stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security+ SY0-601 [2]: Architecture and Design Flashcards | StudBud
Explore
/
Security+ SY0-601 [2]: Architecture and Design
Security+ SY0-601 [2]: Architecture and Design
58 terms
·
StudBud Administration
·
1 play
Imported from external platform
Flashcards
58 cards
F
Practice quiz
P
Host live
L
Questions
58
Answers
1
What would meet the requirement if a PII needs physical isolation from an unsecure network?
Airgap
Barricade
Proxy server
VLAN
2
After being fired, an employee makes a false alarm in a broiler room. What would have been targeted to cause the alarm?
Smart watch
Physical access control system
Sensors
Video entryphone
3
What is a good method of securing data for a VoIP system in order to protect audio data from calls?
Quality of Service (QoS)
Secure Real-time Transport Protocol (SRTP)
Session Initiation Protocol Secure (SIPS)
Private Branch Exchange (PBX)
4
An engineer is trying to lure potential attackers by using virtual servers. What did they create?
Honeypot
Biometrics
Honeynet
Mantrap
5
What major advantage does Time-Based One-Time Password (TOTP) have over HMAC-Based One-Time Password (HOTP)?
HOTP is more vulnerable to physical interception.
TOTP adds an expiration time to the token.
TOTP generates longer password hashes.
HOTP does not require a physical device as token.
6
Workload is increasing but you maintain your operations using existing software/ hardware. What allowed this to happen?
Scalability
Elasticity
Availability
Fault tolerance
7
What practice has developers include code into a repository, where they compile and test everytime they check code?
Continuous integration
Waterfall
Agile
Baselining
8
Which System on Chip (SoC) devices were designed initially for education, but are now frequently used for hacking?
FPGA
Arduino
RTOS
Raspberry Pi
9
Availability is to be maintained for authorized users. Which control measure could be implemented?
HVAC
CCTV
Sprinkler system
Cable lock
10
What are some constraints that would affect the security of devices that have operational constraints from an IoT?
Crypto
Range
Implied trust
Authentication
11
What phrase best defines the situation where data is stored on a persistent storage media?
Data in use
Data at rest
Data in transit
Data sovereignty
12
Which should least relevent when installing a biometric recognition system when managing traffic control?
False positive rate or false acceptance rate (FAR)
Throughput (speed)
False negative rate or false rejection rate (FRR)
Crossover error rate (CER)
13
A patch fails to install, giving a long set of numbers "35533ce129738fb447deb9003fd54c17" Why are they important?
It is an SHA256 checksum that confirms authenticity.
It is an MD5 checksum that confirms file integrity.
It is a code signing certificate for authentication and integrity.
It is an SHA256 checksum that confirms file integrity.
14
The best security measure to prevent laptops from being taken off of workstations without permission?
Alarm
Locking cabinets
Lighting
Cable locks
15
What differentiates the RC4 and 3DES ciphers?
RC4 is a stream cipher
3DES is a stream cipher
3DES block sizes are 64-bit
RC4 block sizes are 128 bits
16
A site alternative would be useful in case of a disaster, the company wants to avoid dated hardware. What fits best?
Cold site
Failover
Hot site
Warm site
17
What is being provided if a CDT reduces software development risk and increasing the speed of delivery for the customer?
DevSecOps
Continuous delivery
Continuous integration
Continuous deployment
18
A light source is able to distinguish a unique blood pattern from ones palm to identify them. What does this describe?
Gait Analysis
Signature Recognition
Mantrap
Vascular Biometrics
19
An app adds salt to a password and creates a hash of it in several rounds. What is this known as?
Symmetric encryption
Collision
Random number generator
Key stretching
20
What method could improve app preformance in a client-server by catching deformed input?
Race condition
Code obfuscation
Client side
Server side
21
What system could cause harm to someone if not secured from outside threats!?
Military Drones
Smart cars
Insulin pumps
Smart meters
22
A camera allows entry based on the persons unique walking style. What behavioral biometric pattern is this?
Background Check
Fingerprint Recognition
Vascular Biometrics
Gait Analysis
23
What limitations do conventional desktop systems have over embedded systems?
Upgrade
Cost
Compute
Power
24
A company has multiple physical layers of security, What could provide proof of a persons location and activities?
Proximity Card
Biometrics
Security Guard
Cameras
25
Of the following, which use symmetric algorithms?
AES
3DES
RSA
DSA
26
What RAID combines mirroring and striping and is just a better option for mission critical apps?
RAID-0
RAID-5
RAID-10
RAID-1
27
What topology could be added after you add a web server that both the internal employees and external vendors can enter?
DMZ
Wireless
Guest
Ad hoc
28
Firewalls are added to enhance security for networks and are made by 2 different companies. What is this practice?
Control diversity
Vendor diversity
Active-Passive
Single layer
29
You want to remote single point failure, improve performance, and upgrade subsystems with more than three disks.
RAID-1
Fault Tolerance
RAID-6
RAID-10
30
An organization needs tight control over a portal for cloud-based applications. What cloud offers this structure?
Public
Private
Community
Hybrid
31
A VM is cloned and is set to deploy a new app for company timekeeping. What action was performed?
Differential
Snapshot
Incremental
Full
32
What is the name of the infrastructure that is available for public use?
Hybrid cloud
Community cloud
Private cloud
Public cloud
33
A buffer overflow causes system resources to be exposed, An attacker injects malicious code. What could've caused this?
Poor memory management
Model verification
Stored procedures
Code reuse
34
What parts of a key stretching process are the following?
Salt
Secure Hash Algorithm (SHA)
Random number generator
Collision
35
An attack appears to be happening through a VM, they took control of the host and all the connected VMs. What happened?
VM escape
Type 1
Container virtualization
VM sprawl
36
A CEO wants to prevent corporate emails from giving out PII. What would work best to prevent this form happening?
Implement DLP on the email gateway
Require email encryption
Update computer user policy
Insert a classification marking in the email
37
Which of these provides two-factor authentication?
Performing retina and fingerprint scans
Inserting a Common Access Card (CAC) and entering a PIN
Entering a password and a security question
Logging in using a password on a smart phone with location services enabled
38
Which of these is capable of providing up to 1 Mbps speeds for embedded systems, and compatible with 5G networks?
Zigbee
LTE-M
SIM card
NB-IoT
39
What technique could be used to protect from SQL injection attacks?
Race conditions
Stored procedures
State table
Code obfuscation
40
What would provide an employees a way to authenticate and share files to any client?
Authentication credentials
Security database
Directory services
Distinguished name
41
When naming users accounts, the admin is developing standard naming conventions. Why should they avoid nicknames?
Naming conventions require a combination of alphanumeric characters
Nicknames and common words anonymize users
Naming conventions should follow formalized rules
Too many users or items would have the same names
42
A company doesn't want to use proprietary hardware for routing traffic through virtualization. What is a good solution?
SDN
TPM
VPN
HSM
43
You decide to keep the hard disks drivers of old computers but erase the data. What would work best to do this?
Degaussing
Pulping
Burning
Shredding
44
To save costs, a business outsources its equipment needs, and is paying by the item. This is what cloud service is it?
SaaS
Hybrid
PaaS
IaaS
45
Why does a browser not support DHE if a TLS connection is being established?
RSA
AES128
MDA
Ephemeral key
46
Which of these should be considered when determining efficacy rates of biometric pattern suitability?
FRR
FAR
CER
RoR
47
What is some concerns when it comes to using fingerprint scanning as a form of biometric identification?
Ease of spoofing
Surfaces must be clean and dry
High expense of installation
Revocability of credentials
48
Which of the secure coding methods makes it more challenging for an attacker to read the code?
Encryption
Obfuscation
Stored procedure
Input validation
49
Of the following, which use asymmetric algorithms?
3DES
RSA
DSA
AES
50
The ability of a system to change in response to demands by adding and removing resources as necessary?
Redundancy
Containerization
Scalability
Elasticity
51
What other physical security method could you use to prevent unauthorized entry to the building?
Locking cabinets
HVAC
Lighting
Fire suppression
52
What is a method of securing sensitive information, that doesn't require a mathmatical process?
Tokenization
SSL Accelerator
Code obfuscation
Full Disk Encryption
53
Employees must pass through a turnstile, one at a time, using a badge. What is this physical security?
Mantrap
Tailgating
Biometrics
Honeypot
54
What's name of the platform's infrastructure that combines public and private resources?
Private
Public
Hybrid
Community
55
Devices that are placed in specific locations to pull data towards the center of an environment provides what benefits?
Prioritization of data
Minimal latency
Enhanced security
Cost
56
The removable device that, when attached, facilitates the generation, management, and storage of cryptographic keys.
TPM
SoC
Hardware root of trust
HSM
57
We need more cloud services that include servers, storage, and databases. What service type is best for this?
PaaS
SECaaS
SaaS
IaaS
58
One web server is in use, with multiple app servers handling large processes. What is currently in use?
Load balancing
Clustering
Single point of failure
Network interface card (NIC) teaming
