Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?

A site that has all necessary PCs, servers, and telecommunications

Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?

Replacing 1's and 0's of data on storage with random or fixed patterns

Software Development Security: What is the purpose of polyinstantiation?

To make a copy of an object and modify the attributes of the second copy

Security Architecture & Engineering: What is an advantage of RSA over DSA?

It can provide digital signature and encryption functionality.

Security and Risk Management: Many privacy laws dictate which of the following rules?

Agencies can't use data for other purposes from what they were collected.

Security Assessment and Training: Synthetic transactions are best described as

A way to test the behavior and performance of critical services

Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?

Cyber Security Agency of Singapore

studbud

(ISC)2 SG-Cybersecurity Quiz 01

14 termsStudBud Administration39 plays

Flashcards14 cardsFPractice quizPHost liveL

Questions 14

Answers

1
IAM: Which item is not part of a Kerberos authentication implementation?
Authentication service
Message authentication code
Users, programs, and services
Ticket granting service
2
Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?
A site that has disk drives, controllers, and tape drives
A site that has all necessary PCs, servers, and telecommunications
A site that has wiring, central air-conditioning, and raised floors
A mobile site that can be brought to the company's parking lot
3
Security Architecture & Engineering: What feature enables code to be executed without the usual security checks?
Race conditions
Temporal isolation
Maintenance hook
Process multiplexing
4
Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?
Removing or reducing magnetic field patterns on disk drives or tapes
Converting 1's and 0's of data with output of a cryptographic function
Replacing 1's and 0's of data on storage with random or fixed patterns
Exposing storage media to caustic/corrosive chemicals to make it unusable
5
Software Development Security: What is the purpose of polyinstantiation?
To make a copy of an object and modify the attributes of the second copy
To create objects that will take on inheritable attributes of the class
To create various objects that will react in various ways to the same input
To restrict lower-level subjects from accessing low-level information
6
Security Architecture & Engineering: What is an advantage of RSA over DSA?
It is a block cipher rather than a stream cipher.
It can provide digital signature and encryption functionality.
It employs a one-time encryption pad.
It uses fewer resources and encrypts faster because it uses symmetric keys.
7
Security and Risk Mgmt: Which factor is the most important item when ensuring security is successful in an organization?
Security awareness of all employees
Relevant security policies and procedures
Effective security controls and implementation methods
Senior management support
8
IAM: Performed with tools that cycle through many possible character, number & symbol combinations to uncover passwords.
Social engineering
Dictionary attacks
Brute-force attacks
Rainbow table
9
Security and Risk Management: Many privacy laws dictate which of the following rules?
Agencies do not need to ensure that the data is accurate.
Agencies need to allow all government agencies access to the data.
Agencies can't use data for other purposes from what they were collected.
Individuals have a right to remove any data they don't want others to know.
10
Hackers from this group declared war on Singapore in 2013 due to a new law on web censorship.
Mad Hatters
Chaos Computer Club
Legion of Doom
Anonymous
11
Asset Security: Which of the following is not addressed by the data retention policy?
For whom data is kept
What data to keep
How long data is kept
Where data is kept
12
Security Assessment and Training: Synthetic transactions are best described as
Real user monitoring (RUM)
A way to test the behavior and performance of critical services
Transactions that fall outside the normal purpose of a system
Transactions synthesized from multiple users' interactions with the system
13
Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?
CYSREN
GovTech Cyber Security Group
Singapore Cybersecurity Consortium
Cyber Security Agency of Singapore
14
Communication & Network Security: Which of the following proxies can't make access decisions based on protocol commands?
Application
Circuit
Stateful
Packet filtering

(ISC)2 SG-Cybersecurity Quiz 01 Flashcards | StudBud

(ISC)2 SG-Cybersecurity Quiz 01

14 termsStudBud Administration39 plays

(ISC)2 SG-Cybersecurity Quiz 01

Flashcards14 cardsFPractice quizPHost liveL

Questions 14

Answers

1
IAM: Which item is not part of a Kerberos authentication implementation?
Authentication service
Message authentication code
Users, programs, and services
Ticket granting service
2
Security Operations: Which best describes a hot-site facility versus a warm- or cold-site facility?
A site that has disk drives, controllers, and tape drives
A site that has all necessary PCs, servers, and telecommunications
A site that has wiring, central air-conditioning, and raised floors
A mobile site that can be brought to the company's parking lot
3
Security Architecture & Engineering: What feature enables code to be executed without the usual security checks?
Race conditions
Temporal isolation
Maintenance hook
Process multiplexing
4
Asset Security: Which of the following best describes the mitigation of data remanence by an overwriting process?
Removing or reducing magnetic field patterns on disk drives or tapes
Converting 1's and 0's of data with output of a cryptographic function
Replacing 1's and 0's of data on storage with random or fixed patterns
Exposing storage media to caustic/corrosive chemicals to make it unusable
5
Software Development Security: What is the purpose of polyinstantiation?
To make a copy of an object and modify the attributes of the second copy
To create objects that will take on inheritable attributes of the class
To create various objects that will react in various ways to the same input
To restrict lower-level subjects from accessing low-level information
6
Security Architecture & Engineering: What is an advantage of RSA over DSA?
It is a block cipher rather than a stream cipher.
It can provide digital signature and encryption functionality.
It employs a one-time encryption pad.
It uses fewer resources and encrypts faster because it uses symmetric keys.
7
Security and Risk Mgmt: Which factor is the most important item when ensuring security is successful in an organization?
Security awareness of all employees
Relevant security policies and procedures
Effective security controls and implementation methods
Senior management support
8
IAM: Performed with tools that cycle through many possible character, number & symbol combinations to uncover passwords.
Social engineering
Dictionary attacks
Brute-force attacks
Rainbow table
9
Security and Risk Management: Many privacy laws dictate which of the following rules?
Agencies do not need to ensure that the data is accurate.
Agencies need to allow all government agencies access to the data.
Agencies can't use data for other purposes from what they were collected.
Individuals have a right to remove any data they don't want others to know.
10
Hackers from this group declared war on Singapore in 2013 due to a new law on web censorship.
Mad Hatters
Chaos Computer Club
Legion of Doom
Anonymous
11
Asset Security: Which of the following is not addressed by the data retention policy?
For whom data is kept
What data to keep
How long data is kept
Where data is kept
12
Security Assessment and Training: Synthetic transactions are best described as
Real user monitoring (RUM)
A way to test the behavior and performance of critical services
Transactions that fall outside the normal purpose of a system
Transactions synthesized from multiple users' interactions with the system
13
Which SG national agency oversees cybersecurity strategy, operations, education, outreach and ecosystem development?
CYSREN
GovTech Cyber Security Group
Singapore Cybersecurity Consortium
Cyber Security Agency of Singapore
14
Communication & Network Security: Which of the following proxies can't make access decisions based on protocol commands?
Application
Circuit
Stateful
Packet filtering