stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security + Flashcards | StudBud
Explore
/
Security +
Security +
70 terms
·
StudBud Administration
·
41 plays
Test Prep
Flashcards
70 cards
F
Practice quiz
P
Host live
L
Questions
70
Answers
1
What is the main goal of risk management in cybersecurity?
To eliminate all risks
To ignore low-level risks
To transfer all risks to third parties
To identify, assess, and mitigate risks to acceptable levels
2
Which of the following best describes a botnet?
A type of phishing scam
A network of compromised devices controlled remotely
A security policy violation
A single infected device
3
What does a policy of mandatory vacation help prevent?
Security vulnerabilities
Overpayment
Burnout
Insider threats and fraud
4
Which protocol provides secure remote command-line access?
SSH
Telnet
SNMP
FTP
5
What is the function of a proxy server?
Block all inbound traffic
Perform NAT translation
Encrypt traffic
Act as an intermediary between clients and external servers
6
What is the primary difference between phishing and spear phishing?
Phishing is targeted, spear phishing is broad
Spear phishing is a form of malware
Spear phishing is targeted at specific individuals or organizations
Phishing uses malware, spear phishing uses spyware
7
Which device inspects packets and decides whether to allow or block them based on predefined rules?
Load Balancer
Firewall
Router
Switch
8
What is the function of a privacy impact assessment (PIA)?
To assess network speed and configurations
To identify how personal data is collected, stored, and used
To measure password strength and complexity
To review firewall rules
9
What is separation of duties?
Avoiding teamwork
Dividing tasks to prevent fraud or error
Keeping developers and analysts in separate rooms
Using only one administrator for certain task
10
What does "defense in depth" refer to?
Multiple layers of security controls
A single strong firewall
Firewalls at every workstation
Using deep packet inspection only
11
Which of the following is a common social engineering attack?
Port scanning
Phishing
Buffer overflow
ARP poisoning
12
What is the primary goal of incident response?
To run a vulnerability
To fire employees involved
To install antivirus
To restore normal operations quickly
13
Which term describes ensuring a user is who they say they are?
Authentication
Identification
Authrization
Accounting
14
Which method verifies the integrity of a file?
Encryption
Obfuscation
Hashing
Compression
15
Which of the following is an example of a physical security control?
Security guard
Encryption
Antivirus software
Firewall
16
What is a service-level agreement (SLA)?
A report on server uptime and availability
A disaster recovery plan and implementation
A business email configurations
A contract defining expected service performance
17
What is sandboxing in cybersecurity?
Securing physical perimeters
Password hashing
Isolating code for safe execution
A child-friendly internet filter
18
Which term describes an individual who gains unauthorized access to systems for malicious purposes?
Black-hat hacker
Script kiddie
White-hat hacker
Grey-hat hacker
19
What is the purpose of a data loss prevention (DLP) system?
To encrypt drives
To block malware
To detect phishing
To prevent unauthorized data exfiltration
20
Which of the following best describes the principle of least privilege?
Users have administrative access by default.
Users have access only to the resources necessary for their job functions.
Users can access resources based on their seniority.
Users have access to all system resources.
21
What is a compensating control?
A backup control that is used temporarily
A non-technical control that fixes issues
A control used when the primary control isn’t feasible
A control that costs more than the risk
22
What type of control is a firewall considered?
Technical
Compensating
Physical
Administrative
23
Which of the following occurs first in the incident response lifecycle?
Preperation
Recovery
Containment
Eradication
24
What is the purpose of patch management?
To increase processing speed
To fix bugs and close security vulnerabilities
To improve hardware compatibility with new systems
To manage software licenses during updates
25
What is the purpose of a security awareness training program?
To train employees in physical fitness
To teach employees how to use new software
To educate employees about security policies and best practices
To inform employees about company financials
26
Which tool is commonly used to perform penetration testing?
Snort
Metasploit
Nessus
Wireshark
27
What is the function of a digital signature?
To encrypt data
To provide anonymity
To compress files
To ensure data integrity and authenticate the sender
28
Which term refers to the process of transforming data into an unreadable format to prevent unauthorized access?
Hashing
Compression
Encryption
Tokenization
29
What is the primary goal of a denial-of-service (DoS) attack?
To steal data
To gain unauthorized access
To disrupt the availability of services
To install malware
30
Which type of network device can segment traffic using VLANs?
Repeater
Switch
Bridge
Hub
31
What is a zero-day vulnerability?
A vulnerability that has been patched
A vulnerability that only affects zero-day applications
A vulnerability that is publicly known
A vulnerability that is unknown to the vendor and has no patch
32
Which of the following best describes an audit trail?
List of all vulnerabilities
Chronological record of system activity
Physical surveillance log
List of backup of files
33
Which of the following is an example of a vulnerability?
A DDoS attack
Weak password policies
A phishing attempt
A power outage
34
Which of the following is a preventive control?
Security camera
Incident response plan
Audit log
Firewall
35
What is a rollback plan used for?
After action report that summarizes damage
Reverting to a previous stable state if a change causes issues
Upgrading servers
Backing up personal files
36
What is the main objective of compliance monitoring?
To back up data
To improve network speed
To ensure adherence to policies and regulations
To catch hackers
37
What is the purpose of a honeypot in cybersecurity?
To store backup data
To monitor employee activity
To trap and analyze attackers
To encrypt sensitive information
38
Which tool is used for log collection and analysis in a centralized manner?
Proxy
VPN
SIEM
IDS
39
What type of backup only saves changes made since the last full backup?
Differential
Snapshot
Full
Incremental
40
Which regulation focuses on protecting health information in the U.S.?
FISMA
HIPAA
PCI-DSS
FERPA
41
Which term describes the likelihood that a threat will exploit a vulnerability?
Impact
Risk
Threat
Control
42
Which of the following best describes a VPN?
A tool for blocking websites
A virus scanning tool
A network firewall
An encrypted tunnel between devices over an untrusted network
43
What kind of team performs red team/blue team exercises?
Project Managers
Security Teams
System Admins
Developers
44
What is the purpose of a DMZ (demilitarized zone) in network architecture?
To serve as a backup data center
To restrict user access within a LAN
To isolate critical internal services from the internet
To host encrypted data
45
What is the primary purpose of a security policy?
To describe the company's marketing strategy.
To define acceptable use of resources and procedures for security.
To list all employees and their roles.
To outline the company's financial goals.
46
What is the purpose of port security on a switch?
To ensure VLAN assignments
To allow only specific MAC addresses to connect
To detect malware
To monitor bandwidth usage
47
Which framework is commonly used for cybersecurity risk management in the U.S. government?
COBIT
HIPAA
ISO 27001
NIST
48
What does the principle of non-repudiation ensure?
Users cannot deny their actions
Users are anonymous
Data remains encrypted
Data is always available
49
What is the purpose of a vulnerability scan?
To identify and assess known vulnerabilities
To monitor network traffic
To encrypt sensitive data
To exploit vulnerabilities
50
What does the CIA triad stand for in information security?
Control, Integrity, Access
Control, Inspection, Authorization
Confidentiality, Inspection, Access
Confidentiality, Integrity, Availability
51
What is a jump box (jump server) used for?
Network diagnostics
Scanning for malware
DNS filtering
Remote access to secure systems
52
What is the primary difference between a virus and a worm?
Viruses only affect Windows systems; worms affect all systems
Worms require user interaction; viruses do not.
Worms can self-replicate without user intervention; viruses cannot.
Viruses are standalone programs; worms are not.
53
Which of the following roles is typically responsible for overseeing an organization’s information security program?
CIO
CIO
CISO
CEO
54
What is the difference between a policy and a procedure?
Policies are optional, procedures are mandatory
Policies are detailed, procedures are general
Policies outline “what,” procedures outline “how”
Procedures are legal, policies are not
55
What is a playbook in cybersecurity?
A book of policies
A fictional scenario
A list of contacts
A set of procedures for responding to specific incidents
56
Which concept defines how long it should take to recover a system after an incident?
RTO
RPO
SLA
MOU
57
Which type of malware is designed to replicate itself and spread to other systems?
Spyware
Worm
Rootkit
Trojan
58
Which term refers to the process of ensuring users only access resources necessary for their role?
Security awareness
Role-based access control
Multifactor authentication
Single sign-on
59
Which of the following is used to identify trends and potential issues in security logs?
IPS
Norton Antivirus
SEIM
NIDS
60
What is a false positive in threat detection?
A missed attack
A successful attack with minimal disruptions
An unpatched vulnerability
A legitimate activity flagged as malicious
61
Which attack involves intercepting and potentially altering communication between two parties?
Phishing
Denial-of-service
Man-in-the-middle
SQL injection
62
Which wireless security protocol is considered the most secure today?
WPA3
AES3
WEP
WPA
63
What does GDPR regulate?
Health Care patient rights
Personal Data protection in the EU
Financial reporting
Consumer internet laws
64
What is the primary role of an intrusion detection system (IDS)?
Prevent Attacks
Encrypt data
Block malware
Detect and alert suspicious activity
65
Which document outlines roles, responsibilities, and relationships between organizations?
NDA
PO
SLA
MOU
66
Which of the following best describes a logic bomb?
Unauthorized access to a system
Malware that replicates itself
Malicious code triggered by specific conditions
A type of phishing attack
67
Which of the following technologies is used for network segmentation and isolation?
NAT
DNS
SNMP
VLAN
68
Which of the following is a business continuity plan primarily concerned with?
Reducing operating costs
Training new employees
Stopping a cyberattack
Ensuring continued operations during disruptions
69
What is the purpose of a risk assessment?
To evaluate potential security risks and their impact
To enforce access controls during work hours
To implement firewalls
To identify new employees
70
An attacker captures data packets on a public Wi-Fi network. What kind of attack is this?
Eavesdropping
Logic bomb
Spoofing
Brute force
