SEC+ 701 Big review

Question 1

Which of the following answers refers to a NIST's voluntary framework outlining best practices for computer security?

Accepted Answer

CSF

Question 2

Which of the following is an entity that accepts and validates information contained within a request for a certificate?

Accepted Answer

Registration authority

Question 3

The AAA security architecture, the process of tracking accessed services as and amount of consumed resources is called:

Accepted Answer

Accounting

Question 4

A mandatory IT security and risk management framework for U.S. federal government developed by NIST is known as:

Accepted Answer

RMF

Question 5

Which of the following answers refers to a data storage device equipped with hardware-level encryption functionality?

Accepted Answer

SED

Question 6

In the AAA security architecture, the process of granting or denying access to resources is known as:

Accepted Answer

Authorization

Question 7

Which type of user account violates the concept of non-repudiation?

Accepted Answer

Shared account

Question 8

In the certificate authority trust model known as a hierarchy, where does trust start?

Accepted Answer

Root CA

Question 9

An attacker has circumvented a web-based application to send commands directly to a database. What type of attack?

Accepted Answer

SQL injection

Question 10

Which of the following regulates personal data privacy of the European Union (EU) citizens?

Accepted Answer

GDPR

Question 11

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Accepted Answer

Bluejacking

Question 12

Company requires individuals to use their personal phones for work purposes? Deployment method?

Accepted Answer

BYOD

Question 13

What is the typical use of a public key?

Accepted Answer

Data encryption

Question 14

An SMTP server is not properly and securely configured, it can used maliciously as an SMTP relay agent. Type of Attack?

Accepted Answer

Spamming

Question 15

Which of the following answers refers to a deprecated wireless authentication protocol developed by Cisco?

Accepted Answer

LEAP

Question 16

What must be protected to maintain the security and benefit of an asymmetric cryptographic solution?

Accepted Answer

Private Keys

Question 17

A technique that allows to recover changes that occurred since the last backup in the event of a system crash is:

Accepted Answer

Journaling

Question 18

Hierarchical system for the creation, management, storage, distribution, revocation of digital certificates is known as

Accepted Answer

PKI

Question 19

Which of the following is a method of implementing security controls?

Accepted Answer

Managerial controls

Question 20

Which of the terms listed below can be used to describe the basic principles of information security?

Accepted Answer

CIA

Question 21

Which of the following is the first step in the Waterfall application development model?

Accepted Answer

Requirements

Question 22

What is a honeynet in the context of cybersecurity?

Accepted Answer

A network of honeypots

Question 23

An ISO/IEC standard defining requirements for information security management systems is known as:

Accepted Answer

ISO/IEC 27001

Question 24

Which of the answers listed below best describes the characteristics of a public-private key pair?

Accepted Answer

A pair of keys where 1 is used for encryption and the other for decryption

Question 25

The purpose of PCI DSS is to provide protection for:

Accepted Answer

Credit cardholder data

Question 26

The following is a policy that defines appropriate and inappropriate usage of company resources, assets, and etc?

Accepted Answer

Acceptable use policy (AUP)

Question 27

When is a BCP or DRP design and development actually completed?

Accepted Answer

Never

Question 28

Which part of the AAA security architecture deals with the verification of the identity of a person or process?

Accepted Answer

Authentication

Question 29

The success of asymmetric encryption is MOST dependent upon which of the following?

Accepted Answer

The secrecy of the key

Question 30

Which of the following best applies to the concept of non-repudiation?

Accepted Answer

Digital certificate

Question 31

Which malicious actors are likely to show great interest in another country's energy infrastructure?

Accepted Answer

State actors

Question 32

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Accepted Answer

Bluejacking

Question 33

Which of the answers listed below refers to a deprecated TLS-based method for secure transmission of email messages?

Accepted Answer

SMTPS

Question 34

Which alternate site allows for the fastest disaster recovery?

Accepted Answer

Hot site

Question 35

Which of the following answers refers to an obsolete protocol used for secure data transfer over the web?

Accepted Answer

SHTTP

Question 36

An MS Windows component that enables encryption of individual files is called:

Accepted Answer

EFS

Question 37

What is the name of a network protocol that secures web traffic via SSL/TLS encryption?

Accepted Answer

HTTPS

Question 38

An attacker has gained access to the administrator's login credentials. Which type of attack has MOST likely occurred?

Accepted Answer

Password cracking

Question 39

Which protocol does HTTPS use to offer greater security in web transactions?

Accepted Answer

SSL

Question 40

Which type of attack is WEP extremely vulnerable to?

Accepted Answer

IV attack

SEC+ 701 Big review

Questions 40

SEC+ 701 Big review

Questions 40