What is the primary goal of incident response?

a) Contain and eradicate threat

What is the primary goal of risk management?

b) Reduce risk to acceptable level

What is the primary function of a DMZ?

b) Provide external access to services

What is the primary goal of confidentiality in information security?

a) Protect data from unauthorized access

What is the purpose of a Business Continuity Plan (BCP)?

a) Ensure business operations during disruption

What is the purpose of risk management?

b) Reduce risk to acceptable level

What is the difference between a standard and a guideline?

a) Standard is mandatory, guideline is optional

What is the primary goal of security awareness training?

a) Educate users on security best practices

What is the purpose of a disaster recovery plan (DRP)?

a) Ensure business operations during disruption

What is the difference between a threat and a vulnerability?

c) Threat is potential harm, vulnerability is weakness

studbud

Security Plus Objectives 701 Difficult

37 termsStudBud Administration68 plays

Difficult questions for CompTIA Security Plus 701 Objectives

Flashcards37 cardsFPractice quizPHost liveL

Questions 37

Answers

1
What type of security control involves physical access?
d) All of the above
a) Technical
c) Physical
b) Administrative
2
What type of backup method stores data off-site?
d) All of the above
b) Off-site backup
c) Cloud backup
a) On-site backup
3
What is the primary goal of incident response?
b) Conduct vulnerability scans
c) Implement security patches
a) Contain and eradicate threat
d) Conduct risk assessments
4
Which security process involves identifying and mitigating risks?
c) Incident response
b) Vulnerability management
a) Risk assessment
d) Compliance testing
5
Which security framework provides guidelines for incident response?
a) NIST 800-61
d) All of the above
b) ISO 27035
c) COBIT
6
What is the purpose of intrusion detection systems (IDS)?
a) Block unauthorized access
d) Conduct vulnerability scans
c) Prevent malware infections
b) Detect potential intrusions
7
What is the primary goal of risk management?
b) Reduce risk to acceptable level
a) Eliminate all risks
c) Transfer risk to third party
d) Ignore risk
8
Which security technology provides intrusion prevention?
IDS
All of the above
Firewall
IPS
9
What is the primary function of a DMZ?
c) Improve network performance
Conduct vulnerability scans
b) Provide external access to services
a) Segment network for security
10
What type of encryption uses a single key?
b) Asymmetric
Digital signature
c) Hashing
a) Symmetric
11
What type of security control involves policies and procedures?
d) All of the above
a) Technical
c) Physical
b) Administrative
12
Which security technology provides email security?
Spam filter
Firewall
All of the above
IDS
13
What type of attack involves exploiting weak passwords?
c) Rainbow table attack
All of the above
b) Dictionary attack
a) Brute force
14
Which security process involves identifying and classifying assets?
c) Incident response
a) Risk management
b) Vulnerability management
d) Asset management
15
What is the purpose of a security policy?
a) Define incident response procedures
b) Establish security roles and responsibilities
c) Provide guidelines for secure configuration
d) All of the above
16
Which security technology provides secure remote access?
SSL/TLS
All of the above
VPN
SSH
17
What is the benefit of conducting regular security audits?
c) Enhances security posture
d) All of the above
a) Identifies vulnerabilities
b) Improves incident response
18
What is the primary goal of confidentiality in information security?
c) Maintain data availability
d) Detect security threats
a) Protect data from unauthorized access
b) Ensure data integrity
19
What is the purpose of a Business Continuity Plan (BCP)?
a) Ensure business operations during disruption
d) Conduct vulnerability scans
c) Implement security patches
b) Conduct risk assessments
20
What type of access control uses user identity?
MAC
DAC
RBAC
ABAC
21
Which security model focuses on mandatory access control?
c) Clark-Wilson
b) Biba
non-interference
a) Bell-LaPadula
22
What is the purpose of risk management?
d) Ignore risk
b) Reduce risk to acceptable level
c) Transfer risk to third party
a) Eliminate all risks
23
What type of security testing involves reviewing logs?
b) Vulnerability scanning
c) Compliance testing
a) Penetration testing
d) Log analysis
24
What is the benefit of implementing a security awareness program?
c) Enhances security posture
b) Improves incident response
d) All of the above
a) Reduces risk
25
What is the difference between a standard and a guideline?
d) Guideline is industry-specific, standard is organization-specific
c) Standard is industry-specific, guideline is organization-specific
b) Guideline is mandatory, standard is optional
a) Standard is mandatory, guideline is optional
26
What is the primary goal of security awareness training?
d) Conduct vulnerability scans
c) Implement security patches
a) Educate users on security best practices
b) Conduct risk assessments
27
What is the purpose of a security policy?
d) All of the above
b) Establish security roles and responsibilities
a) Define incident response procedures
c) Provide guidelines for secure configuration
28
What type of encryption uses public and private keys?
a) Symmetric
c) Hashing
b) Asymmetric
Digital signature
29
What is the purpose of a security information and event management (SIEM) system?
b) Monitor network traffic
d) All of the above
c) Analyze security logs
a) Conduct vulnerability scans
30
What is the benefit of network segmentation?
d) All of the above
b) Reduces risk
c) Enhances security posture
a) Improves performance
31
What is the primary goal of penetration testing?
b) Exploit vulnerabilities
a) Identify vulnerabilities
c) Improve incident response
d) Conduct risk assessments
32
What type of security testing involves evaluating security controls?
a) Penetration testing
c) Compliance testing
b) Vulnerability scanning
d) Log analysis
33
Which security process involves monitoring for potential threats?
c) Incident response
Risk management
b) Vulnerability management
a) Continuous monitoring
34
What is the purpose of a disaster recovery plan (DRP)?
c) Implement security patches
a) Ensure business operations during disruption
b) Conduct risk assessments
Restore IT systems
35
Which security framework provides guidelines for security programs?
a) NIST Cybersecurity Framework
b) ISO 27001
c) COBIT
d) All of the above
36
What is the difference between a threat and a vulnerability?
a) Threat exploits vulnerability
c) Threat is potential harm, vulnerability is weakness
d) Vulnerability is external, threat is internal
b) Vulnerability is a type of threat
37
Which security process involves reviewing and updating security policies?
c) Incident response
d) Security governance
a) Risk management
b) Vulnerability management

Security Plus Objectives 701 Difficult Flashcards | StudBud