stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
SEC+ Thursday Flashcards | StudBud
Explore
/
SEC+ Thursday
SEC+ Thursday
29 terms
·
StudBud Administration
·
54 plays
Imported from external platform
Flashcards
29 cards
F
Practice quiz
P
Host live
L
Questions
29
Answers
1
When a new application is being tested with real data, what phase of the software development life cycle are they using?
Beta Testing
Staging
Initial Design
Proving
2
Mobile phones need to be secure from data theft. Which of the following items should be implemented? Choose 2
Password protected screen saver
MAM
Application Whitelisting
FDE
3
Within a new data center 60% of the server's temperature has risen to high levels, what can mitigate this? choose 2
HVAC
Shielding
Hot and Cold Aisles
Turn power levels down
4
Raid 5 uses a minimum of ___ disks and can suffer the failure of ___ disk/s ?
3
1
4
2
5
You need to choose an operating system with no latency issues, it will be embedded in life saving equipment?
RTOS
MAC OS/X
UNIX BSD 4.4
Windows CE 2.0
6
Attacker launches an attack from a vulnerable virtual machine and attacks the host housing all of the virtual machines?
VM Attack
DDOS
VM Escape
VM Sprawl
7
What safeguards a WLAN to prevent wireless communication from being captured by anyone outside of the company?
Faraday Cage
Radius
Fencing
Yagi Antenna
8
This can prevent IP addresses being offered from rogue access points operating in your network? DHCP __________?
Listening
Waiting
Snooping
Sniping
9
Raid 6 uses a minimum of ___ disks and can suffer the failure of ___ disk/s ?
3
1
4
2
10
Helps mitigate a SQL injection attack? Choose two
Input Validation
Firewall
802.1x
Stored Procedures
11
Which "As a Service" is leasing a software package on the cloud?
PAAS
SAAS
CASB
IAAS
12
A cloud service that gives you the most control.?
IAAS
CASB
SAAS
PAAS
13
What security goals are addressed by a SOE (Standard Operating Environment?) choose two
Reduced support cost
Reduced Attack Surface
Reduced license costs
We can assess security posture against a baseline
14
Unmanaged virtual machines have been added to your virtual network, these consume resources and will not be patched?
Rogue Machines
VM Sprawl
MITM
VM Escape
15
Where will I test my web application prior to deployment, ensuring production systems are isolated?
Sandbox
SCADA network
Containerization
DMZ
16
What type of network would contain ICS and SCADA?
Petrochemical Refinery
E-Commerce Datacenter
Water Treatment Plant
Utilities Provider Customer call center
17
A cloud model that gives you more security as a single tenant?
Community
Public
Private
Hybrid
18
How can a security analyst monitor all network traffic forwarded to one port on the switch? choose 2
Fuzzer
Network Tap
Router
Port Mirror
19
What is the only technique that can be used to detect a zero-day attack?
Anti-Virus
HIDS
Firewall
Baseline Deviation
20
Using a master ______ to roll out desktop computers ensures that they have a consistent security _______. choose two
image
baseline
policy
posture
21
A network load balancer is set to affinity, it sends the client request to the same web server and doesn't balance load?
False
True
22
What is the risk if I deploy IoT using standard settings?
Loss of functionality
Default Username
Default Passwords
Missing features
23
A cloud model where similar companies share the cost of resources?
Public
Hybrid
Private
Community
24
A NAT hides the internal network and protects it from attack by external threats?
True
False
25
Can you patch an immutable system?
True
False
26
You need to choose a development methodology where there are many meetings with the customer during development?
Agile
Cascade
Waterfall
Stream
27
Contractors work for a six month period but we want to create a secure environment for them to work in for that time?
MAC BOOK PRO
VDI
CHROMEBOOKS
CLOUD APPLICATIONS
28
When a company sets up FDE on a laptop, what hardware must be built into the motherboard to store the keys?
UEFI
CPU
TPM
USB
29
A model where the security team uses multiple layers of protection, if one layer fails there is still protection?
Stateful Firewall
Control Diversity
UTM
Defense in Depth