stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Site Security / Vulnerabilities Flashcards | StudBud
Explore
/
Site Security / Vulnerabilities
Site Security / Vulnerabilities
11 terms
·
StudBud Administration
·
29 plays
Imported from external platform
Flashcards
11 cards
F
Practice quiz
P
Host live
L
Questions
11
Answers
1
Which of the following best describes a supply chain risk in IT?
Exploitation of vulnerabilities in third-party software
Insider threats from employees
Attacks on cloud infrastructure
Network congestion due to high traffic
2
Which of the following is used to assess the severity of vulnerabilities in software, by grading the output test?
CVE
ISAC
CVSS
OSINT
3
What is the primary purpose of asset tracking in IT management?
Controlling user access to the network
Monitoring software updates on devices
Keeping an inventory of hardware and software assets
Backing up critical data automatically
4
What is the main difference between snapshots and images in system backups?
Images always use more storage than snapshots
Images store changes; snapshots store everything
Snapshots save the system state; images create a full copy
Snapshots are for long-term; images are temporary
5
What is a key benefit of asset inventory monitoring and network scanning?
Identifying and tracking all connected devices
Automating software development processes
Restricting user permissions on applications
Enhancing physical security measures
6
Which of the following best differentiates XSS (Cross-Site Scripting) from CSRF (Cross-Site Request Forgery)?
XSS injects scripts, CSRF uses user accounts
XSS is server-side, CSRF is client-side
XSS causes data breaches, CSRF causes congestion
XSS exploits servers, CSRF targets clients
7
What is a key point of relying on a single highly trained IT staff member?
Reduced downtime due to expertise
Stronger role specialization
Improved team collaboration
Loss of critical knowledge if they leave
8
Which of the following best describes a race condition in software or systems?
A condition where system processes complete in a linear sequence
A method of allocating resources evenly across multiple users
A condition where system processes complete out of a linear sequence
A type of data encryption used to protect communications
9
Which of the following is primarily used to identify security weaknesses in a system?
Threat scanning
Vulnerability scanning
Antivirus software
Firewall configuration
10
What is the primary difference between a honeypot and a honeynet?
Honeynets are on production networks, honeypots are isolated
Honeynet is a single system, honeypot is multiple
Honeypots track malware, honeynets track traffic
Honeypot is a single system, honeynet is multiple
11
What is the primary goal of high availability in IT?
Ensure continuous service and minimize downtime
Enhance data redundancy for backups
Improve system scalability under load
Optimize resource utilization for cost efficiency