stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security+ day 7 Flashcards | StudBud
Explore
/
Security+ day 7
Security+ day 7
15 terms
·
StudBud Administration
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
What is a key difference between vulnerability scanning and penetration testing?
Vulnerability scanning modifies system configurations
Vulnerability scanning is manual, while penetration testing is autmated
Penetration testing actively exploits vulnerabilities
Penetration testing only detects software updates
2
Which strategy mitigates the risk of unpatched vulnerabilities?
Network segmentation
Threat hunting
Sandboxing
Regular updates and patching
3
Which vulnerability assessment technique simulates an attacker’s actions?
Risk analysis
Log monitoring
Penetration testing
Identity verification
4
Which security measure ensures critical data remains available after a system failure?
Disaster recovery plan
Role-based access control
Antivirus scanning
VPN tunneling
5
Which strategy minimizes downtime by automatically switching to a secondary system?
Firewall rules
Network segmentation
Failover
Load balancing
6
Which tool assists with automated vulnerability identification?
VPN
IDS/IPS
SIEM
Nessus
7
Which type of site security ensures data remains protected even during disasters?
Full-disk encryption
Onsite storage
Content filtering
Offsite backups
8
Which of the following helps organizations recover quickly after a cyber attack?
Security policies
Least privilege model
Incident response plan
Access control lists (ACL)
9
Why is vulnerability prioritization essential?
Limits network segmentation
Prevents compliance-related audits
Ensures patches are deployed effectively
Reduces the need for access control
10
What is a zero-day vulnerability?
A security flaw reported by users
A known bug with an available solution
A misconfiguration within a firewall
A weakness discovered before a patch is available
11
Which Backup type allows for the quickest recovery?
Warm site
Incremental backup
Cold site
Hot site
12
Why is redundancy important in cybersecurity?
It reduces the need for security training
It ensures continuous operation in case of failure
It speeds up software patching
It increases data storage costs
13
Which security practice ensures all assets are assessed for vulnerabilities regularly?
Application whitelisting
Data loss prevention
Traffic shaping
Continuous monitoring
14
Which process identifies security weaknesses before they are exploited?
Vulnerability scanning
Patch management
Privilege escalation
Threat intelligence analysis
15
What is the primary goal of patch management?
Remove unnecessary user accounts
Reduce system vulnerabilities by applying updates
Prevent unauthorized access to encrypted files
Enhance firewall rules for malware detection
