A SCADA system must be secured against cyber threats while ensuring operational reliability. Which gives best protection

Implementing strict network segmentation with firewalls

What could missing logs indicate in a security investigation?

An attacker removed logs to cover their tracks and hide malicious activity.

A company must comply with data sovereignty laws. What is the best way to ensure compliance?

Store data in the country it pertains to

An admin is configuring user permissions to enforce least privilege. Which control provides the best security?

Granting access only to the data and resources needed for a user's job role

A company has a backup generator, but still has downtime switching from main to generator power. What should they add?

UPS devices for critical systems

What is the primary difference between PII (Personally Identifiable Information) and PHI (Protected Health Information)?

PHI is health data, while PII includes personal information

A company performs daily backups but has never tested them. What is the biggest risk of this approach?

The restoration process may fail when needed

How does a password spraying attack avoid account lockouts?

Tries a few common passwords on many accounts

A cloud admin wants to secure a mgmt workstation that controls cloud resources. Which security control is most important

Enforcing least privilege access for administrative tasks

Why is storing passwords in plaintext a major security risk?

Anyone with access to the database can see all stored credentials

An org. wants to prevent employees from accessing an app unless they are in the org. What is the best way to enforce it?

Using geofencing to restrict access based on GPS coordinates

Which backup strategy provides the best balance between recovery time and storage efficiency for a changing database?

Real-time replication with encrypted offsite backups

A company wants to reduce the risk of a database breach exposing all info. Which strategy provides the best protection?

Implementing segmentation to store different types of data separately

IT restores data from offsite backup after ransomware attack, but recent files missing. What backup can prevent this?

Implementing more frequent snapshot-based backups

Which best describes failover in IT infrastructure?

Switching to a backup system after failure

How might an attacker use an account lockout to their advantage?

Input wrong passwords to force logout, call IT for reset

Which of the following BEST describes the concept of obfuscation in cybersecurity?

Scrambling or altering code to make it difficult to analyze

Which of the following best describes a cross-site request forgery (CSRF) attack?

User executes unauthorized actions on a trusted website while authenticated

What is the main goal of a birthday attack?

Finding two different inputs that produce the same hash value

To reduce risk of a vulnerability affecting critical systems, an org. implements platform diversity. How does this help?

Prevents one exploit from compromising all infrastructure

Which of the following BEST ensures data integrity after a sudden power failure?

Journaling before writing data to storage

What security concern does concurrent session usage indicate?

Multiple unauthorized logins from different places means credential theft

Which of the following is an Indicator of Compromise (IOC)?

A sudden spike in read requests to sensitive files

An attacker exploits an IoT thermostat to pivot into a corporate network. Which strategy would mitigate this the best?

Placing IoT devices on an isolated VLAN

Why is an offline brute-force attack more effective than an online one?

Guess passwords without triggering lockouts

Why might an attacker block access to security-related content?

To prevent automated system updates that could remove their access

An org is hardening network infrastructure devices. Which approach provides best protection against unauthorized access?

Using multi-layer authentication and logging for admin access

Which of the following best describes a downgrade attack?

Attacker forces a system to use weaker encryption

A company uses replication for availability, but an attacker corrupts the primary database. What is the big risk here?

Corrupted data will propagate to all replicated copies

Which of the following provides the best overall security for sensitive data.

Encrypting data at rest and in transit

studbud

Application Attacks, Indicators of Malicious Activity, Data Protection Concepts, Resilience

48 termsStudBud Administration9 plays

Imported from external platform

Flashcards48 cardsFPractice quizPHost liveL

Questions 48

Answers

1
A SCADA system must be secured against cyber threats while ensuring operational reliability. Which gives best protection
Implementing strict network segmentation with firewalls
Applying frequent OS updates to SCADA devices
Deploying antivirus software on all industrial controllers
Enabling full remote access for monitoring
2
An org relies on cloud computing and decide to host their services across multiple cloud providers. What is this called?
Multi-cloud system
Load balancing
Site resiliency
High availability
3
What could missing logs indicate in a security investigation?
An administrator manually deleted old logs as part of regular maintenance
An attacker removed logs to cover their tracks and hide malicious activity.
The system was recently rebooted and has not started logging yet
A scheduled backup process moved logs to an archive location
4
Which power backup solution is best for maintaining IT operations during an extended power outage?
Surge suppressor
Onsite generator
Double-conversion UPS
Offline UPS
5
Why is MD5 no longer considered secure for cryptographic hashing?
It requires a secret key to generate a hash
It does not support long hash outputs
Collisions have been found
It is too slow to compute on modern systems
6
A company wants to test its disaster recovery plan without disrupting production. Which method is best?
Failover test
Simulation
Recovery testing
Tabletop exercise
7
A company must comply with data sovereignty laws. What is the best way to ensure compliance?
Encrypt transit data with TLS
Encrypt all stored data
Use geofencing for access
Store data in the country it pertains to
8
An admin is configuring user permissions to enforce least privilege. Which control provides the best security?
Granting access only to the data and resources needed for a user's job role
Using strong password policies with regular expiration requirements
Requiring multi-factor authentication for all logins
Assigning all users administrator rights but monitoring their activities
9
A company needs to handle peak traffic without high off-peak costs. What’s the best solution?
Overprovision physical servers
Hire more support staff
Add fixed database servers
Use cloud-based auto-scaling
10
Which of the following is an example of non-human readable data?
An email containing classified information
A barcode on a shipping label
A customer database stored in CSV format
A company’s financial statements in a PDF file
11
A company has a backup generator, but still has downtime switching from main to generator power. What should they add?
UPS devices for critical systems
Additional fuel storage
Line conditioning equipment
Surge protectors
12
What is the primary difference between PII (Personally Identifiable Information) and PHI (Protected Health Information)?
PII applies only to businesses while PHI applies only to government records
PII refers to financial records, while PHI includes government-issued IDs
PHI is always encrypted, while PII is stored in plaintext.
PHI is health data, while PII includes personal information
13
A company performs daily backups but has never tested them. What is the biggest risk of this approach?
The restoration process may fail when needed
Backups may not include all necessary files
Data recovery may take too long
Offsite backups could be expensive to retrieve
14
How does a password spraying attack avoid account lockouts?
Tries a few common passwords on many accounts
Uses social engineering to obtain user credentials before attempting login
It uses botnets to distribute login attempts across multiple IP addresses
It exploits vulnerabilities in outdated encryption algorithms
15
A cloud admin wants to secure a mgmt workstation that controls cloud resources. Which security control is most important
Enforcing least privilege access for administrative tasks
Deploying a cloud firewall to monitor all outbound traffic
Allowing full internet access for easier troubleshooting
Using shared administrator accounts with complex passwords
16
Why is storing passwords in plaintext a major security risk?
It allows users to easily recover forgotten passwords
It makes password recovery faster for administrators
It ensures that passwords are not affected by hash collisions
Anyone with access to the database can see all stored credentials
17
An org. wants to prevent employees from accessing an app unless they are in the org. What is the best way to enforce it?
Using geofencing to restrict access based on GPS coordinates
Implementing IP-based geographic restrictions
Requiring employees to connect via VPN before accessing the application
Enforcing MFA for all logins
18
Which method best ensures consistent enforcement of security baselines?
Group Policy or MDM
User self-configuration
Annual audits
Manual configuration
19
Which backup strategy provides the best balance between recovery time and storage efficiency for a changing database?
Weekly full backups with daily incremental backups
Daily full backups stored on local servers
Real-time replication with encrypted offsite backups
Monthly full backups with weekly snapshots
20
A company wants to reduce the risk of a database breach exposing all info. Which strategy provides the best protection?
Encrypting the entire database with strong cryptography
Conducting frequent security audits and vulnerability assessments
Using multi-factor authentication for database access
Implementing segmentation to store different types of data separately
21
IT restores data from offsite backup after ransomware attack, but recent files missing. What backup can prevent this?
Storing all backups in an unencrypted format for faster recovery
Implementing more frequent snapshot-based backups
Performing replication instead of traditional backups
Using journaling to log all write operations before storing data
22
Which best describes failover in IT infrastructure?
Switching to a backup system after failure
Distributing traffic across multiple servers
Manually restoring data from backups
Running security tests on production servers
23
What is the best mitigation against privilege escalation attacks?
Implementing strong password policies
Applying patches
Blocking all inbound and outbound network traffic
Disabling cookies and session tracking
24
What best protects data at rest on local servers?
Full-disk encryption
Access control lists
TLS encryption
Network firewalls
25
A company requires a backup site for disaster recovery that mirrors their primary data center. What is the best option?
Hot site
Cold site
Multi-Cloud system
Warm site
26
What strategy will allow for traffic to be distributed among multiple servers, and unresponsive servers will be removed?
Using server clustering to combine multiple servers into a single unit
Deploying a load balancer
Implementing a high-availability (HA) configuration with redundant servers
Configuring a hot site with mirrored infrastructure for failover
27
Which attack exploits a vulnerability in a web server or application to access files outside the intended directory?
Cross-site request forgery (CSRF)
Cross-site scripting (XSS)
Privilege escalation
Directory traversal
28
How might an attacker use an account lockout to their advantage?
Brute force the account after it is locked to extend lock duration
Use lockout events to overload auth server
Modify the account lockout policy to prevent legit users from accessing
Input wrong passwords to force logout, call IT for reset
29
Which of the following BEST describes the concept of obfuscation in cybersecurity?
Using permission restrictions to prevent unauthorized access
Scrambling or altering code to make it difficult to analyze
Encrypting data to make it unreadable without a decryption key
Segmenting sensitive data into multiple secure locations
30
Which of the following best describes a cross-site request forgery (CSRF) attack?
An attacker injects JavaScript to steal cookies from a victim’s browser
A web server displays files outside its intended directory
User executes unauthorized actions on a trusted website while authenticated
A hacker intercepts network traffic to capture login credentials.
31
What is the main goal of a birthday attack?
Exploiting weak encryption keys to decrypt secure messages
Downgrading encryption protocols to weaker versions
Using social engineering to obtain cryptographic keys
Finding two different inputs that produce the same hash value
32
Which strategy BEST ensures scalable IT infrastructure?
Max out physical server specs
Limit concurrent users
Max out physical server specs
Use database clustering
33
To reduce risk of a vulnerability affecting critical systems, an org. implements platform diversity. How does this help?
It reduces operational costs
Prevents one exploit from compromising all infrastructure
Improves performance by balancing workloads across different platforms
Ensure compatibility across different platforms without additional testing
34
Which of the following BEST ensures data integrity after a sudden power failure?
Journaling before writing data to storage
Encrypting all data before writing it to disk
Replicating data across multiple cloud providers
Using full backups instead of incremental backups
35
What security concern does concurrent session usage indicate?
Multiple unauthorized logins from different places means credential theft
A user has forgotten their password and attempted multiple logins
An automated software update is running on the system
The user is working from multiple devices in a secure environment
36
Which of the following is an Indicator of Compromise (IOC)?
A system patch was successfully installed
A sudden spike in read requests to sensitive files
A scheduled backup completed without errors
A user successfully logged in from their usual location
37
An attacker exploits an IoT thermostat to pivot into a corporate network. Which strategy would mitigate this the best?
Applying intrusion detection on the internal network
Using AI-driven anomaly detection
Encrypting all IoT communications
Placing IoT devices on an isolated VLAN
38
Why is an offline brute-force attack more effective than an online one?
Guess passwords without triggering lockouts
Ensures that all password attempts are logged for auditing.
Prevents the need for hashing passwords before storing them.
Reduces the computational resources needed to crack passwords.
39
Why might an attacker block access to security-related content?
To stop legitimate users from accessing online banking services
To redirect security logs to an external server
To trick the user into disabling their firewall
To prevent automated system updates that could remove their access
40
Which testing method sends phishing emails to employees?
Parallel processing
Tabletop exercise
Recovery testing
Simulation
41
Which hardening method best protects mobile devices from unauthorized access?
Network segmentation
Mobile Device Management
Regular OS updates
Installing third-party security apps
42
A company faces frequent short power outages. Which solution provides the best immediate protection against shutdowns?
Standby generator
Line-interactive UPS
Offsite data replication
Onsite fuel storage
43
An org is hardening network infrastructure devices. Which approach provides best protection against unauthorized access?
Disabling all unused network ports and interfaces
Applying security patches as soon as the manufacturer releases them
Using multi-layer authentication and logging for admin access
Encrypting administrative sessions with strong VPN tunnels
44
Which type of data is typically managed by a third party or government authority?
Intellectual property
Trade secrets
Proprietary data
Regulated data
45
Which of the following best describes a downgrade attack?
An attacker modifies a CA's public key to issue fake certificates
A brute-force attack is used to crack an encrypted file's password
Attacker forces a system to use weaker encryption
A cryptographic hash function is reversed
46
A company uses replication for availability, but an attacker corrupts the primary database. What is the big risk here?
Corrupted data will propagate to all replicated copies
The primary database will remain unaffected
Replication will prevent any further data corruption
Replication will automatically restore data from backups
47
Which of the following provides the best overall security for sensitive data.
Storing all sensitive data in a single, highly secure database
Restricting access to the data using role-based access controls (RBAC)
Encrypting data at rest and in transit
Using strong password policies and multi-factor authentication
48
A system fails an integrity check against its baseline. What’s the best response?
Ignore if no issues occur
Correct and document the issue
Patch all systems immediately
Disable integrity checks

Application Attacks, Indicators of Malicious Activity, Data Protection Concepts, Resilience Flashcards | StudBud