Security Architecture & Engineering: What is an advantage of RSA over DSA?

It can provide digital signature and encryption functionality.

Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?

Replacing 1's and 0's of data on storage with random or fixed patterns

Security and Risk Management: Many privacy laws dictate which of the following rules?

Agencies can't use data for other purposes from what they were collected.

Software Development Security: What is the purpose of polyinstantiation?

To make a copy of an object and modify the attributes of the second copy

Security Assessment and Training: Synthetic transactions are best described as

A way to test the behavior and performance of critical services

Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?

A site that has all necessary PCs, servers, and telecommunications

Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?

Cyber Security Agency of Singapore

studbud

(ISC)2 SG-Cybersecurity Quiz 01

14 termsStudBud Administration39 plays

Flashcards14 cardsFPractice quizPHost liveL

Questions 14

Answers

1
IAM: Performed with tools that cycle through many possible character, number & symbol combinations to uncover passwords.
Dictionary attacks
Brute-force attacks
Social engineering
Rainbow table
2
Security Architecture & Engineering: What is an advantage of RSA over DSA?
It can provide digital signature and encryption functionality.
It is a block cipher rather than a stream cipher.
It employs a one-time encryption pad.
It uses fewer resources and encrypts faster because it uses symmetric keys.
3
Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?
Removing or reducing magnetic field patterns on disk drives or tapes
Converting 1's and 0's of data with output of a cryptographic function
Replacing 1's and 0's of data on storage with random or fixed patterns
Exposing storage media to caustic/corrosive chemicals to make it unusable
4
Security and Risk Mgmt: Which factor is the most important item when ensuring security is successful in an organization?
Security awareness of all employees
Effective security controls and implementation methods
Relevant security policies and procedures
Senior management support
5
Security and Risk Management: Many privacy laws dictate which of the following rules?
Agencies can't use data for other purposes from what they were collected.
Individuals have a right to remove any data they don't want others to know.
Agencies need to allow all government agencies access to the data.
Agencies do not need to ensure that the data is accurate.
6
Security Architecture & Engineering: What feature enables code to be executed without the usual security checks?
Temporal isolation
Race conditions
Maintenance hook
Process multiplexing
7
Software Development Security: What is the purpose of polyinstantiation?
To create objects that will take on inheritable attributes of the class
To make a copy of an object and modify the attributes of the second copy
To restrict lower-level subjects from accessing low-level information
To create various objects that will react in various ways to the same input
8
Security Assessment and Training: Synthetic transactions are best described as
Transactions synthesized from multiple users' interactions with the system
Real user monitoring (RUM)
Transactions that fall outside the normal purpose of a system
A way to test the behavior and performance of critical services
9
IAM: Which item is not part of a Kerberos authentication implementation?
Users, programs, and services
Authentication service
Message authentication code
Ticket granting service
10
Asset Security: Which of the following is not addressed by the data retention policy?
For whom data is kept
Where data is kept
What data to keep
How long data is kept
11
Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?
A site that has disk drives, controllers, and tape drives
A site that has wiring, central air-conditioning, and raised floors
A mobile site that can be brought to the company's parking lot
A site that has all necessary PCs, servers, and telecommunications
12
Hackers from this group declared war on Singapore in 2013 due to a new law on web censorship.
Legion of Doom
Anonymous
Chaos Computer Club
Mad Hatters
13
Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?
GovTech Cyber Security Group
Cyber Security Agency of Singapore
Singapore Cybersecurity Consortium
CYSREN
14
Communication & Network Security: Which of the following proxies can't make access decisions based on protocol commands?
Stateful
Circuit
Packet filtering
Application

(ISC)2 SG-Cybersecurity Quiz 01 Flashcards | StudBud

(ISC)2 SG-Cybersecurity Quiz 01

14 termsStudBud Administration39 plays

(ISC)2 SG-Cybersecurity Quiz 01

Flashcards14 cardsFPractice quizPHost liveL

Questions 14

Answers

1
IAM: Performed with tools that cycle through many possible character, number & symbol combinations to uncover passwords.
Dictionary attacks
Brute-force attacks
Social engineering
Rainbow table
2
Security Architecture & Engineering: What is an advantage of RSA over DSA?
It can provide digital signature and encryption functionality.
It is a block cipher rather than a stream cipher.
It employs a one-time encryption pad.
It uses fewer resources and encrypts faster because it uses symmetric keys.
3
Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?
Removing or reducing magnetic field patterns on disk drives or tapes
Converting 1's and 0's of data with output of a cryptographic function
Replacing 1's and 0's of data on storage with random or fixed patterns
Exposing storage media to caustic/corrosive chemicals to make it unusable
4
Security and Risk Mgmt: Which factor is the most important item when ensuring security is successful in an organization?
Security awareness of all employees
Effective security controls and implementation methods
Relevant security policies and procedures
Senior management support
5
Security and Risk Management: Many privacy laws dictate which of the following rules?
Agencies can't use data for other purposes from what they were collected.
Individuals have a right to remove any data they don't want others to know.
Agencies need to allow all government agencies access to the data.
Agencies do not need to ensure that the data is accurate.
6
Security Architecture & Engineering: What feature enables code to be executed without the usual security checks?
Temporal isolation
Race conditions
Maintenance hook
Process multiplexing
7
Software Development Security: What is the purpose of polyinstantiation?
To create objects that will take on inheritable attributes of the class
To make a copy of an object and modify the attributes of the second copy
To restrict lower-level subjects from accessing low-level information
To create various objects that will react in various ways to the same input
8
Security Assessment and Training: Synthetic transactions are best described as
Transactions synthesized from multiple users' interactions with the system
Real user monitoring (RUM)
Transactions that fall outside the normal purpose of a system
A way to test the behavior and performance of critical services
9
IAM: Which item is not part of a Kerberos authentication implementation?
Users, programs, and services
Authentication service
Message authentication code
Ticket granting service
10
Asset Security: Which of the following is not addressed by the data retention policy?
For whom data is kept
Where data is kept
What data to keep
How long data is kept
11
Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?
A site that has disk drives, controllers, and tape drives
A site that has wiring, central air-conditioning, and raised floors
A mobile site that can be brought to the company's parking lot
A site that has all necessary PCs, servers, and telecommunications
12
Hackers from this group declared war on Singapore in 2013 due to a new law on web censorship.
Legion of Doom
Anonymous
Chaos Computer Club
Mad Hatters
13
Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?
GovTech Cyber Security Group
Cyber Security Agency of Singapore
Singapore Cybersecurity Consortium
CYSREN
14
Communication & Network Security: Which of the following proxies can't make access decisions based on protocol commands?
Stateful
Circuit
Packet filtering
Application