SY0-701 Security #1

Question 1

The AAA security architecture, the process of tracking accessed services as and amount of consumed resources is called:

Accepted Answer

Accounting

Question 2

An SMTP server is not properly and securely configured, it can used maliciously as an SMTP relay agent. Type of Attack?

Accepted Answer

Spamming

Question 3

Which alternate site allows for the fastest disaster recovery?

Accepted Answer

Hot site

Question 4

In the certificate authority trust model known as a hierarchy, where does trust start?

Accepted Answer

Root CA

Question 5

Which of the following regulates personal data privacy of the European Union (EU) citizens?

Accepted Answer

GDPR

Question 6

An MS Windows component that enables encryption of individual files is called:

Accepted Answer

EFS

Question 7

The following is a policy that defines appropriate and inappropriate usage of company resources, assets, and etc?

Accepted Answer

Acceptable use policy (AUP)

Question 8

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Accepted Answer

Bluejacking

Question 9

What must be protected to maintain the security and benefit of an asymmetric cryptographic solution?

Accepted Answer

Private Keys

Question 10

An ISO/IEC standard defining requirements for information security management systems is known as:

Accepted Answer

ISO/IEC 27001

Question 11

The success of asymmetric encryption is MOST dependent upon which of the following?

Accepted Answer

The secrecy of the key

Question 12

A mandatory IT security and risk management framework for U.S. federal government developed by NIST is known as:

Accepted Answer

RMF

Question 13

Which of the terms listed below can be used to describe the basic principles of information security?

Accepted Answer

CIA

Question 14

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Accepted Answer

Bluejacking

Question 15

Which malicious actors are likely to show great interest in another country's energy infrastructure?

Accepted Answer

State actors

Question 16

Which of the answers listed below best describes the characteristics of a public-private key pair?

Accepted Answer

A pair of keys where 1 is used for encryption and the other for decryption

Question 17

Which of the following answers refers to a NIST's voluntary framework outlining best practices for computer security?

Accepted Answer

CSF

Question 18

Which type of attack is WEP extremely vulnerable to?

Accepted Answer

IV attack

Question 19

Which of the following answers refers to an obsolete protocol used for secure data transfer over the web?

Accepted Answer

SHTTP

Question 20

Which of the following answers refers to a deprecated wireless authentication protocol developed by Cisco?

Accepted Answer

LEAP

Question 21

An attacker has gained access to the administrator's login credentials. Which type of attack has MOST likely occurred?

Accepted Answer

Password cracking

Question 22

What is the typical use of a public key?

Accepted Answer

Data encryption

Question 23

Which type of user account violates the concept of non-repudiation?

Accepted Answer

Shared account

Question 24

In the AAA security architecture, the process of granting or denying access to resources is known as:

Accepted Answer

Authorization

Question 25

Which of the following is a method of implementing security controls?

Accepted Answer

Managerial controls

Question 26

Which of the following answers refers to a data storage device equipped with hardware-level encryption functionality?

Accepted Answer

SED

Question 27

What is a honeynet in the context of cybersecurity?

Accepted Answer

A network of honeypots

Question 28

Which protocol does HTTPS use to offer greater security in web transactions?

Accepted Answer

SSL

Question 29

Which of the following best applies to the concept of non-repudiation?

Accepted Answer

Digital certificate

Question 30

What is the name of a network protocol that secures web traffic via SSL/TLS encryption?

Accepted Answer

HTTPS

Question 31

Which of the following is the first step in the Waterfall application development model?

Accepted Answer

Requirements

Question 32

Hierarchical system for the creation, management, storage, distribution, revocation of digital certificates is known as

Accepted Answer

PKI

Question 33

Which of the following is an entity that accepts and validates information contained within a request for a certificate?

Accepted Answer

Registration authority

Question 34

Company requires individuals to use their personal phones for work purposes? Deployment method?

Accepted Answer

BYOD

Question 35

When is a BCP or DRP design and development actually completed?

Accepted Answer

Never

Question 36

A technique that allows to recover changes that occurred since the last backup in the event of a system crash is:

Accepted Answer

Journaling

Question 37

An attacker has circumvented a web-based application to send commands directly to a database. What type of attack?

Accepted Answer

SQL injection

Question 38

Which of the answers listed below refers to a deprecated TLS-based method for secure transmission of email messages?

Accepted Answer

SMTPS

Question 39

Which part of the AAA security architecture deals with the verification of the identity of a person or process?

Accepted Answer

Authentication

Question 40

The purpose of PCI DSS is to provide protection for:

Accepted Answer

Credit cardholder data

SY0-701 Security #1

Questions 40

SY0-701 Security #1

Questions 40