stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CSX PRACTICE QUIZ Flashcards | StudBud
Explore
/
CSX PRACTICE QUIZ
CSX PRACTICE QUIZ
25 terms
·
StudBud Administration
·
12 plays
CYBERSECURITY FUNDAMENTALS PRACTICE QUIZ
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Maintaining a high degree of confidence regarding the integrity of evidence requires a(n):
Sworn statement
Chain of custody
Power of attorney
Affidavit
2
An interoperability error is what type of vulnerability?
Process
Technical
Emergent
Organizational
3
Risk assessments should be performed:
When a vulnerability is discovered
On a regular basis
At the start of a program
When an asset changes
4
A passive network hub operates at which layer of the OSI model?
Transport
Data Link
Network
Physical
5
What kind of anti-malware program evaluates system processes based on their observed behaviors?
Heuristic
Signature-based
Stateful
Polymorphic
6
Where should an organization’s network terminate virtual private network (VPN) tunnels?
At the destination system, to prevent loss of confidentiality
At a dedicated “honey pot” system in the demilitarized zone (DMZ)
At the perimeter, to allow for effective internal monitoring
At an interior router, to reduce network traffic congestion
7
Which cybersecurity principle is most important when attempting to trace the source of malicious activity?
Integrity
Availability
Nonrepudiation
Confidentiality
8
A firewall that tracks open connection-oriented protocol sessions is said to be:
State-sponsored
Stated
Stateless
Stateful
9
Virtual systems should be managed using a dedicated virtual local area network (VLAN) because:
VLAN encryption provides a double layer of protection for virtual system
Segregation of management traffic and use traffic improves performance
Network topologies do not always identify the locations of virtual servers
Insecure protocols could result a compromise of privileged user credentials
10
A cybersecurity architecture designed around the concept of a perimeter is said to be:
Data-centric
System-centric
Integrated
User-centric
11
Which of the following offers the strongest protection for wireless network traffic?
Wired Equivalent Protection 128-bit (WEP-128)
Wireless Protected Access-Advanced Encryption Standard (WPA-AES)
Wireless Protected Access 2 (WPA2)
Wireless Protected Access-Temporary Key Integrity Protocol (WPA-TKIP)
12
During which phase of the six-phase incident response model is the root cause determined?
Eradication
Recovery
Identification
Containment
13
The attack mechanism directed against a system is commonly called a(n):
Vulnerability
Attack Vector
Exploit
Payload
14
Outsourcing poses the greatest risk to an organization when it involves:
Core business functions
Business support services
Cybersecurity capabilities
Technology infrastructure
15
A segmented network:
Offers defense in depth superior to a concentric-layers model
Delivers superior performance for internal applications
Maximizes the delay experienced by an attacker
Consists of two or more security zones
16
BCPs associated with organizational information systems should be developed primarily on the basis of:
Business needs
Available resources
Projected costs
Levels of effort
17
Under the US-CERT model for incident categorization, a CAT-3 incident refers to which of the following?
Malicious code
Denial of service (DoS)
Investigation
Improper usage
18
Updates in cloud-computing environments can be rolled out quickly because the environment is:
Secure
Distributed
Diversified
Homogeneous
19
A business continuity plan (BCP) is not complete unless it includes:
Network diagrams
Detailed procedures
Critical processes
Dedicated resources
20
In practical applications:
Symmetric key encryption is used only for short messages
Asymmetric key encryption is used to securely obtain symmetric keys
Asymmetric key encryption is used in cases where speed is important
Symmetric key encryption is used to securely distribute asymmetric keys
21
Which of the following interpret requirements and apply them to specific situations?
Procedures
Standards
Policies
Guidelines
22
Securing Supervisory Control and Data Acquisition (SCADA) systems can be challenging because they:
Operate in specialized environments and have non-standard design elements
Cannot be replaced due to aging infrastructure and the complexity
Subject to specialized requirements establish for national security systems
Support critical infra processes for any risk of compromise is unacceptable
23
During which phase of the system development lifecycle (SDLC) should security first be considered?
Design
Implementation
Analysis
Planning
24
Who has the greatest influence over access security in a password authentication environment?
Users
Security managers
System administrators
Business executives
25
Which two factors are used to calculate the likelihood of an event?
Threat and vulnerability
Asset count and asset value
Threat and asset count
Vulnerability and asset value