanner", "B": "Host-based intrusion detection", "C": "Network-based intrusion detection", "D": "Gateway anti-virus scanner" }, "solution": "A" }, { "question": "What is the objective of data mining in the context of a data warehouse?", "answers": { "A": "To create a repository of information from heterogeneous databases", "B": "To support the querying of information without writing specific programs", "C": "To discover unknown relationships among the data", "D": "To normalize data and removing redundant data" }, "solution": "C" }, { "question": "What is the purpose of using a static-dissipative grounding kit when working inside a computer during forensic analysis?", "answers": { "A": "To protect the system and disk drives from static electricity", "B": "To prevent loss of information due to power cutoff", "C": "To avoid triggering a Trojan horse or Logic Bomb", "D": "To review communications programs" }, "solution": "A" }, { "question": "What is the primary difference between circuit switching and packet switching?", "answers": { "A": "Circuit switching is connection-oriented, while packet switching is connectionless.", "B": "Circuit switching uses fixed known delays, while packet switching uses variable delays.", "C": "Circuit switching is used primarily for voice, while packet switching is used for any type of traffic.", "D": "Circuit switching is sensitive to data loss, while packet switching is sensitive to connection loss." }, "solution": "A" }, { "question": "Which type of security appliance uses heuristic analysis based on a regularly updated signature engine to find and block patterns of malware from entering the intranet?", "answers": { "A": "VPN concentrator", "B": "IPS", "C": "Firewall", "D": "RADIUS server" }, "solution": "B" }, { "question": "What is the purpose of the CVE-compatible tool or service?", "answers": { "A": "To provide its own native label for a vulnerability, without using CVE names", "B": "To exclude vulnerabilities not present in the CVE List", "C": "To understand CVE names for vulnerabilities and allow the user to interact with them", "D": "To use only CVE names for vulnerabilities" }, "solution": "C" }, { "question": "Which of the following is true for a host-based IDS?", "answers": { "A": "It monitors an entire network.", "B": "It’s invisible to attackers and authorized users.", "C": "It’s ineffective on switched networks.", "D": "It monitors a single system." }, "solution": "D" }, { "question": "What is the basic idea of pattern matching intrusion detection systems?", "answers": { "A": "Leverage the ability of a neural network to recognize variations of known patterns of attacks.", "B": "To define attack signatures and monitor system activity for the presence of these signatures.", "C": "Match inputs to a known pattern learned through previous experiences.", "D": "Model acceptable system activity and identify behavior that does not fit that model." }, "solution": "B" }, { "question": "Which term describes the practice of tricking individuals into divulging confidential information or login credentials?", "answers": { "A": "Phishing", "B": "Spyware", "C": "Biometric authentication", "D": "Data encryption" }, "solution": "A" }, { "question": "What is the primary objective of penetration testing in cybersecurity?", "answers": { "A": "To exploit vulnerabilities for malicious purposes", "B": "To create new security policies", "C": "To assess the security controls and defenses", "D": "To encrypt sensitive data" }, "solution": "C" }, { "question": "Which attack allows an attacker to send unsolicited messages to and from mobile devices?", "answers": { "A": "Bluesmacking", "B": "Bluejacking", "C": "BlueSnarfing", "D": "Bluesniffing" }, "solution": "B" }, { "question": "What is an advantage of the Access Control Matrix approach in the context of authorization?", "answers": { "A": "It allows for fine-grained access control and delegation of privileges.", "B": "It ensures efficient access control without the need for authentication.", "C": "It minimizes the number of necessary user clearances.", "D": "It provides simple and easy-to-implement access control rules." }, "solution": "A" }, { "question": "Which type of malware is intended for amusement and may result in a denial of service if people find the prank message frightening?", "answers": { "A": "Trojan", "B": "Virus", "C": "Easter egg", "D": "Prank" }, "solution": "D" }, { "question": "What does SSID stand for in the context of wireless networking security?", "answers": { "A": "Service Set Identifier", "B": "System Service Identifier", "C": "System Secure Identifier", "D": "Secure Signal Identifier" }, "solution": "A" }, { "question": "What is the purpose of a penetration test?", "answers": { "A": "To sabotage a company's operations.", "B": "To determine the effectiveness of the security controls of an organization.", "C": "To identify potential markets for security products.", "D": "To gather sensitive information about a company's employees." }, "solution": "B" }, { "question": "Which of the following wireless technologies uses the 2.4 GHz frequency range?", "answers": { "A": "IrDA", "B": "Bluetooth", "C": "802.11b", "D": "Both B and C" }, "solution": "D" }, { "question": "What is a crucial role of the internal auditors in the context of cybersecurity?", "answers": { "A": "Developing security policies and guidelines for the organization.", "B": "Performing penetration tests and vulnerability analyses.", "C": "Responding to and recovering from disruptive incidents.", "D": "Providing an independent review of controls and compliance." }, "solution": "D" }, { "question": "What is the primary purpose of Java's sandbox for applets?", "answers": { "A": "To provide an isolated environment for safe execution", "B": "To encrypt applet code to prevent unauthorized access", "C": "To scan applets for malicious behavior", "D": "To provide access to system resources for applets" }, "solution": "A" }, { "question": "What does QoS stand for?", "answers": { "A": "Quality of Service", "B": "Query of Support", "C": "Quantum of Security", "D": "Quick Online Service" }, "solution": "A" }, { "question": "What is the best example of 'least privilege'?", "answers": { "A": "The operators' duties are frequently rotated", "B": "An operator does not have more system rights than the minimum required to do the job", "C": "An operator cannot generate and verify transactions alone", "D": "An operator does not know more about the system than the minimum required to do the job" }, "solution": "B" }, { "question": "What is a common defense mechanism against cross-site scripting attacks?", "answers": { "A": "Behavior-based detection", "B": "Firewall configuration", "C": "Input validation", "D": "File integrity monitoring" }, "solution": "C" }, { "question": "What is the purpose of policy reordering to improve firewall performance?", "answers": { "A": "To prioritize more popular rules", "B": "To randomly rearrange the rules", "C": "To add new rules to the policy", "D": "To reduce the number of rules" }, "solution": "A" }, { "question": "In which layer of the OSI model does the ICMP protocol operate?", "answers": { "A": "Network layer", "B": "Transport layer", "C": "Session layer", "D": "Application layer" }, "solution": "A" }, { "question": "What does the 'https://' at the beginning of a URL signify?", "answers": { "A": "The website is not secure", "B": "The website is using a secure, encrypted connection", "C": "The website is a government website", "D": "The website is fake" }, "solution": "B" }, { "question": "Which type of malware was disseminated by an e-mail message sent from hahaha@sexyfun.net around late September 2000?", "answers": { "A": "Trojan", "B": "Worm", "C": "Virus", "D": "Spyware" }, "solution": "B" }, { "question": "Which organization develops and publishes best practice standards on information security?", "answers": { "A": "International Organization for Standardization (ISO)", "B": "National Institute of Standards and Technology (NIST)", "C": "International Electrotechnical Commission (IEC)", "D": "Each organization mentioned is responsible for issuing best practice guidelines on information security" }, "solution": "D" }, { "question": "How is the owner of a data set often identified?", "answers": { "A": "By line managers", "B": "By the business function manager", "C": "By the author or creator of the data object", "D": "By the enterprise in general" }, "solution": "C" }, { "question": "What is a characteristic of linearly independent vectors?", "answers": { "A": "They have zero elements.", "B": "They are not present in Rn.", "C": "They cannot be written as a linear combination of the other vectors.", "D": "They have a common factor other than 1." }, "solution": "C" }, { "question": "Which characteristic is essential to ensuring the correctness of safety-critical systems in CPSs?", "answers": { "A": "Wireless communications", "B": "Network Protocols", "C": "Feedback control systems", "D": "Real-time programming languages" }, "solution": "C" }, { "question": "What is the concept that allows individuals to select who can access their personal and private information online?", "answers": { "A": "Network security architecture", "B": "Data protection policies", "C": "Cybersecurity governance", "D": "Information privacy" }, "solution": "D" }, { "question": "Which protocol is commonly used by a Circuit-level Gateway (CG) to make TCP connections over the Internet?", "answers": { "A": "SOCKS", "B": "SMTP", "C": "DNS", "D": "HTTP" }, "solution": "A" }, { "question": "Who is responsible for implementing the planning, budgeting, and performance of the organization's information security components?", "answers": { "A": "MGR", "B": "CEO", "C": "DH", "D": "CISO" }, "solution": "D" }, { "question": "Searching through the refuse, remains, or leftovers from an organization or operation to discover or infer confidential information is known as ___________________.", "answers": { "A": "Social engineering", "B": "Impersonation", "C": "Dumpster diving", "D": "Inference" }, "solution": "C" }, { "question": "Which type of evidence consists of actual objects that can be brought into the courtroom?", "answers": { "A": "Physical evidence", "B": "Real evidence", "C": "Documentary evidence", "D": "Testimonial evidence" }, "solution": "B" }, { "question": "Which security control category focuses on personnel oversight and business practices?", "answers": { "A": "Compensating", "B": "Administrative", "C": "Deterrent", "D": "Preventive" }, "solution": "B" }, { "question": "The California Consumer Privacy Act provides consumers with all of the following rights except?", "answers": { "A": "The right to submit frivolous requests to businesses", "B": "The right to require businesses to delete their personal information", "C": "The right to access personal information held by businesses", "D": "The right to know what information businesses collect" }, "solution": "A" }, { "question": "What is the purpose of a protected distribution system (PDS)?", "answers": { "A": "To ensure the availability of high-speed broadband services", "B": "To deter unauthorized access to physically transmitted classified information", "C": "To filter and monitor wireless network access points", "D": "To provide a hardened storage system for confidential data" }, "solution": "B" }, { "question": "Which of the following defines the limits or boundaries within which people or systems must work?", "answers": { "A": "Controls", "B": "Compliance", "C": "Data accuracy", "D": "Safeguarding of assets" }, "solution": "A" }, { "question": "What is the primary purpose of a firewall?", "answers": { "A": "To filter and block traffic between separate subnets", "B": "To protect data after it passes out of or into the private network", "C": "To prevent unauthorized disclosure of information by users", "D": "To block unauthorized traffic within a subnet" }, "solution": "A" }, { "question": "What are security associations (SAs) in IPSec?", "answers": { "A": "Logical connection-oriented channels at the network layer", "B": "Unsecure connections between network hosts", "C": "Temporary placeholders for data to be exchanged between hosts", "D": "Predefined rules to control access to network resources" }, "solution": "A" }, { "question": "Which range of IP addresses is reserved for private use?", "answers": { "A": "150.0.0.0 to 150.255.255.255", "B": "210.16.0.0 to 210.16.255.255", "C": "172.168.0.0 to 172.168.255.255", "D": "None of the above " }, "solution": "D" }, { "question": "What is the purpose of using groups in Windows tokens?", "answers": { "A": "To enable fine-grained control of permissions for operations.", "B": "To provide specific identification information for the token holder.", "C": "To restrict access to certain resources based on the user's identity.", "D": "To determine the type of privileges held by the token holder." }, "solution": "A" }, { "question": "What did the U.S. Supreme Court ruling in United States v. American Library Ass'n confirm regarding the use of Internet filtering software in libraries?", "answers": { "A": "It restricts libraries from making content-based judgments", "B": "It is unconstitutional and an infringement on free speech", "C": "It violates library patrons' First Amendment rights", "D": "It does not violate library patrons' First Amendment rights" }, "solution": "D" }, { "question": "What term refers to the property that enables activities on a system to be traced to individuals who might then be held responsible for their actions?", "answers": { "A": "Accountability", "B": "Abstraction", "C": "Authentication", "D": "Access control" }, "solution": "A" }, { "question": "How can ISPs help customers during a DDoS attack?", "answers": { "A": "Provide free firewalls to customers", "B": "Assist customers in installing suitable security measures", "C": "Restrict bandwidth for all customers", "D": "Identify and isolate attack traffic to a specific provider" }, "solution": "D" }, { "question": "Which access control mechanism enables the owner or creator of an object to control and define the access other subjects have to it?", "answers": { "A": "Detective access control", "B": "Discretionary access control", "C": "Distributed access control", "D": "Directive access control" }, "solution": "B" }, { "question": "Which science fiction writer proposed the idea of artificial satellites in orbit for communication?", "answers": { "A": "Isaac Asimov", "B": "Jules Verne", "C": "Arthur C. Clarke", "D": "Ray Bradbury" }, "solution": "C" }, { "question": "What do policies define with regard to a company's resources?", "answers": { "A": "What resources need to be protected and how they should be utilized", "B": "How to implement security controls", "C": "The exact configuration of security devices", "D": "The specific details of security breaches" }, "solution": "A" }, { "question": "Which of the following is not considered a type of auditing activity?", "answers": { "A": "Deployment of countermeasures", "B": "Log analysis", "C": "Recording of event data", "D": "Data reduction" }, "solution": "A" }, { "question": "Which of the following type of firewall is built into the Windows operating system and can be accessed from the Control Panel?", "answers": { "A": "PF", "B": "Windows Firewall", "C": "iptables", "D": "ZoneAlarm" }, "solution": "B" }, { "question": "Which wireless attack involves setting up a rogue access point that mimics a legitimate access point to gather information from stations?", "answers": { "A": "Deauthentication Attack", "B": "Evil Twin attack", "C": "Bluesnarfing", "D": "Bluejacking" }, "solution": "B" }, { "question": "Which protocol enables a client to control network audio and video through a real-time streaming session?", "answers": { "A": "RTP", "B": "SIP", "C": "RTCP", "D": "RTSP" }, "solution": "D" }, { "question": "What does AES stand for, which replaces the Data Encryption Standard (DES)?", "answers": { "A": "Automated Encryption Standard", "B": "Advance Encryption Security", "C": "Advanced Encryption System", "D": "Advanced Encryption Standard" }, "solution": "D" }, { "question": "After performing the TCP three-way handshake, what packet does the requesting client send to terminate the connection gracefully?", "answers": { "A": "FIN", "B": "SYN", "C": "ACK", "D": "RST" }, "solution": "A" }, { "question": "What risk is associated with the uncommon use of authorization response authentication in ATM networks?", "answers": { "A": "Increased likelihood of account takeovers", "B": "Risk of network instability", "C": "Vulnerability to physical attacks", "D": "Potential for unauthorized transactions" }, "solution": "D" }, { "question": "Which standard protocol is used to provide integrity protection and confidential email access?", "answers": { "A": "S/MIME", "B": "DKIM", "C": "SPF", "D": "DNSSEC" }, "solution": "A" }, { "question": "Which display filter for Wireshark shows all TCP packets containing the word facebook?", "answers": { "A": "display==facebook", "B": "tcp contains facebook", "C": "tcp.all contains ==facebook", "D": "content==facebook" }, "solution": "B" }, { "question": "What is the primary concern with using the same password across multiple sites?", "answers": { "A": "It can lead to the compromise of personal information on all sites.", "B": "It can result in frequent password resets.", "C": "It can cause confusion when logging in.", "D": "It can make it difficult to remember which password goes with each site." }, "solution": "A" }, { "question": "What can be used for advanced data correlation and analysis in a honeynet environment?", "answers": { "A": "netForensics software", "B": "Netcat", "C": "Nmap", "D": "Wireshark" }, "solution": "A" }, { "question": "What is a common mistake to avoid when implementing a data warehouse?", "answers": { "A": "Assuming data warehousing and transactional database designs are identical.", "B": "Selecting a data warehouse manager focused more on technology than on user needs.", "C": "Thinking that all issues end once the data warehouse is operational.", "D": "Each of the mentioned options represents a potential mistake to avoid during the implementation of a data warehouse." }, "solution": "D" }, { "question": "What type of access is defined as non-console access in a computer system?", "answers": { "A": "Physical access through hardware components", "B": "Interactive login of system administrators", "C": "Remote management of server configurations", "D": "Access over a network interface" }, "solution": "D" }, { "question": "Why is regular software patching important for cybersecurity?", "answers": { "A": "To increase software complexity", "B": "To ensure compatibility with new devices", "C": "To prevent exploitation of known vulnerabilities", "D": "To reduce overall system performance" }, "solution": "C" }, { "question": "A company is developing a new product to perform simple automated tasks related to indoor gardening. The device will be able to turn lights on and off and control a pump to transfer water. The technology to perform these automated tasks needs to be small and inexpensive. It only needs minimal computational capabilities, does not need networking, and should be able to execute C++ commands natively without the need for an OS. The organization thinks that using an embedded system or a microcontroller may be able to provide the functionality necessary for the product. Which of the following is the best choice to use for this new product?", "answers": { "A": "FPGA", "B": "Raspberry Pi", "C": "Arduino", "D": "RTOS" }, "solution": "C" }, { "question": "Which table shows an example of ciphertext alphabets for the V- and C-Stepper in the PURPLE machine?", "answers": { "A": "A C D E R U B F G H I J K L M N O P Q S T V W X Y Z", "B": "6. jfmgbhxwitoyspkzvueln", "C": "0 jqftxhnigoskzpwvyblm to 0. fzgmbwskfiotivjnpxylq", "D": "V-Stepper ACDERU Bank 0 C-Stepper BFGHIJKLMNOPQSTVWXYZ" }, "solution": "D" }, { "question": "Which type of attack happens when a malicious user sends unexpected data through a web request, sometimes directly into an SQL query from the application server to the database server to execute?", "answers": { "A": "DOM-based XSS attack", "B": "SQL injection", "C": "URL manipulation", "D": "Directory or file traversal" }, "solution": "B" }, { "question": "What is the term that refers to vulnerabilities, exploits, or attacks that were previously unknown to cybersecurity professionals and product vendors?", "answers": { "A": "Pre-day vulnerabilities", "B": "Post-day vulnerabilities", "C": "Zero-day vulnerabilities", "D": "Known-day vulnerabilities" }, "solution": "C" }, { "question": "Which authentication mechanism employs a token device to generate a response based on the challenge from the authentication system?", "answers": { "A": "Challenge-Response Authentication", "B": "Ticket Authentication", "C": "Biometric Authentication", "D": "Single Sign-On (SSO)" }, "solution": "A" }, { "question": "Which of the following is a principle that a forensic expert should adhere to when testifying in court?", "answers": { "A": "Inflate one's own ego by expressing certainty where none exists", "B": "Focus on answering the questions that demand to be answered", "C": "Be certain about the guilt or innocence of the defendant", "D": "Express uncertainty whenever asked" }, "solution": "B" }, { "question": "What is the primary difference between the authentication service (AS) and the ticket-granting service (TGS) in Kerberos?", "answers": { "A": "AS issues the first ticket, while TGS issues tickets for other services using a TGT as proof of identity.", "B": "AS requires biometric authentication, while TGS accepts password-based authentication.", "C": "AS provides digital signatures for messages, while TGS provides encryption keys for secure channels.", "D": "AS manages user credentials, while TGS manages service privileges and roles." }, "solution": "A" }, { "question": "Which choice below is NOT an accurate description or element of remote sensing technology?", "answers": { "A": "Photographic, radar, infrared, or multi-spectral imagery from geostationary or orbiting satellites", "B": "RS intelligence may be integrated into geographic information systems (GIS) to produce map-based products", "C": "Photographic, radar, infrared, or multi-spectral imagery from land-based tracking stations", "D": "Photographic, radar, infrared, or multi-spectral imagery from manned or unmanned aircraft" }, "solution": "C" }, { "question": "What does the term 'Annualized Rate of Occurrence' (ARO) measure?", "answers": { "A": "The measure of the magnitude of loss or impact on the value of an asset", "B": "The frequency with which a threat is expected to occur annually", "C": "The percentage range of asset value loss arising from a threat event", "D": "The frequency with which a threat is expected to occur" }, "solution": "B" }, { "question": "What is the primary function of a SIEM solution in cybersecurity?", "answers": { "A": "Encrypting log files for secure storage", "B": "Capturing and analyzing packets to uncover vulnerabilities and monitor systems", "C": "Real-time monitoring of systems and logs, and automation of alerts", "D": "Providing alternate path to manage devices with no network connection" }, "solution": "C" }, { "question": "What does the likelihood determination step in risk assessment provide an indication of?", "answers": { "A": "The estimated cost of implementing security controls", "B": "The expected impact of a realized threat", "C": "The probability that a potential vulnerability might be exploited", "D": "The motivation level of potential threat-sources" }, "solution": "C" }, { "question": "In the CIA triad, which component ensures that data and resources are available and accessible when needed?", "answers": { "A": "Confidentiality", "B": "Availability", "C": "Integrity", "D": "Authentication" }, "solution": "B" }, { "question": "Which security mechanism is used to secure and protect the application layer of a network over transport layer protocols such as TCP/UDP?", "answers": { "A": "Internet Protocol security (IPsec)", "B": "Virtual private network (VPN)", "C": "Secure Sockets Layer (SSL)", "D": "Transport Layer Security (TLS)" }, "solution": "D" }, { "question": "Which term refers to a computer system or network that is designed to block unauthorized access?", "answers": { "A": "Firewall", "B": "Intrusion detection system", "C": "Antivirus", "D": "Vulnerability scanner" }, "solution": "A" }, { "question": "What type of attack is a denial-of-service (DoS) attack?", "answers": { "A": "Confidentiality Attack", "B": "Availability Attack", "C": "Integrity Attack", "D": "Authentication Attack" }, "solution": "B" }, { "question": "What is the primary function of physically unclonable function (PUF) technology in securing cyber-physical systems?", "answers": { "A": "To encrypt and protect communication channels between cyber-physical components.", "B": "To provide unique and hard-to-replicate identifiers for hardware authentication purposes.", "C": "To establish secure connections between distributed nodes in an industrial control network.", "D": "To enforce strict access control policies for operational technology (OT) devices and systems." }, "solution": "B" }, { "question": "What does the principle of 'defense in depth' refer to?", "answers": { "A": "Encrypting all data within the organization", "B": "Implementing multiple security measures", "C": "Relying on a single security measure", "D": "Moving sensitive data to an external server" }, "solution": "B" }, { "question": "What is the primary security purpose of implementing a wireless intrusion prevention system (WIPS) in a network?", "answers": { "A": "To encrypt wireless network traffic", "B": "To segment wireless users from each other", "C": "To allocate bandwidth for different wireless users", "D": "To detect and prevent unauthorized wireless access points and clients" }, "solution": "D" }, { "question": "What does the term 'Asset' mean in the context of information security?", "answers": { "A": "A sequence of steps performed for a given purpose", "B": "A written description of a course of action", "C": "Anything that has value to the organization", "D": "A security policy" }, "solution": "C" }, { "question": "What is the process where a programmer codes in mechanisms to anticipate and defend against errors in order to avoid termination of execution?", "answers": { "A": "Input validation", "B": "Exception handling", "C": "Input filtering", "D": "Input sanitization" }, "solution": "B" }, { "question": "Which concept refers to creating reliability and stability in networks and systems, ensuring that connectivity is accessible when needed, and allowing authorized users to access the network or systems?", "answers": { "A": "Integrity", "B": "Confidentiality", "C": "Nonrepudiation", "D": "Availability" }, "solution": "D" }, { "question": "Which type of intrusion prevention system (IPS) watches for intrusions that match a known identity?", "answers": { "A": "Signature based", "B": "Anomaly-based", "C": "Behavior-based", "D": "Network-based" }, "solution": "A" }, { "question": "Which type of encryption mode is known for its error propagation property, where the decryption of incorrect data can lead to the incorrect decryption of subsequent blocks?", "answers": { "A": "Cipher Feedback (CFB) Mode", "B": "Counter (CTR) Mode", "C": "Output Feedback (OFB) Mode", "D": "Cipher Block Chaining (CBC) Mode" }, "solution": "D" }, { "question": "In the RSA cryptosystem, what is commonly used as the public key?", "answers": { "A": "The decryption exponent", "B": "The encryption exponent", "C": "The sum of the prime numbers p and q", "D": "The modulus N and encryption exponent e (N,e)" }, "solution": "D" }, { "question": "Which tool can be used to add, remove, or list services in the /etc/rc[0-6].d directory hierarchy on a Linux system?", "answers": { "A": "systemctl", "B": "chkconfig", "C": "initctl", "D": "runlevel" }, "solution": "B" }, { "question": "Which access control model is based on roles and the sets of permissions associated with operations?", "answers": { "A": "Attribute-Based Access Control (ABAC)", "B": "Role-Based Access Control (RBAC)", "C": "Mandatory Access Control (MAC)", "D": "Discretionary Access Control (DAC)" }, "solution": "B" }, { "question": "Which WAN technology uses fixed-size frames or cells and is suitable for voice and video conferencing?", "answers": { "A": "Frame Relay", "B": "ATM", "C": "SMDS", "D": "X.25" }, "solution": "B" }, { "question": "What potential security concern is associated with the use of HTTP 'Cookies'?", "answers": { "A": "The possibility of data mismanagement in the cookies file", "B": "No additional security risk", "C": "The ability to monitor user browsing activities", "D": "The potential for unauthorized access to user preferences" }, "solution": "D" }, { "question": "What did James Reason's research into accidents and safety identify as the main contributors to human errors?", "answers": { "A": "Organizational and local workplace conditions", "B": "Latent failures only", "C": "Active failures only", "D": "A combination of active and latent failures" }, "solution": "D" }, { "question": "What process can be complementary to the associated evaluation criteria and used as a basis for evidence gathering and assurance as required by security mechanisms such as HIPAA?", "answers": { "A": "Systems Security Engineering Capability Maturity Model (SSE-CMM)", "B": "National Security Agency (NSA) InfoSec Assessment Methodology (IAM)", "C": "Common Criteria (CC) Protection Profiles", "D": "Presidential Decision Directive (PDD) 63" }, "solution": "A" }, { "question": "What type of plan development does the business continuity planning process that increases visibility to the customer's needs?", "answers": { "A": "Standardization and process streamlining", "B": "Fair value analysis", "C": "Single points of failure", "D": "Specific timeline" }, "solution": "A" }, { "question": "What is the purpose of Security Information Management (SIM) systems in cybersecurity?", "answers": { "A": "To provide secure access control to network resources", "B": "To manage physical security of the organization's premises", "C": "To monitor and analyze network activities and events for security threats", "D": "To encrypt and protect sensitive data in transit" }, "solution": "C" }, { "question": "Which key management protocol defines the procedures for authenticating a communicating peer and key generation techniques for establishing and maintaining a Security Association?", "answers": { "A": "AH and ESP", "B": "ISAKMP", "C": "SSL/TLS", "D": "DNSSEC" }, "solution": "B" }, { "question": "What is the main purpose of the Rho step function in the SHA-3 algorithm?", "answers": { "A": "Bitwise rotation", "B": "Circular bit shift", "C": "Permutation of bits", "D": "Addition modulo" }, "solution": "B" }, { "question": "In UNIX, what is the purpose of the 'wtmp' file?", "answers": { "A": "Records a copy of all console messages", "B": "Records all executed commands", "C": "Records accounting information", "D": "Records every time a user logs in or out" }, "solution": "D" }, { "question": "What is the best method for preventing unauthorized changes to file and directory integrity?", "answers": { "A": "Regularly inspecting system logs.", "B": "Relying on anti-virus software to identify unauthorized changes.", "C": "Using tools that compute hash values and crypto checksums to detect changes.", "D": "Implementing strong authentication methods for user access." }, "solution": "C" }, { "question": "What technique can an attacker use to recover a password using information from the enumeration phase?", "answers": { "A": "Vertical Privilege Escalation", "B": "Horizontal Privilege Escalation", "C": "Keylogging", "D": "Guessing" }, "solution": "D" }, { "question": "What is the primary goal of the business impact assessment in continuity planning?", "answers": { "A": "Developing recovery strategies", "B": "Identifying and prioritizing time-critical business processes", "C": "Measuring system availability", "D": "Assessing and improving the overall Crisis Management Planning infrastructure" }, "solution": "B" }, { "question": "Memory space insulated from other running processes in a multiprocessing system is part of a:", "answers": { "A": "Security perimeter", "B": "Least upper bound", "C": "Constrained data item", "D": "Protection domain" }, "solution": "D" }, { "question": "What is network address translation (NAT) used for?", "answers": { "A": "To change an IP address in transit", "B": "To segment the network and isolate traffic", "C": "To connect two or more networks to form an internetwork", "D": "To separate a physical LAN into two logical networks" }, "solution": "A" }, { "question": "What is the meaning of privacy in the context of enabling consumer privacy?", "answers": { "A": "A strategy for maintaining customer loyalty and improving customer service", "B": "A company's strategy for customer acquisition and retention", "C": "A customer's preference for conducting interactions with a company", "D": "Freedom from unauthorized intrusion into matters considered personal" }, "solution": "D" }, { "question": "What is the term used for a software designed to block unauthorized access and malicious activities?", "answers": { "A": "Firewall", "B": "Phishing", "C": "Spam", "D": "Malware" }, "solution": "A" }, { "question": "What is the main purpose of encryption in ensuring cybersecurity?", "answers": { "A": "To reduce data storage requirements", "B": "To protect data from unauthorized access", "C": "To make data more accessible", "D": "To increase network speed" }, "solution": "B" }, { "question": "Which framework is primarily concerned with audit measures and points that can be measured and demonstrated?", "answers": { "A": "ISO 27001", "B": "Common Criteria", "C": "COBIT", "D": "BS 7799" }, "solution": "C" }, { "question": "What does the boulder in the punishment of King Sisyphus symbolize in Greek mythology?", "answers": { "A": "Sign of achievement and success", "B": "Eternal struggle and frustration", "C": "Trivial and effortless task", "D": "Endless joy and satisfaction" }, "solution": "B" }, { "question": "Which organization is responsible for protecting U.S. communications and producing foreign intelligence?", "answers": { "A": "NSA (National Security Agency)", "B": "DIRNSA (Director of NSA)", "C": "COMSEC (Communications Security)", "D": "CSS (Central Security Service)" }, "solution": "A" }, { "question": "In public-key cryptography, what is the role of the private key?", "answers": { "A": "It is used to encrypt data and is publicly shared with other users.", "B": "It is used to authenticate and verify the validity of digital certificates.", "C": "It is used to hide the plain-text of the password during transmission.", "D": "It is used to decrypt data and must be kept confidential by the key owner." }, "solution": "D" }, { "question": "Computer forensics techniques are used to search preserve and analyze information on computer systems to find potential evidence for a trial. If you are defending against a tort what would your forensics be focused on if encrypted credit card information has been stolen and used even though you had effective controls in place?", "answers": { "A": "E Discovery", "B": "Steganography", "C": "Criminal Investigation", "D": "Operational Investigation" }, "solution": "D" }, { "question": "Which of the following is a fundamental characteristic of database transactions?", "answers": { "A": "Ambiguity", "B": "Durability", "C": "Flexibility", "D": "Inconsistency" }, "solution": "B" }, { "question": "In continuity planning, what is the significance of a recovery point objective (RPO)?", "answers": { "A": "It assesses the impact of recovery time on operations.", "B": "It determines the maximum tolerable downtime for a business function.", "C": "It measures the potential data loss equivalent to the time-focused recovery time objective (RTO).", "D": "It evaluates the likelihood of a disaster occurrence." }, "solution": "C" }, { "question": "Which protocol binds logical (IP) addresses to physical addresses in a TCP/IP network?", "answers": { "A": "ARP", "B": "ACK", "C": "AES", "D": "AIS" }, "solution": "A" }, { "question": "What is a major drawback of intrusion detection technology?", "answers": { "A": "False positives", "B": "Performance decrements", "C": "Initial cost", "D": "A,B and C" }, "solution": "D" }, { "question": "What propagation technique does the Good Times virus use to spread infection?", "answers": { "A": "File infection", "B": "Boot sector infection", "C": "Macro infection", "D": "None of the above" }, "solution": "D" }, { "question": "Which method should be used to ensure that data cannot be recovered when disposing of data classified at a lower level, but may not be considered acceptable for top secret data?", "answers": { "A": "Purging", "B": "Clearing", "C": "Degaussing", "D": "Destruction" }, "solution": "A" }, { "question": "What is the process of evaluation of each part of a computer system to assess its concordance with security standards called?", "answers": { "A": "Validation", "B": "Authentication", "C": "Certification", "D": "Accreditation" }, "solution": "C" }, { "question": "Role-based access control is useful when", "answers": { "A": "There are frequent personnel changes in an organization", "B": "Security clearances must be used", "C": "Access must be determined by the labels on the data", "D": "Rules are needed to determine clearances" }, "solution": "A" }, { "question": "What are primary trade-off considerations impacting the structure and cost of Configuration Management (CM)?", "answers": { "A": "Automating the transfer and all program source code, object code, and executable code to run a system", "B": "Indication of a new Configuration Management methodology", "C": "Level of detail at which the configuration units are identified, time when the configuration units are placed under CM, and level of formalization required for the CM process", "D": "Maintaining a baseline at a given point in the system life cycle" }, "solution": "C" }, { "question": "What is a regional Internet registry (RIR) responsible for allocating and registering IP addresses and Autonomous System Numbers (ASNs) within a particular region?", "answers": { "A": "North American Network Information Center (NANIC)", "B": "Africa Internet Numbers Registry (AFRINIC)", "C": "Latin American and Caribbean Network Information Center (LACNIC)", "D": "Asia Pacific Network Information Centre (APNIC)" }, "solution": "B" }, { "question": "Which access control model uses assigned labels to identify access and supports hierarchical, compartmentalized, and hybrid environments?", "answers": { "A": "Mandatory Access Control (MAC)", "B": "Attribute-based Access Control (ABAC)", "C": "Role-based Access Control (RBAC)", "D": "Discretionary Access Control (DAC)" }, "solution": "A" }, { "question": "The description of a relational database is called the:", "answers": { "A": "Schema", "B": "Record", "C": "Attribute", "D": "Domain" }, "solution": "A" }, { "question": "In the context of web attacks, what does SQL injection exploit?", "answers": { "A": "User authentication protocols", "B": "Web hosting providers", "C": "Server hardware vulnerabilities", "D": "Database input fields" }, "solution": "D" }, { "question": "What does XSS stand for in cybersecurity?", "answers": { "A": "Xtended Security Solutions", "B": "eXtreme Security Systems", "C": "eXternal Server Security", "D": "Cross-Site Scripting" }, "solution": "D" }, { "question": "According to the risk governance framework, what is the phase where decisions are made about risk management plan and implementation?", "answers": { "A": "Characterisation", "B": "Management processes", "C": "Appraisal", "D": "None of the above" }, "solution": "B" }, { "question": "What is the crossover error rate (CER)?", "answers": { "A": "Is the point at which FRR and FAR are equal", "B": "Is concealed in a Trojan horse program", "C": "Is hidden for out-of-band communication", "D": "May be hidden by a stealth virus" }, "solution": "A" }, { "question": "This IP address A address of 2002:0000:0000:3210:0800:200C:00CF:1234 could be shortened to -----.", "answers": { "A": "2002: : 3210: 800: 200C:CF: 1234", "B": "2002: : 3210: 0800: 200C:OOCF: 1234", "C": "2002: : 321 : 8: 200C:CF: 1234", "D": "2002: : 3210: 8: 200C:CF: 1234" }, "solution": "A" }, { "question": "A firewall can either be software configured on a computer system or a network appliance. Both are designed to block unauthorized access while permitting authorized communications. The firewall which dynamically open ports is called a?", "answers": { "A": "Stateless", "B": "Packet Filter", "C": "Stateful", "D": "Proxy" }, "solution": "C" }, { "question": "Which hashing algorithm would you suggest for securing passwords in 2024?", "answers": { "A": "MD5", "B": "SHA2-256", "C": "bcrypt", "D": "SHA1" }, "solution": "C" }, { "question": "Which IPSec component defines the security services and parameters agreed upon by two entities to communicate securely?", "answers": { "A": "SAML (Security Association Markup Language)", "B": "Tunnel negotiation", "C": "Oakley negotiation", "D": "Security Association (SA)" }, "solution": "D" }, { "question": "Unauthorized access points created by programmers as a rescue option or malicious programs inserted by an attacker that allows an unauthorized entity to gain access into a system or program are called?", "answers": { "A": "Trojan Horse", "B": "Back Door", "C": "Cracked Door", "D": "Remote Access Tool" }, "solution": "B" }, { "question": "Sending messages to Bluetooth-capable devices without the permission of the owner/user is a prank called ___ _.", "answers": { "A": "Blue Snarfing", "B": "Blue Boffing", "C": "Blue Fishing", "D": "Blue Jacking" }, "solution": "D" }, { "question": "Which of the following is a proactive long term plan regarding the ability of critical business functions to continue in operation even in the face of serious threats.", "answers": { "A": "Business Resumption Plan", "B": "Business Continuity Plan", "C": "Incident Response Plan", "D": "Disaster Recovery Plan" }, "solution": "B" }, { "question": "What is the process of storing copies of private keys by a certificate authority called?", "answers": { "A": "Software Escrow", "B": "Key Continuity", "C": "Key Escrow", "D": "Key Journaling" }, "solution": "C" }, { "question": "A trusted authority in a network that generates asymmetric key pairs issues and manages security credentials publishes a CRL and more is a __ _.", "answers": { "A": "Registration Authority", "B": "Certificate Authority", "C": "Online Certificate Status Authority", "D": "Certification Authority" }, "solution": "B" }, { "question": "Cloud computing can be defined as virtual servers resources applications services or anything you consume over the Internet. Which system offers a capability to the consumer to provision processing storage networks and other fundamental computing resources?", "answers": { "A": "SaaS", "B": "MaaS", "C": "PaaS", "D": "laaS" }, "solution": "D" }, { "question": "Common Criteria (CC) was developed as an international IT evaluation criterion. Common Criteria is designed around Trusted Computing Base (TCB). EALs provide a specific level of confidence in the security functions of the system being analyzed. Which level would be most appropriate for a high security environment?", "answers": { "A": "EAL Level 1", "B": "EAL Level 4", "C": "EAL Level 5", "D": "EAL Level 2" }, "solution": "C" }, { "question": "What is the purpose of having formal engineering techniques and tools embedded in the software development process?", "answers": { "A": "To demonstrate the organization's commitment to quality.", "B": "To minimize the possibility of errors in code.", "C": "To catch errors early in the software development process.", "D": "To maximize the speed of the software development process." }, "solution": "C" }, { "question": "What is the Platform for Privacy Preferences Project (P3P) designed for?", "answers": { "A": "To regulate secondary use of personal information.", "B": "To certify data via zero-knowledge proof.", "C": "To allow Web sites to declare their data-collection practices.", "D": "To enforce access control policies." }, "solution": "C" }, { "question": "What is the primary objective of a disaster recovery plan in relation to physical security?", "answers": { "A": "To prevent unauthorized access to computer systems", "B": "To provide reasonable assurance that a computing installation can recover from disasters", "C": "To detect unauthorized changes to production programs", "D": "To enforce separation of duties among employees" }, "solution": "B" }, { "question": "What type of token device produces new time-derived passwords on a specific time interval that can be used only a single time when attempting to authenticate?", "answers": { "A": "SAML", "B": "HMAC", "C": "TOTP", "D": "HOTP" }, "solution": "C" }, { "question": "What security concept involves providing unique identities and access permissions to individuals within an organization?", "answers": { "A": "Cryptography", "B": "Intrusion Detection", "C": "Physical Security", "D": "Access Control" }, "solution": "D" }, { "question": "What is a common cybersecurity practice related to passwords?", "answers": { "A": "Using easily guessable passwords", "B": "Sharing passwords with colleagues", "C": "Storing passwords in a plain text file", "D": "Changing passwords frequently" }, "solution": "D" }, { "question": "What is a key factor in maintaining management's commitment to an information security program?", "answers": { "A": "Ensuring that employees are aware of their rights and responsibilities", "B": "Implementing a lax security policy", "C": "Keeping management aware and involved", "D": "Having regular team-building workshops for employees" }, "solution": "C" }, { "question": "What is the best method to ensure systems have the required patches?", "answers": { "A": "Patch scanner", "B": "Patch management system", "C": "Penetration tester", "D": "Fuzz tester" }, "solution": "B" }, { "question": "Which methodology was dismissed 'inadequate' in the 1970s and 1980s and is now widely recognized as necessary for iterative assurance approaches?", "answers": { "A": "Penetrate-and-Patch", "B": "Resilience testing", "C": "Conflictual approach", "D": "Formal verification" }, "solution": "A" }, { "question": "Which type of attack occurs whenever applications suffer from insufficient user input validation, allowing attackers to insert code into the control flow of the application?", "answers": { "A": "Injection Vulnerabilities", "B": "Physical Attacks", "C": "Local File Inclusion", "D": "Cross-Site Request Forgery (CSRF)" }, "solution": "A" }, { "question": "Which of the following tools is used for forensic file recovery?", "answers": { "A": "Forensic File Recoverer 2.3", "B": "OpenVPN", "C": "PyCrypto", "D": "Scalpel" }, "solution": "D" }, { "question": "Which of the following attacks an already-authenticated connection?", "answers": { "A": "Session hijacking", "B": "Smurf", "C": "Phishing", "D": "Denial of service" }, "solution": "A" }, { "question": "What TCP/IP protocol handles the opening, maintaining, and closing of a session according to the OSI model?", "answers": { "A": "HTTP", "B": "SMTP", "C": "FTP", "D": "TCP" }, "solution": "D" }, { "question": "Which statistical test is used as a goodness-of-fit test in cryptography?", "answers": { "A": "Poker Test", "B": "Monobit Test", "C": "Kolmogorov – Smirnov Test", "D": "Runs Test" }, "solution": "C" }, { "question": "What is the method used to pass information that is not normally used for communication and can bypass security controls?", "answers": { "A": "Open channel", "B": "Overt channel", "C": "Covert channel", "D": "Hidden channel" }, "solution": "C" }, { "question": "Which cryptographic algorithm has been standardized as the Advanced Encryption Standard (AES)?", "answers": { "A": "Triple DES", "B": "Rijndael", "C": "Serpent", "D": "Twofish" }, "solution": "B" }, { "question": "What is the primary purpose of a time bomb in cybersecurity?", "answers": { "A": "To limit the number of iterations in a computer network", "B": "To execute malicious code onto a system at a specific time", "C": "To encrypt data transmission over networks", "D": "To record the time of network events" }, "solution": "B" }, { "question": "What is the role of a Security Operations Center (SOC) in an organization's cybersecurity infrastructure?", "answers": { "A": "Monitoring, detecting, and responding to cybersecurity incidents.", "B": "Implementing network firewalls and intrusion detection systems.", "C": "Managing the organization's compliance with legal regulations.", "D": "Developing encryption algorithms for secure data transmission." }, "solution": "A" }, { "question": "What is the desired result when an application fails due to an error in a secure system?", "answers": { "A": "Fail-soft", "B": "Fail-open", "C": "Fail-secure", "D": "Fail-closed" }, "solution": "C" }, { "question": "Which cybersecurity principle is used to prevent browser-based attacks by denying or terminating malicious scripts from running within the context of the original site?", "answers": { "A": "Misdirection", "B": "Social Engineering", "C": "Cross-Site Scripting (XSS) Mitigation", "D": "Reconnaissance" }, "solution": "C" }, { "question": "What is the primary advantage of shared key authentication in wireless network security?", "answers": { "A": "It reduces the ability of an attacker to create a denial-of-service attack", "B": "It reduces the risk of network eavesdropping", "C": "It reduces the complexity of authenticating wireless users", "D": "It enhances the ability to change encryption keys dynamically" }, "solution": "A" }, { "question": "You have been tasked with designing and implementing a new security policy to address the new threats introduced by the recently installed embedded systems. What is a security risk of an embedded system that is not commonly found in a standard PC?", "answers": { "A": "Control of a mechanism in the physical world", "B": "Software flaws", "C": "Access to the internet", "D": "Power loss" }, "solution": "A" }, { "question": "What are the three main elements of the Risk Analysis process?", "answers": { "A": "Security Policy, Threat, Risk Mitigation", "B": "Quantitative Risk Analysis, Qualitative Risk Analysis, Asset Valuation", "C": "Quantitative Risk Analysis, Regulatory Policies, Security Management", "D": "Threat, Likelihood Matrix, Baseline" }, "solution": "B" }, { "question": "What is a significant advantage of using reflective DLL injection to inject a DLL into a process?", "answers": { "A": "It adds the DLL to the list of loaded modules in the process environment block", "B": "It avoids adding the DLL to the list of loaded modules in the process environment block", "C": "It requires administrative privileges for successful execution", "D": "It is easily detected by modern antivirus software" }, "solution": "B" }, { "question": "What is the main benefit of establishing a data classification program at the corporate level?", "answers": { "A": "Reduction in the security mechanisms for data protection", "B": "Decrease in the quality of data for decision-making", "C": "Consistency in data protection across the enterprise", "D": "Increase in the cost of protecting data" }, "solution": "C" }, { "question": "In a cryptographic system, what does the key space K represent?", "answers": { "A": "The set of all possible plaintexts", "B": "The set of all possible ciphertexts", "C": "The set of all possible encryption algorithms", "D": "The set of all possible keys that can be used with the encryption algorithm" }, "solution": "D" }, { "question": "Which type of connection requires a dedicated physical pathway between two communicating parties?", "answers": { "A": "Remote access connection", "B": "Virtual private network", "C": "Packet switching", "D": "Circuit switching" }, "solution": "D" }, { "question": "Norbert isn’t sure if he is allowed to use his company-owned laptop to send messages to his friend on Facebook. To find out if he can, which policy should he refer to?", "answers": { "A": "Data handling policy", "B": "BYOD policy", "C": "None of the above", "D": "AUP (Acceptable Use Policy)" }, "solution": "D" }, { "question": "What is the purpose of classifying corporate information based on business risk and value?", "answers": { "A": "To increase the cost of protecting data", "B": "To limit the protection mechanisms for data", "C": "To improve decision-making and data quality", "D": "To reduce the quality of data for decision-making" }, "solution": "C" }, { "question": "What is one effect of SQL injection in a database system?", "answers": { "A": "Improves database performance", "B": "Allows unauthorized access to the database", "C": "Leads to a denial of service attack", "D": "Corrupts the database structure" }, "solution": "B" }, { "question": "What are methods in the context of object-oriented programming?", "answers": { "A": "They describe the object's visual characteristics", "B": "They regulate the object's communication with the database", "C": "They control access to the object's properties", "D": "They define the functionality or behavior of the object" }, "solution": "D" }, { "question": "What does the term 'malware' stand for?", "answers": { "A": "Managed Software", "B": "Monitored Software", "C": "Malicious Software", "D": "Manipulative Software" }, "solution": "C" }, { "question": "Which statement is accurate about Evaluation Assurance Levels (EALs) in the Common Criteria (CC)?", "answers": { "A": "A statement of intent to counter specified threats", "B": "Requirements that specify the security behavior of an IT product or system", "C": "A security level equal to the security level of the objects to which the subject has both read and write access", "D": "Predefined packages of assurance components that make up a security confidence rating scale" }, "solution": "D" }, { "question": "Which file system enables file-level security and permission tracking within access control lists (ACLs)?", "answers": { "A": "NTFS", "B": "FAT", "C": "ext4", "D": "FAT32" }, "solution": "A" }, { "question": "What is the target of a slowloris attack?", "answers": { "A": "Operating system", "B": "Hardware module", "C": "Web server", "D": "Router" }, "solution": "C" }, { "question": "What is the purpose of an audit trail in information security?", "answers": { "A": "To detect and identify viruses", "B": "To warn personnel of attempted violations", "C": "To enable the reconstruction and examination of the sequence of events of a transaction", "D": "To control access to the computer or network" }, "solution": "C" }, { "question": "What is the purpose of a virtual machine in cybersecurity?", "answers": { "A": "To allow secure execution of potentially harmful or untrusted programs", "B": "To provide high-speed reading and writing of instructions", "C": "To allocate memory space for programs that execute outside the sandbox", "D": "To enable the execution of multiple programs by one processor" }, "solution": "A" }, { "question": "Which program is commonly used in Microsoft environments to govern user and computer accounts through a set of rules, and can be enhanced with security templates to configure many rules at once?", "answers": { "A": "Windows Update", "B": "Active Directory", "C": "Group Policy Editor", "D": "Local Security Policy" }, "solution": "C" }, { "question": "Which technology standard forms the basis of Web services?", "answers": { "A": "Extensible Markup Language (XML)", "B": "Hypertext Transfer Protocol (HTTP)", "C": "Uniform Description Discovery and Integration (UDDI)", "D": "Simple Object Access Protocol (SOAP)" }, "solution": "A" }, { "question": "A company with highly combustible materials is trying to determine which sprinkler system type to purchase. They are not concerned with false alarms but instead are insistent that the system be effective at extinguishing large and rapidly growing fires extremely fast. Which would be the best sprinkler system for this company?", "answers": { "A": "Wet pipe", "B": "Pre-action", "C": "Dry pipe", "D": "Deluge" }, "solution": "D" }, { "question": "What is the process used to verify the identity of a user, device, or other entity in a computer system?", "answers": { "A": "Encryption", "B": "Authentication", "C": "Authorization", "D": "Audit" }, "solution": "B" }, { "question": "Which federal law designates categories of retail and mass market security software and allows firms to submit these products for review by the Commerce Department to be freely exported if approved?", "answers": { "A": "The Computer Fraud and Abuse Act of 1984", "B": "The Encryption Export Controls Act", "C": "The Digital Millennium Copyright Act of 1998", "D": "The Economic Espionage Act of 1996" }, "solution": "B" }, { "question": "Which protocol provides encrypted alternatives to common internet applications such as FTP, Telnet, and rlogin and is available in versions 1 and 2?", "answers": { "A": "Secure Shell (SSH)", "B": "Secure Socket Layer (SSL)", "C": "Pretty Good Privacy (PGP)", "D": "IP Security (IPsec)" }, "solution": "A" }, { "question": "Which of the following is NOT a best practice for securing sensitive data?", "answers": { "A": "Sharing sensitive data with unauthorized individuals", "B": "Encrypting sensitive data", "C": "Regularly backing up sensitive data", "D": "Using strong authentication methods" }, "solution": "A" }, { "question": "Which of the following is a standard security service provided by application-layer security protocols?", "answers": { "A": "Tunneling", "B": "Confidentiality", "C": "Physical address filtering", "D": "Media shielding" }, "solution": "B" }, { "question": "Which approach involves the use of pattern matching and signatures to identify potential security threats in network traffic?", "answers": { "A": "Sourcefire", "B": "Firewalls", "C": "Intrusion Detection Systems (IDS)", "D": "Network security architecture design" }, "solution": "C" }, { "question": "What is the main defense against cross-site scripting attacks?", "answers": { "A": "Input validation", "B": "User authentication", "C": "Encryption", "D": "Limiting account privileges" }, "solution": "A" }, { "question": "Which approach uses natural language for creating privacy policies and visualizes the results for ensuring their intended goals?", "answers": { "A": "Privacy Management Workbench", "B": "Privacy Preferences Elicitation Framework", "C": "Personal Privacy Policy Surveys", "D": "P3P standard format" }, "solution": "A" }, { "question": "Which document outlines an organization's security scope, identifies assets for protection, and specifies required security measures?", "answers": { "A": "Standard", "B": "Guideline", "C": "Security policy", "D": "Procedure" }, "solution": "C" }, { "question": "Why is segmentation recommended as a method within a PCI DSS assessment?", "answers": { "A": "To eliminate the need for PCI DSS compliance", "B": "To minimize the scope and cost of the PCI DSS assessment", "C": "To complicate the security operations", "D": "To increase the number of in-scope system components" }, "solution": "B" }, { "question": "What is the primary objective of the Integrity Verification Procedure (IVP)?", "answers": { "A": "To secure network communications from eavesdropping", "B": "To analyze network traffic for potential security threats", "C": "To validate the accuracy and reliability of data", "D": "To verify the authenticity of digital certificates" }, "solution": "C" }, { "question": "How can modification attacks be prevented in communication systems?", "answers": { "A": "Employing digital signature verifications and packet checksum verification", "B": "Using one-time authentication mechanisms and session sequencing", "C": "Maintaining physical access security and using encryption", "D": "Deploying DNS spoofing detection and hyperlink validation" }, "solution": "A" }, { "question": "What can be concluded about the output sequence of a linear feedback shift register (LFSR) with a primitive characteristic polynomial if the initial state is not null?", "answers": { "A": "The output sequence contains an equal number of 1's and 0's", "B": "The output sequence is random and unpredictable", "C": "The length of each run of 1's in the output sequence is always N", "D": "The sequence of output states is distinct and periodic with a period of 2N - 1" }, "solution": "D" }, { "question": "During a TCP data exchange, the client has offered a sequence number of 100, and the server has offered 500. During acknowledgments, the packet shows 101 and 501, respectively, as the agreed-upon sequence numbers. With a window size of 5, which sequence numbers would the server willingly accept as part of this session?", "answers": { "A": "102 through 502", "B": "102 through 104", "C": "102 through 501", "D": "Anything above 501" }, "solution": "B" }, { "question": "Which type of network service provides bandwidth on demand and is a preferred connection mechanism for remote LANs that communicate infrequently?", "answers": { "A": "ATM", "B": "X.25", "C": "HSSI", "D": "SMDS" }, "solution": "D" }, { "question": "When should an organization use a centralized security authentication infrastructure instead of decentralized security in each application?", "answers": { "A": "When the organization only has a few small applications and a limited set of users", "B": "When the organization has severe budget constraints", "C": "When the organization has large-scale Web solutions and supports a diverse and very large population of users", "D": "When the organization does not need a complex authentication process" }, "solution": "C" }, { "question": "What is the purpose of a home firewall in the context of pervasive computing?", "answers": { "A": "To enable communication between gadgets and the householder.", "B": "To ensure all gadgets can connect to the internet.", "C": "To prevent any communication with the outside world.", "D": "To control which gadgets can 'phone home' and for what purpose." }, "solution": "D" }, { "question": "What is the key principle for choosing a particular member (key) of the cryptographic system to be used, according to cryptographic standards?", "answers": { "A": "The method for choosing the key should be complex and hard to change.", "B": "The key should be transmittable by telegraph.", "C": "The cryptographic system should not inconvenience the correspondents if compromised.", "D": "The method for choosing the key should be easy to memorize and change." }, "solution": "D" }, { "question": "Which of the following is NOT an axiom for a group?", "answers": { "A": "Annihilation", "B": "Inverse element", "C": "Closure", "D": "Associative" }, "solution": "A" }, { "question": "What is the process where fire experts produce forecasts of a wildfire’s potential path?", "answers": { "A": "Fire mapping", "B": "Meteorologists' assessment", "C": "National Weather Service monitoring", "D": "Disaster recovery planning" }, "solution": "A" }, { "question": "Which of the following is the best source for developing Recovery Time Objectives (RTO)?", "answers": { "A": "Previous recovery test results", "B": "Tape restore statistics", "C": "Industry averages", "D": "Business impact analysis" }, "solution": "D" }, { "question": "Which attack alters data in transit within the cloud?", "answers": { "A": "MitM", "B": "Packet sniffing", "C": "Port scanning", "D": "Encryption" }, "solution": "A" }, { "question": "You are setting up a network intrusion detection system on a server and need to monitor the server's network traffic. Which mode should you configure the network adapter to operate in?", "answers": { "A": "Full-duplex mode", "B": "Auto-configuration mode", "C": "Half-duplex mode", "D": "Promiscuous mode" }, "solution": "D" }, { "question": "What is the primary method used to insert instructions for other abusive acts in computer programs, such as logic bombs, salami attacks, and viruses?", "answers": { "A": "Trojan Horse", "B": "Superzapping", "C": "Eavesdropping", "D": "Scavenging" }, "solution": "A" }, { "question": "How are information security policies, standards, and procedures reinforced in an organization?", "answers": { "A": "By providing a competitive advantage", "B": "By conducting regular reviews of employee compliance levels", "C": "By granting inventors limited property rights", "D": "By protecting the representation of products and services use" }, "solution": "B" }, { "question": "Your boss wants to move internally developed software applications to an alternate environment supported by a third party to reduce the server room footprint. Which of the following is your boss proposing?", "answers": { "A": "Software as a Service (SaaS)", "B": "Platform as a Service (PaaS)", "C": "Community cloud", "D": "Infrastructure as a Service (IaaS)" }, "solution": "D" }, { "question": "How are rootkits often installed on systems?", "answers": { "A": "By physically connecting an infected USB drive", "B": "By exploiting unpatched vulnerabilities in the operating system or software", "C": "Through email attachments", "D": "Through social engineering attacks" }, "solution": "B" }, { "question": "What is the primary purpose of source code obfuscation?", "answers": { "A": "To make the code unreadable and tough to reverse engineer", "B": "To improve the performance of the program", "C": "To make the code more efficient and faster", "D": "To enhance the security of the source code" }, "solution": "A" }, { "question": "What is a key characteristic that distinguishes worms from viruses?", "answers": { "A": "Worms do not require any user action to spread, while viruses do.", "B": "Viruses primarily target hardware, while worms target software.", "C": "Viruses are more stealthy than worms.", "D": "Worms are only able to spread through email attachments." }, "solution": "A" }, { "question": "What type of cipher can be described as solely focused on diffusion?", "answers": { "A": "Monoalphabetic cipher", "B": "Transposition cipher", "C": "Substitution cipher", "D": "Polyalphabetic cipher" }, "solution": "B" }, { "question": "Which type of encryption focuses on bulk data encryption and uses a single secret key for both encryption and decryption?", "answers": { "A": "Symmetric key encryption", "B": "Asymmetric key encryption", "C": "Block cipher encryption", "D": "Stream cipher encryption" }, "solution": "A" }, { "question": "Which document provides recommended approaches to the application of human rights in a business setting?", "answers": { "A": "US Constitution", "B": "European Convention on Human Rights", "C": "Universal Declaration of Human Rights", "D": "UN publications" }, "solution": "D" }, { "question": "What could happen when a program attempts to dereference a null pointer?", "answers": { "A": "Garbage Collection", "B": "Buffer Infiltration", "C": "Memory fault errors", "D": "Nothing" }, "solution": "C" }, { "question": "What key advantage of VPNs enables the creation of a network of virtual channels through the Internet?", "answers": { "A": "Routing integration.", "B": "Policy-based routing.", "C": "Data encryption and protection.", "D": "Logical independence." }, "solution": "D" }, { "question": "What is the main function of a firewall in network security?", "answers": { "A": "To detect and remove malware from the network", "B": "To prevent unauthorized physical access to network devices", "C": "To filter and control incoming and outgoing network traffic", "D": "To encrypt data transmitted over the network" }, "solution": "C" }, { "question": "Which category of steganography involves a covert file and an overt file, but the overt file is generated on the fly and does not exist at the beginning of the process?", "answers": { "A": "Insertion", "B": "Substitution", "C": "Covert Communication", "D": "Generation" }, "solution": "D" }, { "question": "Which of the following elements does not apply to privacy?", "answers": { "A": "Not any of the listed options", "B": "Availability", "C": "Confidentiality", "D": "Integrity" }, "solution": "B" }, { "question": "What is the primary purpose of security patches on software?", "answers": { "A": "To increase system performance", "B": "To fix vulnerabilities and improve security", "C": "To add new features to the software", "D": "To enhance the user interface" }, "solution": "B" }, { "question": "What does UDP provide in terms of packet delivery?", "answers": { "A": "Reliable delivery and network-wide congestion control.", "B": "Network-wide congestion control.", "C": "Minimal overhead and no assurance of packets arriving in order or not being corrupted.", "D": "Assurance that packets arrive in order and are not corrupted." }, "solution": "C" }, { "question": "Why is it important to contain and preserve evidence in incident response in cybersecurity?", "answers": { "A": "To notify management and legal authorities", "B": "To eradicate the problem quickly", "C": "To prevent evidence contamination and loss", "D": "To apply the need-to-know security principle" }, "solution": "C" }, { "question": "What is the primary advantage of using third-party security services?", "answers": { "A": "To enhance legal grounds for prosecuting criminals", "B": "To achieve complete isolation and protection of sensitive data", "C": "To gain access to more advanced security tools and expertise", "D": "To offload the responsibility for security compliance to an external entity" }, "solution": "C" }, { "question": "How does a packet sniffer work?", "answers": { "A": "It filters specific protocols and ports", "B": "It blocks all incoming network traffic", "C": "It listens to network packets and conversations between hosts", "D": "It encrypts captured network data" }, "solution": "C" }, { "question": "How is the success probability in linear and differential attacks affected by the number of rounds in a block cipher?", "answers": { "A": "It remains constant regardless of the number of rounds.", "B": "It is independent of the number of rounds.", "C": "It increases with each subsequent round.", "D": "It diminishes with each subsequent round." }, "solution": "D" }, { "question": "Which of these prevention techniques would be best used against a SQL injection attack?", "answers": { "A": "Address space layout randomization", "B": "Stack canary", "C": "Return to libc", "D": "Web application firewall" }, "solution": "D" }, { "question": "What feature of a managed switch restricts the number of MAC addresses allowed into the content addressable memory (CAM) table?", "answers": { "A": "MAC limiting", "B": "MAC cloning", "C": "MAC flooding protection", "D": "MAC filtering" }, "solution": "A" }, { "question": "Which standard provides a framework for communicating user identity, user entitlements, and user attributes between separate security domains?", "answers": { "A": "XML Encryption", "B": "WS-Security", "C": "SAML", "D": "XML Signature" }, "solution": "C" }, { "question": "How can an enterprise identify potential toll fraud within its organization?", "answers": { "A": "By disabling direct inward dialing", "B": "By enabling last number redial tracking", "C": "By implementing billing or authorization codes", "D": "By monitoring phone usage and analyzing calling patterns" }, "solution": "D" }, { "question": "Why is it important to define processes for the destruction of information/data carriers?", "answers": { "A": "To protect the system against electromagnetic/thermal radiation", "B": "To reduce the risk of unauthorized access to recycled or disposed media", "C": "To ensure the availability and functionality of systems", "D": "To guarantee that sensitive information is secured and can be quickly restored" }, "solution": "B" }, { "question": "The Brain virus is an example of which type of malware?", "answers": { "A": "Worm", "B": "Trojan", "C": "Spyware", "D": "Virus" }, "solution": "D" }, { "question": "What was the unintended impact of the September 2007 protests in Burma?", "answers": { "A": "Mass protests and an uprising by the ruling junta that led to widespread violence.", "B": "Burmese people used digital tools to broadcast their revolt, gaining global attention and criticism of the ruling junta.", "C": "The first time wholesale Internet blocking was used to stop news from getting out after the protests caused pain to the junta.", "D": "A sudden increase in fuel prices and a violent crackdown by the ruling junta." }, "solution": "B" }, { "question": "What term describes an attacker's ability to run code on a remote system?", "answers": { "A": "DoS", "B": "SMB", "C": "XSS", "D": "RCE" }, "solution": "D" }, { "question": "Which protocol is used to transfer files securely between computers and uses port 22?", "answers": { "A": "SCP", "B": "LDAP", "C": "IPsec", "D": "TCP" }, "solution": "A" }, { "question": "Where is the row-level security activated in the Human Resource Management System (HRMS) modules?", "answers": { "A": "Based on the organization's hierarchy", "B": "Based on a Department Security Tree", "C": "Based on the user's role", "D": "Based on the data sensitivity level" }, "solution": "B" }, { "question": "In a Time-Memory Trade-Off, what is the 'time' aspect referring to?", "answers": { "A": "The one-time work needed to precompute data", "B": "The effort required to compute encryption chains", "C": "The duration it takes to recover a key using the attack", "D": "The computational complexity of the encryption algorithm" }, "solution": "C" }, { "question": "Which of the following features of an SSO product ensures that the encryption used is a standard such as DES?", "answers": { "A": "Encryption Should Be Commercial Standard", "B": "Failsoft Ability", "C": "Integrity of Security DB(s)", "D": "No Cleartext Passwords" }, "solution": "A" }, { "question": "What role does encryption play in achieving data confidentiality in cybersecurity?", "answers": { "A": "It ensures that data is not altered or tampered with during transit", "B": "It provides authentication of users and devices in a network", "C": "It enables efficient routing of data packets in a network", "D": "It prevents unauthorized access to sensitive information" }, "solution": "D" }, { "question": "What classic game is used to illustrate the concept of prisoners' dilemma in game theory?", "answers": { "A": "Matching pennies", "B": "Battle of the sexes", "C": "Chicken game", "D": "None of the above" }, "solution": "D" }, { "question": "What is the purpose of a business continuity plan?", "answers": { "A": "To prevent data breaches", "B": "To recover from disasters and resume operations", "C": "To reduce cybersecurity risks", "D": "To comply with industry regulations" }, "solution": "B" }, { "question": "What does the principle of least privilege state?", "answers": { "A": "To perform security operations to safeguard assets such as information, systems, devices, facilities, and applications", "B": "Subjects are granted only the privileges necessary to perform assigned work tasks and no more", "C": "Access only to the data or resources a user needs to perform assigned work tasks", "D": "Subjects should be granted access only to information and resources they need to perform their assigned work" }, "solution": "B" }, { "question": "In cases involving personal injury, which of the following is a measure of harm often used to calculate the value of the harm suffered by the victim?", "answers": { "A": "Pain and suffering", "B": "Loss of future earnings", "C": "Loss of reputation", "D": "Emotional distress" }, "solution": "B" }, { "question": "What is a benefit of using a connection-oriented protocol?", "answers": { "A": "It does not require acknowledgments", "B": "It provides reliable and ordered data transmission", "C": "It is less complex than connectionless protocols", "D": "It does not guarantee delivery of packets" }, "solution": "B" }, { "question": "Which type of attack involves presenting fake network traffic to intercept legitimate communication?", "answers": { "A": "Ransomware attack", "B": "Phishing attack", "C": "SQL injection attack", "D": "Man-in-the-middle attack" }, "solution": "D" }, { "question": "What is the key difference between DoS and DDoS attacks?", "answers": { "A": "All provided answer", "B": "Protocols in use", "C": "Goal of the attack", "D": "Number of attackers" }, "solution": "D" }, { "question": "What is the purpose of a digital signature in cybersecurity?", "answers": { "A": "To ensure data integrity", "B": "To confirm the receipt of data", "C": "To authenticate user identities (sender and receiver)", "D": "To encrypt data transmissions" }, "solution": "A" }, { "question": "In the context of Kerberos, what is a realm?", "answers": { "A": "Mapping identities and attributes between domains", "B": "A domain or network designated for centralized authentication", "C": "Biometric authenticator", "D": "A secure network location" }, "solution": "B" }, { "question": "Which firewall type below uses a dynamic state table to inspect the content of packets?", "answers": { "A": "A stateful-inspection firewall", "B": "An application-level firewall", "C": "A packet-filtering firewall", "D": "A circuit-level firewall" }, "solution": "A" }, { "question": "What is the most common method for unauthorized individuals to gain access to a network?", "answers": { "A": "SQL injection", "B": "Brute force attack", "C": "Cross-site scripting (XSS)", "D": "Phishing / social engineering" }, "solution": "D" }, { "question": "What is the primary goal of steganography?", "answers": { "A": "To minimize file size and optimize data storage.", "B": "To hide information within other information without detection.", "C": "To make data unreadable by unauthorized users.", "D": "To ensure the integrity and availability of data." }, "solution": "B" }, { "question": "While performing a risk analysis, you identify a threat of fire and a vulnerability because there are no fire extinguishers. Based on this information, which of the following is a possible risk?", "answers": { "A": "Virus infection", "B": "Damage to equipment", "C": "Unauthorized access to confidential information", "D": "System malfunction" }, "solution": "B" }, { "question": "What does a MIME version header field declare?", "answers": { "A": "The content type of the message", "B": "The conformance of the message with MIME standards", "C": "The type of encryption used in the message", "D": "The language of the message" }, "solution": "B" }, { "question": "What term is used to describe the rows in an access control matrix?", "answers": { "A": "Capability lists", "B": "Domains", "C": "Tuples", "D": "Access Control Lists (ACLs)" }, "solution": "A" }, { "question": "What is the term for software that functions without putting malicious executables within the file system, and instead works in a memory-based environment?", "answers": { "A": "Rootkit", "B": "Fileless malware", "C": "Logic bomb", "D": "Spyware" }, "solution": "B" }, { "question": "What type of virus initially loads into the first sector of the hard drive and then into memory when the computer boots?", "answers": { "A": "Macro virus", "B": "Boot sector virus", "C": "Polymorphic virus", "D": "Worm" }, "solution": "B" }, { "question": "Which type of access control policy allows only administrators to change the category of a resource?", "answers": { "A": "Rule-based access control (RBAC)", "B": "Discretionary access control (DAC)", "C": "Mandatory access control (MAC)", "D": "Role-based access control (RBAC)" }, "solution": "C" }, { "question": "What is the primary purpose of segmenting audiences for security awareness?", "answers": { "A": "To provide information relevant to specific audience groups", "B": "To standardize training for all employees", "C": "To create exclusive groups based on employee seniority", "D": "To enforce compliance with security protocols" }, "solution": "A" }, { "question": "Which of the following models lists the phases of an attack in order, starting with reconnaissance and ending with actions on objectives?", "answers": { "A": "Cyber Kill Chain", "B": "MITRE ATT&CK Matrix", "C": "Threat Intelligence", "D": "Security Orchestration, Automation, and Response (SOAR)" }, "solution": "A" }, { "question": "What is the purpose of the session key in the Kerberos authentication process?", "answers": { "A": "To authenticate the server to the user", "B": "That common session key can be used for protecting subsequent messages between the client and the service", "C": "To encrypt the ticket-granting ticket sent by the AS to the client", "D": "To prove the identity of the client to the TGS" }, "solution": "B" }, { "question": "What is the purpose of conducting formal remediation processes as part of compliance assurance?", "answers": { "A": "To disregard collaboration and networking externally.", "B": "To eliminate the need for compliance metrics reporting.", "C": "To improve security controls and adhere to compliance requirements.", "D": "To avoid implementing technical controls." }, "solution": "C" }, { "question": "Many of the security architecture models (Bell-LaPadula Biba Clark Wilson) are very high level constructs and provide abstracts for software designers to use as a map to meet specific security goals. Which of the following models address more granular activities as in all subjects and objects should be created securely?", "answers": { "A": "Graham Denning model", "B": "Brewer Nash", "C": "Information flow", "D": "Harrison-Ruzzo-Ullman model" }, "solution": "A" }, { "question": "What is the purpose of ethical hacking?", "answers": { "A": "To create viruses and worms to compromise systems.", "B": "To exploit security vulnerabilities for personal gain.", "C": "To identify and fix security vulnerabilities before malicious hackers can exploit them.", "D": "To perform criminal activities in the cyber domain." }, "solution": "C" }, { "question": "Which method provides content inspection to prevent unauthorized use of data on USB mass storage devices?", "answers": { "A": "Data Loss Prevention (DLP)", "B": "Intrusion Detection System", "C": "Hardening", "D": "Content Filtering" }, "solution": "A" }, { "question": "What are the management responsibilities outlined in a security policy primarily focused on?", "answers": { "A": "Tracking and monitoring all employee activities to prevent unauthorized access to sensitive information.", "B": "Guiding the development and implementation of new security technologies and systems.", "C": "Ensuring that all employees understand and comply with the organization's security policies.", "D": "Holding employees accountable for any security breaches or incidents within the organization." }, "solution": "C" }, { "question": "What is the purpose of a vulnerability scanning tool in cybersecurity?", "answers": { "A": "To launch attacks across a TCP/IP network", "B": "To determine if a system is vulnerable to exploits", "C": "To discover systems connected to a network", "D": "To identify open ports on a system" }, "solution": "B" }, { "question": "What type of attack hogs or overwhelms a system’s resources so that it cannot respond to service requests?", "answers": { "A": "Replay attack", "B": "Man-in-the-middle attack", "C": "Denial-of-service attack", "D": "TCP/Hijacking" }, "solution": "C" }, { "question": "Which security principle emphasizes keeping the system design as simple and minimal as possible?", "answers": { "A": "Principle of Psychological Acceptability", "B": "Principle of Least Privilege", "C": "Principle of Economy of Mechanism", "D": "Principle of Open Design" }, "solution": "C" }, { "question": "Which term describes the process of recovering the plaintext from the ciphertext?", "answers": { "A": "Decipherment", "B": "Compression", "C": "Authentication", "D": "Encipherment" }, "solution": "A" }, { "question": "What type of malware uses social engineering tactics to trick a victim into installing it?", "answers": { "A": "Virus", "B": "Trojan horse", "C": "Worm", "D": "Logic bomb" }, "solution": "B" }, { "question": "Why is it important to keep software and systems updated?", "answers": { "A": "To prevent cybersecurity attacks", "B": "To enhance system appearance", "C": "To reduce storage space", "D": "To decrease the speed of the system" }, "solution": "A" }, { "question": "Which directory type is often used to provide space on the network for end users to store data they create or perform their tasks?", "answers": { "A": "Application directories", "B": "Shared directories", "C": "Home directories", "D": "Operating system directories" }, "solution": "C" }, { "question": "Which of the following can breach the confidentiality of data?", "answers": { "A": "Possession by unauthorized individuals", "B": "Man in the middle attacks", "C": "Malware attacks", "D": "All of the above" }, "solution": "D" }, { "question": "Why is it important to dedicate staff and automate compliance tasks?", "answers": { "A": "To limit the organization's reporting on compliance metrics.", "B": "To avoid enforcing penalties for noncompliance to policy.", "C": "To prevent collaboration and network externally.", "D": "To alleviate the burden of demonstrating compliance and ensure consistency." }, "solution": "D" }, { "question": "Which task of risk assessment consists of identifying risk-reducing safeguards that mitigate vulnerabilities and evaluating the degree to which selected safeguards can be expected to reduce threat frequency or impact?", "answers": { "A": "Conducting the Vulnerability Analysis", "B": "Asset Identification and Valuation", "C": "Safeguard Selection and Risk Mitigation Analysis", "D": "Establish Risk Acceptance Criteria" }, "solution": "C" }, { "question": "What is the main purpose of cryptography?", "answers": { "A": "To increase data transfer speed", "B": "To compress data", "C": "To secure Wi-Fi connections", "D": "To make messages unreadable to unintended audiences" }, "solution": "D" }, { "question": "Why is concern assessment important in the risk management process?", "answers": { "A": "It aligns statistical evidence with personal perceptions to ensure accurate risk assessment.", "B": "It focuses on implementing preventive measures to minimize potential threats.", "C": "It helps in evaluating the impact of adverse events based on individual intuition and fear.", "D": "It addresses different stakeholder perceptions and aids in reducing ambiguity related to risks." }, "solution": "D" }, { "question": "What was a primary motivation for phone phreaks to exploit phone company systems?", "answers": { "A": "Financial gain", "B": "Promoting countercultural values", "C": "Intellectual challenge", "D": "Countering government surveillance" }, "solution": "C" }, { "question": "Which term describes the process by which each party to a communication verifies the identity of the other?", "answers": { "A": "Compression", "B": "Authentication", "C": "Decipherment", "D": "Identification" }, "solution": "B" }, { "question": "What is sequence number in the context of session hijacking?", "answers": { "A": "A number used in reconstructing a UDP session", "B": "A randomly chosen number by a hacker to hijack a session", "C": "A number assigned to a packet indicating its order in the data stream", "D": "A way of sending information from the sending to the receiving station" }, "solution": "C" }, { "question": "Which principle states that in a secured environment, users should be granted the minimum amount of access necessary for them to complete their required work tasks or job responsibilities?", "answers": { "A": "Job rotation", "B": "Principle of least privilege", "C": "Separation of duties", "D": "Collusion" }, "solution": "B" }, { "question": "In a business organization analysis, what is the purpose of determining which departments and individuals have a stake in the business continuity plan?", "answers": { "A": "To evaluate the organizational structure", "B": "To assess operational risks", "C": "To select members of the BCP team", "D": "To guide the next stages of BCP development" }, "solution": "C" }, { "question": "What tool could you use to identify IoT devices on a network?", "answers": { "A": "nmap", "B": "Postman", "C": "Cloudscan", "D": "Samba" }, "solution": "A" }, { "question": "What drawback is associated with using a behavior-based IDS?", "answers": { "A": "Unable to keep up with high network traffic", "B": "Limited by the auditing capabilities of the host OS", "C": "Dependent on signature files", "D": "Produces many false alarms" }, "solution": "D" }, { "question": "What security measure should be enabled to prevent unauthorized through-calls in a conference bridge?", "answers": { "A": "Access code rotation", "B": "Bridge locking", "C": "Network class of service", "D": "Individual call monitoring" }, "solution": "B" }, { "question": "Which factor should be considered in calculating the negative impact of a threat realized?", "answers": { "A": "The system's processing speed", "B": "The office location", "C": "The mission of the system", "D": "The number of employees" }, "solution": "C" }, { "question": "What is the purpose of creating a Protection Profile (PP) in the Common Criteria methodology?", "answers": { "A": "To demonstrate the completeness of the security function of a TOE", "B": "To verify the security properties of the IT product", "C": "To perform independent evaluations of Security Targets (STs)", "D": "To communicate the security requirements of a consumer to potential developers" }, "solution": "D" }, { "question": "Which method of risk assessment uses subjective and intangible values to evaluate the loss of an asset?", "answers": { "A": "Tangible Risk Analysis", "B": "Qualitative Risk Analysis", "C": "Quantitative Risk Analysis", "D": "Intangible Risk Analysis" }, "solution": "B" }, { "question": "What type of attacker leaves few or no traces on a system after gaining access?", "answers": { "A": "Truly subtle attackers", "B": "Script kiddies", "C": "Clueful attackers", "D": "Naïve attackers" }, "solution": "A" }, { "question": "What does 'DDoS' stand for in the context of cybersecurity?", "answers": { "A": "Distributed Denial of Service", "B": "Decentralized Data Security", "C": "Digital Data of Service", "D": "Direct Denial of Service" }, "solution": "A" }, { "question": "A security principle that advocates a layered defense strategy to protect an organization's information assets and systems is known as:", "answers": { "A": "Least Privilege", "B": "Secure by Default", "C": "Defense in Depth", "D": "Constrained Delegation" }, "solution": "C" }, { "question": "What are the reasonable measures that an organization must take to protect a trade secret?", "answers": { "A": "Reasonable measures include licensing the secret to others and publicly disclosing the secret.", "B": "Reasonable measures involve filing for patents and publicly disclosing the secret.", "C": "Reasonable measures vary based on the industry and may include measures such as contractual agreements, system auditing, and termination procedures.", "D": "Reasonable measures should involve openly sharing the secret with competitors." }, "solution": "C" }, { "question": "What type of attack is concerned with the probability of a message digest produced by a hash function having identical message digests for different messages?", "answers": { "A": "Birthday Attack", "B": "Man-in-the-Middle Attack", "C": "Factoring Attack", "D": "Linear Cryptanalysis" }, "solution": "A" }, { "question": "Which of the following is a key element of the Defense-in-Depth protection strategy?", "answers": { "A": "Centralized access control", "B": "Single layer defense", "C": "Robust security analytics", "D": "Layered defenses" }, "solution": "D" }, { "question": "What is the key length required for the AES-192 algorithm in CTR mode of operation?", "answers": { "A": "256 bits", "B": "192 bits", "C": "Variable length from 1 to 256 bytes", "D": "128 bits" }, "solution": "B" }, { "question": "Which statement most accurately reflects the encryption used by SSL?", "answers": { "A": "The bulk data transfer is encrypted using asymmetric encryption; the key is exchanged out of band", "B": "SSL does not use encryption", "C": "SSL uses asymmetric encryption for both session key exchange and bulk data encryption", "D": "The session key is encrypted using asymmetric key encryption and the bulk data is encrypted with symmetric encryption" }, "solution": "D" }, { "question": "What is the primary purpose of conducting a search without a warrant if destruction of evidence seems imminent, according to the Federal Sentencing Guidelines?", "answers": { "A": "To adhere to the prudent man rule", "B": "To apply the concept of proximate causation", "C": "To invoke the doctrine of exigent circumstances", "D": "To follow government specified standards" }, "solution": "C" }, { "question": "Which scan type works by manipulating Transport layer protocol flags and is effective for hiding scanning efforts?", "answers": { "A": "Stealth scan", "B": "IDLE scan", "C": "Inverse TCP flag scan", "D": "Full connect scan" }, "solution": "A" }, { "question": "What is the focus of the SANS Institute?", "answers": { "A": "Provides access control solutions for portable devices and removable media storage", "B": "Pocket guide and online courses in information security", "C": "Forum for information exchange among research scientists and practitioners of network and distributed system security services", "D": "Offering education and training in information security" }, "solution": "D" }, { "question": "What is the most common security risk associated with twisted-pair cable?", "answers": { "A": "Data Emanation", "B": "Electromagnetic Interference (EMI)", "C": "Radio Frequency Interference (RFI)", "D": "Crosstalk" }, "solution": "D" }, { "question": "What is one of the most familiar privileges in a Windows token?", "answers": { "A": "SeCredentials", "B": "SeImpersonate", "C": "SeDebug", "D": "Both B and C" }, "solution": "D" }, { "question": "Which of the following best describes a strong password?", "answers": { "A": "A series of numbers in sequence", "B": "A person's name", "C": "A single dictionary word", "D": "A combination of lowercase and uppercase letters with special characters" }, "solution": "D" }, { "question": "Which of the following is true of a stateful inspection firewall?", "answers": { "A": "Stateful inspection firewalls protect through all layers of the OSI model.", "B": "Stateful inspection firewalls are faster then other firewalls.", "C": "Stateful inspection firewalls support more custom applications than other firewalls.", "D": "Stateful inspection firewalls do not provide network address translation." }, "solution": "C" }, { "question": "Which encryption mode prevents the same plaintext from encrypting to the same ciphertext?", "answers": { "A": "Output feedback", "B": "Electronic code book", "C": "Cipher feedback", "D": "Cipher block chaining" }, "solution": "D" }, { "question": "Which version of SNMP supports encryption and user-based authentication?", "answers": { "A": "SNMPv3", "B": "SNMPv1", "C": "SNMPv2c", "D": "SNMPv2" }, "solution": "A" }, { "question": "Which type of access control is based on the individual's role or title within the organization?", "answers": { "A": "Non-Discretionary Access Control", "B": "Mandatory Access Control", "C": "Discretionary Access Control", "D": "Lattice-based Access Control" }, "solution": "A" }, { "question": "Which of the following is a goal of an ethical hacker?", "answers": { "A": "Defending against malicious hacking activity", "B": "Exploiting system vulnerabilities", "C": "Performing unauthorized access to data", "D": "Using security flaws for personal gain" }, "solution": "A" }, { "question": "What techniques can be used for authentication?", "answers": { "A": "Challenge-Response Authentication", "B": "Password Authentication", "C": "Public-Key Authentication", "D": "All of the above can be used" }, "solution": "D" }, { "question": "What is the core of the security life-cycle model?", "answers": { "A": "Implementing security measures", "B": "Assessing security", "C": "Designing safeguards", "D": "Security strategy and policy" }, "solution": "D" }, { "question": "Which of these would be an example of pretexting?", "answers": { "A": "A cloned badge", "B": "Rogue wireless access point", "C": "An email from a former coworker", "D": "Web page asking for credentials" }, "solution": "C" }, { "question": "What is the primary goal of a secure software development lifecycle program?", "answers": { "A": "To fully eliminate all potential vulnerabilities in the software.", "B": "To ensure that security is integrated into every phase of the software development process.", "C": "To focus solely on post-development security testing and assessment.", "D": "To achieve the fastest possible release of software without taking security into consideration." }, "solution": "B" }, { "question": "In biometrics, a 'one-to-one' search to verify an individual’s claim of an identity is called", "answers": { "A": "Aggregation", "B": "Audit trail review", "C": "Authentication", "D": "Accountability" }, "solution": "C" }, { "question": "Who is responsible for ensuring data integrity and security for an organization?", "answers": { "A": "Data owner", "B": "Data custodian", "C": "Security analyst", "D": "Security administrator" }, "solution": "B" }, { "question": "What is the major objective of risk management?", "answers": { "A": "Identifying and mitigating potential threats", "B": "Establishing international security guidelines", "C": "Enhancing data privacy regulations", "D": "Optimizing network performance" }, "solution": "A" }, { "question": "How does a website identify returning users using cookies?", "answers": { "A": "By monitoring users' mouse-clicking choices", "B": "By storing the users' personal data", "C": "Checking the unique identifier code, previously recorded in your cookie file", "D": "By prompting users to enter their login credentials" }, "solution": "C" }, { "question": "What do identity and access management controls aim to achieve in an organization's security framework?", "answers": { "A": "Implementing strict physical access controls through biometric authentication methods", "B": "Centralized control and enforcement of access rights across diverse technology platforms", "C": "Developing standardized procedures for incident response and disaster recovery", "D": "Isolating wireless access points from the main network to prevent unauthorized access" }, "solution": "B" }, { "question": "Which statement accurately reflects the concept of risk evaluation criteria according to the given content?", "answers": { "A": "It focuses on eliminating risks through the application of advanced technology.", "B": "It defines the level of security needed based on industry-specific standards.", "C": "It involves quantifying risks with mathematical models and tools.", "D": "It provides a mix of quantitative and qualitative measures to assess risks." }, "solution": "D" }, { "question": "What is required for a thorough analysis of failure modes in safety-critical systems?", "answers": { "A": "Evaluating the consequences of a failure of any one of your protection mechanisms.", "B": "Human factor issues and the results of system-level tests.", "C": "A safety requirements specification and safety test criteria.", "D": "Merging top-down and bottom-up approaches." }, "solution": "D" }, { "question": "What does steganography replace in graphic files?", "answers": { "A": "The most significant byte of each bit", "B": "The least significant byte of each bit", "C": "The least significant bit of each byte", "D": "The most significant bit of each byte" }, "solution": "C" }, { "question": "What mode of encryption is almost never used because it does not prevent the same plaintext from encrypting to the same ciphertext?", "answers": { "A": "Electronic code book", "B": "Output feedback", "C": "Cipher block chaining", "D": "Cipher feedback" }, "solution": "A" }, { "question": "Why is SAN security important?", "answers": { "A": "To increase system downtime", "B": "To avoid financial losses due to data breaches", "C": "To fulfill regulatory compliance requirements", "D": "To prevent physical level threats" }, "solution": "B" }, { "question": "During the phase of scanning, which of the following techniques is used to probe hosts and subnets?", "answers": { "A": "Tracert", "B": "Pings", "C": "Port scans", "D": "All of the above" }, "solution": "D" }, { "question": "Who should approve exceptions to security procedures for the organizational element to which the procedures apply?", "answers": { "A": "Policy evaluation committee", "B": "Audit function", "C": "Managers and employees of proponent element", "D": "Department vice president" }, "solution": "D" }, { "question": "What cybersecurity practice involves ensuring that only authorized individuals can access certain information?", "answers": { "A": "Intrusion detection", "B": "Access control", "C": "Vulnerability scanning", "D": "Firewall configuration" }, "solution": "B" }, { "question": "Which common feature found on managed switches duplicates traffic for analysis and evidence collection?", "answers": { "A": "Port isolation", "B": "VLAN management", "C": "Port mirroring or spanning", "D": "Port filtering" }, "solution": "C" }, { "question": "What is a potential use of software forensics in the context of identifying the author of a piece of malicious code?", "answers": { "A": "Recovering lost source code.", "B": "Identifying the languages used in programming the code.", "C": "Identifying linguistic or cultural characteristics in the code.", "D": "Determining the main function of the code." }, "solution": "C" }, { "question": "What is the main benefit of implementing service level management (SLM)?", "answers": { "A": "Improved management of software licensing and compliance", "B": "Negotiating software license negotiations", "C": "Maintaining and gradually improving business-aligned IT service quality", "D": "Reduced cost to implement, manage, and support the infrastructure" }, "solution": "C" }, { "question": "You are asked to perform a risk assessment of an information system for the purpose of recommending the most appropriate security controls. You have a short amount of time to do this. You have information about how each asset in the system is used and its importance to the business, but you have no financial information about the assets or the information systems. Which is the most appropriate method to use for this assessment?", "answers": { "A": "Quantitative", "B": "Threat modeling", "C": "Qualitative", "D": "Delphi" }, "solution": "C" }, { "question": "In the context of HIPAA information security requirements, which HIPAA-CMM practice focuses on developing disaster recovery and business continuity plans?", "answers": { "A": "Develop Disaster Recovery and Business Continuity Plans", "B": "Administer Patient Health Care Information Controls", "C": "Evolve Personnel Information Security Policies and Procedures", "D": "Establish Patient Health Care Information Security Controls" }, "solution": "A" }, { "question": "How does XTS-AES mode ensure that the same plaintext block encrypts to different ciphertext blocks at different data unit positions?", "answers": { "A": "By adjusting the tweak value based on the block number and data unit position", "B": "By adding a randomly generated value to each plaintext block before encryption", "C": "By changing the symmetric key for each position within the data unit", "D": "By using a unique initialization vector (IV) for each plaintext block" }, "solution": "A" }, { "question": "For a fence to deter a determined intruder, it should be at least how many feet tall?", "answers": { "A": "2", "B": "10", "C": "8", "D": "4" }, "solution": "C" }, { "question": "What is the term used for a malicious program that disguises itself as a legitimate file or application?", "answers": { "A": "Malware", "B": "Vulnerability", "C": "Denial-of-service attack", "D": "Phishing" }, "solution": "A" }, { "question": "What should be the primary mindset when dealing with a cybersecurity incident?", "answers": { "A": "Collect evidence to establish legal prosecution.", "B": "Think before reacting and preserve data for investigation.", "C": "React immediately to restore normal system operations.", "D": "Coordinate and refer unauthorized intrusions to law enforcement." }, "solution": "B" }, { "question": "Which of the following represents the likelihood that a threat will exploit a vulnerability to cause harm to an asset?", "answers": { "A": "Loss Potential", "B": "Risk", "C": "Threat", "D": "Exposure Factor (EF)" }, "solution": "B" }, { "question": "Which of the following is a widely used symmetric encryption algorithm?", "answers": { "A": "RSA", "B": "AES", "C": "MD5", "D": "SHA-256" }, "solution": "B" }, { "question": "What is the primary goal of Cascading Style Sheets (CSS)?", "answers": { "A": "To provide a consistent and flexible mechanism to manipulate the appearance of HTML documents.", "B": "To provide a secure connection between clients and servers.", "C": "To generate dynamic content for web applications.", "D": "To validate and execute JavaScript code within web pages." }, "solution": "A" }, { "question": "Which access method has shared media for transport, making it more susceptible to eavesdropping and intrusion?", "answers": { "A": "Point-to-Multipoint Wireless Internet", "B": "DSL", "C": "Dial-up access", "D": "Cable Modems" }, "solution": "D" }, { "question": "Why is network segmentation important for embedded and static systems?", "answers": { "A": "To establish connections with other networks", "B": "To facilitate easy access for all users", "C": "To maximize resource utilization", "D": "To prevent changes and exploits from reaching them" }, "solution": "D" }, { "question": "At which OSI model layer does the IPSec protocol function?", "answers": { "A": "Data Link", "B": "Transport", "C": "Network", "D": "Session" }, "solution": "C" }, { "question": "Which type of malware is identified by a hash value and compared against antivirus databases?", "answers": { "A": "Worm", "B": "Virus", "C": "Trojan", "D": "All of the above" }, "solution": "D" }, { "question": "In a security solution, which of the following is the weakest element?", "answers": { "A": "Security policies", "B": "Humans", "C": "Internet connections", "D": "Software products" }, "solution": "B" }, { "question": "What is the primary responsibility of a chief privacy officer (CPO) in an organization with regards to privacy policies?", "answers": { "A": "Implementing and maintaining the privacy policy", "B": "Formulating privacy policies for the organization", "C": "Options A, B, and D are also correct", "D": "Receiving and responding to complaints about privacy policy" }, "solution": "C" }, { "question": "Which security mechanism is designed to restrict access to a network based on predetermined criteria?", "answers": { "A": "Steganography", "B": "Network Restriction Mechanism", "C": "Access Control", "D": "Cryptography" }, "solution": "C" }, { "question": "What is the command to enable the web server to use SSL?", "answers": { "A": "a2ensite default-ssl", "B": "a2dissite default", "C": "a2enmod ssl", "D": "openssl rsa -in serverkey.pem -out /etc/apache2/ssl/server.key" }, "solution": "C" }, { "question": "What tool is commonly used for performing attacks against password hashes, such as MD5, SHA1, and NTLM?", "answers": { "A": "L0phtCrack", "B": "John the Ripper", "C": "Cain and Able", "D": "Ophcrack" }, "solution": "B" }, { "question": "A session hijack can be used against a mobile device using all of the following except?", "answers": { "A": "Cookies", "B": "Worms", "C": "Emails", "D": "Browsers" }, "solution": "B" }, { "question": "What is the concept of network security zones to divide networks for managing specific security actions?", "answers": { "A": "Using networking protocols to secure network boundaries", "B": "Enforcing strict access control at all network entry points", "C": "Allowing unrestricted access to all network resources", "D": "Dividing networks into secure and uncontrolled sections" }, "solution": "D" }, { "question": "What is the primary purpose of biometric authentication?", "answers": { "A": "To verify email addresses", "B": "To remember user credentials", "C": "To identify individuals based on unique biological traits", "D": "To generate secure passwords" }, "solution": "C" }, { "question": "Who should be included in the business continuity planning team?", "answers": { "A": "Representatives from the IT department only", "B": "Representatives from support departments only", "C": "Representatives from each operational and support department, IT experts, legal representatives, and senior management", "D": "Representatives from senior management only" }, "solution": "C" }, { "question": "Define 'hacktivist'", "answers": { "A": "A person who uses their technological expertise to help companies and organizations improve their cybersecurity", "B": "A person who engages in hacking as a form of protest or activism", "C": "A person who illegally gains access to computer systems without permission", "D": "A person who is dedicated to ethical hacking practices" }, "solution": "B" }, { "question": "Which SQL command is used to explicitly commit a transaction to the database?", "answers": { "A": "INSERT", "B": "COMMIT", "C": "UPDATE", "D": "ROLLBACK" }, "solution": "B" }, { "question": "What is one advantage of symmetric encryption over asymmetric encryption?", "answers": { "A": "Faster encryption and decryption", "B": "Better resistance to brute-force attacks", "C": "Easier key distribution", "D": "Higher level of security" }, "solution": "A" }, { "question": "What is an example of an evasive technique used to bypass security mechanisms?", "answers": { "A": "Encoding data", "B": "Using a proxy server", "C": "Using nmap in blind mode", "D": "Scanning nonstandard ports" }, "solution": "A" }, { "question": "Which devices can be used for authentication and key storage in multifactor authentication?", "answers": { "A": "Bluetooth devices and Bluetooth headsets", "B": "Network adapters and PCI Express cards", "C": "Smart cards and USB flash drives", "D": "Wireless routers and switches" }, "solution": "C" }, { "question": "What is the primary role of the IT director?", "answers": { "A": "Developing new security policies", "B": "Implementing security protocols", "C": "Monitoring incident response", "D": "Strategic planning, structure of the IT department, budgeting" }, "solution": "D" }, { "question": "What is the primary goal of disaster recovery planning?", "answers": { "A": "Setting up temporary business operations", "B": "Preventing business interruption", "C": "Restoring normal business activity", "D": "Minimizing the impact of a disaster" }, "solution": "C" }, { "question": "Which type of vulnerability refers to the existence of backdoors that allow a user to log in with no password or have direct access to application configuration?", "answers": { "A": "Backdoor and Debug Options", "B": "Cookie Poisoning", "C": "Cross-Site Scripting", "D": "Parameter Tampering" }, "solution": "A" }, { "question": "What is the primary purpose of encryption in cybersecurity?", "answers": { "A": "Securing data in transit over public networks", "B": "Detecting and mitigating network intrusions", "C": "Preventing unauthorized access to physical premises", "D": "Protecting against social engineering attacks" }, "solution": "A" }, { "question": "Which type of IDS monitors a single computer or host?", "answers": { "A": "Network-based IDS (NIDS)", "B": "Application-based IDS", "C": "Intrusion prevention system (IPS)", "D": "Host-based IDS (HIDS)" }, "solution": "D" }, { "question": "In an LDAP injection attack, how does the attacker manipulate the LDAP query to bypass authentication?", "answers": { "A": "By inserting additional scripting into web forms to modify the LDAP query.", "B": "By intercepting the communication between the client and server and altering the LDAP query in transit.", "C": "By adding characters such as &)(&) after the username to end the query and then provide any password.", "D": "By using tools such as StackGuard to manipulate the LDAP query." }, "solution": "C" }, { "question": "Which statement is true about quantum encryption?", "answers": { "A": "It requires a dedicated fiber-optic connection for general communications.", "B": "It is susceptible to the man-in-the-middle attack due to its observable communication channels.", "C": "It relies on single photons and polarizations for key negotiation and eavesdropping detection.", "D": "It can be easily decrypted by an outside party using quantum computing." }, "solution": "C" }, { "question": "What role does real-time detection play in antivirus software?", "answers": { "A": "Monitoring system performance continuously", "B": "Scanning files for malicious code upon access", "C": "Blocking of all incoming network traffic", "D": "Encrypting data in real-time" }, "solution": "B" }, { "question": "Which law requires companies to protect the personal medical information of the customer?", "answers": { "A": "SOX", "B": "HIPAA", "C": "PIPEDA", "D": "GLBA" }, "solution": "B" }, { "question": "What should be done to monitor and control voice mail systems for suspicious activities?", "answers": { "A": "Implementing long, complicated access codes for DISA", "B": "Enabling direct inward system access and dial-in modem ports", "C": "Monitoring for unsuccessful attempts and suspicious activities", "D": "Allowing unrestricted access to company voice mail" }, "solution": "C" }, { "question": "Why is it important to conduct forensic analysis on a copy of the original data instead of the original itself?", "answers": { "A": "To prevent tampering with the original data and maintain the integrity of evidence.", "B": "To eliminate the need for using forensic tools and techniques on the original data.", "C": "To reduce the cost of storage for the data being analyzed.", "D": "To speed up the analysis process and avoid unnecessary duplication of effort." }, "solution": "A" }, { "question": "If you were to see the following in a packet capture, what attack would you expect is happening? %3Cscript%3Ealert('wubble');%3C/script%3E", "answers": { "A": "Buffer overflow", "B": "SQL injection", "C": "Cross‐site scripting", "D": "Command injection" }, "solution": "C" }, { "question": "According to HIPAA regulations, what is the responsibility of organizations regarding the protection of patient healthcare information?", "answers": { "A": "Conducting regular data backups", "B": "Designating responsible individuals and establishing recourse for policy violations", "C": "Developing advanced security technologies", "D": "Encrypting all patient data" }, "solution": "B" }, { "question": "What is the main reason for an organization to have a position description for a job opening?", "answers": { "A": "To specify the frequency of travel required for the job.", "B": "To indicate the requirements for a background investigation and drug-free workplace policy.", "C": "To outline the general duties and responsibilities of the position.", "D": "To provide information about the supervisor's name and salary range." }, "solution": "C" }, { "question": "What is a programmable logic device (PLD)?", "answers": { "A": "A volatile device", "B": "An integrated circuit with connections or internal logic gates that can be changed through a programming process", "C": "A program resident on disk memory that executes a specific function", "D": "Random Access Memory (RAM) that contains the software to perform specific tasks" }, "solution": "B" }, { "question": "What is recommended to minimize the risk when using an FTP server?", "answers": { "A": "Running additional services on the same host as the FTP server", "B": "Allowing anonymous access for easier file sharing", "C": "Closely monitor the server logs and activity", "D": "Keeping the server permanently turned on to facilitate data access" }, "solution": "C" }, { "question": "The standard for study and control of electronic signals produced by various types of electronic hardware is known as ___________________.", "answers": { "A": "Eavesdropping", "B": "Wiretapping", "C": "TEMPEST", "D": "SESAME" }, "solution": "C" }, { "question": "Which tool can be used to gather information about wireless networks in an area, including signal strength readings and wireless network boundaries?", "answers": { "A": "NetSpot", "B": "Kismet", "C": "WiFi Explorer", "D": "Wireshark" }, "solution": "B" }, { "question": "What kind of attack would be demonstrated if an attacker interjects into the path of secure communications or key exchange?", "answers": { "A": "Man-in-the-Middle Attack", "B": "Frequency analysis", "C": "Bypass", "D": "Differential Power Analysis" }, "solution": "A" }, { "question": "Similar activities are carried out by hackers and security professionals performing an assessment. Identifying assets in a victims network is called ------.", "answers": { "A": "Fingerprinting", "B": "Port scanning", "C": "TCP wrapping", "D": "Man in the middle" }, "solution": "A" }, { "question": "Public key certificates are often considered to be associated with which aspect of cybersecurity principles and best practices?", "answers": { "A": "Threat modeling", "B": "Vulnerability assessment", "C": "Identity management", "D": "Incident response" }, "solution": "C" }, { "question": "What is the main function of access lists in the context of router security?", "answers": { "A": "To establish administrative domains", "B": "To set up network connections", "C": "To configure router passwords", "D": "To filter and control the flow of data packets" }, "solution": "D" }, { "question": "While developing the business continuity plan your team must create a plan that ensures that normal operation can be resumed in a timely manner after an outage. Which element is your team creating?", "answers": { "A": "Disaster recovery plan", "B": "Business impact analysis (BIA)", "C": "Vulnerability analysis", "D": "Business continuity plan" }, "solution": "A" }, { "question": "In a business context, what is a concern related to intellectual property leakage via instant messaging?", "answers": { "A": "Exposure to potential man-in-the-middle attacks", "B": "Inadvertent sharing of sensitive transaction data", "C": "Unintended exposure of corporate documents", "D": "Risk of disclosing trade secrets and insider information" }, "solution": "D" }, { "question": "Which type of watermarking hides a visible mark within an image file that flags it as the owner's property?", "answers": { "A": "Robust watermarking", "B": "Invisible watermarking", "C": "Error-free watermarking", "D": "Visible watermarking" }, "solution": "D" }, { "question": "What is the first step in the data lifecycle referred to in the provided content?", "answers": { "A": "Data classification", "B": "Data retention", "C": "Data maintenance", "D": "Asset classification" }, "solution": "A" }, { "question": "Which security management approach is recommended for an information security program?", "answers": { "A": "Top-down", "B": "Integrated", "C": "Bottom-up", "D": "Differential" }, "solution": "A" }, { "question": "What is the minimum level of responsible actions that an individual can take during a contingency planning process as per ISO 17799?", "answers": { "A": "Reporting security incidents", "B": "Business continuity planning", "C": "Testing, maintaining, and reassessing business continuity plans", "D": "Learning from incidents" }, "solution": "A" }, { "question": "Which of the following is NOT a characteristic of a cryptographic hash function, H (m), where m denotes the message being hashed by the function H?", "answers": { "A": "H (m) is a one-way function.", "B": "H (m) is collision free.", "C": "H (m) is difficult to compute for any given m.", "D": "The output is of fixed length." }, "solution": "C" }, { "question": "What is the role of standardization and security criteria in the evaluation of computer products?", "answers": { "A": "Verifying the essential security requirements of computer products.", "B": "Determining the market niche of computer products.", "C": "Validating the effectiveness and quality of security products.", "D": "Providing a competitive environment for computer products." }, "solution": "A" }, { "question": "Which layer of the OSI model must present a common service interface to the Transport Layer and coordinate between subnetworks of different technologies?", "answers": { "A": "Data Link Layer", "B": "Session Layer", "C": "Network Layer", "D": "Transport Layer" }, "solution": "C" }, { "question": "Which method of authentication is unique to an individual's physical characteristic?", "answers": { "A": "Biometric authentication", "B": "Software encryption", "C": "Two-factor authentication", "D": "Username and password" }, "solution": "A" }, { "question": "Which additional goal of steganography is related to ensuring that hidden data cannot be visibly seen in the host file?", "answers": { "A": "Survivability", "B": "Visibility", "C": "Integrity", "D": "No detection" }, "solution": "B" }, { "question": "Which processor architecture is commonly licensed for use in embedded systems like mobile phones and consumer electronic devices?", "answers": { "A": "ARM", "B": "Intel", "C": "Motorola", "D": "AMD" }, "solution": "A" }, { "question": "In Authentication and Encryption Terminology, what does PAP stand for?", "answers": { "A": "Private Access Protocol", "B": "Password Authentication Protocol", "C": "Personal Access Port", "D": "Public Authentication Protocol" }, "solution": "B" }, { "question": "In business continuity planning, what is the importance of documenting the plan comprehensively?", "answers": { "A": "To prevent the loss of important data", "B": "To ensure clear communication within the organization", "C": "To have a written record of the procedures to follow when disaster strikes", "D": "To organize the BCP team" }, "solution": "C" }, { "question": "Which type of attack is waged against passwords for user accounts by systematically attempting every possible combination of letters, numbers, and symbols?", "answers": { "A": "Brute force attack", "B": "Denial of service attack", "C": "Spoofing attack", "D": "Man-in-the-middle attack" }, "solution": "A" }, { "question": "What is the primary purpose of authentication in security technology?", "answers": { "A": "To allocate appropriate access and identification codes to users", "B": "To confirm the identity of the end user requesting access", "C": "To ensure authorized access to sensitive information", "D": "To enforce disciplinary measures for noncompliance" }, "solution": "B" }, { "question": "Which internet protocol's primary purpose is to discover the path through the internet to a specified destination IP address?", "answers": { "A": "Traceroute", "B": "ICMP", "C": "ARP", "D": "RIP" }, "solution": "A" }, { "question": "What is the purpose of enforcing least privilege in a user session?", "answers": { "A": "To allocate excessive processes to increase CPU power", "B": "To assign minimal privileges necessary to accomplish the task", "C": "To provide users with more privileges than required", "D": "To reduce CPU power usage by running only necessary processes" }, "solution": "B" }, { "question": "What challenge may businesses face in regard to electronic data interchange systems and privacy laws across jurisdictions?", "answers": { "A": "Difficulty in detecting and interpreting electronically transmitted data", "B": "Consistency in interpreting the laws of various nations", "C": "Lack of available legal advice", "D": "Meeting the most stringent privacy law requirements" }, "solution": "B" }, { "question": "What does the 'more eyeballs' principle imply in the context of open source software?", "answers": { "A": "More users will be able to access the software.", "B": "The software will have fewer security flaws due to more people reviewing the code.", "C": "The software will be more likely to be targeted by attackers.", "D": "The software will have better customer support." }, "solution": "B" }, { "question": "What type of queries are used to respond with a refer-to answer if the address is not currently known?", "answers": { "A": "Recursive queries", "B": "Reverse queries", "C": "Iterative queries", "D": "Forward queries" }, "solution": "C" }, { "question": "What transaction management principle ensures that two transactions do not interfere with each other as they operate on the same data?", "answers": { "A": "Consistency", "B": "Durability", "C": "Isolation", "D": "Atomicity" }, "solution": "C" }, { "question": "Why do hackers focus their efforts on popular web browsers?", "answers": { "A": "To gain control of the browser's security settings", "B": "To target applications that provide them with the largest source of potential targets", "C": "To access sensitive data stored in the browser", "D": "To exploit highly customizable browsers" }, "solution": "B" }, { "question": "What can an attacker intercept if they manage to bypass SSL on a server?", "answers": { "A": "Encrypted email data", "B": "HTTP metadata", "C": "Encrypted web page data", "D": "User credentials" }, "solution": "D" }, { "question": "The UDP headers contain which of the following fields?", "answers": { "A": "Flags, source port, destination port, checksum", "B": "Source address, destination address, checksum, length", "C": "Destination port, source port, checksum, length", "D": "Length, checksum, flags, address" }, "solution": "C" }, { "question": "Several types of fire detectors are available on the market. Which of the following detect a fire by identifying changes in a stream of light waves?", "answers": { "A": "Heat activated detector", "B": "Thermometer detector", "C": "Optical detector", "D": "Flame activated detector" }, "solution": "C" }, { "question": "What should be the primary aim when planning for audit in an intranet?", "answers": { "A": "Disk space storage availability", "B": "Secure storage and access to the audit data", "C": "Centralized collection and synthesis of audit information", "D": "Increased staffing and administration" }, "solution": "B" }, { "question": "Which cryptographic technique is used to solve the problem of DNS cache poisoning by providing cryptographic keys to sign resource records?", "answers": { "A": "Public key encryption", "B": "Asymmetric encryption", "C": "Symmetric encryption", "D": "DNSSEC" }, "solution": "D" }, { "question": "Which operation remaps each column of the state during the encryption process in AES?", "answers": { "A": "Subkey addition", "B": "SubBytes", "C": "ShiftRows", "D": "MixColumns" }, "solution": "D" }, { "question": "What is VNC?", "answers": { "A": "A server that accepts connection requests to display its local display on the viewer.", "B": "A file-sharing protocol for sharing documents over a network.", "C": "A chat platform for virtual networking.", "D": "A game server for multiplayer online games." }, "solution": "A" }, { "question": "What is the significance of the transited realms list in a Kerberos ticket?", "answers": { "A": "It indicates all the realms transited by the client within them.", "B": "It allows the holder of the ticket to ask the TGS to modify the address or lifetime restrictions.", "C": "It restricts further propagation of the credential by the recipient.", "D": "It restricts the use of credentials to a specific machine when sent to an intermediary." }, "solution": "A" }, { "question": "Which email security feature uses DNS to allow domain owners to create records associating domain names with IP address ranges of authorized senders?", "answers": { "A": "SPF", "B": "S/MIME", "C": "DKIM", "D": "STARTTLS" }, "solution": "A" }, { "question": "Which tool is commonly used for network scanning and enumeration?", "answers": { "A": "Snort", "B": "Wireshark", "C": "Nmap", "D": "Metasploit" }, "solution": "C" }, { "question": "The purpose of establishing a protection domain in a computational system is to:", "answers": { "A": "Restrict the access of system administrators to the central processing unit (CPU).", "B": "Prevent all unauthorized modification or executional interference in the system.", "C": "Ensure the widespread use of proprietary hardware and software to prevent unauthorized access.", "D": "Limit a process's access to certain memory locations and execute a subset of the computer's instruction set." }, "solution": "D" }, { "question": "Which type of attack uses zombie hosts to create a many-to-one network attack?", "answers": { "A": "Man-in-the-middle attack", "B": "DDoS attack", "C": "Social engineering attack", "D": "SQL injection attack" }, "solution": "B" }, { "question": "What term is used to describe the practice of using electronic means to stalk another person?", "answers": { "A": "Cyberstalking", "B": "Cyberharassment", "C": "Digitalbullying", "D": "Smartstalking" }, "solution": "A" }, { "question": "In a TMTO attack, what are the 'tables' referred to?", "answers": { "A": "The collection of potential key values covered by individual chains", "B": "The function outputs used to generate encryption chains", "C": "The set of intermediate values used in the encryption process", "D": "The set of starting and ending points computed for each chain" }, "solution": "D" }, { "question": "What is the primary characteristic of a private cloud in comparison to a public cloud environment?", "answers": { "A": "Reliance on physical infrastructure like power and real estate for data storage.", "B": "Multitenancy limited to multiple divisions within the same business on the same server.", "C": "On-demand self-service and multitenancy across multiple businesses or individuals.", "D": "Ability to outsource system administration and maintenance tasks to the cloud provider." }, "solution": "B" }, { "question": "What is the main goal of the committee set up to address issues related to suspected computer crimes in a corporate environment?", "answers": { "A": "Determining the suspect responsible for the crime", "B": "Planning for and conducting investigations", "C": "Preparing a plan for immediate disclosure to law enforcement", "D": "Establishing a prior liaison with legal authorities" }, "solution": "B" }, { "question": "What type of malware technique allows the software to reconfigure itself when it infects a new system to evade detection?", "answers": { "A": "Trojan", "B": "Polymorphic Malware", "C": "Fileless Malware", "D": "Dropper" }, "solution": "B" }, { "question": "What type of lighting is often used to enhance perimeter security at entrances or parking areas?", "answers": { "A": "Incandescent lights", "B": "Laser lights", "C": "Fluorescent lights", "D": "Floodlights" }, "solution": "D" }, { "question": "Data encrypted with the server’s public key can be decrypted with which key?", "answers": { "A": "The client’s private key", "B": "The client’s public key", "C": "The server’s public key", "D": "The server’s private key" }, "solution": "D" }, { "question": "In a wireless network, why is an SSID used?", "answers": { "A": "To secure the wireless access point", "B": "To enforce MAC filtering", "C": "To encrypt data", "D": "To identify the network" }, "solution": "D" }, { "question": "How would you ensure that confidentiality is implemented in an organization?", "answers": { "A": "Cryptographic hashes", "B": "Web servers", "C": "Watchdog processes", "D": "Encryption" }, "solution": "D" }, { "question": "What is the purpose of XML External Entity Processing?", "answers": { "A": "To fill up connection buffers at the operating system", "B": "To validate input from the user", "C": "To manipulate the instruction pointer of the application", "D": "To gain access to underlying system functions and files using XML" }, "solution": "D" }, { "question": "What is the main role of a botmaster in a fast-flux domain?", "answers": { "A": "Serving as the main server and responding to client requests", "B": "Issuing commands to bots and maintaining fast-flux by updating DNS records", "C": "Controlling and maintaining fast-flux by issuing commands to bots", "D": "Controlling the compromised computers within the botnet" }, "solution": "B" }, { "question": "What is the purpose of the incident-handling process?", "answers": { "A": "To respond to a breach without causing panic", "B": "To monitor and analyze user and system activities", "C": "To shut down the network in case of a breach", "D": "To trace user activity from the point of entry to exit" }, "solution": "A" }, { "question": "Which authentication mode provides a client with a challenge that must be encrypted using a shared key for validation?", "answers": { "A": "WPA2 Enterprise", "B": "Shared key authentication", "C": "RADIUS", "D": "Open system authentication" }, "solution": "B" }, { "question": "In the context of electronic voting systems, what action enables voters to validate their choices before casting their votes?", "answers": { "A": "Scanning the paper ballots", "B": "Accessing the source code of the voting machine", "C": "Pressing the 'count' button", "D": "Displaying the voter's choice on a paper roll for validation" }, "solution": "D" }, { "question": "Which of the following is the best choice for performing a Bluebugging attack?", "answers": { "A": "PhoneSnoop", "B": "Blooover", "C": "BBProxy", "D": "btCrawler" }, "solution": "B" }, { "question": "Which of the following is an example of a standard network security control device?", "answers": { "A": "Firewall", "B": "Security awareness training program", "C": "CCTV surveillance system", "D": "Biometric authentication system" }, "solution": "A" }, { "question": "Which term refers to the means used to uniquely identify a terminal to a system?", "answers": { "A": "User Profile", "B": "Terminal Identification", "C": "Distributed COM", "D": "Binary Large Object" }, "solution": "B" }, { "question": "What is the main function of the Domain Name System Security Extensions (DNSSEC)?", "answers": { "A": "Provides secure time synchronization between network devices.", "B": "Ensures the authenticity and integrity of DNS records to prevent DNS spoofing and cache poisoning.", "C": "Encrypts the URL, content, forms, and cookies during web browsing.", "D": "Synchronizes devices to Coordinated Universal Time (UTC) within a few milliseconds." }, "solution": "B" }, { "question": "What is the common method for choosing a key in some applications, as mentioned in the text?", "answers": { "A": "Recording names on a card", "B": "Memorizing phrases", "C": "Storing dates electronically", "D": "Using invisible inks" }, "solution": "B" }, { "question": "Which of the following is a type of social engineering attack?", "answers": { "A": "SQL injection", "B": "Phishing", "C": "Malware injection", "D": "Encryption" }, "solution": "B" }, { "question": "In the context of cryptography, what is the main purpose of a nonce?", "answers": { "A": "Preventing replay attacks", "B": "Securing public key infrastructure", "C": "Authenticating user credentials", "D": "Ensuring cloud data confidentiality" }, "solution": "A" }, { "question": "What can a Type 2 authentication factor include?", "answers": { "A": "Fingerprints", "B": "Retina pattern", "C": "USB drive", "D": "Facial scan" }, "solution": "C" }, { "question": "What concept refers to the strategy of adding multiple layers of protection to delay an attacker and provide different lines of defense?", "answers": { "A": "Defense in Breadth", "B": "Unified Threat Management", "C": "Defense in Depth", "D": "Defensible Network Architecture" }, "solution": "C" }, { "question": "What is a trusted computing base (TCB)?", "answers": { "A": "The predetermined set or domain (i.e., a list) of objects that a subject can access", "B": "TCB in a computer system encompasses all the essential hardware, firmware, and software elements that are vital for its security.", "C": "Hosts on your network that support secure transmissions", "D": "The combination of hardware, software, and controls that work together to enforce a security policy" }, "solution": "B" }, { "question": "What measure can potentially improve the detection of GNSS spoofing attacks?", "answers": { "A": "Using dynamic encryption keys.", "B": "Using advanced signal generators.", "C": "Simultaneous receipt of spoofing signals by several receivers.", "D": "Relaying signals by multiple attackers." }, "solution": "C" }, { "question": "What is the name of the mode in the 802.11 standard where wireless stations can communicate directly with each other without using an access point?", "answers": { "A": "Ad Hoc Mode", "B": "Station Mode", "C": "Client Mode", "D": "Peer Mode" }, "solution": "A" }, { "question": "The concept of dividing an internal network into numerous subzones, potentially as small as a single device, is known as:", "answers": { "A": "Network Segmentation", "B": "Microsegmentation", "C": "Intranet", "D": "Extranet" }, "solution": "B" }, { "question": "When was U.S. Patent 1,657411 for a Ciphering Machine issued to Arthur Scherbius?", "answers": { "A": "January 24, 1928", "B": "September 7, 1921", "C": "February 12, 1935", "D": "December 18, 1920" }, "solution": "A" }, { "question": "What do hoax virus warnings or alerts rely on to spread and perpetuate themselves?", "answers": { "A": "User curiosity and urgency", "B": "Self-propagating mechanisms", "C": "Fake news articles", "D": "Social engineering" }, "solution": "A" }, { "question": "Who should have the responsibility for maintaining and ensuring the currency and availability of security policies, standards, baselines, and guidelines applicable to the entire organization?", "answers": { "A": "Proponent elements", "B": "Managers", "C": "Information security function", "D": "Audit function" }, "solution": "C" }, { "question": "What is the name of a technique used to gain unauthorized access by exploiting the TCP three-way handshake?", "answers": { "A": "SQL injection", "B": "Man-in-the-Middle attack", "C": "Cross-site scripting (XSS)", "D": "Denial of Service (DoS)" }, "solution": "B" }, { "question": "What is the target of a cross-site scripting attack?", "answers": { "A": "Users", "B": "Database server", "C": "Third-party server", "D": "Web server" }, "solution": "A" }, { "question": "What refers to the removal of characteristics from an entity to easily represent its essential properties?", "answers": { "A": "Data hiding", "B": "Abstraction", "C": "Least privilege", "D": "Principle of least privilege" }, "solution": "B" }, { "question": "What is the fundamental concept behind 'encryption' in cybersecurity?", "answers": { "A": "To analyze the behavior of users and detect potential security threats", "B": "To conceal the identity of the sender and recipient of data", "C": "To authenticate the integrity of digital documents and messages", "D": "To prevent unauthorized access to data by converting it into a format that can only be read with the correct decryption key" }, "solution": "D" }, { "question": "Which wireless network protocol augments DSDV with authentication to provide security in the construction and exchange of routing information?", "answers": { "A": "Wi-Fi Protected Access (WPA)", "B": "SEAD", "C": "SLSP", "D": "ARAN" }, "solution": "B" }, { "question": "In what year did the idea of using artificial satellites for communication first appear?", "answers": { "A": "1984", "B": "1910", "C": "1945", "D": "1969" }, "solution": "C" }, { "question": "What is the primary mission of a firewall?", "answers": { "A": "Network monitoring", "B": "Virus scanning", "C": "Access control at the transport level", "D": "Data encryption" }, "solution": "C" }, { "question": "Which method has been used by the music industry to prevent unauthorized distribution of music over peer-to-peer networks?", "answers": { "A": "Encrypting all music files with DRM before distribution", "B": "Filing lawsuits and targeting key nodes for legal action", "C": "Partnering with network operators to shut down peer-to-peer networks", "D": "Conducting distributed denial-of-service attacks on peer-to-peer networks" }, "solution": "B" }, { "question": "Which term refers to sending a packet to an IP address that is designated as a multicast address?", "answers": { "A": "Multicast traffic", "B": "Group traffic", "C": "Broadcast traffic", "D": "Unicast traffic" }, "solution": "A" }, { "question": "What is the role of cryptography in modern-day communications?", "answers": { "A": "To create publicly accessible encryption methods", "B": "To protect the confidentiality and integrity of data during transmission", "C": "To provide entertainment through encrypted messages", "D": "To decode secret messages from historical sources" }, "solution": "B" }, { "question": "What is a significant benefit of an ITM solution over separate security components?", "answers": { "A": "Cost savings on licensing and capital costs.", "B": "Maintaining equipment in multiple locations adds complexity and overhead.", "C": "Delayed and inefficient procurement of additional security functions.", "D": "Increased complexity and inefficiency in managing multiple separate components." }, "solution": "A" }, { "question": "Which component is necessary for enterprise applications to plan on at least one tier of redundancy for all critical systems and components?", "answers": { "A": "Data backup and archival", "B": "Network devices", "C": "Firewalls and routers", "D": "System hardening" }, "solution": "A" }, { "question": "Which of the following is a primary goal of business continuity planning (BCP)?", "answers": { "A": "Minimizing loss of business processes", "B": "Maximizing long-term business disruptions", "C": "Disregarding critical resources", "D": "Increasing costs during a disaster" }, "solution": "A" }, { "question": "What aspect of facility access is provided by a mantrap?", "answers": { "A": "Employee training", "B": "Physical access control", "C": "Crowd control", "D": "Visual surveillance" }, "solution": "B" }, { "question": "What is the significance of preserving the integrity of the data in computer forensics investigations?", "answers": { "A": "Recording and documenting the observations and interpretations of the data.", "B": "Verifying the relevance and significance of the digital evidence.", "C": "Ensuring that the evidence remains unaltered to maintain its reliability and validity.", "D": "Preventing unauthorized access to the extracted data." }, "solution": "C" }, { "question": "Which of the following involves people with the requisite experience and education evaluating threat scenarios and rating the potential loss and severity of each threat based on their experience?", "answers": { "A": "Data Mining", "B": "Qualitative risk analysis", "C": "Risk assessment", "D": "Risk management" }, "solution": "B" }, { "question": "Which command is used in a Linux/UNIX environment to modify the definition of a specified group by modifying the appropriate entry in the /etc/group file?", "answers": { "A": "usermod", "B": "groupmod", "C": "chmod", "D": "chown" }, "solution": "B" }, { "question": "A pentester is configuring a Windows laptop for a test. In setting up Wireshark, what driver and library are required to allow the NIC to work in promiscuous mode?", "answers": { "A": "promsw", "B": "winprom", "C": "libpcap", "D": "winpcap" }, "solution": "D" }, { "question": "What are the three parts in which application security is broken down?", "answers": { "A": "Authentication, Authorization, and Accounting", "B": "Design, Implementation, and Testing", "C": "Application in development, Application in production, and the COTS application that is introduced into production", "D": "Development, Production, and Testing" }, "solution": "C" }, { "question": "What does SSL stand for in the context of transmitting private documents via the Internet?", "answers": { "A": "Superior Secure Link", "B": "Secure Sockets Layer", "C": "Safe Socket Layer", "D": "Simple Secure Line" }, "solution": "B" }, { "question": "What type of probability value characterizes the chance or likelihood, in a finite sample, that an event will occur?", "answers": { "A": "Certainty", "B": "Probability", "C": "Annualized Rate of Occurrence", "D": "Variance" }, "solution": "B" }, { "question": "What is the method by which systems verify that a user who is requesting access to a resource really is who they claim to be?", "answers": { "A": "Identification", "B": "Validation", "C": "Authorization", "D": "Authentication" }, "solution": "D" }, { "question": "What is a method used by antivirus software to detect new, unknown viruses that have not yet been identified?", "answers": { "A": "hashing algorithm", "B": "MAC filtering", "C": "heuristic scanning", "D": "packet filtering" }, "solution": "C" }, { "question": "Which of the following works as a transfer agent?", "answers": { "A": "SMTP", "B": "IP", "C": "SET", "D": "ASCII" }, "solution": "A" }, { "question": "How often are unauthorized changes to critical files checked by a change-detection mechanism according to PCI DSS Requirement?", "answers": { "A": "At least once every week", "B": "Periodically based on a risk analysis", "C": "At least once every month", "D": "At least once every 6 months" }, "solution": "A" }, { "question": "What is NFC primarily designed for?", "answers": { "A": "To ensure secure communication between devices.", "B": "To exchange contact-less payment and mobile payment systems.", "C": "To provide low-bandwidth wireless connections.", "D": "To transmit and receive data over long distances." }, "solution": "B" }, { "question": "Which is an example of an asymmetric key algorithm?", "answers": { "A": "3DES", "B": "DES", "C": "RSA", "D": "AES" }, "solution": "C" }, { "question": "What role requires specific training in social engineering?", "answers": { "A": "The Scheduler", "B": "The Operator", "C": "The Help Desk", "D": "The Librarian" }, "solution": "C" }, { "question": "What technology reduced losses from 0.269% of turnover in 1987 to 0.028% in 1995 in France?", "answers": { "A": "Chip cards", "B": "Wiretapping devices", "C": "Web servers with SSL/TLS encryption", "D": "Intrusion detection systems" }, "solution": "A" }, { "question": "In asymmetric key agreement schemes, what is absolutely essential to ensure that the agreement is secure?", "answers": { "A": "Use of larger prime numbers", "B": "Combining with symmetric cryptography", "C": "Instance authentication", "D": "Key transport schemes" }, "solution": "C" }, { "question": "What is the practice employed in typo squatting?", "answers": { "A": "Blocking access to malicious sites", "B": "Creating legitimate domain names for organizations", "C": "Redirecting traffic to legitimate sites", "D": "Capturing and redirecting traffic from mistyped domain names" }, "solution": "D" }, { "question": "What is the primary responsibility of the security department?", "answers": { "A": "Responding to incidents and alarms", "B": "Training and awareness", "C": "Developing new systems", "D": "Regulating hardware and software use" }, "solution": "A" }, { "question": "How does change management ensure the quality and security of changes to the production environment?", "answers": { "A": "By using blockchain technology", "B": "By separating responsibility for program or system change from testing", "C": "By conducting vulnerability assessments", "D": "By implementing biometric access control" }, "solution": "B" }, { "question": "What is the purpose of Control-Flow Integrity (CFI)?", "answers": { "A": "Preventing execute restrictions on memory locations", "B": "Randomizing memory locations to prevent attacks", "C": "Regulating the control flow of the code to restrict attackers from altering the normal execution flow", "D": "Preventing unauthorized data access" }, "solution": "C" }, { "question": "In the context of hash functions, what property ensures that finding different messages with the same hash value is hard?", "answers": { "A": "Key distribution", "B": "One-wayness", "C": "Randomness", "D": "Collision resistance" }, "solution": "D" }, { "question": "What is the target of a command injection attack?", "answers": { "A": "Operating system", "B": "Web server", "C": "User", "D": "Database server" }, "solution": "A" }, { "question": "What is the key focus of Higgins as an identity management system?", "answers": { "A": "Providing an open-source framework for developers.", "B": "Interoperability, security, and privacy", "C": "Enabling developers to integrate identity across different systems.", "D": "Decentralizing architecture and providing dynamic discovery." }, "solution": "B" }, { "question": "Which type of authentication factor requires a one-to-one match of the offered biometric pattern against the stored pattern for the offered subject identity?", "answers": { "A": "Logical access control", "B": "Physical access control", "C": "Authentication factor", "D": "Identification factor" }, "solution": "C" }, { "question": "Which intrusion prevention system can be used in conjunction with fences?", "answers": { "A": "PIDAS", "B": "Bollards", "C": "Audio", "D": "Infrared wave patter" }, "solution": "B" }, { "question": "Which authentication protocol uses an ephemeral Diffie-Hellman key exchange to achieve perfect forward secrecy?", "answers": { "A": "Secure mutual authentication protocol", "B": "Mutual authentication, session key, and PFS", "C": "Symmetric key authentication protocol", "D": "Ephemeral Diffie-Hellman for PFS" }, "solution": "D" }, { "question": "What is the purpose of the initial permutation of the state vector in RC4?", "answers": { "A": "To create an unpredictable initial configuration of S", "B": "To produce a random permutation of numbers in memory", "C": "To generate the initial key from the seed value", "D": "To create a predictable sequence of numbers" }, "solution": "A" }, { "question": "Dora, a security administrator, is configuring access for a new employee in the manufacturing department. She ensures access to the manufacturing area while excluding access to the parts storage area. What best describes the principle Dora is applying?", "answers": { "A": "Principle of authentication", "B": "Two-person rule", "C": "Need to know", "D": "Least privilege" }, "solution": "D" }, { "question": "Bob is attempting to sniff a wired network in his first pen test contract. He sees only traffic from the segment he is connected to. What can Bob do to gather all switch traffic?", "answers": { "A": "MAC spoofing", "B": "DOS attack", "C": "MAC flooding", "D": "IP spoofing" }, "solution": "C" }, { "question": "What is the primary concern addressed by the Bell-LaPadula model?", "answers": { "A": "Unauthorized data transfer between security levels", "B": "Unauthorized write access to high-level data", "C": "Unauthorized write access to low-level data", "D": "Unauthorized read access to low-level data" }, "solution": "C" }, { "question": "What are containers in cloud computing primarily used for?", "answers": { "A": "Administering database access control", "B": "Providing external storage for applications", "C": "Implementing web application frameworks", "D": "Isolating an application from other applications and services" }, "solution": "D" }, { "question": "What is the Network Layer of the OSI reference model primarily responsible for?", "answers": { "A": "Signal regeneration and repeating", "B": "Internetwork packet routing", "C": "LAN bridging", "D": "SMTP Gateway services" }, "solution": "B" }, { "question": "What is the recommended policy for connections between firewalls over public networks?", "answers": { "A": "Connections should not be allowed over public networks.", "B": "Connections should be approved and managed by the Network Services Manager.", "C": "Connections should rely on third-party encryption services.", "D": "Connections should be unencrypted for faster communication." }, "solution": "B" }, { "question": "What is the primary role of application gateway firewalls?", "answers": { "A": "Monitoring network traffic and packet filtering.", "B": "Understanding the state of a TCP connection and allowing protocol-specific applications.", "C": "Blocking invalid packets based on predefined conditions.", "D": "Identifying improperly constructed packets and preventing protocol-specific attacks." }, "solution": "B" }, { "question": "What is the primary goal of Wired Equivalent Privacy (WEP) encryption in IEEE 802.11 networks?", "answers": { "A": "To establish private communication channels between access points and clients", "B": "To create a secure peripheral network", "C": "To provide an impenetrable security barrier", "D": "To make over-the-air transmission difficult to understand" }, "solution": "D" }, { "question": "The number of times a password should be changed is NOT a function of", "answers": { "A": "The frequency of the password’s use", "B": "The type of workstation used", "C": "The responsibilities and clearance of the user", "D": "The criticality of the information to be protected" }, "solution": "B" }, { "question": "What is the process of identifying, categorizing, and prioritizing vulnerabilities based on the likelihood and potential impact of exploitation?", "answers": { "A": "Incident response", "B": "Risk analysis", "C": "Vulnerability scanning", "D": "Risk rejection" }, "solution": "B" }, { "question": "What are the key sources for obtaining privacy rules to guide company policies?", "answers": { "A": "Industry sector regulations", "B": "Consumer preferences", "C": "Government jurisdictions", "D": "Corporate rules" }, "solution": "C" }, { "question": "Which Wi-Fi security protocol is more secure than WEP and employs a 48-bit initialization vector?", "answers": { "A": "WPA", "B": "WPA2", "C": "WPA3", "D": "None of the above" }, "solution": "A" }, { "question": "What layer of the TCP/IP protocol stack is primarily responsible for reliable delivery of packets?", "answers": { "A": "Transport layer", "B": "Application layer", "C": "Network layer", "D": "Link layer" }, "solution": "A" }, { "question": "What is the main advantage of using a best-match policy for firewall rules?", "answers": { "A": "It provides faster match determination", "B": "It is easier for the administrator to manage", "C": "It allows for better rule optimization", "D": "It avoids policy anomalies" }, "solution": "D" }, { "question": "What is the purpose of two-factor authentication?", "answers": { "A": "Bypassing login credentials", "B": "Providing an additional layer of security", "C": "Increasing password complexity", "D": "Enhancing user convenience" }, "solution": "B" }, { "question": "What is the importance of conducting frequent backups on a Windows system?", "answers": { "A": "To ensure confidentiality of data", "B": "To maintain availability of critical data", "C": "To prioritize speed over security", "D": "To monitor system performance" }, "solution": "B" }, { "question": "Which functionality class of a random number generator is generally recommended for cryptographic applications, especially for the generation of ephemeral keys?", "answers": { "A": "NTG.1", "B": "PTG.2", "C": "PTG.3", "D": "DRG.3" }, "solution": "C" }, { "question": "Which encryption method is classified as a symmetric key cryptography?", "answers": { "A": "Diffie-Hellman", "B": "RSA", "C": "AES", "D": "Diffusion" }, "solution": "C" }, { "question": "Which common type of access control system assigns rights to job functions and not user accounts?", "answers": { "A": "Discretionary access control", "B": "Mandatory access control", "C": "Rule-based access control", "D": "Role-based access control" }, "solution": "D" }, { "question": "Which type of software is recommended to be installed on all microcomputers to detect, identify, isolate, and eradicate viruses?", "answers": { "A": "Firewall Software", "B": "Anti-Virus Software", "C": "Encryption Software", "D": "Intrusion Detection Software" }, "solution": "B" }, { "question": "Which element of the CIA triad refers to the protection of data from unauthorized access and disclosure?", "answers": { "A": "Accountability", "B": "Confidentiality", "C": "Authenticity", "D": "Integrity" }, "solution": "B" }, { "question": "What is the basis of fault tolerance in the context of system survivability in cybersecurity?", "answers": { "A": "Encryption protocols", "B": "Duplication of key components", "C": "Biometric authentication", "D": "Intrusion detection systems" }, "solution": "B" }, { "question": "What is the primary purpose of security templates in hardening a computer?", "answers": { "A": "To enable logging of critical events", "B": "To remove unnecessary programs", "C": "To restrict permissions on files and access to the registry", "D": "To control areas such as user rights, permissions, and password policies" }, "solution": "D" }, { "question": "What is the primary characteristic of elasticity in virtualization and cloud solutions?", "answers": { "A": "The capacity to handle more tasks or workloads.", "B": "The ability to expand or contract resource utilization based on need.", "C": "The flexibility to operate from different hardware platforms.", "D": "The ability to automate network monitoring and response." }, "solution": "B" }, { "question": "What is a key consideration when implementing meaningful measures or metrics for continuity planning?", "answers": { "A": "Measuring the success of the CP process based on traditional measures.", "B": "Measuring the money spent on hotsites and personnel devoted to CP activities.", "C": "Validating backup and recovery plans through routine testing.", "D": "Focusing on measuring the CP process contribution to achieving organizational goals." }, "solution": "D" }, { "question": "Why is it important to have off-site computer backup for an insurance claim following a catastrophic event?", "answers": { "A": "It reduces the cost of the claim.", "B": "It ensures that the claim is honored by the insurance company.", "C": "It allows the insurance company to investigate the claim effectively.", "D": "It maximizes data recovery efforts and reduces the claim amount." }, "solution": "D" }, { "question": "What is a potential use of a smart card technology in addition to physical access control?", "answers": { "A": "To facilitate computer access authentication", "B": "To provide environmental controls", "C": "To enforce perimeter fencing controls", "D": "To activate emergency lighting systems" }, "solution": "A" }, { "question": "Which step in the hardening process includes disabling unnecessary services?", "answers": { "A": "Remove unnecessary user accounts and rename the admin/root account", "B": "Apply the latest patches", "C": "Install the latest service pack", "D": "Disable unnecessary services" }, "solution": "D" }, { "question": "Which of the following encryption methods uses a single key to both encrypt and decrypt the data?", "answers": { "A": "SSL/TLS", "B": "Hashing", "C": "Asymmetric encryption", "D": "Symmetric encryption" }, "solution": "D" }, { "question": "What is the purpose of cyber security?", "answers": { "A": "To promote cyberbullying", "B": "To prevent unauthorized access to data", "C": "To share personal information online", "D": "To conduct financial fraud" }, "solution": "B" }, { "question": "Which cloud computing deployment model provides a distinct, isolated computing environment for an organization and is managed by the organization or a third party, and may exist on premise or off premise?", "answers": { "A": "Hybrid cloud", "B": "Public cloud", "C": "Community cloud", "D": "Private cloud" }, "solution": "D" }, { "question": "In a corporate environment, which form of encryption would be used to create a secure channel between two offices connected via a data circuit?", "answers": { "A": "Blockchain encryption", "B": "Transport Layer Security (TLS)", "C": "Link Encryption", "D": "Steganography" }, "solution": "C" }, { "question": "Who is responsible for communicating and clarifying the assurance requirements and expectations for an IT security product under evaluation?", "answers": { "A": "Developers", "B": "Evaluators", "C": "Consumers", "D": "Liaison with CCEB" }, "solution": "B" }, { "question": "What does encryption in software development primarily aim to do?", "answers": { "A": "Prevent any access to the software", "B": "Safeguard copyrighted information and prevent unauthorized access", "C": "Facilitate the transfer of software to other countries", "D": "Protect the software from external interference" }, "solution": "B" }, { "question": "Users on a network authenticate using a hardware token and a four-digit PIN. Which authentication method does this describe?", "answers": { "A": "Multifactor authentication", "B": "Two-factor authentication", "C": "Token authentication", "D": "Three-factor authentication" }, "solution": "B" }, { "question": "As per BSI TR-03184 Information Security for Space Systems, which business process requires integrity to be classified as very high?", "answers": { "A": "Test", "B": "Operation", "C": "A and B", "D": "None of the above" }, "solution": "C" }, { "question": "A Trojan relies on __________ to be activated.", "answers": { "A": "Port redirection", "B": "Vulnerabilities", "C": "Trickery and deception", "D": "Social engineering" }, "solution": "C" }, { "question": "An individual user account may have rights and permissions assigned directly to it in which access control environment?", "answers": { "A": "Role-Based Access Control (RBAC)", "B": "Lattice-Based Access Controls", "C": "Mandatory Access Control (MAC)", "D": "Discretionary Access Control (DAC)" }, "solution": "D" }, { "question": "What are the primary controls used to protect the operating system, applications, and information in the system from unauthorized alteration or destruction?", "answers": { "A": "Preventive maintenance", "B": "Audit trail mechanisms", "C": "Variance detection", "D": "Integrity controls" }, "solution": "D" }, { "question": "What method of authentication requires presenting both something you know and something you have?", "answers": { "A": "Two-factor authentication", "B": "Single sign-on", "C": "Biometric authentication", "D": "Session key authentication" }, "solution": "A" }, { "question": "In the context of factorization methods, what does a smooth x-value relative to the factor base S mean?", "answers": { "A": "It has a small prime factor", "B": "It is divisible by p0 and p1 only", "C": "Its factorization involves only primes in S", "D": "It is a perfect square modulo N" }, "solution": "C" }, { "question": "What is the primary goal of the concept of polyinstantiation in multilevel databases?", "answers": { "A": "To restrict access to a limited subset of database attributes and/or records", "B": "To insert false or misleading data into the database", "C": "To subvert inference attacks by using multiple records for the same data", "D": "To enforce semantic integrity rules in the database" }, "solution": "C" }, { "question": "What is the term used to describe the practice of disguising a message to make it appear as normal data traffic?", "answers": { "A": "Social engineering", "B": "Spoofing", "C": "Steganography", "D": "Phishing" }, "solution": "C" }, { "question": "Which of the following refers to the data left on the media after the media has been erased?", "answers": { "A": "Dregs", "B": "Remanence", "C": "Sticky bits", "D": "Semi-hidden" }, "solution": "B" }, { "question": "Which of the following is a characteristic of an anomaly-based intrusion detection system (IDS)?", "answers": { "A": "It compares current network traffic patterns to a baseline of normal behavior.", "B": "It focuses on monitoring system logs for suspicious activities.", "C": "It analyzes the content of network packets to detect known attacks.", "D": "It requires frequent updates of known attack signatures." }, "solution": "A" }, { "question": "What is the primary purpose of a public key infrastructure (PKI)?", "answers": { "A": "Verification of digital signatures, Bilateral Authentication, Secure Communications", "B": "Validation of public keys, Private key generation", "C": "Bilateral Authentication, Transfer of symmetric keys, Obfuscation", "D": "All of the above" }, "solution": "A" }, { "question": "Which technology is used to protect the contents of protocol packets by encapsulating them in packets of another protocol?", "answers": { "A": "Multimedia Collaboration", "B": "Load Balancing", "C": "Instant Messaging", "D": "Tunneling" }, "solution": "D" }, { "question": "What is the mode of operation for a Wireless Application Protocol (WAP) gateway in which the transmission is protected by WTLS and then re-encrypted for transmission using SSL on the wired network?", "answers": { "A": "Wired Equivalency Privacy (WEP) Gap", "B": "Wireless Transaction Protocol (WTP) Gap", "C": "Wireless Transport Layer Security Protocol (WTLS) Gap", "D": "Wireless Application Protocol (WAP) Gap" }, "solution": "D" }, { "question": "What is often used in IPsec to thwart traffic analysis, but may increase bandwidth usage and processing load?", "answers": { "A": "Compression", "B": "Dynamic routing", "C": "Extra padding", "D": "Fragmentation" }, "solution": "C" }, { "question": "What does the acronym 'POI' stand for in the context of payment card transactions?", "answers": { "A": "Point of Inquiry", "B": "Point of Interaction", "C": "Payment Operations Integration", "D": "Payment Options Interface" }, "solution": "B" }, { "question": "What was the key theoretical result established by Luby and Rackoff in 1988 regarding Feistel ciphers?", "answers": { "A": "Indistinguishability from a pseudorandom permutation under a chosen plaintext attack", "B": "Indistinguishability from a random permutation under a known plaintext attack", "C": "Demonstration of pure randomness under any chosen plaintext/ciphertext attack", "D": "Indistinguishability from a random permutation under a known ciphertext attack" }, "solution": "A" }, { "question": "What is the recommended practice to protect sensitive information while it is being transmitted over the internet?", "answers": { "A": "Leaving information unencrypted", "B": "Sharing sensitive information through unsecured emails", "C": "Publishing sensitive information on public platforms", "D": "Using encryption" }, "solution": "D" }, { "question": "What kind of data backup is often neglected in the desktop environment?", "answers": { "A": "Update backup", "B": "Primary storage backup", "C": "Online storage backup", "D": "Archive backup" }, "solution": "D" }, { "question": "What is the purpose of the Transport Layer in the TCP/IP protocol suite?", "answers": { "A": "Adding physical layer headers to the transmitted data", "B": "Performing data flow between application and network layers", "C": "Removing the network frame upon receiving data", "D": "Handling data flow between applications on different hosts" }, "solution": "D" }, { "question": "What is the purpose of a risk assessment in cybersecurity?", "answers": { "A": "To create and implement policies and procedures to ensure high levels of security.", "B": "To transfer financial costs of a successful computer attack to the insurance carrier.", "C": "To eliminate all risk factors and prevent system compromise.", "D": "To assess and evaluate the security of an organization." }, "solution": "D" }, { "question": "You have been asked to deploy a biometric system to protect your company's data center. Management is concerned that errors in the system will prevent users from accepting the system. Management stipulates that you must deploy the system with the lowest crossover error rate (CER). Identify one of the terms used in biometrics to determine CER?", "answers": { "A": "ERR", "B": "ACL", "C": "FAR", "D": "EAR" }, "solution": "C" }, { "question": "Which of the following areas are governed by rules of evidence?", "answers": { "A": "Prohibition of some categories of hearsay evidence", "B": "Presentation and examination of evidence before a tribunal", "C": "Introduction and examination of expert testimony", "D": "All of the above" }, "solution": "D" }, { "question": "For any Referential Integrity foreign key attribute, the referenced relation must have that", "answers": { "A": "A tuple with the same value for its primary key", "B": "An attribute with the same value for its other foreign key", "C": "An attribute with the same value for its secondary key", "D": "A tuple with the same value for its secondary key" }, "solution": "A" }, { "question": "How many layers are there in the OSI model?", "answers": { "A": "6", "B": "5", "C": "7", "D": "8" }, "solution": "C" }, { "question": "What layer of the OSI model provides a translation of data that is understandable by the next receiving layer?", "answers": { "A": "Transport", "B": "Session", "C": "Presentation", "D": "Application" }, "solution": "C" }, { "question": "What is the purpose of a SQL injection attack?", "answers": { "A": "To crash the database server", "B": "To extract passwords from the database", "C": "To execute arbitrary SQL commands on the database", "D": "To delete tables from the database" }, "solution": "C" }, { "question": "What is the primary purpose of Digital Rights Management (DRM) technology?", "answers": { "A": "To protect the integrity of operating systems", "B": "To authenticate users and provide access control", "C": "To manage access to digital content and prevent unauthorized distribution", "D": "To secure software development processes" }, "solution": "C" }, { "question": "What is the focus of the reliability perspective within the architecture?", "answers": { "A": "System security", "B": "Frequency of system failures", "C": "Business operations", "D": "Data handling" }, "solution": "B" }, { "question": "In intrusion detection systems, what is a false-positive alarm?", "answers": { "A": "When the system fails to generate any alarms", "B": "When the system fails to detect a real intrusion", "C": "When legitimate network traffic resembles a known attack pattern", "D": "When the system correctly identifies malicious activities" }, "solution": "C" }, { "question": "What is the term used to describe the practice of tricking individuals into providing sensitive information such as usernames, passwords, and credit card details?", "answers": { "A": "Encryption", "B": "Firewall", "C": "Phishing", "D": "Malware" }, "solution": "C" }, { "question": "What is the most common reaction to the loss of physical and infrastructure support?", "answers": { "A": "Vulnerability scanning", "B": "Tightening of access controls", "C": "Waiting for the event to expire", "D": "Deploying OS updates" }, "solution": "C" }, { "question": "Which of the following is a true statement regarding warrants and seizure on an individual's property?", "answers": { "A": "A manager without a warrant can seize the information on a computer at a company that contains suspected child pornography information if the manager was directed by a police officer to obtain this information", "B": "If law enforcement has a warrant for a home computer in a case of suspected child pornography they can also confiscate the computers at the homeowner's office", "C": "Police do not have to have a warrant for most cases of property seizure", "D": "A manager falls under the same restrictions as law enforcement agents if she follows the instruction of a law enforcement agent" }, "solution": "D" }, { "question": "Which of the following is a simple security protocol used to prevent friendly fire incidents?", "answers": { "A": "Secure Entry Protocol", "B": "ATM Transaction Protocol", "C": "MiG-in-the-Middle Protocol", "D": "Identify Friend or Foe Protocol" }, "solution": "D" }, { "question": "Which key combination helps to secure the logon process in Windows?", "answers": { "A": "Alt+F4", "B": "Ctrl+Alt+Del", "C": "Ctrl+Shift+Esc", "D": "Windows+R" }, "solution": "B" }, { "question": "What is the function of the base station in a wireless network?", "answers": { "A": "To provide encryption for the communication signals", "B": "To connect to the land-based wired communication infrastructure", "C": "To route data to a second communication unit", "D": "To transmit signals to and receive signals from communication devices" }, "solution": "D" }, { "question": "What makes web 2.0 applications more vulnerable to security threats compared to web 1.0 applications?", "answers": { "A": "Web 2.0 applications lack proper user authentication mechanisms.", "B": "Web 2.0 applications allow simultaneous uploading and downloading, providing more attack surface.", "C": "Web 2.0 applications have simpler data validation techniques.", "D": "Web 2.0 applications use advanced encryption methods that are easier to bypass." }, "solution": "B" }, { "question": "What is the maximum segment length supported by 10Base-T using Category 3 wiring?", "answers": { "A": "150 meters", "B": "500 meters", "C": "185 meters", "D": "100 meters" }, "solution": "D" }, { "question": "What is the primary purpose of the Common Criteria for Information Technology Security Evaluation (Common Criteria, or CC)?", "answers": { "A": "Creating a universal baseline for network security policies", "B": "Classifying vulnerabilities and threats to information systems", "C": "Enhancing the usability and functionality of computer systems", "D": "Providing a standardized way for vendors to make security claims" }, "solution": "D" }, { "question": "What type of architecture is a modern application often implemented using?", "answers": { "A": "Virtualization", "B": "Emulation", "C": "Microservice", "D": "Serverless" }, "solution": "C" }, { "question": "What protocol is used in the cellular network to deliver call routing information?", "answers": { "A": "Internet Protocol Security (IPsec)", "B": "Mobile Application Part (MAP)", "C": "Telecommunications Information Networking Architecture (TINA)", "D": "Paging Protocol (PP)" }, "solution": "B" }, { "question": "Which method of monitoring analyzes network traffic for predetermined attack patterns?", "answers": { "A": "Behavior-based monitoring", "B": "Anomaly-based monitoring", "C": "Heuristic monitoring", "D": "Signature-based monitoring" }, "solution": "D" }, { "question": "Which improvement does third-generation mobile phones provide over GSM with respect to the two-way authentication?", "answers": { "A": "It ensures the sequence number is masked with an anonymity key.", "B": "It provides a public-key encryption mechanism for authentication vectors during transit.", "C": "It uses a stronger cipher for content confidentiality.", "D": "It prevents IMSI-catchers from being effective." }, "solution": "D" }, { "question": "If you were to see the following in a packet capture, what would you expect was happening? ' or 1=1;", "answers": { "A": "XML external entity injection", "B": "SQL injection", "C": "Command injection", "D": "Cross-site scripting" }, "solution": "B" }, { "question": "What protocol is intended to be used and resolved on the local network, and won't resolve using DNS unless DNS is configured to use the same names and IP addresses?", "answers": { "A": "HTTP", "B": "SMTP", "C": "SMB", "D": "SNMP" }, "solution": "C" }, { "question": "What is the primary purpose of a written acknowledgment from a third-party service provider?", "answers": { "A": "To shift all security responsibilities to the third-party provider", "B": "To demonstrate the commitment to maintaining proper security of account data", "C": "To avoid the need for continuous monitoring", "D": "To absolve the entity from any accountability" }, "solution": "B" }, { "question": "In the context of firewall architectures, what does a multi-homed host refer to?", "answers": { "A": "A host with restricted network access", "B": "A host with two network interfaces", "C": "A host with only one network interface", "D": "A host with load balancing capabilities" }, "solution": "B" }, { "question": "Why are formal methods not infallible in verifying the security of cryptographic protocols?", "answers": { "A": "They depend on assumptions that may not be practical and can contain errors in theorems", "B": "They often lead to overconfidence in the security of protocols", "C": "They are not widely accepted in the industry", "D": "They require excessive time and resources" }, "solution": "A" }, { "question": "According to J.M. Kizza, what are the six types of intrusions?", "answers": { "A": "Malicious use, vulnerability assessment, penetration of security control system, leakage, denial of service, and masquerade attacks.", "B": "Attempted break-ins, malicious use, physical intrusion, unauthorized access, data breach, and denial of information.", "C": "Attempted break-ins, masquerade attacks, penetrations of the security control system, leakage, denial of service, and physical intrusion.", "D": "Physical intrusion, unauthorized access, leakage, data breach, denial of service, and malicious use." }, "solution": "C" }, { "question": "Who is responsible for building IT security controls into the design and implementations of the systems?", "answers": { "A": "Data/information owner", "B": "Information System Auditor", "C": "IT personnel", "D": "End User" }, "solution": "C" }, { "question": "What is the term for a network security control that allows or denies traffic based on the port number and IP protocol?", "answers": { "A": "VPN", "B": "Intrusion Prevention System (IPS)", "C": "Proxy server", "D": "Firewall" }, "solution": "D" }, { "question": "In the TLS Record Protocol, what is the last step of processing before transmitting a unit in a TCP segment?", "answers": { "A": "Adding a MAC", "B": "Fragmenting the data", "C": "Encrypting the data", "D": "Compressing the data" }, "solution": "C" }, { "question": "Which protocol is used to provide for reliable, sequenced, full duplex messages with flow control?", "answers": { "A": "File Transfer Protocol (FTP)", "B": "Transmission Control Protocol (TCP)", "C": "Simple Mail Transfer Protocol (SMTP)", "D": "Internet Protocol (IP)" }, "solution": "B" }, { "question": "What feature of VPNs is used to generate detailed reporting of remote access and VPN network use for internal cost-accounting purposes?", "answers": { "A": "RADIUS-based authentication.", "B": "IPSec Tunnel Mode encryption.", "C": "RAS Reporting and Internal Usage Chargeback.", "D": "L2TP Integration." }, "solution": "C" }, { "question": "Which component is essential to include in a system security policy to determine the access rights of different user groups to certain system resources?", "answers": { "A": "Physical security of resources and site environment", "B": "Logical access restriction to the system resources", "C": "Cryptographic restrictions", "D": "Security Policy access rights matrix" }, "solution": "D" }, { "question": "What is the primary function of a hardware security module (HSM) in a cryptographic environment?", "answers": { "A": "To secure and manage cryptographic keys", "B": "To manage encryption algorithms", "C": "To monitor network traffic for security threats", "D": "To ensure physical security of server rooms" }, "solution": "A" }, { "question": "Which layer of the OSI model does user-to-network connectivity primarily leverage through a virtual private network (VPN)?", "answers": { "A": "Transport layer", "B": "Application layer", "C": "Data link layer", "D": "Network layer" }, "solution": "D" }, { "question": "Which term describes a program that is used to detect, prevent, and remove malware?", "answers": { "A": "Firewall", "B": "Antivirus", "C": "Proxy server", "D": "Router" }, "solution": "B" }, { "question": "Where can Security Identifiers (SIDs) and Resource Identifiers (RIDs) be found in a Linux system?", "answers": { "A": "/usr/local/bin folder", "B": "/etc/group file", "C": "/etc/passwd file", "D": "/var/log/syslog file" }, "solution": "C" }, { "question": "What law in Canada restricts how commercial businesses may collect, use, and disclose personal information?", "answers": { "A": "Personal Information Protection and Electronic Documents Act (PIPEDA)", "B": "USA PATRIOT Act", "C": "Electronic Communications Privacy Act", "D": "Trade Secrets Act" }, "solution": "A" }, { "question": "Which privacy paradigm focuses on providing users with the means to decide what information they will expose to the adversary?", "answers": { "A": "Privacy as confidentiality", "B": "None of the above", "C": "Privacy as informational control", "D": "Privacy as transparency" }, "solution": "C" }, { "question": "What is the purpose of remediation in cybersecurity risk management?", "answers": { "A": "To assist in the evaluation of risk and provide financial protection in the event of a security breach.", "B": "To understand the report that the assessment yields and prioritize areas of vulnerability that need immediate attention.", "C": "To assess and evaluate the security of an organization.", "D": "To create and implement policies and procedures to ensure high levels of security." }, "solution": "B" }, { "question": "What is the purpose of a Crisis Communications Plan (CCP)?", "answers": { "A": "Ensuring rapid system recovery after a major disruption", "B": "Addressing communications with personnel and the public during a crisis", "C": "To provide disaster recovery procedures at an alternate site", "D": "Facilitating recovery of major disruptions at an alternate site" }, "solution": "B" }, { "question": "According to the principles of continuity planning, what should be facilitated during recovery strategy development?", "answers": { "A": "Selection and assignment of recovery team members", "B": "Implementation of additional insurance policies", "C": "Recovery plan testing", "D": "Development of long-term maintenance strategies" }, "solution": "A" }, { "question": "What is the purpose of integrity checking on a firewall?", "answers": { "A": "To ensure that no unauthorized personnel can access the firewall", "B": "To create a secure backup of the firewall configuration", "C": "To optimize the firewall's performance", "D": "To notify the system administrator of any changes to critical files" }, "solution": "D" }, { "question": "What is the purpose of a cryptographic system?", "answers": { "A": "To prevent any unauthorized access to a computer system", "B": "To improve the processing speed of a computer", "C": "To transform information into an unreadable format for secure storage or transmission", "D": "To create complex algorithms for software development" }, "solution": "C" }, { "question": "What type of DNS record is used to indicate the host to which email should be sent for a domain?", "answers": { "A": "AAAA record", "B": "NS record", "C": "A record", "D": "MX record" }, "solution": "D" }, { "question": "What is the primary benefit of a burstable TCP service for Internet users?", "answers": { "A": "Improved overall network security", "B": "Reduced network bandwidth consumption", "C": "Flexible bandwidth utilization based on demand", "D": "Faster webpage loading times" }, "solution": "C" }, { "question": "What technique focuses on the security of network protocols and the internet architecture?", "answers": { "A": "Transport-Layer Security", "B": "Network Layer Security", "C": "Link Layer Security", "D": "Application-Layer Security" }, "solution": "B" }, { "question": "Which algorithm can be used to determine if a given number is prime with high probability?", "answers": { "A": "Miller-Rabin primality test", "B": "S-DES key schedule", "C": "RSA encryption algorithm", "D": "Rijndael algorithm" }, "solution": "A" }, { "question": "What security element defines step-by-step workflows or instructions for how a task should be accomplished?", "answers": { "A": "Policies", "B": "Standards", "C": "Procedures", "D": "Plans" }, "solution": "C" }, { "question": "What is a control against the threat of sending unauthorized update files to VPN clients?", "answers": { "A": "Cryptography and digital signatures to digitally sign the update file", "B": "Using LDAP over SSL (LDAPs) for secure path transfer of updates", "C": "Ensuring the VPN server has the capacity to efficiently process the VPN traffic", "D": "Encrypting the actual configuration file on the remote user computer" }, "solution": "A" }, { "question": "During which phase of incident response are systems returned to a normal state?", "answers": { "A": "Recovery", "B": "Containment", "C": "Detection", "D": "Eradication" }, "solution": "A" }, { "question": "Which approach was commonly used to prevent unauthorized copying of software by adding hardware uniqueness to PCs?", "answers": { "A": "Using a dongle attached to the parallel port", "B": "Burning holes in a master diskette with a laser", "C": "Marking a sector of the hard disk as bad", "D": "Storing the PC's configuration and requiring a phone call if it changed" }, "solution": "A" }, { "question": "What is the purpose of the Computer Policy Guide?", "answers": { "A": "To develop a framework for securing computer networks.", "B": "To offer sample policies for information security and usage.", "C": "To provide security risk management and compliance software.", "D": "To provide a centralized cybersecurity management tool." }, "solution": "B" }, { "question": "What is the key difference between tokenization and pseudonymization in data protection?", "answers": { "A": "Tokenization only applies to credit card transactions, while pseudonymization applies to all types of data", "B": "Tokenization uses tokens to represent data, while pseudonymization uses pseudonyms to represent data", "C": "Tokenization replaces data with artificial identifiers, while pseudonymization represents data in an encrypted format", "D": "Tokenization represents all data with artificial identifiers, while pseudonymization uses a token to replace data" }, "solution": "B" }, { "question": "What factor is crucial in determining the type and scope of managed security services offered by Managed Security Service Providers (MSSPs)?", "answers": { "A": "The MSSP's ability to provide dedicated systems for each customer's unique security needs", "B": "The compatibility of the organization's existing security infrastructure with the MSSP's proprietary software", "C": "The MSSP's ownership of the customer premise equipment (CPE)", "D": "The extent to which the organization is willing to relinquish control over its security infrastructure" }, "solution": "D" }, { "question": "What advanced virus technique modifies the malicious code of a virus on each system it infects?", "answers": { "A": "Stealth", "B": "Encryption", "C": "Polymorphism", "D": "Multipartitism" }, "solution": "C" }, { "question": "What anomaly occurs when only a portion of the packets of a later rule matches an earlier rule?", "answers": { "A": "Rule duplication", "B": "Rule masking", "C": "Shadowing", "D": "Half shadowing" }, "solution": "D" }, { "question": "What should an IT security awareness campaign be in terms of delivery and simplicity?", "answers": { "A": "Simple and straightforward", "B": "Supported by complicated management protocols", "C": "Managed solely by IT department", "D": "Expensive and complicated" }, "solution": "A" }, { "question": "What is the main reason for implementing whole disk encryption on a computing device?", "answers": { "A": "To prevent unauthorized access through a firewall", "B": "To protect data stored on the device", "C": "To ensure physical security of the device", "D": "To enhance network performance" }, "solution": "B" }, { "question": "What is the best way to establish host-based security for an organization’s workstations?", "answers": { "A": "Installing antivirus software", "B": "Deploying database and web servers", "C": "Using firewalls for individual computers", "D": "Implementing Group Policy objects (GPOs)" }, "solution": "D" }, { "question": "Which type of cryptographic system relies on the use of a trusted third party to issue, manage, and revoke digital certificates?", "answers": { "A": "DES", "B": "AES", "C": "PKI", "D": "RSA" }, "solution": "C" }, { "question": "What type of attack involves trying every possible password instance?", "answers": { "A": "Guessing", "B": "Dictionary attack", "C": "Brute-force attack", "D": "Cryptanalysis attack" }, "solution": "C" }, { "question": "Which of these would be an example of a loss of integrity?", "answers": { "A": "Bad blocks flagged on disk", "B": "Credit cards passed in cleartext", "C": "Memory failures causing disk drivers to run incorrectly", "D": "User making changes to a file and saving it" }, "solution": "C" }, { "question": "An IDS installed on the network perimeter sees a spike in traffic during off-duty hours and begins logging and alerting. Which type of IDS is in place?", "answers": { "A": "Anomaly based", "B": "Packet filtering", "C": "Signature based", "D": "Stateful" }, "solution": "A" }, { "question": "Which media control below is the BEST choice to prevent data remanence on magnetic tapes or floppy disks?", "answers": { "A": "Overwriting the media with new application data", "B": "Making sure the disk is re-circulated as quickly as possible to prevent object reuse", "C": "Degaussing the media", "D": "Applying a concentration of hydriodic acid (55% to 58% solution) to the gamma ferric oxide disk surface" }, "solution": "C" }, { "question": "What tool can be used for an automated security code review to find instances of insecure coding patterns and to help ensure that secure coding policies are being followed?", "answers": { "A": "Cryptography Standards", "B": "Static Analysis Security Testing", "C": "Dynamic Analysis Security Testing", "D": "Threat Modeling" }, "solution": "B" }, { "question": "How do server-side request forgery (SSRF) attacks exploit a vulnerability?", "answers": { "A": "By tricking a server into visiting a URL", "B": "By executing commands on the user's behalf", "C": "By embedding scripts into a web page", "D": "By disclosing user credentials" }, "solution": "A" }, { "question": "What does the ACK packet represent in the TCP three-way handshake?", "answers": { "A": "The client has acknowledged the server's request to close the connection.", "B": "The server has acknowledged the client's initial sequence number.", "C": "The client has received and acknowledged the server's initial sequence number.", "D": "The client has finished data transfer and is ready to terminate the connection." }, "solution": "C" }, { "question": "What is one of the possible vulnerabilities that Bluetooth suffers from?", "answers": { "A": "Leaking calendars and address books through the Bluetooth protocol.", "B": "An attacker can remotely control a phone to make phone calls or connect to the Internet.", "C": "Mobile phone worms can exploit a Bluetooth connection to replicate and spread.", "D": "All of the above" }, "solution": "D" }, { "question": "Which statement is correct about ISDN Basic Rate Interface?", "answers": { "A": "It offers 23 B channels and 1 D channel", "B": "It offers 30 B channels and 1 D channel", "C": "It offers 2 B channels and 1 D channel", "D": "It offers 1 B channel and 2 D channels" }, "solution": "C" }, { "question": "A breach is generally an impermissible use or disclosure that compromises the security or privacy of the protected information. What must you do to determine if a data breach must be reported?", "answers": { "A": "Check with law enforcement such as the FBI", "B": "Examine existing laws and regulations", "C": "Verify the breach in log history", "D": "Follow procedures in your DRP" }, "solution": "B" }, { "question": "What is one of the most important features of a stream cipher in terms of producing the keystream?", "answers": { "A": "Long periods without repetition", "B": "Predictable keystream generation", "C": "High computational complexity", "D": "Statistically predictable keystream" }, "solution": "A" }, { "question": "Which of the following is not a task in the risk assessment process?", "answers": { "A": "Asset valuation", "B": "Cost/benefit analysis", "C": "Threat analysis", "D": "Project sizing" }, "solution": "D" }, { "question": "What is cyber-terrorism?", "answers": { "A": "Creating and spreading computer viruses.", "B": "Intercepting data transmission over the internet.", "C": "Unlawful attacks and threats of attack against computer networks and the information stored therein when done to intimidate or coerce a government or its people in furtherance of political or social objectives.", "D": "Gaining unauthorized access to a computer system or data with malicious intent." }, "solution": "C" }, { "question": "In digital watermarking, what is the purpose of embedding a small amount of information within a file?", "answers": { "A": "To make the file unusable", "B": "To introduce errors into the file", "C": "To hide data without changing the file", "D": "To compress the file" }, "solution": "C" }, { "question": "What is the purpose of a logon script in a computer system?", "answers": { "A": "To provide a graphical user interface to users", "B": "To map local drive letters to network shares or launch programs at user logon", "C": "To provide encryption for sensitive information", "D": "To monitor user activities and behaviors" }, "solution": "B" }, { "question": "What does the chain of evidence show in a criminal investigation?", "answers": { "A": "Who will testify at trial", "B": "Who obtained the evidence and who had control or possession of it", "C": "Where the evidence was obtained", "D": "Who committed the crime" }, "solution": "B" }, { "question": "What is the primary purpose of a firewall in network security?", "answers": { "A": "To filter out data that the user is not authorized to access", "B": "To prevent unauthorized access to data resulting from hardware or software failure", "C": "To control access to computer files", "D": "To shield the trusted network from unauthorized users" }, "solution": "D" }, { "question": "What security feature is included in a multifunction device (MFD), which combines several security components including application filtering, IDS, IPS, and antivirus/antimalware scanning?", "answers": { "A": "Web Security Gateway", "B": "Circuit-Level Firewall", "C": "Next-Generation Firewall (NGFW)", "D": "Stateful Inspection Firewall" }, "solution": "C" }, { "question": "Which means of authentication is based on something you know, such as a PIN or password?", "answers": { "A": "Type 2", "B": "Type 3", "C": "Type 1", "D": "Type 4" }, "solution": "C" }, { "question": "How is cyber espionage generally regarded under international law during peacetime?", "answers": { "A": "It is not generally considered a violation of international law.", "B": "It is considered a violation of international law.", "C": "It is regarded as a war crime.", "D": "It is seen as a breach of the state's sovereignty." }, "solution": "A" }, { "question": "In the TCP/IP protocol stack, which layer attaches its own header to the file and sends the document to the network layer?", "answers": { "A": "Physical layer", "B": "Transport layer", "C": "Network layer", "D": "Data-link layer" }, "solution": "B" }, { "question": "Which command is used to reset all IPv6 configuration states on a Windows machine?", "answers": { "A": "reset ipv6", "B": "netsh interface ipv6 reset", "C": "clearipv6", "D": "resetnetwork" }, "solution": "B" }, { "question": "Which entity is responsible for maintaining and certifying a large database that is continually changing in public key cryptography?", "answers": { "A": "Digital certificate", "B": "Certificate authority", "C": "Key distribution center", "D": "Key server" }, "solution": "B" }, { "question": "What is the primary goal of granting access to users based on least privileges?", "answers": { "A": "To increase the organization's efficiency.", "B": "To achieve workforce empowerment.", "C": "To demonstrate respect for users' privacy.", "D": "To prevent unauthorized access and privilege abuse." }, "solution": "D" }, { "question": "In the XOR function, what value is returned when both input values are true?", "answers": { "A": "None", "B": "True", "C": "Random", "D": "False" }, "solution": "D" }, { "question": "An individual presents herself at your office claiming to be a service technician. She is attempting to discuss technical details of your environment such as applications, hardware, and personnel used to manage it. This may be an example of what type of attack?", "answers": { "A": "Perimeter screening", "B": "Access control", "C": "Behavioral engineering", "D": "Social engineering" }, "solution": "D" }, { "question": "What is a primary benefit of using images when deploying new systems?", "answers": { "A": "Provides a baseline for configuration management", "B": "Reduces vulnerabilities from unpatched systems", "C": "Provides documentation for changes", "D": "Improves patch management response times" }, "solution": "A" }, { "question": "Which flag is used with nmblookup to perform a broadcast address lookup for a specific system?", "answers": { "A": "-S", "B": "-B", "C": "-a", "D": "-R" }, "solution": "B" }, { "question": "Norbert is the security administrator for a public network. In an attempt to detect hacking attempts, he installed a program on his production servers that imitates a well-known operating system vulnerability and reports exploitation attempts to the administrator. What is this type of technique called?", "answers": { "A": "Bear trap", "B": "Firewall", "C": "Pseudo-flaw", "D": "Honey pot" }, "solution": "C" }, { "question": "What cryptographic attack exploits the properties of the RSA algorithm by selecting blocks of data to analyze for cryptanalysis?", "answers": { "A": "Chosen ciphertext attack", "B": "Probable-message attack", "C": "Brute force attack", "D": "Mathematical attack" }, "solution": "A" }, { "question": "What does the TrustAnchors parameter specify in the Server-based Certificate Validity Protocol (SCVP)?", "answers": { "A": "The allowed key usage policies", "B": "Set of certificates that must be at the top of any acceptable certificate chain", "C": "CRL extensions", "D": "Certificates that the SCVP server is trusted to use" }, "solution": "B" }, { "question": "Which of the following is a best practice for data backup in cybersecurity?", "answers": { "A": "Making backup copies only for non-essential data.", "B": "Storing backup data on the same server as the original data.", "C": "Implementing regular automated backups to a separate location or cloud storage.", "D": "Backing up data only once a year to save storage space." }, "solution": "C" }, { "question": "What is the purpose of the Padding field in the ESP packet format?", "answers": { "A": "It is used to remove null characters from the plaintext", "B": "It expands the plaintext to the required length for encryption.", "C": "It expands the ciphertext to the required length for encryption.", "D": "It provides cryptographic synchronization data like an initialization vector." }, "solution": "B" }, { "question": "What does a formal security awareness program aim to make all personnel aware of?", "answers": { "A": "The threat landscape only", "B": "All elements of PCI DSS requirements", "C": "The organization’s overall information security policy and procedures", "D": "All of the above" }, "solution": "C" }, { "question": "Why is user training and awareness essential for maintaining a secure information system?", "answers": { "A": "To increase the complexity of network passwords.", "B": "To ensure that employees can recognize and respond to security threats.", "C": "To outsource cybersecurity operations to specialized firms.", "D": "To shift the responsibility of cybersecurity to external stakeholders." }, "solution": "B" }, { "question": "What does the term 'man-in-the-middle attack' refer to in the context of instant messaging?", "answers": { "A": "A hacker gaining access to an IM server and intercepting messages", "B": "An attacker impersonating a legitimate user in an IM conversation", "C": "An attack in which a third party intercepts and relays messages between two legitimate users", "D": "An attack by a third party posing as a legitimate broker in an IM transaction" }, "solution": "C" }, { "question": "Which approach to intrusion detection defines attack signatures and monitors system activity for the presence of these signatures?", "answers": { "A": "Learning detection", "B": "Anomaly detection", "C": "Misuse detection", "D": "Pattern matching" }, "solution": "C" }, { "question": "Which operating system uses an access control mechanism based on the concept of access control lists (ACLs)?", "answers": { "A": "Linux", "B": "Unix", "C": "Windows NT", "D": "AS/400" }, "solution": "C" }, { "question": "Which practice involves taking steps to protect data on mobile devices and ensuring that mobile devices include data storage abilities?", "answers": { "A": "Mobile Device Management", "B": "Media Protection Techniques", "C": "Configuration Management", "D": "Shared Responsibility with Cloud Service Models" }, "solution": "A" }, { "question": "Which type of authentication system uses a challenge-response method to generate passwords or responses? (Select the option that best apply)", "answers": { "A": "Kerberos", "B": "Token", "C": "MAC", "D": "SSO" }, "solution": "B" }, { "question": "Key escrow is an example of which of the following security principles?", "answers": { "A": "Need to know", "B": "Two-factor authentication", "C": "Least privilege", "D": "Split knowledge" }, "solution": "D" }, { "question": "What type of technology should be used to synchronize system clocks and time across all systems?", "answers": { "A": "Bluetooth synchronization", "B": "Network Time Protocol (NTP)", "C": "Light-based time synchronization", "D": "Radio-controlled time synchronization" }, "solution": "B" }, { "question": "Which phase entails setting up a C&C infrastructure and a communication protocol to control the infected computer in the Cyber Kill Chain model?", "answers": { "A": "Delivery", "B": "Weaponization", "C": "Command and control", "D": "Reconnaissance" }, "solution": "C" }, { "question": "What was the primary target of online blackmail attacks at the beginning of the 2000s??", "answers": { "A": "Online banking systems", "B": "Social media networks", "C": "E-commerce websites", "D": "Online bookmakers" }, "solution": "D" }, { "question": "What system uses reflections of commercial radio and television broadcast signals to detect and track airborne objects?", "answers": { "A": "Stealth Technology", "B": "Cellular Jamming", "C": "Passive Coherent Location", "D": "Terrain Bounce" }, "solution": "C" }, { "question": "Which of the following is not a fundamental characteristic of program forensics?", "answers": { "A": "Error analysis", "B": "Legal considerations", "C": "Noncontent analysis", "D": "Content analysis" }, "solution": "B" }, { "question": "What does cryptanalysis aim to accomplish?", "answers": { "A": "The computation of plaintext and key from ciphertext", "B": "The creation and development of cryptographic systems", "C": "The recovery of plaintext and/or key from ciphertext", "D": "The concealment of plaintext and key from ciphertext" }, "solution": "C" }, { "question": "What abbreviation refers to the mechanism for reducing the need for globally unique IP addresses by allowing an organization with addresses that are not globally unique to connect to the Internet?", "answers": { "A": "NIC", "B": "ISP", "C": "NAT", "D": "TCP" }, "solution": "C" }, { "question": "Why is a security policy considered a living document?", "answers": { "A": "Because it mandates daily security training for employees", "B": "Because it is legally binding and subject to change with new regulations", "C": "Because it needs formal sign-off from each employee in the organization", "D": "Because it requires continuous updates and revisions to remain effective" }, "solution": "D" }, { "question": "Which of the following is a fundamental approach to achieving appropriate security in application systems development?", "answers": { "A": "Neglecting security to reduce development costs", "B": "Relying solely on access controls to protect systems", "C": "Implementing encryption for all data transmission", "D": "Utilizing defense-in-depth and designing security into the overall system structure" }, "solution": "D" }, { "question": "Which of the following terms refers to the practice of identifying and correcting security vulnerabilities?", "answers": { "A": "Security compliance", "B": "Vulnerability assessment", "C": "Security bypass", "D": "Security mitigation" }, "solution": "B" }, { "question": "What type of attacks did the Triton malware specifically target in industrial control systems?", "answers": { "A": "Sensor networks", "B": "Safety systems", "C": "Supervisory control systems", "D": "Wireless communication systems" }, "solution": "B" }, { "question": "What is the primary purpose of edge computing?", "answers": { "A": "Utilization of centralized application execution on remote systems", "B": "Focusing on centralized data processing", "C": "Optimizing bandwidth use and minimizing latency", "D": "High dependency on cloud services" }, "solution": "C" }, { "question": "What is phishing in the context of cybersecurity?", "answers": { "A": "A protocol used for secure communication over a computer network.", "B": "A type of malware that spreads rapidly through networks.", "C": "A fraudulent attempt to obtain sensitive information by pretending to be a trustworthy entity.", "D": "A method of authenticating a user's identity." }, "solution": "C" }, { "question": "What are the three elements necessary for a piece of information to qualify as a trade secret?", "answers": { "A": "It must be a genuine secret, have no economic value, and the owner should not take any steps to protect it.", "B": "It must be a genuine secret, provide economic advantages, and the owner must take reasonable steps to keep it secret.", "C": "It must be publicly known, provide economic advantage, and not be easily ascertainable by the public through proper means.", "D": "It must be a genuine secret, have no economic value, and be readily ascertainable by the public through proper means." }, "solution": "B" }, { "question": "What happens during call block in a cellular network?", "answers": { "A": "Capacity is increased by adding new channels", "B": "Calls are terminated when users hang up", "C": "Frequency channels are borrowed from adjacent cells", "D": "Capacity decreases due to high user density in the cell" }, "solution": "D" }, { "question": "What type of attack occurs when an attacker is positioned between the two endpoints of a communication link, allowing the attacker to intercept and alter the content of the messages exchanged?", "answers": { "A": "Spoofing attack", "B": "Brute force attack", "C": "Replay attack", "D": "Man-in-the-middle attack" }, "solution": "D" }, { "question": "What role is responsible for ensuring that data is properly protected according to the defined classification scheme?", "answers": { "A": "Data Owners", "B": "Users", "C": "Information Systems Auditors", "D": "Information Systems Security Professionals" }, "solution": "A" }, { "question": "Which one of the following intrusion detection systems makes use of an expert to detect anomalous user activity?", "answers": { "A": "AAFID", "B": "PIX", "C": "NIDES", "D": "IDIOT" }, "solution": "C" }, { "question": "What is one critical factor in evaluating the instructional material effectiveness in an information system security training program?", "answers": { "A": "Limited access to evaluation resources", "B": "Resources devoted to evaluating the instructional material", "C": "Lack of evaluation throughout the program", "D": "Senior management's limited engagement" }, "solution": "B" }, { "question": "Which assessment attempts to quantify the likelihood that vulnerabilities will be exploited by hostile persons?", "answers": { "A": "Physical Security", "B": "Configuration Management", "C": "Vulnerability Assessment", "D": "Risk Assessment" }, "solution": "D" }, { "question": "Which technology aims at providing voice communication over IP networks?", "answers": { "A": "Modems", "B": "PBX equipment", "C": "VoIP", "D": "LAN" }, "solution": "C" }, { "question": "What is the primary concern about the Convention’s requirements related to ISP records?", "answers": { "A": "Excessive burden on ISPs and potential misuse of users' data.", "B": "Infringement of intellectual property rights and limitations of Internet freedom.", "C": "Legal conflicts between national laws and international obligations.", "D": "Technical challenges in implementing required data collection." }, "solution": "A" }, { "question": "In the early days of outsourced data center operations, what role did confidentiality play in the contracts?", "answers": { "A": "It was often violated", "B": "It was a crucial factor", "C": "It was not a significant factor", "D": "It was only enforced in the court of law" }, "solution": "B" }, { "question": "What is a common target of social engineering attacks?", "answers": { "A": "IT managers and security personnel", "B": "Administrative assistants and help desk personnel", "C": "Maintenance and janitorial staff", "D": "Top-level executives" }, "solution": "B" }, { "question": "What phase of the ATT&CK Framework involves an attacker gathering information about the target?", "answers": { "A": "Privilege escalation", "B": "Resource development", "C": "Reconnaissance", "D": "Lateral movement" }, "solution": "C" }, { "question": "iOS is based on which operating system? (Select the most appropriate option)", "answers": { "A": "Unix", "B": "Windows", "C": "OS X", "D": "Linux" }, "solution": "C" }, { "question": "Which choice below is the BEST description of a Protection Profile (PP), as defined by the Common Criteria (CC)?", "answers": { "A": "A statement of security claims for a particular IT security product", "B": "The IT product or system to be evaluated", "C": "An intermediate combination of security requirement components", "D": "A reusable definition of product security requirements" }, "solution": "D" }, { "question": "What is the primary purpose of a secure hash function in the deployment of a security system?", "answers": { "A": "Ensuring the uniformity of security practices in the organization", "B": "Ensuring compatibility with diverse security technologies in the network", "C": "Providing a fingerprint of the input data and protecting the integrity of the data", "D": "Negotiating the encryption mechanism in SSL" }, "solution": "C" }, { "question": "Which malware type can move from one system to another without the assistance of a user or another program?", "answers": { "A": "Worm", "B": "Adware", "C": "Trojan", "D": "Spyware" }, "solution": "A" }, { "question": "Why is the assessment of economic value important in physical and IT security?", "answers": { "A": "To enable comparison of physical and IT security measures", "B": "To determine the cost of recovery and replacement", "C": "To establish an equitable budget for security enhancements", "D": "To weigh the cost of protection against the loss value" }, "solution": "D" }, { "question": "What is the relationship between Fermat's theorem and the Chinese Remainder Theorem (CRT) in number theory?", "answers": { "A": "Fermat's theorem helps in finding the modular exponential, while the CRT helps in finding the remainders modulo a set of pairwise relatively prime moduli", "B": "Fermat's theorem provides a criterion for primality, while the CRT gives a way to find remainders of an integer", "C": "Fermat's theorem states the existence of prime numbers, while the CRT gives guidelines to find solutions to linear congruences", "D": "Fermat's theorem provides a method to solve systems of linear congruences, while the CRT states the existence of prime numbers" }, "solution": "A" }, { "question": "What type of attack impersonates a legitimate access point and can be used to capture data, collect authentication information, or perform other attacks on wireless stations?", "answers": { "A": "Key reinstallation attack", "B": "Evil twin attack", "C": "Deauthentication attack", "D": "Bluesnarfing attack" }, "solution": "B" }, { "question": "What is the purpose of maintaining a current list of all system components in the PCI DSS environment?", "answers": { "A": "To identify all locations where account data is stored, processed, and transmitted.", "B": "To inform internal personnel about the structure of the CDE.", "C": "To facilitate physical asset tracking.", "D": "To establish communication channels with third-party entities." }, "solution": "A" }, { "question": "Which tool is commonly used for identifying remote procedure calls on systems?", "answers": { "A": "nmap", "B": "nmblookup", "C": "rpcinfo", "D": "nbtstat" }, "solution": "C" }, { "question": "What security measure can help prevent unauthorized access to corporate resources for companies that allow BYOD in their Wi-Fi networks?", "answers": { "A": "Implementing biometric authentication for all BYOD users", "B": "Enforcing single sign-on for BYOD devices", "C": "Using a separate, isolated network for untrusted users", "D": "Allowing open access to all corporate resources" }, "solution": "C" }, { "question": "What type of attack consumes the resources on a web server, preventing it from being used by legitimate users?", "answers": { "A": "Buffer Overflow attack", "B": "Cross-Site Scripting (XSS) attack", "C": "Denial-of-Service (DoS) attack", "D": "IP Fragmentation/Fragmentation Attack" }, "solution": "C" }, { "question": "Why is the investment in technology critical for organizations in today's networked environment?", "answers": { "A": "To quickly restore system operations after a crash.", "B": "To eliminate system malfunctions completely.", "C": "To develop a cost-effective investigative methodology.", "D": "To ensure maximum system availability and effective utilization." }, "solution": "D" }, { "question": "What is the main focus of the ITsecurityEvents organization?", "answers": { "A": "Information security newsletter and blog", "B": "Calendar listing IT security events worldwide", "C": "Global trade association for the Automatic Identification and Data Capture (AIDC) industry", "D": "Monthly security tips and alert mailing list" }, "solution": "B" }, { "question": "Which type of IPS monitoring requires that updates be regularly installed to ensure effectiveness?", "answers": { "A": "Signature-based", "B": "Behavior-based", "C": "Anomaly-based", "D": "Network-based" }, "solution": "A" }, { "question": "What is the property of a public key cryptosystem where it is not computationally feasible for a user to determine the private key from the public key?", "answers": { "A": "Digital signature", "B": "Trusted authority", "C": "Key distribution", "D": "One-way function" }, "solution": "D" }, { "question": "What is the main purpose of a disaster recovery plan (DRP)?", "answers": { "A": "To ensure daily business operations run smoothly", "B": "To delineate the responsibilities of employees in various departments", "C": "To ensure compliance with industry standards and regulations", "D": "To provide a plan for the recovery and continuation of business operations in the event of a disaster" }, "solution": "D" }, { "question": "What is the role of memory savers in high-end cryptoprocessors?", "answers": { "A": "To move data around the memory to prevent it from being burned in or experiencing remanence.", "B": "To trigger destruction of the secrets inside upon tampering.", "C": "To resist environmental conditions such as noise, dirt, and vibration.", "D": "To prevent attacks involving monitoring of RF and other electromagnetic signals." }, "solution": "A" }, { "question": "What is the purpose of a knowledge-based Intrusion Detection system?", "answers": { "A": "To dynamically detect deviations from learned patterns of user behavior", "B": "To intercept and analyze network packets in real time", "C": "To protect against file server hard disk crashes", "D": "To use a database of previous attacks and known system vulnerabilities to look for current attempts to exploit vulnerabilities" }, "solution": "D" }, { "question": "Which utility is a command-line TCP/IP packet crafter that allows for the creation of custom packets for testing?", "answers": { "A": "hping3", "B": "Netstat", "C": "Nmap", "D": "Netcraft" }, "solution": "A" }, { "question": "Which delivery method is commonly used for phishing attacks?", "answers": { "A": "Physical intrusion and theft", "B": "Direct mail to physical addresses", "C": "Telephone calls and voicemails", "D": "Web-based methods and email" }, "solution": "D" }, { "question": "What role does the A38 one-way function play in the GSM authentication process?", "answers": { "A": "Verifying user identity", "B": "Generating random numbers", "C": "Deriving the response and session key", "D": "Encrypting voice data" }, "solution": "C" }, { "question": "A company server is currently operating at near maximum resource capacity, hosting just seven virtual machines. Management has instructed you to deploy six new applications onto additional VMs without purchasing new hardware since the IT/IS budget is exhausted. How can this be accomplished?", "answers": { "A": "Data sovereignty", "B": "Infrastructure as code", "C": "Serverless architecture", "D": "Containerization" }, "solution": "D" }, { "question": "Which wireless technology is used in the Global System for Mobile Communications (GSM)?", "answers": { "A": "Time Division Multiple Access (TDMA)", "B": "Orthogonal Frequency Division Multiplexing (OFDM)", "C": "Code Division Multiple Access (CDMA)", "D": "Frequency Division Multiple Access (FDMA)" }, "solution": "A" }, { "question": "What does the Physical Security Domain aim to protect?", "answers": { "A": "Physical assets such as furniture and fixtures.", "B": "Only the digital information assets of the business enterprise.", "C": "Only the information security systems within the facility.", "D": "The entire facility, including people, equipment, and information." }, "solution": "D" }, { "question": "What is one of the effects of CCTV cameras in the workplace?", "answers": { "A": "Improved compliance with security protocols", "B": "Enforcement of strict dress codes", "C": "Increased trust between employees and management", "D": "Decrease in productivity levels" }, "solution": "A" }, { "question": "What type of attack occurs when an attacker attempts to fill up the hard drive on a server by uploading mass files?", "answers": { "A": "Semaphore Attack", "B": "Poison Null Byte Attack", "C": "Upload Bombing", "D": "Buffer Overflow" }, "solution": "C" }, { "question": "In the context of privacy breach response planning, what is the primary action to undertake regarding potential data breaches?", "answers": { "A": "Receive notification of potential incidents", "B": "Ensure that all relevant documents are up-to-date and available to all employees", "C": "Identify and record the locations of personally identifiable information (PII) across the organization", "D": "Appoint a suitable business PII lawyer for the organization" }, "solution": "C" }, { "question": "Which choice below is NOT considered a potential hazard resulting from natural events?", "answers": { "A": "Arson", "B": "Earthquake/land shift", "C": "Forest fire", "D": "Urban fire" }, "solution": "A" }, { "question": "What is the main purpose of Intrusion Detection Systems (IDS) in cybersecurity?", "answers": { "A": "To monitor and detect potential security threats", "B": "To manage network bandwidth usage", "C": "To encrypt sensitive information", "D": "To prevent physical security breaches" }, "solution": "A" }, { "question": "What does integrity refer to in the security triad?", "answers": { "A": "Methods and actions to protect the information from unauthorized alteration", "B": "Safety measures against known vulnerability attacks", "C": "Methods for denying access to legitimate users", "D": "Measures taken to ensure the correct disclosure of information" }, "solution": "A" }, { "question": "What type of document in a hierarchical organization of documentation provides a course of action by which technology and procedures are uniformly implemented throughout an organization?", "answers": { "A": "Security Guideline", "B": "Security Standard", "C": "Security Procedure", "D": "Security Baseline" }, "solution": "B" }, { "question": "What best practice assists in ensuring user access is appropriate for their responsibilities?", "answers": { "A": "Monthly review of team access by direct managers.", "B": "Disabling user accounts after 30 days of inactivity.", "C": "Use of shared authentication credentials.", "D": "Automated daily access reviews." }, "solution": "A" }, { "question": "What is an attack in the context of cybersecurity?", "answers": { "A": "An accidental event causing harm", "B": "An intentional exploitation of a vulnerability by a threat agent", "C": "Any exposure of assets to risk", "D": "A successful security breach" }, "solution": "B" }, { "question": "What is an object in the context of access control?", "answers": { "A": "An active entity that accesses passive subjects.", "B": "A passive entity that accesses active subjects.", "C": "A passive entity that provides information to active subjects.", "D": "An active entity that provides information to passive subjects." }, "solution": "C" }, { "question": "What type of malware appears to perform desirable functions but actually performs malicious functions behind the scenes?", "answers": { "A": "Trojan horse", "B": "Ransomware", "C": "Spyware", "D": "Rootkit" }, "solution": "A" }, { "question": "Which information security service provides a formal information security evaluation and management approval process to ensure information applications and the supporting infrastructure are protected at a level appropriate to their sensitivity and criticality?", "answers": { "A": "Accountability", "B": "Assurance", "C": "Authentication", "D": "Authorization" }, "solution": "B" }, { "question": "Which of the following is an example of a symmetric cryptographic primitive?", "answers": { "A": "Block ciphers", "B": "RSA-PSS", "C": "Sponge Constructions", "D": "Public Key Encryption" }, "solution": "A" }, { "question": "Which of the following programs is a steganography detection tool?", "answers": { "A": "Stegdetect", "B": "Stegorama", "C": "Stegstopper", "D": "Stegoalert" }, "solution": "A" }, { "question": "What does ATM stand for in networking?", "answers": { "A": "Automatic Transfer Mode", "B": "Advanced Transfer Method", "C": "Asynchronous Transfer Mode", "D": "Associated Transfer Mode" }, "solution": "C" }, { "question": "What makes DNS a good choice for data exfiltration and tunneling?", "answers": { "A": "It offers strong authentication and authorization mechanisms for secure data transmission.", "B": "It is a service that cannot be blocked and must remain available at all times.", "C": "It shares similarities with HTTP, enabling seamless integration with existing infrastructure.", "D": "It provides high-speed data transfer, making it ideal for large data sets." }, "solution": "B" }, { "question": "What is the first step to take in developing an IT system security training program?", "answers": { "A": "Creating content material without approval", "B": "Designing the course before analyzing training needs", "C": "Conducting a full evaluation of the organizational needs", "D": "Analyzing the training needs and defining the goals and objectives" }, "solution": "D" }, { "question": "Which connecting device operates at the datalink layer and digitally copies frames?", "answers": { "A": "Repeater", "B": "Hub", "C": "Bridge", "D": "Switch" }, "solution": "C" }, { "question": "In the AES cipher, which transformation results in a column-wise operation between the State and the round key?", "answers": { "A": "MixColumns", "B": "AddRoundKey", "C": "ShiftRows", "D": "SubBytes" }, "solution": "B" }, { "question": "Why should cryptographic keys used to protect stored account data be retained only where necessary?", "answers": { "A": "To reduce the potential for cryptographic key misuse or compromise ", "B": "To minimize the risk of unauthorized access to cryptographic keys", "C": "To prevent the increase in the storage requirements for cryptographic keys", "D": "To comply with ISO/DIS 9564-5 Financial services standards" }, "solution": "A" }, { "question": "What is the primary goal of encryption?", "answers": { "A": "To protect the confidentiality of information", "B": "To provide a way to recover lost data", "C": "To speed up data transmission", "D": "To ensure high availability of data" }, "solution": "A" }, { "question": "In a decentralized key control scheme, how is the shared session key obtained by the recipients?", "answers": { "A": "It is encrypted with a unique master key for each recipient", "B": "It is maintained by a central key distribution center", "C": "It is hashed with a cryptographic function for secure distribution", "D": "It is transmitted in clear form to all recipients" }, "solution": "A" }, { "question": "What is the primary purpose of a cryptographic algorithm?", "answers": { "A": "To regulate network connectivity", "B": "To establish emergency response procedures", "C": "To protect information by encryption and decryption", "D": "To manage access controls" }, "solution": "C" }, { "question": "Which of the following accurately describes the security administration benefit of using virtualization technology?", "answers": { "A": "Centralizing patch management", "B": "Mitigating latency and throughput issues", "C": "Simplifying baselining tasks", "D": "Isolating network services and roles" }, "solution": "D" }, { "question": "You are asked to implement a risk treatment in which your IT department is removing a server from the environment that it deems is too risky due to having too many vulnerabilities in it. You have just practiced which type of risk treatment?", "answers": { "A": "Risk avoidance", "B": "Risk acceptance", "C": "Risk mitigation", "D": "Risk transfer" }, "solution": "A" }, { "question": "What is the purpose of a backdoor in the context of malware?", "answers": { "A": "To detect and remove viruses", "B": "To circumvent system protection mechanisms", "C": "To initiate a denial-of-service attack", "D": "To protect the system" }, "solution": "B" }, { "question": "What is the role of a Registration Authority (RA) in the Public Key Infrastructure (PKI)?", "answers": { "A": "To enroll and generate certificates or the public–private key pair for users", "B": "To hold all public keys in a repository", "C": "Both A and B", "D": "None of the above" }, "solution": "A" }, { "question": "How does asymmetrical cryptography differ from symmetrical encryption?", "answers": { "A": "It uses a single shared key for encryption and decryption", "B": "It is vulnerable to brute-force attacks", "C": "It requires a public and private key pair for encryption and decryption", "D": "It ensures faster encryption and decryption process" }, "solution": "C" }, { "question": "What is the definition of computer forensics?", "answers": { "A": "The encryption and protection of digital data to prevent unauthorized access.", "B": "The implementation of security measures to protect a computer network from cyber attacks.", "C": "The extraction, documentation, examination, and interpretation of computer-based material to provide information as evidence in civil, criminal, and administrative cases.", "D": "The development of forensic tools to track and prosecute cybercriminals." }, "solution": "C" }, { "question": "What is generally a loose agreement that does not have strict guidelines governing the transmission of sensitive data?", "answers": { "A": "SLAs", "B": "NIPS", "C": "DRP", "D": "MoUs" }, "solution": "D" }, { "question": "Which service is implied by the use of DC=ServerName and DC=COM in Microsoft Windows domain controllers?", "answers": { "A": "RADIUS", "B": "TACACS+", "C": "LDAP", "D": "SAML" }, "solution": "C" }, { "question": "Which logic operation is performed to get the 512-bit hash value of the Nth stage in SHA-512?", "answers": { "A": "XOR with a predefined constant", "B": "ADD modulo 264 with the initial value", "C": "Subtraction from a predefined value", "D": "Bitwise AND operation with the previous stage values" }, "solution": "B" }, { "question": "Which of the following refers to who, what, when, where, and how of the collected evidence over its entire life span?", "answers": { "A": "Digital Evidence Life Cycle", "B": "Chain of Custody", "C": "Admissibility of Evidence", "D": "Incident Response Plan" }, "solution": "B" }, { "question": "Under what circumstances can schools disclose education records without consent?", "answers": { "A": "To any state and local authorities within the juvenile justice system.", "B": "To comply with a judicial order or lawfully issued subpoena.", "C": "Only to school officials with legitimate educational interest.", "D": "To facilitate treatment, payment, or healthcare operations." }, "solution": "B" }, { "question": "Machine A and Machine B are on the same subnet. Machine C, with address 00-01- 02-CC-DD-EE, is on a different subnet. While the attacker is sniffing on the fully switched network, Machine B sends a message to Machine C. If an attacker on Machine A wanted to receive a copy of this message, which of the following circumstances would be necessary?", "answers": { "A": "The ARP cache of Machine A would need to be poisoned, changing the entry for Machine C to 00-01-02-BB-CC-DD.", "B": "The ARP cache of the router would need to be poisoned, changing the entry for Machine A to 00-01-02-CC-DD-EE.", "C": "The ARP cache of Machine C would need to be poisoned, changing the entry for the default gateway to 00-01-02-AA-BB-CC.", "D": "The ARP cache of Machine B would need to be poisoned, changing the entry for the default gateway to 00-01-02-AA-BB-CC." }, "solution": "D" }, { "question": "What does the term 'firewall' refer to in the context of cybersecurity?", "answers": { "A": "A type of malware that spreads rapidly through a network", "B": "An encryption technique used to secure communication channels", "C": "A physical barrier used to protect servers from physical damage", "D": "A security system that controls the incoming and outgoing network traffic" }, "solution": "D" }, { "question": "What is a common means to protect power supply equipment from noise interference (EMI, RFI)?", "answers": { "A": "Switching to fiber-optic cables for networking and establishing proper grounding", "B": "Installing water-detection circuits", "C": "Using surge protectors", "D": "None of the above" }, "solution": "A" }, { "question": "What database technique can prevent unauthorized users from determining classified information by noticing the absence of information normally available to them?", "answers": { "A": "Inference", "B": "Manipulation", "C": "Polyinstantiation", "D": "Aggregation" }, "solution": "C" }, { "question": "What should an ethical hacker receive from the target organization before conducting any hacking activities?", "answers": { "A": "Security Audit Plan", "B": "Non-Disclosure Agreement (NDA)", "C": "Hacker's Code of Conduct", "D": "Verbal Consent" }, "solution": "B" }, { "question": "Which type of twisted-pair cabling is most often referred to as just 10Base-T?", "answers": { "A": "Cat 5", "B": "Cat 6", "C": "Cat 3", "D": "Cat 7" }, "solution": "C" }, { "question": "Why would you use wireless social engineering?", "answers": { "A": "To get email addresses", "B": "To gather credentials", "C": "To make phone calls", "D": "To send phishing messages" }, "solution": "B" }, { "question": "What system is a cross between the Internet and an intranet and used for B2B applications between customers and suppliers?", "answers": { "A": "Extranet", "B": "E-Crime Management System", "C": "Escape system", "D": "Encryption system" }, "solution": "A" }, { "question": "What type of information does the NSA protect from unauthorized access?", "answers": { "A": "Publicly available information.", "B": "Personal data of government officials.", "C": "Economic and financial data.", "D": "Information derived from national-security-related telecommunications." }, "solution": "D" }, { "question": "What is the primary purpose of federated identity management?", "answers": { "A": "Secure encryption of user credentials", "B": "Centralized access control for a single enterprise", "C": "Scalable user authentication across multiple enterprises", "D": "Isolating user identity data within individual applications" }, "solution": "C" }, { "question": "What should be considered for the recovery phase in dealing with a rootkit infection?", "answers": { "A": "Performing a thorough verification of the system integrity", "B": "Setting up the system with the same configurations as before the infection", "C": "Deploying the same security measures that were in place before the infection", "D": "Disregarding the potential persistence of the rootkit" }, "solution": "A" }, { "question": "What is the primary purpose of ISO/IEC 13335-1:2004?", "answers": { "A": "To establish guidelines and general principles for information security management.", "B": "To explain the concepts associated with the management of IT security.", "C": "To introduce a framework for IT security assurance.", "D": "To provide a code of practice for business continuity management." }, "solution": "B" }, { "question": "What is one of the most important resources an operations department has?", "answers": { "A": "Knowledge", "B": "Financial records", "C": "Physical equipment", "D": "Supervisory personnel" }, "solution": "A" }, { "question": "In the context of network security, what does the channel factor refer to?", "answers": { "A": "The creation of unique security problems", "B": "The potential fall-out from user errors", "C": "The accessibility of shared resources", "D": "The verifiability of remote connections" }, "solution": "A" }, { "question": "What is another term for secret key encryption?", "answers": { "A": "PKI", "B": "Asymmetric encryption", "C": "Symmetric encryption", "D": "Public key" }, "solution": "C" }, { "question": "What measure ensures that staff is fully trained on the equipment to be used?", "answers": { "A": "Definition and implementation of a roles and rights concept", "B": "Definition of the processes for the destruction of information/data carriers", "C": "Provision of manuals and training materials", "D": "Implementation of a logging and auditing concept" }, "solution": "C" }, { "question": "What does HTTPS overlay on top of to provide authentication of the server, integrity, and confidentiality for data in transit?", "answers": { "A": "HTTP", "B": "TLS", "C": "UDP", "D": "TCP" }, "solution": "B" }, { "question": "What does the 'HTTPS' in a website URL indicate?", "answers": { "A": "A government website", "B": "A high-speed connection", "C": "A secure and encrypted connection", "D": "A hidden website" }, "solution": "C" }, { "question": "Which algorithm was ultimately selected as the AES candidate?", "answers": { "A": "CAST-256", "B": "MARS", "C": "Rijndael", "D": "RC6" }, "solution": "C" }, { "question": "Which type of attack on the radio access network involves enticing users to camp at a cloned base station to provide secret information to the adversary?", "answers": { "A": "Eavesdropping Attack", "B": "False Base Station Attack", "C": "Replay Attack", "D": "Denial-of-Service (DoS) Attack" }, "solution": "B" }, { "question": "The protocol used for Neighbor Discovery (ND) is _____________________.", "answers": { "A": "ICMPv4", "B": "ICMPv6", "C": "DNS", "D": "ARP" }, "solution": "B" }, { "question": "What is an organization composed of engineers, scientists, and students who issue standards related to electrical, electronic, and computer engineering?", "answers": { "A": "IANA", "B": "ITSEC", "C": "ISO", "D": "IEEE" }, "solution": "D" }, { "question": "What is the best description of 'clipping levels'?", "answers": { "A": "A baseline of user errors above which violations will be recorded", "B": "Adjustments to the interface layout based on user preference", "C": "Variance detection of too many people with unrestricted access", "D": "A listing of every error made by users to initiate violation processing" }, "solution": "A" }, { "question": "Which process is used to ensure continued viability of backup copies?", "answers": { "A": "Backup retention", "B": "Backup rotation", "C": "Test restores", "D": "Incremental backup" }, "solution": "C" }, { "question": "According to Kerckhoff's principle, what should the selection of a particular member (key) of the cryptographic system be?", "answers": { "A": "Easy to memorize and change", "B": "Long and immutable", "C": "Technically complex", "D": "Random and fixed" }, "solution": "A" }, { "question": "What security concept ensures that the subject of an event cannot deny that the event occurred?", "answers": { "A": "Nonrepudiation", "B": "Authorization", "C": "Accountability", "D": "Auditing" }, "solution": "A" }, { "question": "Which of the following is referred to as a physical address in computer networking?", "answers": { "A": "Loopback address", "B": "IPv6 address", "C": "IPv4 address", "D": "MAC address" }, "solution": "D" }, { "question": "What is the first step when investigating a computer crime?", "answers": { "A": "Photograph the area computer and contents on the screen", "B": "Advise individuals in the area of their rights before evidence is collected", "C": "Quickly look for planted logic bombs and Trojan horses to ensure damage cannot be done", "D": "Power off the computer system" }, "solution": "A" }, { "question": "What is one primary reasoning behind the argument that the closed source approach is not as closed as advertised?", "answers": { "A": "Even with efforts to maintain the secrecy of source code, it is often exposed to employees, partners, and potentially malicious attackers", "B": "Source code secrecy does not actually protect closed source software from being thoroughly scrutinized and potentially exploited by attackers.", "C": "Both A and B.", "D": "None of the above." }, "solution": "C" }, { "question": "The Trusted Platform Module (TPM) is implemented as a separate processor on the PC motherboard and is associated with which hardware manufacturer?", "answers": { "A": "AMD", "B": "Intel", "C": "IBM", "D": "The Trusted Platform Module (TPM) is an international standard for a secure cryptoprocessor, and it is not exclusively developed or owned by any single manufacturer" }, "solution": "D" }, { "question": "What is the device that interprets digital and analog signals to enable data transmission over telephone lines?", "answers": { "A": "Router", "B": "Modem", "C": "Switch", "D": "Hub" }, "solution": "B" }, { "question": "What phase of the NSA InfoSec Assessment Methodology (IAM) involves exploring and confirming conclusions made during the pre-assessment phase, gathering data and documentation, and conducting interviews?", "answers": { "A": "Pre-assessment phase", "B": "Red team assessment", "C": "On-site phase", "D": "Post-assessment phase" }, "solution": "C" }, { "question": "What do we call an ARP response without a corresponding ARP request?", "answers": { "A": "IP response", "B": "Gratuitous ARP", "C": "Is-at response", "D": "Who-has ARP" }, "solution": "B" }, { "question": "What term describes the intention to deceive as a fundamental cybersecurity principle?", "answers": { "A": "Malicious intent", "B": "Malintent", "C": "Criminology", "D": "Scienter" }, "solution": "D" }, { "question": "What is the purpose of forensic examination in cybersecurity incident response?", "answers": { "A": "To conduct interviews with potential suspects", "B": "To collect and analyze evidence for investigation and potential legal proceedings", "C": "To covertly monitor the network for critical incidents", "D": "To initiate a chain of custody for evidence" }, "solution": "B" }, { "question": "What is the purpose of a mantrap?", "answers": { "A": "To control vehicle traffic", "B": "To ensure total control of access", "C": "To provide physical security", "D": "To prevent unauthorized access" }, "solution": "D" }, { "question": "According to the fail terms definitions related to physical and digital products, which state prioritizes protecting assets over people?", "answers": { "A": "Fail-Open", "B": "Fail-Safe", "C": "Fail-Closed", "D": "Fail-Secure" }, "solution": "D" }, { "question": "What is the potential threat to information security from the use of minisupercomputers?", "answers": { "A": "Disruption of the WAN connectivity", "B": "Possible unauthorized access to the attached processor through the mainframe", "C": "Authentication system exposure", "D": "Loss of confidentiality in document imaging" }, "solution": "B" }, { "question": "Which of the following is NOT a type of computer backup (file copying method)?", "answers": { "A": "Primary", "B": "Update", "C": "Duplicate", "D": "Archive" }, "solution": "A" }, { "question": "What is the process of saving data for future use or reference?", "answers": { "A": "Retention of evidence", "B": "Recovery", "C": "Eradication", "D": "Containment" }, "solution": "A" }, { "question": "What type of mode requires a unique binary sequence for each encryption operation in a block cipher?", "answers": { "A": "Cipher Block Chaining (CBC)", "B": "Electronic Codebook (ECB)", "C": "Both A and B", "D": "None of the above" }, "solution": "A" }, { "question": "In cryptography, what does DES stand for?", "answers": { "A": "Digital Encryption Standard", "B": "Data Encryption System", "C": "Data Encoding System", "D": "Digital Encoding Standard" }, "solution": "A" }, { "question": "Which EAP method is based on the TLS protocol and uses digital certificates for mutual authentication of client and server?", "answers": { "A": "EAP-PSK", "B": "EAP-TTLS", "C": "EAP-GPSK", "D": "EAP-TLS" }, "solution": "D" }, { "question": "What is the primary security concern associated with cookies?", "answers": { "A": "They can access sensitive information", "B": "They can execute on the host computer", "C": "They can be intercepted and modified by attackers", "D": "They cannot be removed or edited" }, "solution": "C" }, { "question": "What is the strongest method for securing data transmission over a network?", "answers": { "A": "WPA2", "B": "HTTP", "C": "WPA", "D": "WEP" }, "solution": "A" }, { "question": "Which security response best mitigates the risk of a lost or stolen laptop?", "answers": { "A": "Keeping minimal sensitive data on the system", "B": "Hard drive encryption", "C": "Cable locks", "D": "Strong passwords" }, "solution": "B" }, { "question": "What is the benefit of CCTV cameras in deterring misconduct?", "answers": { "A": "They lead to an increase in employee misconduct", "B": "They create a conscious awareness and discourage misconduct", "C": "They have no impact on employee behavior", "D": "They guarantee absolute prevention of all forms of misconduct" }, "solution": "B" }, { "question": "Which statement below is accurate about the reasons to implement a layered security architecture?", "answers": { "A": "A layered security approach is not necessary when using COTS products.", "B": "A layered security approach is intended to increase the work-factor for an attacker.", "C": "A layered approach doesn’t really improve the security posture of the organization.", "D": "A good packet-filtering router will eliminate the need to implement a layered security architecture." }, "solution": "B" }, { "question": "What should you configure to improve wireless security?", "answers": { "A": "Remove repeaters", "B": "IP spoofing", "C": "Enable the SSID", "D": "MAC filtering" }, "solution": "D" }, { "question": "Which model allows researchers to identify hotspots for cybercrime, such as poorly configured systems that are easier to compromise?", "answers": { "A": "Situational crime prevention", "B": "Pattern theory of crime", "C": "Rational choice theory", "D": "None of the above" }, "solution": "B" }, { "question": "What is the purpose of vulnerability assessment in security testing?", "answers": { "A": "Conducting log reviews", "B": "Conducting ethical disclosure", "C": "Synthetic transaction testing", "D": "Identifying and mitigating security vulnerabilities" }, "solution": "D" }, { "question": "The identity and access management lifecycle consists of which steps?", "answers": { "A": "Setup, review, auditing", "B": "Provisioning, review, revocation", "C": "Identification, authentication, authorization", "D": "Creation, monitoring, termination" }, "solution": "B" }, { "question": "What is the purpose of key stretching in cryptography?", "answers": { "A": "To authenticate hardware and software configuration to a remote server", "B": "To process a weak key and output an enhanced and more powerful key", "C": "To make the relationship between a key and the ciphertext more complex", "D": "To obtain control of a target computer through a vulnerability" }, "solution": "B" }, { "question": "What is the first thing a hacker should do after gaining administrative access to a system?", "answers": { "A": "Copy important data files", "B": "Create a new user account", "C": "Change the administrator password", "D": "Disable auditing" }, "solution": "D" }, { "question": "What is the primary purpose of establishing clipping levels for alarm activation?", "answers": { "A": "To avoid false or nuisance alarms", "B": "To ensure rapid response to true alarms", "C": "To prevent backup of incident reports", "D": "To minimize the number of incidents reported" }, "solution": "A" }, { "question": "What is the main concern associated with the use of intelligence gathered via surveillance for economic espionage, based on the content?", "answers": { "A": "The West's reliance on electronic intelligence resulted in a misunderstanding of the actual economic position of the USSR.", "B": "The surveillance practices focused mainly on military intelligence gathering over economic intelligence, which led to poor economic planning.", "C": "The intelligence gathered for economic espionage was found to be inaccurate and unreliable, leading to poor economic decisions.", "D": "The focus on economic intelligence and surveillance was driven by private and bureaucratic interests, resulting in poor economic and political intelligence." }, "solution": "D" }, { "question": "What is the primary risk associated with SMS phishing attacks on mobile devices?", "answers": { "A": "Inability to track the sender of the phishing message", "B": "Potential exposure to malware and malicious links", "C": "Increased battery consumption", "D": "Quick and easy access to personal user data" }, "solution": "B" }, { "question": "What type of HTTP authentication scheme exposes user credentials in plain text if not protected by HTTPS?", "answers": { "A": "Bearer token", "B": "Form-based HTTP authentication", "C": "Digest Access Authentication", "D": "Basic HTTP authentication" }, "solution": "D" }, { "question": "What is the term for sites such as hotels or airports that use limited‐functionality web pages for authentication?", "answers": { "A": "Rogue website", "B": "Cloned website", "C": "Phishing site", "D": "Captive portal" }, "solution": "D" }, { "question": "What is the primary concern of data base security?", "answers": { "A": "Securing data from unauthorized access and ensuring its integrity.", "B": "Protecting data from physical damage and loss.", "C": "Preventing system downtime and ensuring high availability.", "D": "Ensuring encryption of data at rest and in transit." }, "solution": "A" }, { "question": "What is the importance of retaining documentation and evidence within BAU processes?", "answers": { "A": "To shift responsibility for security controls", "B": "To reduce the cost of PCI DSS assessments", "C": "To maintain compliance with country laws", "D": "To provide evidence of security control effectiveness and compliance" }, "solution": "D" }, { "question": "Which of the following encryption mechanisms introduced the Temporal Key Integrity Protocol?", "answers": { "A": "WEP", "B": "WPA2", "C": "WPS", "D": "WPA" }, "solution": "D" }, { "question": "How does application whitelisting contribute to the security of mobile devices?", "answers": { "A": "Increase power efficiency", "B": "Enable remote wipe capabilities", "C": "Prevent geotagging", "D": "Restrict access to approved applications" }, "solution": "D" }, { "question": "Which feature is added to Internet Explorer in XP Service Pack 3?", "answers": { "A": "Improved security center", "B": "Pop-up blocker", "C": "Increased download capacity", "D": "Enhanced browsing speed" }, "solution": "B" }, { "question": "Which cryptographic concept best describes that a message remains unmodified and secure during its transmission?", "answers": { "A": "Nonce", "B": "Digital signature", "C": "Encryption", "D": "Hashing" }, "solution": "B" }, { "question": "What does transparency refer to in the context of security controls?", "answers": { "A": "The process of encryption and hashing to ensure the protection of confidentiality and integrity.", "B": "The mechanism for recording the specifics of a communication, such as source, destination, time stamps, and transmission status.", "C": "The characteristic of a service, security control, or access mechanism that ensures that it is unseen by users and minimally impacts performance.", "D": "A method of intrusion detection that allows passive monitoring of network traffic for security threats or policy violations." }, "solution": "C" }, { "question": "Which type of metadata is associated with the physical location from which data is generated?", "answers": { "A": "Location metadata", "B": "Traffic metadata", "C": "Device metadata", "D": "Communication metadata" }, "solution": "A" }, { "question": "What is the main purpose of a DHCP starvation attack?", "answers": { "A": "To capture encrypted messages and strip the encryption from them", "B": "To capture traffic from specific hosts on the network", "C": "To exhaust all IP addresses from a legitimate server and control IP allocations", "D": "To intercept DNS requests and provide responses to the requestor" }, "solution": "C" }, { "question": "What kind of systems require transactions to be authorized by two or more staff members?", "answers": { "A": "Systems using dual control policies", "B": "Systems using separation of duty policies", "C": "Systems using least privilege policies", "D": "Systems using non-repudiation policies" }, "solution": "A" }, { "question": "If you were to see the subnet mask 255.255.248.0, what CIDR notation (prefix) would you use to indicate the same thing?", "answers": { "A": "/23", "B": "/22", "C": "/20", "D": "/21" }, "solution": "D" }, { "question": "What is the role of authentication tokens in a cybersecurity environment?", "answers": { "A": "To verify the identity of users and provide secure access to network resources", "B": "To verify the integrity of network devices", "C": "To encrypt network traffic for secure transmission", "D": "To manage physical access control to the organization's premises" }, "solution": "A" }, { "question": "What type of authentication mechanism relies on dynamic authentication data that changes with each session between a claimant and verifier?", "answers": { "A": "Continous authentication", "B": "Static authentication", "C": "Password-based authentication", "D": "Robust authentication" }, "solution": "D" }, { "question": "Which Act transferred authority over civil aviation security from the Federal Aviation Administration (FAA) to the Transportation Security Administration (TSA)?", "answers": { "A": "The Public Health Security, Bioterrorism Preparedness & Response Act of 2002", "B": "The USA PATRIOT Act of 2001", "C": "The Aviation and Transportation Security Act of 2001", "D": "The E-Government Act of 2002" }, "solution": "C" }, { "question": "Who designed the IDEA block cipher, utilizing operations such as XOR, modulo 2^16+1 multiplication, and modulo 2^16 addition in each round?", "answers": { "A": "Xuejia Lai and James Massey", "B": "Roy L. Adler", "C": "K. Nyberg", "D": "T. J. Beth and C. Ding" }, "solution": "A" }, { "question": "What is the best way to authenticate system users using something that they know?", "answers": { "A": "Challenge-Response Tokens", "B": "Retinal Scan", "C": "Fingerprint Scan", "D": "Photo ID Card" }, "solution": "A" }, { "question": "Which antivirus detection method maintains a large database to identify known viruses?", "answers": { "A": "Signature-based detection", "B": "Heuristic analysis", "C": "Behavior-based detection", "D": "Zero-day detection" }, "solution": "A" }, { "question": "As a security administrator you have recently learned of an issue with the webbased administrative interface on your Web server. You want to provide a countermeasure to prevent attacks via the administrative interface. All of the following are countermeasures to use in this scenario EXCEPT:", "answers": { "A": "Control which systems are allowed to connect to and administer the Web server", "B": "Hardcode the authentication credentials into the administrative interface links", "C": "Use a stronger authentication technique on the Web server", "D": "Remove the administrative interfaces from the Web server" }, "solution": "B" }, { "question": "What is the primary goal of Administrative Simplification under HIPAA?", "answers": { "A": "To reduce the costs of healthcare through widespread use of electronic data interchange.", "B": "To standardize medical diagnoses for better accuracy.", "C": "To ensure that healthcare workers are properly trained in using electronic systems.", "D": "To protect patient data from being accessed by insurance companies." }, "solution": "A" }, { "question": "Why should software not related to work be used on any computer that is part of the network?", "answers": { "A": "It is not compatible with the network infrastructure", "B": "It reduces the available storage space", "C": "It may slow down the network", "D": "It can lead to data breaches and compromise security" }, "solution": "D" }, { "question": "Your organization uses the Kerberos protocol to authenticate users of the network. Which statement is true of the key distribution center (KOC) when this protocol is used?", "answers": { "A": "The KOC is used to maintain and distribute public keys for each session", "B": "The KOC is used to store distribute and maintain cryptographic session keys", "C": "The KOC is only used to store secret keys", "D": "The KOC is used to capture secret keys over the network" }, "solution": "B" }, { "question": "What is the primary goal of risk management in information security?", "answers": { "A": "Acknowledging all potential risks", "B": "Avoiding any potential risks", "C": "Eliminating all potential risks", "D": "Minimizing the impact of potential risks" }, "solution": "D" }, { "question": "What portion of the change management process would help to prioritize tasks?", "answers": { "A": "Change audit", "B": "Request control", "C": "Release control", "D": "Configuration control" }, "solution": "B" }, { "question": "What is one of the key differences between PPTP and L2TP VPN protocols?", "answers": { "A": "L2TP allows for header compression, while PPTP does not.", "B": "PPTP can only support a single tunnel between endpoints, while L2TP allows for multiple tunnels.", "C": "PPTP allows for tunnel authentication, while L2TP does not.", "D": "L2TP requires the internetwork to be an IP internetwork, while PPTP does not." }, "solution": "B" }, { "question": "In polyalphabetic substitution, how many rules are used to encipher plaintext letters?", "answers": { "A": "No rules", "B": "Two rules", "C": "One rule", "D": "Multiple rules" }, "solution": "D" }, { "question": "What does MCM (mobile content management) system consider when controlling company resources and the means by which they are accessed or used on mobile devices?", "answers": { "A": "Company's financial resources", "B": "Device capabilities", "C": "Location of wireless access points", "D": "Online gaming preferences" }, "solution": "B" }, { "question": "What is a key factor determining the effectiveness of a security infrastructure in an enterprise environment?", "answers": { "A": "The ability to block all potential external threats", "B": "Ease of circumvention by employees", "C": "Complexity of security controls", "D": "Minimal impact on user productivity" }, "solution": "D" }, { "question": "Which of the following is a key aspect of a secure remote access system?", "answers": { "A": "No logging and auditing of system utilization", "B": "Absence of granular access control", "C": "Transparent reproduction of the workplace environment", "D": "Access to the corporate internal network without two-factor authentication" }, "solution": "C" }, { "question": "What is the primary purpose of a security policy?", "answers": { "A": "Assigning administrative control to individuals", "B": "Assigning specific tasks to individuals", "C": "Defining the organizational security needs", "D": "Implementing security measures" }, "solution": "C" }, { "question": "What is the primary purpose of remote access and telecommuting techniques?", "answers": { "A": "Establish end-to-end encryption for communication", "B": "Provide VPN connectivity for secure communications", "C": "Achieve remote node operation for wireless networking", "D": "Enable users to work from remote locations, aside from their regular office environment" }, "solution": "D" }, { "question": "What does payload inspection refer to in a firewall configuration?", "answers": { "A": "Analyzing packet headers", "B": "Detecting malicious intrusion attempts", "C": "Managing content filtering", "D": "Examining packet payload for certain patterns" }, "solution": "D" }, { "question": "What is the main role of Reciprocal Rapid Data Collaboration (RRDC) in protecting against attacks on cyber-physical systems?", "answers": { "A": "To facilitate the integration of legacy control systems with modern security technologies.", "B": "To ensure the secure exchange of information between IoT devices and cloud-based services.", "C": "To anonymize and aggregate sensitive operational data to prevent unauthorized access.", "D": "To enable real-time sharing of security information among interconnected ICS and critical infrastructure entities." }, "solution": "D" }, { "question": "Which protocol is commonly used for securing email communication with cryptographic security services?", "answers": { "A": "DNS", "B": "S/MIME", "C": "POP3", "D": "SMTP" }, "solution": "B" }, { "question": "What is a common use case for a transparent proxy server?", "answers": { "A": "Mediating between clients and servers", "B": "Performing access control page redirection", "C": "Providing internet access while protecting client identity", "D": "Blocking access to unauthorized devices in a WAP" }, "solution": "C" }, { "question": "What technique is being used to find information about a system by sending special packets to a target and analyzing the responses?", "answers": { "A": "Fingerprinting", "B": "Remote code execution (RCE)", "C": "SQL injection", "D": "Cross-site scripting (XSS)" }, "solution": "A" }, { "question": "What is the purpose of the assigned security responsibility standard?", "answers": { "A": "To validate access to facilities based on role", "B": "To assign security responsibility for healthcare providers", "C": "To appoint an individual responsible for security policies and procedures", "D": "To ensure data backup and storage procedures are in place" }, "solution": "C" }, { "question": "In which layer of the OSI model does the TCP/IP protocol operate?", "answers": { "A": "Transport layer", "B": "Network layer", "C": "Presentation layer", "D": "Application layer" }, "solution": "A" }, { "question": "You’re running an IDLE scan and send the first packet to the target machine. Next, the SYN/ACK packet is sent to the zombie. The IPID on the return packet from the zombie is 22346. If the starting IPID was 22345, in what state is the port on the target machine?", "answers": { "A": "Unknown", "B": "Closed", "C": "Open", "D": "None of the above" }, "solution": "B" }, { "question": "What model provides a way for designers to map abstract statements in a security policy into the algorithms and data structures necessary to build software?", "answers": { "A": "Security perimeter model", "B": "Security kernel model", "C": "Access control model", "D": "Security model" }, "solution": "D" }, { "question": "Which of the following is NOT considered a good attribute for a security metric?", "answers": { "A": "Remark: Consistently measured, without subjective criteria", "B": "Contextually specific and relevant to decision-makers", "C": "Expressed as a cardinal number or percentage", "D": "Inconsistently measured, usually because they rely on subjective judgments" }, "solution": "D" }, { "question": "Which SQL function is used to return the number of records that meet specified criteria?", "answers": { "A": "COUNT( )", "B": "SUM( )", "C": "MAX( )", "D": "MIN( )" }, "solution": "A" }, { "question": "What type of framework is OAuth 2.0?", "answers": { "A": "Decentralized protocol", "B": "Single sign-on protocol", "C": "Authorization protocol", "D": "Authentication protocol" }, "solution": "C" }, { "question": "What critical components should be included in a business continuity training plan?", "answers": { "A": "Disaster recovery procedures only", "B": "Physical security guidelines only", "C": "Risk assessment guidelines only", "D": "Emergency response training, continuity plan procedures, and business continuity team responsibilities" }, "solution": "D" }, { "question": "What is an important consideration for creating access passwords on a Windows system?", "answers": { "A": "Passwords containing common nouns", "B": "Use of single-character passwords", "C": "Use of user's proper name in password", "D": "Passwords that should remain confidential" }, "solution": "D" }, { "question": "What is a characteristic feature of a rainbow table in password cracking?", "answers": { "A": "It comprises a huge compilation of password hashes", "B": "It is an active online attack method", "C": "It uses alphabet substitution to crack passwords", "D": "It is the fastest method for cracking passwords" }, "solution": "A" }, { "question": "What is a crucial element for the effective operation of a firewall?", "answers": { "A": "Use of intrusion detection systems", "B": "Absence of security policies", "C": "Development of a security architecture", "D": "Implementation of a stringent security audit" }, "solution": "C" }, { "question": "What should be used as a tool to respond to identified risks in an operations setting?", "answers": { "A": "Compensating Controls", "B": "Technical or Logical Controls", "C": "Corrective Controls", "D": "It varies based on the circumstances, with each risk being evaluated on an individual basis" }, "solution": "D" }, { "question": "In public-key encryption for one-way authentication, what is the function of the digital signature?", "answers": { "A": "To decrypt the message sent by the sender", "B": "To authenticate the sender to the recipient", "C": "To allow the recipient to decrypt the entire message with the sender's public key", "D": "To encrypt the message for confidentiality" }, "solution": "B" }, { "question": "Which port from the list is commonly utilized for email communication?", "answers": { "A": "110", "B": "22", "C": "443", "D": "3389" }, "solution": "A" }, { "question": "What is the primary function of a secure token service (STS) in a web services security architecture?", "answers": { "A": "To establish secure communication channels between web services.", "B": "To perform biometric authentication for user access.", "C": "To detect and prevent external network attacks.", "D": "To issue security tokens for authentication and authorization." }, "solution": "D" }, { "question": "Which type of RAID configuration provides fault tolerance by holding parity information for one disk?", "answers": { "A": "RAID-6", "B": "RAID-5", "C": "RAID-0", "D": "RAID-1" }, "solution": "B" }, { "question": "Which command is used to install IPv6 on a Windows machine via the command line?", "answers": { "A": "installipv6", "B": "addipv6", "C": "netsh ipv6 install", "D": "ipv6install" }, "solution": "C" }, { "question": "What is a necessary condition for the security of the RSA mechanism?", "answers": { "A": "The security is based on the assumed difficulty of calculating discrete logarithms in elliptic curves.", "B": "The length of the modulus n should be at least 512 bits", "C": "The length of the modulus n should be at least 3000 bits", "D": "The public exponent e must be less than 2" }, "solution": "C" }, { "question": "Why is public key cryptography considered more suitable for authentication and secure communication compared to symmetric key cryptography?", "answers": { "A": "It relies on a single key to both encrypt and decrypt information.", "B": "It requires the distribution and management of a large number of keys.", "C": "It involves the manipulation of large prime numbers and complex mathematical operations.", "D": "It enables the secure sharing and verification of public keys through digital signatures and certificates." }, "solution": "D" }, { "question": "What does the principle of 'use of the system should not require a long list of rules or mental strain' emphasize?", "answers": { "A": "Technical specifications", "B": "Stringent regulations", "C": "Complexity and mental effort", "D": "Ease of use and performance impact" }, "solution": "D" }, { "question": "Which authentication type provides centralized administration of dial-up, VPN, and wireless authentication and can be used with EAP and 802.1X?", "answers": { "A": "802.1X", "B": "Kerberos", "C": "LDAP", "D": "RADIUS" }, "solution": "D" }, { "question": "In the context of cybersecurity, what is the term used to describe protecting digital content after it’s been descrambled and made available within the home?", "answers": { "A": "Digital Rights Management (DRM)", "B": "Content Scrambling System (CSS)", "C": "Two-factor Authentication", "D": "End-to-end Encryption" }, "solution": "A" }, { "question": "Which element of telecommunication is used to ensure confidentiality?", "answers": { "A": "Firewall services", "B": "Intrusion detection services", "C": "RAID", "D": "Network security protocols" }, "solution": "D" }, { "question": "In the context of access, what is the object of an access request?", "answers": { "A": "The security controls in place", "B": "The resource a user or process wishes to access", "C": "The user making the access request", "D": "The subject of the access request" }, "solution": "B" }, { "question": "Which motivation might drive a publisher to commit click fraud by clicking on their own ads or asking friends to click on the ads?", "answers": { "A": "Financial gain", "B": "Nonfinancial reasons", "C": "Competitive advantage", "D": "Personal vendetta" }, "solution": "A" }, { "question": "Which of the following is a potential security concern of remote connections if not protected and monitored sufficiently?", "answers": { "A": "All answers are correct", "B": "Inability to upgrade or patch", "C": "Exposure to malicious code", "D": "Difficulty in troubleshooting" }, "solution": "A" }, { "question": "What is the primary authentication method for validating each device in a machine certificate and EAP-TLS based architecture?", "answers": { "A": "Certificate-based digital signatures", "B": "Raw public key digital signatures", "C": "PSKs", "D": "EAP" }, "solution": "A" }, { "question": "What does a security model provide a framework for implementing?", "answers": { "A": "Security policy", "B": "Firewalls", "C": "Security protocols", "D": "User authentication" }, "solution": "A" }, { "question": "What is WEP commonly known as?", "answers": { "A": "Wireless End Point", "B": "Wired Encryption Protocol", "C": "Wi-Fi End Point", "D": "Wired Equivalent Privacy" }, "solution": "D" }, { "question": "During risk analysis, what will be determined to establish an overall likelihood that indicates the probability a potential threat may be exercised against the asset under review?", "answers": { "A": "Impact of the threat", "B": "Cost-benefit ratio", "C": "Probability of occurrence", "D": "Risk level" }, "solution": "C" }, { "question": "What type of systems are used to manage user identities and control access to computer and network resources?", "answers": { "A": "Role-Based Access Control (RBAC)", "B": "Discretionary Access Control (DAC)", "C": "Identity and Access Management", "D": "Access Control Lists (ACL)" }, "solution": "C" }, { "question": "What response is missing in a SYN flood attack?", "answers": { "A": "SYN", "B": "URG", "C": "ACK", "D": "SYN-ACK" }, "solution": "C" }, { "question": "Which of the following is a fundamental vulnerability of Instant Messaging (IM)?", "answers": { "A": "Openness in service provision allows anyone to establish an IM service.", "B": "User anonymity through aliases reduces accountability and facilitates malicious actions", "C": "Clear transmission of most IM traffic makes it vulnerable to leakage in the network", "D": "All of the above" }, "solution": "D" }, { "question": "What types of attacks are addressed by the Android and iOS operating systems?", "answers": { "A": "Malicious and unintentional data loss", "B": "Resource and service availability abuse", "C": "Attacks on the integrity of data", "D": "All of the above" }, "solution": "D" }, { "question": "What is the purpose of mapping new standards and industry requirements to an organization's existing control standards or to ISO 17799?", "answers": { "A": "To ensure that any new item is assimilated into the controls list and that items are not duplicated", "B": "To conduct a cost-benefit analysis", "C": "To establish recovery time objectives", "D": "To identify potential risks and vulnerabilities to the organization's assets" }, "solution": "A" }, { "question": "Which of the following practices involves a systematic approach to considering each system component relative to potential threats such as spoofing identity, tampering with data, and denial of service?", "answers": { "A": "Define Metrics and Compliance Reporting", "B": "Provide Training", "C": "Establish Design Requirements", "D": "Perform Threat Modelling" }, "solution": "D" }, { "question": "In the mesh encryption solution, what is the recommended approach to network encryption for traffic between nodes?", "answers": { "A": "TLS at the application layer", "B": "VPN tunneling", "C": "IPsec in transport mode", "D": "SSH tunneling" }, "solution": "C" }, { "question": "What is the main purpose of a honeypot in a network environment?", "answers": { "A": "To identify insider abuses of a system", "B": "To provide services to public networks without direct access to the internal network", "C": "To act as a decoy and draw attackers away from critical resources", "D": "To examine and reassemble fragmented traffic passing through a network" }, "solution": "C" }, { "question": "Which security measure is used to prevent unauthorized access to a computer network?", "answers": { "A": "Firewalls", "B": "Debugging tools", "C": "Open ports", "D": "Password sharing" }, "solution": "A" }, { "question": "What is the best defensive action that system administrators can take against the threat posed by brand new malicious code objects that exploit known software vulnerabilities?", "answers": { "A": "Install anti-worm filters on the proxy server", "B": "Prohibit Internet use on the corporate network", "C": "Apply security patches as they are released", "D": "Update antivirus definitions monthly" }, "solution": "C" }, { "question": "Which step function in SHA-3 operates to update each bit based on its current value and the value of the corresponding bit position in the next two lanes in the same row?", "answers": { "A": "Chi function", "B": "Iota function", "C": "Pi function", "D": "Theta function" }, "solution": "A" }, { "question": "Which type of device can perform Network Address Translation (NAT) for an organization using private IP addressing to allow Internet access?", "answers": { "A": "Routers", "B": "Proxies", "C": "Layer three switches", "D": "All of the above" }, "solution": "D" }, { "question": "Which security mechanism is used to protect against unauthorized users from accessing any service on a network?", "answers": { "A": "Firewall", "B": "Application Gateway", "C": "Intrusion Detection System", "D": "Authentication and Authorization" }, "solution": "D" }, { "question": "What is the purpose of employing a layered approach to security in cybersecurity?", "answers": { "A": "To protect the network against unauthorized access and external attacks", "B": "To provide a comprehensive defense against various threats and attacks", "C": "To hide malicious code within the core of the operating system", "D": "To ensure data is recoverable in case of system failure or loss" }, "solution": "B" }, { "question": "What is the key benefit of becoming actively involved in a security-related trade organization?", "answers": { "A": "Exclusive access to private security information and government resources", "B": "Certification opportunities for professional advancement", "C": "Access to discounted security products and services", "D": "Networking to provide assistance when a problem arises" }, "solution": "D" }, { "question": "What is the function of a user name service in security architecture?", "answers": { "A": "Storing descriptive information about users, such as their office location and telephone number", "B": "Assigning unique names to users and returning system user identifiers", "C": "Implementing a hierarchical structure of control within the enterprise", "D": "Resolving aliases and managing group names within the system" }, "solution": "B" }, { "question": "What terms best describe regulating and filtering network access based on rules?", "answers": { "A": "Web Application Firewalls (WAF)", "B": "Router", "C": "Intrusion Detection System", "D": "Firewall" }, "solution": "D" }, { "question": "Which of the following principles refers to a situation where a client device is checked to be compliant before it is allowed to connect to the corporate intranet?", "answers": { "A": "Access control", "B": "Endpoint security", "C": "Intrusion prevention", "D": "Data leakage prevention" }, "solution": "B" }, { "question": "What is a fundamental component enabling decentralized computing with microprocessors?", "answers": { "A": "Decentralized communication protocols.", "B": "Interconnected microprocessors.", "C": "Universal memory chips.", "D": "Complex microprocessor architecture." }, "solution": "B" }, { "question": "How does a firewall contribute to network security?", "answers": { "A": "By authenticating users connecting to the network", "B": "By physically shielding the internal network from external threats", "C": "By controlling and filtering network traffic based on predetermined rules", "D": "By encrypting all data passing through the network" }, "solution": "C" }, { "question": "What is an XMAS scan?", "answers": { "A": "UDP scan with FIN/PSH set", "B": "UDP scan SYN/URG/FIN set", "C": "TCP scan with SYN/ACK/FIN set", "D": "TCP scan with FIN/PSH/URG set" }, "solution": "D" }, { "question": "Which type of update includes a tested, cumulative set of hotfixes, security updates, critical updates, and additional fixes for problems found internally since the release of the product?", "answers": { "A": "Service pack", "B": "Critical update", "C": "Security update", "D": "Driver update" }, "solution": "A" }, { "question": "Which cryptographic mechanism creates a cryptographic code that cannot be reversed?", "answers": { "A": "Symmetric encryption", "B": "Encrypting with a stream cipher", "C": "Hashing", "D": "Asymmetric encryption" }, "solution": "C" }, { "question": "What is the primary purpose of a dedicated evidence storage system?", "answers": { "A": "To retain logs and records of digital events for future comparison", "B": "To perform root cause analysis of incidents", "C": "To maintain quality of environmental conditions", "D": "To minimize the need for environmental monitoring" }, "solution": "A" }, { "question": "What principle is used to demonstrate that a signed message came from the owner of the key that signed it?", "answers": { "A": "Non-verifiability", "B": "Authority", "C": "Integrity", "D": "Non-repudiation" }, "solution": "D" }, { "question": "What is the purpose of intrusion-detection and/or intrusion-prevention techniques according to PCI DSS Requirement 11.5.1?", "answers": { "A": "To identify any network failures", "B": "To detect and/or prevent network intrusions", "C": "To prevent all unauthorized access attempts", "D": "To secure the network from any cyber attacks." }, "solution": "B" }, { "question": "Which type of attack ties up a system by forging SYN packets with bogus source addresses?", "answers": { "A": "Service Request Floods", "B": "Ping of Death", "C": "ICMP Flood Attack", "D": "Syn Attack/Flood" }, "solution": "D" }, { "question": "What is the primary purpose of creating a standardized image for virtual machines within an organization?", "answers": { "A": "To ensure compatibility between VMs", "B": "To enforce security configurations from the beginning", "C": "To reduce the occurrence of virtualization sprawl", "D": "To centralize patch management" }, "solution": "B" }, { "question": "What type of network does a Virtual Private Network (VPN) use to allow users to connect to an enterprise server located at the edge of the enterprise LAN?", "answers": { "A": "A public internetwork.", "B": "A private network.", "C": "A virtual network.", "D": "A secure network." }, "solution": "A" }, { "question": "When you are attempting to install a new security mechanism for which there is not a detailed step-by-step guide on how to implement that specific product, which element of the security policy should you turn to?", "answers": { "A": "Policies", "B": "Standards", "C": "Guidelines", "D": "Procedures" }, "solution": "C" }, { "question": "What does the linear equivalence L(s) of the n-sequence s signify?", "answers": { "A": "The average number of agreements minus disagreements between s0(t) and s0(t + t)", "B": "The period of the combined generator", "C": "The length of the shortest LFSR that generates s", "D": "The fraction of times t that the condition (s0(t), s0(t + 1), ..., s0(t + (k - 1))) = u holds" }, "solution": "C" }, { "question": "What kind of coverage can pay for lost earnings and expenses during the period of time the business is shut down?", "answers": { "A": "Valuable papers coverage", "B": "Boiler and machinery coverage", "C": "Business interruption coverage", "D": "Extra expense coverage" }, "solution": "C" }, { "question": "What is the purpose of User Account Control (UAC) in Windows?", "answers": { "A": "To disable all security measures for ease of use", "B": "To give all users full administrative rights", "C": "To prevent unauthorized access and user error", "D": "To bypass the logon process for standard users" }, "solution": "C" }, { "question": "What is the purpose of having security policies and operational procedures in an organization's cybersecurity framework?", "answers": { "A": "To protect against malware and phishing attacks.", "B": "To manage access control and encryption methods.", "C": "To document roles and responsibilities within the organization.", "D": "To define the entity’s security objectives and processes for achieving consistent security outcomes." }, "solution": "D" }, { "question": "Which action is a protection against DNS spoofing?", "answers": { "A": "Maintaining physical access security and employing encryption", "B": "Using static ARP mappings and session identification", "C": "Implementing DNS spoofing detection and deploying packet modification tools", "D": "Allowing only authorized changes to DNS and restricting zone transfers" }, "solution": "D" }, { "question": "In cryptographic technologies, what does XOR stand for?", "answers": { "A": "External Object Representation", "B": "Xternal Output Relay", "C": "Exclusive Or", "D": "Extra Operation Routing" }, "solution": "C" }, { "question": "In the context of computer architecture, what is primarily responsible for integrating legacy peripheral devices and doesn’t support Plug and Play (PnP) setup?", "answers": { "A": "IRQ", "B": "ARQ", "C": "CRQ", "D": "None of the above" }, "solution": "A" }, { "question": "What type of encryption is the fastest to use for large amounts of data?", "answers": { "A": "Private", "B": "Public", "C": "Asymmetric", "D": "Symmetric" }, "solution": "D" }, { "question": "Which type of security is most manageable and important for system analysts and developers?", "answers": { "A": "Hardware security", "B": "Information system security", "C": "Network security", "D": "Software security" }, "solution": "B" }, { "question": "Which type of malware can directly compromise programs and data leading to a potential loss of data integrity?", "answers": { "A": "Backdoor", "B": "Hoax", "C": "Worm", "D": "Data diddler" }, "solution": "D" }, { "question": "For what purpose can Shamir's secret sharing scheme be used?", "answers": { "A": "To efficiently compress large messages", "B": "To distribute cryptographic keys", "C": "To securely split a secret among users", "D": "To verify digital signatures" }, "solution": "C" }, { "question": "What is the primary goal of security in terms of penetration testing?", "answers": { "A": "To exploit discovered vulnerabilities in the system", "B": "To perform a vigorous attack to break into the protected network", "C": "To prevent penetrations by discovering weaknesses and implementing countermeasures", "D": "To cause system damage without exploiting discovered vulnerabilities" }, "solution": "C" }, { "question": "What is one of the primary purposes of using passfaces as an authentication method?", "answers": { "A": "To enhance security through the human ability to recognize familiar faces", "B": "To improve user experience by streamlining the authentication process", "C": "To provide an additional layer of security by recognizing facial features", "D": "To prevent password guessing attempts by implementing visual authentication" }, "solution": "A" }, { "question": "Which protocol uses public key cryptography to provide encryption, access control, nonrepudiation, and message authentication using IP-based protocols?", "answers": { "A": "IPsec", "B": "SSH", "C": "SSL", "D": "Kerberos" }, "solution": "A" }, { "question": "What is the biggest concern associated with grid computing?", "answers": { "A": "Resource Scalability", "B": "Data Consistency", "C": "Performance Stability", "D": "Security and Confidentiality" }, "solution": "D" }, { "question": "A distributed network is a type of computer network that is spread over different networks typically in different locations. If you were using this type of system a good way to speed access to large files would be to implement which of the following?", "answers": { "A": "Content Distribution Network", "B": "Proxy for web caching", "C": "Reverse proxy for load balancing", "D": "Private cloud for laaS" }, "solution": "A" }, { "question": "What is the best way to secure a remote desktop server according to the given risk assessment?", "answers": { "A": "Place the remote desktop server(s) on a screened subnet, and implement two-factor authentication", "B": "Deploy a remote desktop server on your internal LAN, and require an active directory integrated SSL connection for access", "C": "Distribute new IPsec VPN client software to applicable parties, and then virtualize the remote desktop services functionality", "D": "Change remote desktop to a non-standard port and implement password complexity for the entire active directory domain" }, "solution": "A" }, { "question": "Among the most widely used and potentially damaging attacks based on network vulnerabilities are:", "answers": { "A": "Buffer overflows and session hijacking.", "B": "Sniffing, spoofing, and wardialing.", "C": "ARP poisoning and denial-of-service attacks.", "D": "Sniffing, spoofing, and session hijacking." }, "solution": "D" }, { "question": "You are the security administrator for your company. You identify a security risk. You decide to continue with the current security plan. However you develop a contingency plan for if the security risk occurs. Which type of risk response strategy are you demonstrating?", "answers": { "A": "Transference", "B": "Mitigation", "C": "Acceptance", "D": "Avoidance" }, "solution": "C" }, { "question": "Which type of IDS employs a database of attack signatures to detect intrusion attempts?", "answers": { "A": "Honey pot", "B": "Behavior-based IDS", "C": "Network-based IDS", "D": "Knowledge-based IDS" }, "solution": "D" }, { "question": "Which device is primarily involved in transmitting packets to their destinations and works at the Network layer?", "answers": { "A": "Bridge", "B": "Switch", "C": "Router", "D": "Hub" }, "solution": "C" }, { "question": "SSL is a mechanism for which of the following?", "answers": { "A": "Authenticating data", "B": "Securing transmitted data", "C": "Verifying data", "D": "Securing stored data" }, "solution": "B" }, { "question": "What is the primary technology utilized for biometric identification?", "answers": { "A": "Retina scan", "B": "Voice recognition", "C": "Facial recognition", "D": "Fingerprints" }, "solution": "D" }, { "question": "In the client-server model, where is the bulk of the processing done?", "answers": { "A": "Locally", "B": "Locally and the results are presented remotely", "C": "On the client and server equally", "D": "Remotely and the results are presented locally" }, "solution": "D" }, { "question": "What does ARO stand for in the context of risk assessment?", "answers": { "A": "Asset Risk Overview", "B": "Annual Loss Expectancy", "C": "Asset Replacement Option", "D": "Annual Rate of Occurrence" }, "solution": "D" }, { "question": "Which type of NLSP can provide subnetwork-level security?", "answers": { "A": "Connectionless NLSP", "B": "Connection-oriented NLSP", "C": "Both A and B", "D": "Neither A nor B" }, "solution": "C" }, { "question": "What task includes the evaluation of all collected information regarding threats, vulnerabilities, assets, and asset values?", "answers": { "A": "Risk Evaluation", "B": "Safeguard Selection and Risk Mitigation Analysis", "C": "Threat Analysis", "D": "Vulnerability Analysis" }, "solution": "A" }, { "question": "How can employees be made aware of the need for an information security program?", "answers": { "A": "By implementing a strict dress code policy", "B": "By involving them in decision-making for the program", "C": "By ensuring management's awareness and commitment", "D": "By holding regular computer programming courses" }, "solution": "C" }, { "question": "What is the estimated value of third-party security services demand by the end of 2004?", "answers": { "A": "None of the above", "B": "$17.2 billion", "C": "$1 billion", "D": "$140 million" }, "solution": "B" }, { "question": "What precaution should users take when using mobile payment solutions to ensure security?", "answers": { "A": "Use mobile payment solutions linked to company's accounts", "B": "Avoid any payment method involving NFC or RFID technology", "C": "Always opt for contactless payment systems", "D": "Only employ solutions that require per-transaction confirmation or device unlock" }, "solution": "D" }, { "question": "What method can an ethical hacker utilize to protect against DNS poisoning?", "answers": { "A": "Limiting the time records can stay in cache before updating", "B": "Conducting regular penetration testing", "C": "Blocking access to DNS servers", "D": "Changing all system hostnames" }, "solution": "A" }, { "question": "What is the primary purpose of using a secure hash function in a digital signature application?", "answers": { "A": "To provide symmetric-key encryption", "B": "To uniquely define the input data and provide integrity protection", "C": "To ensure collision proof of data", "D": "To negotiate the encryption mechanism in SSL" }, "solution": "B" }, { "question": "How many bits used in the LUCIFER cipher in each round?", "answers": { "A": "16 bits", "B": "64 bits", "C": "36 bits", "D": "32 bits" }, "solution": "C" }, { "question": "In an object-oriented system, what refers to the results exhibited by an object upon receipt of a message?", "answers": { "A": "Delegation", "B": "Behavior", "C": "Polymorphism", "D": "Instance" }, "solution": "B" }, { "question": "What international standard provides guidelines for securing power systems?", "answers": { "A": "NIST SP 800-53", "B": "GHF 821X", "C": "IEEE 1776-2008", "D": "IEC 62351" }, "solution": "D" }, { "question": "In what year did Horst Feistel develop the block cipher LUCIFER?", "answers": { "A": "1996", "B": "1971", "C": "1973", "D": "1984" }, "solution": "B" }, { "question": "What is the main purpose of a penetration test in relation to management?", "answers": { "A": "To sabotage a company's operations.", "B": "To determine the effectiveness of the security controls of an organization.", "C": "To justify expenses related to implementing security programs.", "D": "To find potential flaws in an organization's firewalls." }, "solution": "B" }, { "question": "In the Wireshark capture, what does TCP port==80 filter to display?", "answers": { "A": "HTTP traffic", "B": "Encrypted web page data", "C": "HTTP metadata", "D": "Encrypted email data" }, "solution": "A" }, { "question": "Which of the following is a common human error when operating equipment?", "answers": { "A": "Leaving cards behind in ATMs", "B": "Typing the wrong password", "C": "Misplacing personal items", "D": "Entering incorrect phone numbers" }, "solution": "A" }, { "question": "Two forms of risk assessment are:", "answers": { "A": "Analytical and assessment", "B": "Technical and procedural", "C": "Qualitative and quantitative", "D": "Subjective and objective" }, "solution": "C" }, { "question": "One way to exfiltrate data is using a secret communication path that allows data transfer in a way that violates the security policy. Such a path is called a _______.", "answers": { "A": "Overt Channel", "B": "Tunnel", "C": "Covert Channel", "D": "Secure Channel" }, "solution": "C" }, { "question": "What is the process of attackers using automated tools to scan for vulnerabilities in a network or system?", "answers": { "A": "Back door attack", "B": "Social engineering", "C": "Eavesdropping", "D": "Scanning for vulnerabilities" }, "solution": "D" }, { "question": "Which RAID level is not fault tolerant?", "answers": { "A": "RAID 1", "B": "RAID 6", "C": "RAID 0", "D": "RAID 5" }, "solution": "C" }, { "question": "What is the basis for several common applications including SSL, PGP, SSH and IPsec?", "answers": { "A": "Asymmetric Cryptography", "B": "Shared Secrets", "C": "Hashing Algorithms", "D": "Symmetric Encryption" }, "solution": "A" }, { "question": "What is the primary goal of monitoring in a security context?", "answers": { "A": "To track the key presses of users", "B": "To perform intrusion attempts", "C": "To actively review audited information or assets", "D": "To capture radio frequency signals" }, "solution": "C" }, { "question": "In the TCP three-way handshake sequence, what is the last phase?", "answers": { "A": "SYN flagged packet", "B": "SYN/ACK flagged packet", "C": "ACK flagged packet", "D": "FIN flagged packet" }, "solution": "B" }, { "question": "What URL prefix appears in the web browser address bar to signal the use of TLS for securing web communications?", "answers": { "A": "TLS://", "B": "FTPS://", "C": "SHTTP://", "D": "HTTPS://" }, "solution": "D" }, { "question": "In view of arguments provided by proponents of closed source software, what is one potential drawback of the open source approach in terms of code review?", "answers": { "A": "TThe open-source model leads to inconsistent code reviews, with some sections neglected by developers.", "B": "Due to its complexity and messiness, open-source code often goes unreviewed by many developers.", "C": "Both A and B.", "D": "None of the above." }, "solution": "C" }, { "question": "What makes end users more vulnerable to social engineering attacks?", "answers": { "A": "High level of system security education", "B": "Excessive reliance on the Internet", "C": "Regular user awareness training programs", "D": "Strict enforcement of user access controls" }, "solution": "B" }, { "question": "What platforms is VNC available for?", "answers": { "A": "UNIX, Microsoft Windows, Macintosh, Viewers, and Java.", "B": "Microsoft Windows and Macintosh only.", "C": "UNIX, Microsoft Windows, and Macintosh only.", "D": "Microsoft Windows and UNIX only." }, "solution": "A" }, { "question": "Which form of social engineering impersonation involves impersonating a tech support person to obtain sensitive information?", "answers": { "A": "Impersonation of a tech support person", "B": "Impersonation of law enforcement", "C": "Impersonation of a repairman", "D": "Impersonation of a customer" }, "solution": "A" }, { "question": "In bug fixing, the monitoring of vulnerabilities and performance testing of a patch are part of the:", "answers": { "A": "Bug reporting process.", "B": "Distribution process.", "C": "Reassurance process.", "D": "Repair process." }, "solution": "D" }, { "question": "Which form of physical identification and/or electronic access control device can employ multifactor authentication?", "answers": { "A": "Smart cards", "B": "Proximity readers", "C": "Dumb cards", "D": "Motion detectors" }, "solution": "A" }, { "question": "Which of the following is a primary purpose of Nmap in a network?", "answers": { "A": "Encrypt network traffic", "B": "Performing penetration tests", "C": "Gather information about a network's hosts", "D": "Simulate denial-of-service attacks" }, "solution": "C" }, { "question": "Which type of control involves the transformation of plaintext into unreadable data by cryptographic techniques?", "answers": { "A": "Antivirus software", "B": "Smart cards", "C": "Encryption", "D": "Access control software" }, "solution": "C" }, { "question": "What do security standards provide guidance on?", "answers": { "A": "Operational staff management", "B": "Implementation of procedures", "C": "How policies should be implemented", "D": "Setting high-level policy objectives" }, "solution": "C" }, { "question": "What is the term used to describe the process of removing or encoding potentially dangerous characters from user input?", "answers": { "A": "Data Masking", "B": "Data Redaction", "C": "Data Sanitization", "D": "Data Obfuscation" }, "solution": "C" }, { "question": "Which malware is a subcategory of the virus and can encrypt files, demanding a ransom to decrypt them?", "answers": { "A": "Spyware", "B": "Worm", "C": "Trojan", "D": "Ransomware" }, "solution": "D" }, { "question": "Which of the following is not considered a security service under ISO 7498-2 standards?", "answers": { "A": "System backup", "B": "Non-repudiation", "C": "Data integrity", "D": "Access control" }, "solution": "A" }, { "question": "What method could be used to trick someone into running a Trojaned file?", "answers": { "A": "Denial-of-service attacks.", "B": "Social engineering techniques.", "C": "Manipulating search engine results.", "D": "Phishing attacks." }, "solution": "B" }, { "question": "What does IKE stand for in the context of IPsec?", "answers": { "A": "Internet Key Encryption", "B": "Internet Key Enterprise", "C": "Internet Key Extension", "D": "Internet Key Establishment" }, "solution": "D" }, { "question": "Which is an example of social engineering?", "answers": { "A": "Accessing a database with a cracked password", "B": "Calling a help desk and convincing them to reset a password for a user account", "C": "Installing a hardware keylogger on a victim’s system to capture passwords", "D": "A user who holds open the front door of an office for a potential hacker" }, "solution": "B" }, { "question": "Which of the following is the view that a programmer has of the computing system when viewed through its instruction set?", "answers": { "A": "System software architecture", "B": "Operating system architecture", "C": "Application software architecture", "D": "Computer organization" }, "solution": "D" }, { "question": "Which social engineering principle may allow a phony call from the help desk to be effective?", "answers": { "A": "Scarcity", "B": "Social proof", "C": "Authority", "D": "Imitation" }, "solution": "C" }, { "question": "What is multifactor authentication (MFA)?", "answers": { "A": "Any authentication method that uses device fingerprinting.", "B": "Any authentication method using only a single factor.", "C": "Any authentication method based on biometrics.", "D": "Any authentication using two or more factors." }, "solution": "D" }, { "question": "What is the purpose of Security Awareness training?", "answers": { "A": "To increase employees' consciousness of security controls and practices", "B": "To provide security requirements for testing and evaluation", "C": "To integrate systems engineering and systems security engineering requirements", "D": "To identify and control security changes to the system" }, "solution": "A" }, { "question": "What is the concept underlying wireless communication infrastructure?", "answers": { "A": "The system identification code", "B": "Radio frequency modulation", "C": "Satellite communication", "D": "The cell concept" }, "solution": "D" }, { "question": "Which type of radar measures the velocity of the target by the change in frequency in the return signal?", "answers": { "A": "Monopulse", "B": "Doppler", "C": "Pulse Compression", "D": "Passive Coherent Location" }, "solution": "B" }, { "question": "What is the purpose of problem management in cybersecurity?", "answers": { "A": "To enforce strict access restrictions", "B": "To remove all system vulnerabilities", "C": "To mitigate the negative impact of problems on computing services and resources", "D": "To intensify security controls" }, "solution": "C" }, { "question": "What is the primary goal of the security engineer of the 21st century?", "answers": { "A": "Studying defensive strategies", "B": "Specialization in cryptography", "C": "Managing technical complexity", "D": "Developing proprietary solutions" }, "solution": "C" }, { "question": "Which protocol is used to transport hypertext files across the Internet?", "answers": { "A": "IP", "B": "TCP", "C": "HTTP", "D": "FTP" }, "solution": "C" }, { "question": "Which mode allows a Bluetooth device to be discoverable for a short period of time?", "answers": { "A": "Pairing", "B": "Limited Discoverable", "C": "Nondiscoverable", "D": "Nonpairing" }, "solution": "B" }, { "question": "What is the main reason for the failure of a water-based suppression system?", "answers": { "A": "Human error", "B": "Environmental factors", "C": "Use of preventive measures", "D": "Use of gas-based suppression systems" }, "solution": "A" }, { "question": "Which type of test is intended to imitate the behaviors that an internal party with authorized access may perform?", "answers": { "A": "Blind testing", "B": "Double-blind testing", "C": "Outsider attack", "D": "Insider attack" }, "solution": "D" }, { "question": "What does the abbreviation LAN stand for?", "answers": { "A": "Local Area Network", "B": "Large Area Network", "C": "Linked Access Network", "D": "Local Access Node" }, "solution": "A" }, { "question": "In the context of a system of federal states, what may be regarded as a foreign state?", "answers": { "A": "Another member state of the federation", "B": "A state outside the federal system", "C": "A state engaged in cyber operations", "D": "None of the above" }, "solution": "A" }, { "question": "What type of cable is very resistant to failure and is commonly used for infrastructure backbones and server farms due to its immunity to electromagnetic interference?", "answers": { "A": "Category 5 cable", "B": "Twisted pair cable", "C": "Fiber optic cable", "D": "Coaxial cable" }, "solution": "C" }, { "question": "What cybersecurity measure is aimed at preventing unauthorized access to recycled or discarded media?", "answers": { "A": "Logical compromise of networked devices", "B": "Remote espionage, eavesdropping", "C": "Loss/alteration of information", "D": "Physical access by unauthorized persons" }, "solution": "D" }, { "question": "What is the first step in the 'Mitigate Risk' task?", "answers": { "A": "Cost Benefit Analysis", "B": "Complete the risk assessment with the risk mitigation", "C": "Safeguard Selection and Risk Mitigation Analysis", "D": "Final Report" }, "solution": "C" }, { "question": "Which of the following best describes the purpose of a denial of service attack?", "answers": { "A": "To compromise the integrity of the system", "B": "To disrupt the normal functionality of a targeted server", "C": "To gain unauthorized access to a system", "D": "To modify data without authorization" }, "solution": "B" }, { "question": "What is an example of a commonly used protocol for tunneling data to bypass security controls?", "answers": { "A": "LDAP (Lightweight Directory Access Protocol)", "B": "SMTP (Simple Mail Transfer Protocol)", "C": "SSH (Secure Shell)", "D": "FTP (File Transfer Protocol)" }, "solution": "C" }, { "question": "What distinguishes Zenmap from nmap?", "answers": { "A": "Zenmap offers a GUI overlay with organizational capabilities for nmap scan results", "B": "Zenmap performs port scans at a slower rate than nmap", "C": "Zenmap uses randomized hosts for scans", "D": "Zenmap provides advanced network visualization but cannot save scan results" }, "solution": "A" }, { "question": "What is the purpose of maintaining regular backups on a server?", "answers": { "A": "To reduce energy consumption", "B": "To maintain the availability of the server's data", "C": "To ensure legal compliance", "D": "To keep a record of all user activities" }, "solution": "B" }, { "question": "What does the transposition t = (1, 4, 0, 3, 5, 2) indicate in columnar transposition encryption?", "answers": { "A": "The encryption algorithm used to encrypt the plaintext", "B": "The sequence of substitution steps applied to the plaintext", "C": "The digital signature applied to the plaintext", "D": "The order in which columns of the plaintext are rearranged" }, "solution": "D" }, { "question": "Why is it essential to provide social engineering training to employees?", "answers": { "A": "So employees can report security violations to management", "B": "To show people how to perform a social engineering attack", "C": "None of the above", "D": "To teach people what to look out for" }, "solution": "D" }, { "question": "What is the purpose of information policies within an organization?", "answers": { "A": "To manage employee performance", "B": "To make decisions pertaining to equipment usage", "C": "To document computer security decisions", "D": "To create a computer security program" }, "solution": "C" }, { "question": "What is the first phase in disaster response, involving stabilization of the environment and protection of people?", "answers": { "A": "Response", "B": "Restoration", "C": "Relocation", "D": "Recovery" }, "solution": "A" }, { "question": "What is the primary disadvantage of the newer forensic methodology compared to the older methodology?", "answers": { "A": "Data may be modified during the imaging process", "B": "Inability to access the swap file", "C": "Potential damage to the hard drive", "D": "Volatile sources of information are lost" }, "solution": "D" }, { "question": "What does a layered defense strategy provide in physical security?", "answers": { "A": "Controlling access through different types of encryption methods", "B": "Multiple layers of physical barriers to deny all access", "C": "Enhances access control confidence through some redundancy and expanded protection", "D": "Isolating information systems from external access" }, "solution": "C" }, { "question": "What technology is usually deployed in conjunction with unauthenticated ADS-B to mitigate some of its security vulnerabilities?", "answers": { "A": "Near-Field Communication (NFC).", "B": "General Packet Radio Service (GPRS).", "C": "Long Term Evolution (LTE).", "D": "Multilateration (MLAT)." }, "solution": "D" }, { "question": "What is the primary purpose of intrusion detection systems?", "answers": { "A": "Preventing and responding to unauthorized access attempts", "B": "Filtering spam emails", "C": "Detecting and responding to unauthorized access attempts", "D": "Encrypting network traffic" }, "solution": "C" }, { "question": "What factors should a tester consider when scheduling an attack in the attack phase of a penetration test?", "answers": { "A": "The opportunity to cause maximum damage to the target", "B": "The availability of tools for social engineering", "C": "The probability of getting caught by the target's intrusion response interval", "D": "The amount of time a real adversary can be expected to attempt to penetrate the system" }, "solution": "D" }, { "question": "Which layer of the OSI model facilitates communication between the Physical and Network layers and primarily deals with the media access control (MAC) address?", "answers": { "A": "Transport layer", "B": "Data Link layer", "C": "Session layer", "D": "Network layer" }, "solution": "B" }, { "question": "What is the primary goal of an Information Security Governance strategy?", "answers": { "A": "To minimize the impact of security incidents on the organization", "B": "To obtain senior management commitment and support", "C": "To enforce compliance with information security policies", "D": "To prioritize options to mitigate risks" }, "solution": "B" }, { "question": "What is encryption used for in cybersecurity?", "answers": { "A": "To protect data by converting it into a code that can only be read with a decryption key", "B": "To detect and prevent malware infections", "C": "To optimize network performance", "D": "To track and monitor internet usage" }, "solution": "A" }, { "question": "In infrastructure as code (IaC), which tool is commonly used to automate deployment tasks in a cybersecurity context?", "answers": { "A": "CloudFormation Designer", "B": "PowerShell", "C": "Ansible", "D": "Terraform" }, "solution": "C" }, { "question": "Where are software firewalls usually located?", "answers": { "A": "On every computer", "B": "On routers", "C": "On clients", "D": "On servers" }, "solution": "C" }, { "question": "What can you infer from an attacker inputting the given text into a Search text box and receiving a 'It Worked' pop-up?", "answers": { "A": "The site is vulnerable to SQL injection", "B": "The site is vulnerable to XSS", "C": "The site is vulnerable to parameter tampering", "D": "The site is vulnerable to buffer overflow" }, "solution": "B" }, { "question": "How is the ciphertext obtained in columnar transposition encryption?", "answers": { "A": "By transforming the key with a substitution cipher", "B": "By generating a digital signature for the plaintext", "C": "By hashing the plaintext with a cryptographic hash function", "D": "By applying a permutation to the plaintext" }, "solution": "D" }, { "question": "Which federal government agency has responsibility for ensuring the security of government computer systems that are not used to process sensitive and/or classified information?", "answers": { "A": "Federal Bureau of Investigation", "B": "National Institute of Standards and Technology", "C": "National Security Agency", "D": "Secret Service" }, "solution": "B" }, { "question": "Which version of IIS is commonly encountered in the wild for Windows Server 2008?", "answers": { "A": "IIS 6.0", "B": "IIS 10.0", "C": "IIS 7.0", "D": "IIS 8.0" }, "solution": "C" }, { "question": "What are the two main types of rootkits?", "answers": { "A": "Phishing and ransomware rootkits", "B": "Trojan and worm rootkits", "C": "Adware and spyware rootkits", "D": "User-mode rootkits and kernel-mode rootkits" }, "solution": "D" }, { "question": "What does the acronym 'SSL' stand for in the context of web security?", "answers": { "A": "Software Safety Layer", "B": "Secure Socket Layer", "C": "System Security Language", "D": "Strong Server Login" }, "solution": "B" }, { "question": "What is the purpose of a firewall in the context of cybersecurity?", "answers": { "A": "To detect and remove viruses", "B": "To encrypt data", "C": "To filter network traffic", "D": "To prevent physical theft of devices" }, "solution": "C" }, { "question": "What type of processing does serverless computing typically use?", "answers": { "A": "Parallel", "B": "Event‐driven", "C": "Functional", "D": "Procedural" }, "solution": "B" }, { "question": "Which type of attack involves someone looking through a company's trash to obtain sensitive information?", "answers": { "A": "Dumpster diving", "B": "Phishing", "C": "Hacking", "D": "Browsing" }, "solution": "A" }, { "question": "What method of cryptography uses two related keys for encryption and decryption?", "answers": { "A": "RSA (Rivest‐Shamir‐Adleman)", "B": "SHA (Secure Hash Algorithm)", "C": "Symmetric key cryptography", "D": "Asymmetric key cryptography" }, "solution": "D" }, { "question": "What is one of the most common misconceptions regarding security and IT professionals?", "answers": { "A": "IT professionals are not required to have in-depth security knowledge", "B": "Certifications are the most reliable indicators of an individual's true capabilities", "C": "IT professionals can figure out anything when it comes to security", "D": "Technical infrastructure remains static; therefore, IT training remains relevant over time" }, "solution": "C" }, { "question": "What is the IBM KryptoKnight system designed to support?", "answers": { "A": "Computers with limited security capabilities", "B": "Computers with widely varying computational capabilities", "C": "Only computers with high computational capabilities", "D": "Only computers with low computational capabilities" }, "solution": "B" }, { "question": "What is the main purpose of a split-split DNS design?", "answers": { "A": "To disable recursive queries from the Internet on name servers", "B": "To issue iterative queries on the internal network", "C": "To prevent simple DNS attacks", "D": "To enable physical separation of DNS servers" }, "solution": "A" }, { "question": "What does WPA3 use to start the authentication and association process between stations and access points?", "answers": { "A": "Separate authentication with encryption", "B": "Simultaneous authentication of equals", "C": "Four-way handshake", "D": "Mutual authentication of peers" }, "solution": "B" }, { "question": "Which is a distinguishing characteristic of trusted third-party security systems?", "answers": { "A": "Management of user privileges and roles.", "B": "Issuing and managing encryption keys.", "C": "Providing proof of a principal's identity.", "D": "Use of biometric authentication methods." }, "solution": "C" }, { "question": "In public-key cryptography, which key is kept private and known only to the owner?", "answers": { "A": "Public key", "B": "Shared key", "C": "Private key", "D": "Master key" }, "solution": "C" }, { "question": "What is a crucial factor in developing attack signatures for pattern-matching intrusion detection systems?", "answers": { "A": "Focusing on statistical data analysis", "B": "Identifying harmless network activities", "C": "Having a wide range of potential attack patterns", "D": "Development of signatures that match broader classes of intrusion activity" }, "solution": "D" }, { "question": "What type of tools are generally used for electronic penetrations during a penetration test?", "answers": { "A": "Tools for abusing the operational procedures of the target", "B": "Automated analysis and attack tools", "C": "Social engineering tools", "D": "Tools for exploiting weaknesses in physical and process controls" }, "solution": "B" }, { "question": "What is the primary difference between hackers and hacktivists?", "answers": { "A": "Hackers specialize in exploiting technical vulnerabilities, while hacktivists focus on exposing security flaws", "B": "Hackers engage in illegal activities, while hacktivists use legal means to achieve their objectives", "C": "Hackers seek financial gains from their activities, while hacktivists aim to raise awareness about social or political issues", "D": "Hackers target governments and corporations, while hacktivists focus on individual users" }, "solution": "C" }, { "question": "What is the primary advantage of asymmetric encryption over symmetric encryption?", "answers": { "A": "Scalability for large networks.", "B": "Simpler key distribution and management.", "C": "Higher speed of operation.", "D": "Provides nonrepudiation in addition to confidentiality." }, "solution": "D" }, { "question": "Which of the following is true about social engineering attacks?", "answers": { "A": "They exploit human psychology to gain access to sensitive information", "B": "They only occur through email communication", "C": "They are easy to prevent using antivirus software", "D": "They rely solely on technical vulnerabilities" }, "solution": "A" }, { "question": "When a padded cell is used by a network for protection from intruders, which of the following is true?", "answers": { "A": "Padded cells are a form of entrapment.", "B": "The data offered by the padded cell is what originally attracts the attacker.", "C": "Padded cells are used to test a system for known vulnerabilities.", "D": "The intruder is seamlessly transitioned into the padded cell once they are detected." }, "solution": "D" }, { "question": "What is an integral domain in the context of abstract algebra?", "answers": { "A": "A field of elements with two binary operations", "B": "A set of integers under the usual operations of addition and multiplication", "C": "A set of all rational numbers", "D": "A set of elements that satisfy specific axioms including closure under addition and multiplication" }, "solution": "D" }, { "question": "Which technique involves criminals hosting advertisements on their own websites and generating 'fake' clicks to defraud advertisers?", "answers": { "A": "Phishing", "B": "Click fraud", "C": "Ransomware", "D": "Affiliate programs" }, "solution": "B" }, { "question": "What is one of the growing issues in the telecom industry that the PayForIt scheme aims to address?", "answers": { "A": "Protecting customers from social engineering attacks and fraud.", "B": "Reducing customer care issues and promoting customer rights.", "C": "Enabling regular auditing and non-repudiation of call charges.", "D": "Standardizing payment experiences and reducing fraudulent transactions." }, "solution": "D" }, { "question": "Which of the following statements about risk is true?", "answers": { "A": "A qualitative risk analysis should be preferred for assigning monetary values", "B": "Implementation of preventive controls is sufficient for risk mitigation", "C": "Risk is the probability of the exploitation of vulnerabilities by a threat agent", "D": "The risk of an internal security breach by employees is less than that posed by external threats" }, "solution": "C" }, { "question": "Which pair of processes should be separated from each other to manage the stability of the test environment?", "answers": { "A": "Validity and production", "B": "Testing and development", "C": "Validity and security", "D": "Testing and validity" }, "solution": "B" }, { "question": "What is one of the fundamental measures of success for a data warehouse implementation?", "answers": { "A": "New applications use the DW to serve their data requirements.", "B": "Retirement of legacy systems.", "C": "Focusing on ad hoc data mining and periodic reporting.", "D": "Ignoring potential value of external data and text, images, and sound and video." }, "solution": "A" }, { "question": "In the risk management life cycle, which process requires a thorough assessment of potential risks and vulnerabilities to the confidentiality, integrity, and availability of information resources?", "answers": { "A": "Risk analysis", "B": "Risk assessment", "C": "Risk identification", "D": "Risk mitigation" }, "solution": "B" }, { "question": "What is the purpose of the stepping sequence in a cipher machine's breakwheel component?", "answers": { "A": "To synchronize the encryption and decryption processes", "B": "To ensure that the same key is not used for consecutive encryptions", "C": "To generate random keys for encryption", "D": "To determine the position of the rotor for the encryption process" }, "solution": "D" }, { "question": "What kind of vulnerability refers to the insertion of hidden HTML form fields that can be manipulated by users to change prices or access system passwords?", "answers": { "A": "Known Vulnerabilities and Misconfigurations", "B": "Backdoor and Debug Options", "C": "Cross-Site Scripting", "D": "Hidden Fields" }, "solution": "D" }, { "question": "What type of law does not require an act of Congress to implement at the federal level but, rather, is enacted by the executive branch in the form of regulations, policies, and procedures?", "answers": { "A": "Criminal law", "B": "Civil law", "C": "Common law", "D": "Administrative law" }, "solution": "D" }, { "question": "To provide fault tolerance for critical server disks, which control can be used?", "answers": { "A": "Clustering", "B": "RAID", "C": "HA pairs", "D": "Load balancing" }, "solution": "B" }, { "question": "Which book listed plugboard settings used throughout the Japanese network for the PURPLE machine?", "answers": { "A": "Iwakura codebook", "B": "Ko codebook", "C": "Suruga codebook", "D": "Otsu codebook" }, "solution": "D" }, { "question": "What is the best method to prevent social engineering attacks and malware infection?", "answers": { "A": "Deploying physical security controls", "B": "Utilizing advanced encryption techniques", "C": "Conducting regular user education and awareness training", "D": "Implementing biometric authentication" }, "solution": "C" }, { "question": "What is a limitation of early firewalls that only filter web and mail traffic?", "answers": { "A": "They were effective in preventing all types of cyber attacks.", "B": "They were susceptible to targeted attacks from experienced hackers.", "C": "They tended to be bypassed as more applications became web-based.", "D": "They effectively blocked software products from calling home." }, "solution": "C" }, { "question": "Which component of the HVAC system can cause corrosion of electrical connections in high humidity conditions?", "answers": { "A": "Cooling coils", "B": "Heaters", "C": "Air filters", "D": "Air blowers" }, "solution": "A" }, { "question": "What are Remote Procedure Calls (RPCs) primarily used for?", "answers": { "A": "Interprocess semaphores", "B": "Remote method invocation", "C": "Process demand paging", "D": "Interprocess communications" }, "solution": "D" }, { "question": "Which type of intrusion detection system examines its own configuration and reports unauthorized changes to that configuration or critical files?", "answers": { "A": "Statistical anomaly detection", "B": "Network-based", "C": "Pattern-matching", "D": "Host-based" }, "solution": "D" }, { "question": "What property of 'e' makes it efficient for RSA encryption?", "answers": { "A": "It is less than f(n)", "B": "It is relatively prime to f(n)", "C": "It is a prime number", "D": "It has a single 1 bit in its binary representation" }, "solution": "D" }, { "question": "Which technique involves capturing, analyzing, and reporting on the daily happenings in and around the network to identify unusual patterns of activities?", "answers": { "A": "Security policy management", "B": "Intrusion detection", "C": "Vulnerability scanning", "D": "24-hour monitoring and reporting" }, "solution": "B" }, { "question": "Which of the following is the primary goal of encryption in storage area network security?", "answers": { "A": "To ensure confidentiality", "B": "To improve system performance", "C": "To increase data accessibility", "D": "To prevent storage hardware failure" }, "solution": "A" }, { "question": "What will the parameter -n do when used with tcpdump?", "answers": { "A": "Filter traffic based on specific protocols", "B": "Set the capture size", "C": "Enable verbose output", "D": "Suppress name resolution for IP addresses and ports" }, "solution": "D" }, { "question": "Why is information assurance important for all systems that handle national security information?", "answers": { "A": "To ensure non-repudiation and availability of information", "B": "To capture a 'snapshot in time' of business and technology assets", "C": "To support business operations and mitigate risk factors", "D": "To guarantee integrity, availability, and confidentiality of information" }, "solution": "D" }, { "question": "The business continuity committee has developed the business impact analysis (BIA) identified the preventative controls that can be implemented and develop the recovery strategies. Next the committee should develop a contingency plan. All of the following teams should be included in this plan's development to aid in the execution of the final plan except?", "answers": { "A": "Damage assessment team", "B": "Risk management team", "C": "Restoration team", "D": "Salvage team" }, "solution": "B" }, { "question": "Which utility can be used to easily resolve FQDNs into IP addresses on Unix-like systems?", "answers": { "A": "tracert", "B": "fqdn", "C": "dig", "D": "None of the above" }, "solution": "C" }, { "question": "Hashing is often used in forensic analysis. It is used to verify that an exact copy of the original media has been made for examination. Hashes can also help in finding or eliminating some specific files. During forensic analysis which algorithm would you recommend be used for determining accurate copies?", "answers": { "A": "SHA1", "B": "MOS", "C": "Quantum", "D": "SHA2" }, "solution": "D" }, { "question": "What is a primary step in both quantitative and qualitative risk analysis?", "answers": { "A": "Estimating potential losses to assets by determining their value.", "B": "Analyzing potential threats to the assets.", "C": "Assigning a rating to each scenario.", "D": "Performing a risk analysis and safeguard selection." }, "solution": "A" }, { "question": "What is a primary issue related to de-identified medical data used for research purposes?", "answers": { "A": "Risk of individual re-identification by cross-correlating data", "B": "Enhanced privacy protection", "C": "Improved data accuracy", "D": "Prevention of data breaches" }, "solution": "A" }, { "question": "During an operational investigation, what type of analysis might an organization undertake to prevent similar incidents in the future?", "answers": { "A": "Network traffic analysis", "B": "Root cause analysis", "C": "Fagan analysis", "D": "Forensic analysis" }, "solution": "B" }, { "question": "What might indicate potential click fraud to ad networks and advertisers based on user behavior after clicking on an ad?", "answers": { "A": "Conversions rate", "B": "Impressions rate", "C": "Click-through rate", "D": "Bounce rate" }, "solution": "D" }, { "question": "What type of network technology combines multiple individual storage devices into a single consolidated network-accessible storage container?", "answers": { "A": "Microsegmentation Networks", "B": "Virtual SAN (VSAN)", "C": "VXLAN", "D": "Software-defined storage (SDS)" }, "solution": "B" }, { "question": "What is the purpose of the demilitarized zone (DMZ) in network security?", "answers": { "A": "To store encrypted data for secure backup", "B": "To restrict access to internal network resources", "C": "To act as a buffer zone between the internal network and the Internet", "D": "To provide faster internet connection for internal network users" }, "solution": "C" }, { "question": "Which type of security should be used to determine if their communications are secure on the web?", "answers": { "A": "Remote access", "B": "Content filter", "C": "Policies", "D": "Encryption" }, "solution": "D" }, { "question": "In the Dolev-Yao adversary model, what can an adversary do?", "answers": { "A": "Only Eavesdrop and delay", "B": "Only eavesdrop and replay", "C": "Eavesdrop, forge, replay, delay, rush, reorder, delete", "D": "Only eavesdrop" }, "solution": "C" }, { "question": "What is the hardest group to categorize among hackers, being neither good nor bad?", "answers": { "A": "Script kiddies", "B": "Hacktivists", "C": "Gray hats", "D": "Black hats" }, "solution": "C" }, { "question": "What is a necessary condition for the security of the ECIES mechanism?", "answers": { "A": "The public key size must be less than 300 bits", "B": "RSA must be used for encryption", "C": "The private key must be shared with all communication partners.", "D": "The security is based on the difficulty of solving the discrete logarithm problem in the subgroup generated by a point on an elliptic curve." }, "solution": "D" }, { "question": "What method can be used to map out the needs of an organization for a new facility?", "answers": { "A": "Risk analysis", "B": "Critical path analysis", "C": "Inventory", "D": "Log file audit" }, "solution": "B" }, { "question": "Which type of cryptography utilizes a single key for both encrypting and decrypting the data?", "answers": { "A": "Private key cryptography", "B": "Asymmetric cryptography", "C": "Public key cryptography", "D": "Symmetric cryptography" }, "solution": "D" }, { "question": "What is the role of encryption algorithms in protecting software?", "answers": { "A": "To make software development more complex", "B": "To protect copyrighted information from unauthorized access", "C": "To encourage illegal software access and distribution", "D": "To hinder technology advancements in software development" }, "solution": "B" }, { "question": "What are the four things that come together for good security engineering?", "answers": { "A": "Policy, mechanism, assurance, and incentive", "B": "Policy, mechanism, assurance, and safety", "C": "Policy, mechanism, safety, and incentive", "D": "Policy, safety, assurance, and incentive" }, "solution": "A" }, { "question": "What characteristic differentiates land attack from other types of DoS attacks?", "answers": { "A": "It spoofs the source address as the victim's own, leading to repeated acknowledgment attempts.", "B": "It involves manipulating fragmented packets with overlapping offset values.", "C": "It targets a specific service by flooding it with requests until all resources are used up.", "D": "It uses UDP echo requests instead of ICMP." }, "solution": "A" }, { "question": "Which type of proxy operates at OSI layer 7 and offers the highest level of security among the mentioned architectures?", "answers": { "A": "Application-Level Gateway", "B": "Circuit-Level Gateway", "C": "Stateful Inspection", "D": "Cutoff Proxy" }, "solution": "A" }, { "question": "Which principle dictates that a subject should be granted only the authorizations necessary to perform its intended tasks?", "answers": { "A": "Coarse Grain Authorization", "B": "Separation of Duties", "C": "Fine Grain Authorization", "D": "Least Privileges" }, "solution": "D" }, { "question": "Which encryption algorithm is recommended for IKE and IPsec?", "answers": { "A": "Blowfish with 128-bit keys", "B": "AES-CBC with 256-bit keys", "C": "3DES with SHA-1", "D": "AES-GCM with 128-bit keys" }, "solution": "D" }, { "question": "What does security awareness training aim to achieve primarily?", "answers": { "A": "Formalizing the implementation of new security technologies.", "B": "Improving security controls and handling of security incidents.", "C": "Making a measurable reduction in unauthorized actions.", "D": "Encouraging better communication among employees." }, "solution": "C" }, { "question": "What would be a disadvantage of deploying a proxy-based firewall?", "answers": { "A": "Proxy-based firewalls cannot block unwanted traffic", "B": "Proxy-based firewalls may not support custom applications", "C": "Proxy-based firewalls do not provide network address translation", "D": "Proxy-based firewalls inspect only to the network layer of the OSI model" }, "solution": "B" }, { "question": "What do XML namespaces provide a way to avoid?", "answers": { "A": "Decryption in XML documents", "B": "Naming conflicts in XML documents", "C": "Data corruption in XML documents", "D": "Encryption in XML documents" }, "solution": "B" }, { "question": "Why is understanding international privacy laws important for organizations transmitting data across borders?", "answers": { "A": "To gain competitive advantage", "B": "To comply with legal requirements and avoid potential legal issues", "C": "To ensure secure data transmission", "D": "To avoid paying taxes in multiple countries" }, "solution": "B" }, { "question": "Which of the following is a key feature of a good block cipher?", "answers": { "A": "Statistically predictable keystream", "B": "Functional simplicity", "C": "Fixed periods without repetition", "D": "Long periods without repetition" }, "solution": "D" }, { "question": "Which term is another name for private key cryptography?", "answers": { "A": "Asymmetric key cryptography", "B": "Single key cryptography", "C": "Shared key cryptography", "D": "Symmetric key cryptography" }, "solution": "D" }, { "question": "Which transport layer protocol provides reliability and error recovery?", "answers": { "A": "UDP", "B": "TCP", "C": "ICMP", "D": "IP" }, "solution": "B" }, { "question": "What aspect of malware ensures the quality improvement of malware?", "answers": { "A": "Providing plaform for sharing malware samples", "B": "Patching vulnerabilities in the first server", "C": "Specialization in key parts of the malware lifecycle", "D": "Exploiting vulnerabilities in the first server" }, "solution": "C" }, { "question": "Why is symmetric key encryption typically used over asymmetric key encryption?", "answers": { "A": "It isn't encumbered with patents.", "B": "It's more secure.", "C": "It's faster.", "D": "It's easier to implement." }, "solution": "C" }, { "question": "What is the fundamental principle to mitigate cybersecurity risks associated with third-party software or hardware?", "answers": { "A": "Regular security patching", "B": "Network segmentation", "C": "Intrusion Prevention System", "D": "Data encryption" }, "solution": "A" }, { "question": "What technique funnels all traffic back to a single client, allowing sniffing from all connected hosts?", "answers": { "A": "ARP redirection", "B": "ARP partitioning", "C": "ARP flooding", "D": "ARP poisoning" }, "solution": "D" }, { "question": "What kind of insurance provides coverage for damage caused by the explosion of steam boilers, steam pipes, and steam engines?", "answers": { "A": "Boiler and machinery", "B": "Business interruption coverage", "C": "Extra expense coverage", "D": "Valuable papers coverage" }, "solution": "A" }, { "question": "What was introduced in Windows 2000 that can override or complement the access control lists (ACLs) of Windows NT?", "answers": { "A": "Standardized access control tools", "B": "Group policy-based security", "C": "Capability-based access controls", "D": "Integration with Active Directory" }, "solution": "B" }, { "question": "What does ICMP stand for?", "answers": { "A": "Internet Configuration Mode Process", "B": "Internet Control Message Protocol", "C": "Internet Connection Management Protocol", "D": "Internet Configuration Management Protocol" }, "solution": "B" }, { "question": "Which type of risk analysis attempts to assign meaningful numbers to all elements of the risk analysis process?", "answers": { "A": "Quantitative Risk Analysis", "B": "Business Impact Analysis", "C": "Threat Attack Identification", "D": "Qualitative Risk Analysis" }, "solution": "A" }, { "question": "What attack involves placing Unicode in the string to represent dots and slashes, resulting in a directory traversal?", "answers": { "A": "Directory traversal", "B": "Web defacement", "C": "Web cache poisoning", "D": "CSPP (connection string parameter pollution)" }, "solution": "A" }, { "question": "What are some of the considerations one should take into account when selecting a backup generator?", "answers": { "A": "The color of the generator", "B": "The amount of space available for the generator", "C": "The brand of the generator", "D": "The price, how the unit is started, uptime, power output, and fuel source" }, "solution": "D" }, { "question": "What is a key challenge in managing complex intranets and data centers?", "answers": { "A": "Establishing and consistently meeting service-level agreements with end users", "B": "Protecting the wealth of enterprise information and key resources", "C": "Tying together comprehensive system and data center intranet security management", "D": "Effectively managing and maintaining system integrity at all times" }, "solution": "C" }, { "question": "What is the main purpose of cryptanalysis?", "answers": { "A": "To authenticate the sender of encrypted data", "B": "To analyze and break encryption systems", "C": "To decrypt data without authorization", "D": "To securely store encrypted data" }, "solution": "B" }, { "question": "What type of record is associated with each RRset in DNSSEC?", "answers": { "A": "DS", "B": "NSEC", "C": "RRSIG", "D": "DNSKEY" }, "solution": "C" }, { "question": "What is a common method of social engineering used to trick individuals into disclosing personal or sensitive information?", "answers": { "A": "Virus scanning", "B": "Shoulder surfing", "C": "Encryption keys", "D": "Double authentication" }, "solution": "B" }, { "question": "Why is reliable authentication of users and systems a critical feature of secure remote access systems?", "answers": { "A": "To ensure that only authorized individuals and systems can access the network resources", "B": "To exclude the need for logging and auditing of system utilization", "C": "To minimize costs and streamline the implementation process", "D": "To provide access to all network resources without restrictions" }, "solution": "A" }, { "question": "Which is considered a separate utility service and a single point of failure, necessitating redundancy in connectivity options?", "answers": { "A": "Natural gas", "B": "Sewers", "C": "Water", "D": "Internet" }, "solution": "D" }, { "question": "What does the abbreviation 'SDK' stand for in the context of software security?", "answers": { "A": "System Deflection Key", "B": "Software Delegation Kernel", "C": "System Development Key", "D": "Security Development Kit" }, "solution": "D" }, { "question": "Which tool is considered the recognized standard in sniffing applications according to the information provided?", "answers": { "A": "Ettercap", "B": "tcpdump", "C": "Wireshark", "D": "Capsa Network Analyzer" }, "solution": "C" }, { "question": "In cybersecurity, what does the term 'social engineering' refer to?", "answers": { "A": "Enhancing network security through physical barriers", "B": "Creating secure human-computer interface designs", "C": "Automated algorithms to detect intrusions", "D": "Manipulating individuals to divulge confidential information" }, "solution": "D" }, { "question": "In the context of process-to-process authentication, what is the main purpose of XML and tagged languages?", "answers": { "A": "To demonstrate the origin and content of digitally signed transactions", "B": "To define formats for asserting claims of identity and supporting evidence", "C": "To implement access-controlled storage in database managers", "D": "To store and retrieve documents on web servers" }, "solution": "B" }, { "question": "Which program is commonly used to encrypt e-mail messages in UNIX?", "answers": { "A": "Pine", "B": "GnuPG (GPG)", "C": "Crack", "D": "Shred" }, "solution": "B" }, { "question": "Which of the following is NOT a common method of detecting potential security incidents in IT environments?", "answers": { "A": "Updating system security policies to prevent potential incidents", "B": "Intrusion detection and prevention systems that send alerts to administrators", "C": "Automated tools scanning audit logs for predefined events", "D": "End users reporting unusual activity or incidents to IT personnel" }, "solution": "A" }, { "question": "What is the primary goal when controlling access to assets?", "answers": { "A": "Ensure that all subjects are authenticated.", "B": "Ensure that only valid objects can authenticate on a system.", "C": "Preserve confidentiality, integrity, and availability of systems and data.", "D": "Prevent unauthorized access to subjects." }, "solution": "C" }, { "question": "Which tool can passively analyze data packets moving into and out of a network interface?", "answers": { "A": "Packet sniffers", "B": "Network scanners", "C": "Remote administration tools", "D": "Port scanners" }, "solution": "A" }, { "question": "In computer security, what does the principle of assigning each principal a unique identifier help to prevent?", "answers": { "A": "Data breaches", "B": "Malware infections", "C": "Phishing attacks", "D": "Unauthorized access" }, "solution": "D" }, { "question": "Which of these is a reason to use an exploit against a local vulnerability?", "answers": { "A": "Password collection", "B": "Privilege escalation", "C": "Log manipulation", "D": "Pivoting" }, "solution": "B" }, { "question": "What is the primary disadvantage of using secret key encryption?", "answers": { "A": "Key distribution and management", "B": "The need for a large key space", "C": "The complexity of the algorithm", "D": "Lengthy encryption times" }, "solution": "A" }, { "question": "What is the main purpose of encryption in the context of cybersecurity?", "answers": { "A": "To make data accessible only to authorized parties.", "B": "To ensure high-speed communication.", "C": "To increase the size of the data.", "D": "To hide the existence of information." }, "solution": "A" }, { "question": "What is the group containing the 2n! permutations of the elements of Z2,n called?", "answers": { "A": "Permutation group", "B": "Symmetric group", "C": "Cyclic group", "D": "Alternating group" }, "solution": "B" }, { "question": "What does a single quote ('') indicate when used to test for a SQL injection vulnerability?", "answers": { "A": "It determines whether the user input is sanitized properly", "B": "It retrieves all data from the database", "C": "It indicates the protected user input field", "D": "It causes the submission to fail" }, "solution": "A" }, { "question": "Which of the following is a physical threat to information systems?", "answers": { "A": "Social engineering", "B": "Chemical emissions", "C": "Software bugs", "D": "Natural disasters" }, "solution": "D" }, { "question": "Which of the following is a common practice for securing data by converting it into a code that can only be decoded by specific recipients?", "answers": { "A": "Firewall", "B": "Vulnerability", "C": "Phishing", "D": "Encryption" }, "solution": "D" }, { "question": "What type of security threat occurs when an entity successfully pretends to be a different entity?", "answers": { "A": "Insider Threat", "B": "Intimidation", "C": "Incompletion", "D": "Impersonation" }, "solution": "D" }, { "question": "What is the purpose of a Contingency Plan for an information system?", "answers": { "A": "To measure and evaluate system vulnerabilities", "B": "To qualify the risk associated with system vulnerabilities", "C": "To identify critical business operations in case of system failure", "D": "To manage changes to the system" }, "solution": "C" }, { "question": "What is the term used for legal protection granted to individuals who report security vulnerabilities in good faith?", "answers": { "A": "Criminal Liability Insanity", "B": "Vulnerability Equities Process", "C": "Responsible Disclosure", "D": "Equities Process" }, "solution": "C" }, { "question": "Which of the following is a privacy concern related to browser parasites?", "answers": { "A": "All provided answers", "B": "Changing a user’s start page or search page to earn money for every click", "C": "Adding a button or link add-on to the user’s browser to collect information when clicked", "D": "Transmitting the names of the sites the user visits to the owner of the parasites" }, "solution": "A" }, { "question": "What is a fundamental cybersecurity principle for preventing unauthorized access to a network?", "answers": { "A": "Intrusion Prevention System", "B": "Encryption", "C": "Vulnerability Assessment", "D": "Firewall" }, "solution": "D" }, { "question": "What is the primary purpose of updating routing tables and using checksum in a secure network infrastructure?", "answers": { "A": "To improve network speed and performance", "B": "To encrypt all network data", "C": "To track the network usage of each employee", "D": "To protect against the injection of spurious packets and replay attacks" }, "solution": "D" }, { "question": "What is the role of Uncoordinated Frequency Hopping (UFH) in anti-jamming broadcast communication?", "answers": { "A": "To prevent eavesdropping", "B": "To prevent insertion attack", "C": "To provide communication resilience without pre-shared secrets", "D": "To make reassembly of packets possible" }, "solution": "C" }, { "question": "What is the purpose of the ping command in a network environment?", "answers": { "A": "To test connectivity between two computers", "B": "To modify the ARP cache", "C": "To verify the MAC address of a computer", "D": "To determine the DNS server address" }, "solution": "A" }, { "question": "What type of cipher involves using a single secret key for both encryption and decryption?", "answers": { "A": "RSA cipher", "B": "Symmetrical cipher", "C": "AES cipher", "D": "Asymmetrical cipher" }, "solution": "B" }, { "question": "Which physical tampering technique involves penetrating the passivation layer of a smartcard?", "answers": { "A": "Memory linearization", "B": "Fault induction attack", "C": "Probing attack", "D": "Mechanical probing" }, "solution": "C" }, { "question": "What is the primary purpose of Domain Name System (DNS) cache poisoning?", "answers": { "A": "To falsify DNS information used by a client to reach a desired system", "B": "To alter the primary record of a Fully Qualified Domain Name (FQDN) in the zone file on the primary authoritative DNS server", "C": "To provide secure and reliable authentication protection", "D": "To resolve IP addresses into MAC addresses for data transmission" }, "solution": "A" }, { "question": "Which physical security measure provides better identification and control compared to keys and cipher locks?", "answers": { "A": "Mantraps and turnstiles", "B": "Key and cipher locks", "C": "Alarm and motion detection systems", "D": "Smart card access controls" }, "solution": "D" }, { "question": "What is the greatest difficulty in administering military logistics systems with distinct classification levels?", "answers": { "A": "Effectively managing nonmonotonic security levels", "B": "Preventing unauthorized data transfer", "C": "Ensuring strict separation of data between levels", "D": "All of the above" }, "solution": "D" }, { "question": "What is a common protection against DNS spoofing?", "answers": { "A": "Allowing only authorized changes to DNS", "B": "Deploying packet sniffers", "C": "Restricting zone transfers", "D": "Designating static Address Resolution Protocol (ARP) mappings for critical systems" }, "solution": "A" }, { "question": "In cryptography, what is the purpose of a message authentication code (MAC) or digital signature (SIG)?", "answers": { "A": "To prevent unauthorized access to data transmissions.", "B": "To establish the authenticity of participants in a transaction.", "C": "To generate random keys.", "D": "To ensure the confidentiality of data." }, "solution": "B" }, { "question": "What is the preferred method of implementing field security in the context of PeopleSoft?", "answers": { "A": "Implementing field security through a third-party application", "B": "Deactivating field security", "C": "Duplicating a panel, removing the sensitive field from the new panel, and securing access through panel security to these panels", "D": "All of the above" }, "solution": "C" }, { "question": "Which program could be used to perform spoofing attacks and also supports plugins?", "answers": { "A": "fragroute", "B": "Ettercap", "C": "sslstrip", "D": "arpspoof" }, "solution": "B" }, { "question": "What is a risk trigger?", "answers": { "A": "An event that indicates that a risk has occurred or is about to occur", "B": "An individual who is responsible for alerting the team when a given risk occurs", "C": "A risk response strategy", "D": "A metric used to measure the impact of a risk" }, "solution": "A" }, { "question": "Who is responsible for submitting detailed recommendations on standards with respect to the privacy of individually identifiable health information as per HIPAA?", "answers": { "A": "The President of the United States", "B": "The Department of Homeland Security", "C": "The Surgeon General", "D": "The Secretary of Health and Human Services" }, "solution": "D" }, { "question": "Which type of cable is commonly used for LAN purposes due to its ability to support different speeds and protocols?", "answers": { "A": "Coaxial cable", "B": "Shielded twisted-pair (STP) cable", "C": "Fiber-optic cable", "D": "Unshielded twisted pair (UTP) cable" }, "solution": "D" }, { "question": "Which method can limit the user's ability to install apps from unknown sources on a mobile device?", "answers": { "A": "Application allow listing", "B": "Unrestricted app installation", "C": "Deny by default", "D": "Malware scanning" }, "solution": "A" }, { "question": "Which of the following best describes hashing?", "answers": { "A": "A cryptosystem", "B": "Nonreversible", "C": "A cipher", "D": "An algorithm" }, "solution": "B" }, { "question": "What is the primary goal of multilevel security models?", "answers": { "A": "To ensure data integrity.", "B": "To enforce strict access control based on security clearances.", "C": "To prevent insider threats.", "D": "To minimize overhead in authentication and authorization." }, "solution": "B" }, { "question": "In the context of risk management, what is the primary purpose of business impact analysis?", "answers": { "A": "To evaluate the potential impact of security incidents on daily business operations", "B": "To identify and address vulnerabilities in an organization's network infrastructure", "C": "To predict future threats and attacks through historical data analysis", "D": "To assess the financial implications of a security breach on an organization" }, "solution": "A" }, { "question": "Which of the following is NOT considered a form of data erasure?", "answers": { "A": "Copying over existing data", "B": "Redacting", "C": "Clearing", "D": "Destroying" }, "solution": "B" }, { "question": "What does the acronym IP stand for in the context of cybersecurity?", "answers": { "A": "Internet Protocol", "B": "Information Privacy", "C": "Intrusion Prevention", "D": "Identity Protection" }, "solution": "A" }, { "question": "What information could you get from running p0f?", "answers": { "A": "Uptime", "B": "Remote time", "C": "Local time", "D": "Absolute time" }, "solution": "A" }, { "question": "Why is trust in the user interface important in authentication protocols for smartcards?", "answers": { "A": "User interfaces determine the cost of the protocol.", "B": "User interfaces prevent reflection attacks.", "C": "Trust in the terminals ensures the authenticity of transactions.", "D": "The user interface ensures secure and reliable transactions." }, "solution": "C" }, { "question": "To negotiate encryption keys securely over an unencrypted channel, which two methods are designed to provide this capability?", "answers": { "A": "Blowfish", "B": "AES", "C": "HMAC", "D": "Diffie-Hellman" }, "solution": "D" }, { "question": "What does the principle of 'least privilege' in cybersecurity refer to?", "answers": { "A": "Allowing all users access to all resources", "B": "Granting administrators unrestricted access to all resources", "C": "Granting users the minimum level of access required to perform their tasks", "D": "Limiting the number of users accessing the system" }, "solution": "C" }, { "question": "What is the 'original' definition of a hacker?", "answers": { "A": "A person who illegally gains access to computer systems without permission", "B": "A person who is skilled at programming and computer systems", "C": "A person who is dedicated to ethical hacking practices", "D": "A person who uses their technological expertise to help companies and organizations improve their cybersecurity" }, "solution": "B" }, { "question": "The Biba model addresses:", "answers": { "A": "Data disclosure", "B": "Transformation procedures", "C": "Constrained data items", "D": "Unauthorized modification of data" }, "solution": "D" }, { "question": "Which principle is concerned with ensuring that users manipulate data only in restricted ways that preserve database integrity?", "answers": { "A": "Reality checks", "B": "Continuity of operation", "C": "Well-formed transactions", "D": "Reconstruction of events" }, "solution": "C" }, { "question": "What is the primary purpose of incorporating ethics into an organizational policy?", "answers": { "A": "To instill proper computing behavior", "B": "To create awareness of ethical behavior", "C": "To ensure compliance with legal regulations", "D": "To attract potential employees" }, "solution": "A" }, { "question": "What is the concept of the 'Compliance Budget' used to describe?", "answers": { "A": "The amount of time and effort people are willing to spend on non-productive activities", "B": "An organization's annual budget for compliance-related activities", "C": "The balance of organizational compliance with regulatory requirements", "D": "A measure of individuals' willingness to comply with security policies" }, "solution": "A" }, { "question": "Which area is not a part of an effective ITM program?", "answers": { "A": "Audit of the implementation to measure the compliance with industry best practices.", "B": "Implementation and deployment of additional components.", "C": "Administration and support of infrastructure outside the ITM solution.", "D": "Assessments and audits of the ITM infrastructure." }, "solution": "C" }, { "question": "What is the primary difference between a worm and a virus?", "answers": { "A": "A virus can self-propagate", "B": "A virus uses polymorphic code", "C": "A worm can self-propagate", "D": "A worm uses polymorphic code" }, "solution": "C" }, { "question": "What does TCP-level filtering provide that makes it more advantageous than packet filtering?", "answers": { "A": "Ease of maintaining a blacklist", "B": "Ability to block IP spoofing", "C": "Increased speed in filtering malicious traffic", "D": "Additional functionality such as virtual private networking" }, "solution": "D" }, { "question": "What is used to establish an IPsec connection for individual remote hosts?", "answers": { "A": "PEAP", "B": "EAP-TLS", "C": "EAP-SIM", "D": "EAP-OOP" }, "solution": "B" }, { "question": "What is the purpose of Business Continuity Planning (BCP)?", "answers": { "A": "To address security infringements and unauthorized access", "B": "To conduct a risk assessment of the organization", "C": "To enhance the efficiency of business operations", "D": "To prevent disruptions to normal business activity" }, "solution": "D" }, { "question": "What is the primary security goal of configuration management in operations security?", "answers": { "A": "To limit the amount of time that an operator is assigned to perform a security-related task before being moved to a different task", "B": "To ensure that a system is restarted without compromising its required protection scheme after a failure", "C": "To ensure that changes to the system do not unintentionally diminish security", "D": "To protect against both covert storage and covert timing channels" }, "solution": "C" }, { "question": "Why should you not write malware in Python?", "answers": { "A": "There is inadequate library support.", "B": "The Python interpreter may not be available.", "C": "Python is a hard language to learn.", "D": "The Python interpreter is slow." }, "solution": "B" }, { "question": "What is the purpose of XML in managing security information?", "answers": { "A": "To provide a common classification of security information from different products", "B": "To store security-related information in a database", "C": "To determine the amount of data collected and the format of storage", "D": "To analyze and correlate security events across the enterprise" }, "solution": "A" }, { "question": "Which attribute is considered a good metric for security measurement?", "answers": { "A": "Subjective criteria", "B": "Expressed as a cardinal number or percentage", "C": "Inconsistent measurement", "D": "Qualitative labels" }, "solution": "B" }, { "question": "What is the primary concern with the use of bots in online gaming?", "answers": { "A": "Bots provide an unfair advantage and spoil the gameplay experience.", "B": "Bots lead to decreased server performance.", "C": "Bots compromise the security of player data.", "D": "Bots restrict access to players from certain regions." }, "solution": "A" }, { "question": "In many cases traditional laws do not adequately approach computer crimes and their ramifications. Which of the following is one way legal systems have changed to better allow these established rules to be used?", "answers": { "A": "The definition of property has been expanded to include tangible property as in secondary storage devices", "B": "The definition of property has been expanded to include intangible property as in hard drives", "C": "The definition of property has been expanded to include intangible property as in electronic information", "D": "The definition of property has been expanded to include tangible property as in electronic information" }, "solution": "C" }, { "question": "What does the implicit deny feature of a packet filter do?", "answers": { "A": "It inspects all incoming packets", "B": "It automatically denies all incoming packets", "C": "It logs all incoming packets", "D": "It automatically permits all incoming packets" }, "solution": "B" }, { "question": "What is the most effective defense against backdoor programs and Trojan horses on a system?", "answers": { "A": "Only use reputable software from reputable sources.", "B": "Utilizing advanced antivirus software for continuous system monitoring.", "C": "Minimizing user exposure to untrusted programs and being vigilant against potential threats.", "D": "All of the mentioned strategies can assist in preventing possible infections." }, "solution": "D" }, { "question": "What do various laws impose into contracts as a matter of course concerning the quality of goods and services supplied?", "answers": { "A": "Performance standards", "B": "Disclosure terms", "C": "Quality warranties", "D": "Exclusivity clauses" }, "solution": "C" } ] }