What does SCAP automate?

Security configuration assessment

Why is rescanning important after patching?

Verify that vulnerabilities are fixed

Common Vulnerability Scoring System

What is the purpose of SIEM?

Real-time log aggregation and alerting

What does sanitization refer to?

Removing data so it cannot be recovered

What does the principle of least privilege mean?

Only the minimum access necessary is granted

What is the main purpose of sandboxing?

Isolate applications from the main OS

What does asset management include?

Lifecycle from acquisition to disposal

studbud

GAH Acronym GAH-ntlet

20 termsStudBud Administration25 plays

ACRONYM TEST FOR ALL

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
Which of the following best describes a secure baseline?
Vulnerability report
Patch schedule
Software list
Config settings
2
What is a key step before installing Wi-Fi?
Group Policy
Firewall rule setup
Antivirus installation
Site survey
3
What's heavier: 1kg of steel or 1kg of feathers?
air
feathers
steel
um...neither?
4
What does SCAP automate?
User provisioning
Network routing
Endpoint backup
Security configuration assessment
5
What does NetFlow collect?
Vulnerability scores
) Disk data
User logs
IP traffic flow information
6
What do secure cookies protect?
Application code
Cookie integrity
Data at rest
Input data
7
Why is rescanning important after patching?
Sign code
Update inventory
Review access controls
Verify that vulnerabilities are fixed
8
Which devices are common hardening targets?
Embedded only
Mobile only
Workstations, routers, servers
Cloud only
9
What is the main purpose of vulnerability scanning?
Identify security gaps
Track patch dates
Monitor user habits
Discover encryption keys
10
What does static code analysis do?
Monitors runtime behavior
) Encrypts code
Scans source code for flaws
Runs code in a sandbox
11
CVSS stands for:
Common Vulnerability Scoring System
Common Value Security Scale
Central Vulnerability Standard
Comprehensive Vulnerability Scan Score
12
What is the purpose of SIEM?
Disk imaging
Vulnerability scanning
Real-time log aggregation and alerting
Data backup
13
Which protocol is commonly used for SSO?
SAML
FTP
SNMP
DHCP
14
Which option is NOT an MFA factor?
Something you see
Something you have
Something you know
Something you are
15
What does sanitization refer to?
Encrypting data
Removing data so it cannot be recovered
Applying patches
Updating the OS
16
What does IPS stand for?
Buy Your Own Device
Bring Your Office Device
Bring Your Own Device
Build Your Own Device
17
What does the principle of least privilege mean?
Only the minimum access necessary is granted
Use only role-based access
Full admin rights by default
Access is time-limited
18
What is the main purpose of sandboxing?
Monitor network traffic
Isolate applications from the main OS
Secure hardware components
Protect data flows
19
Which is the latest Wi-Fi security protocol?
WPA
WPA3
WEP
WPA2
20
What does asset management include?
Lifecycle from acquisition to disposal
Network monitoring only
Hardware only
Patch updates only

GAH Acronym GAH-ntlet Flashcards | StudBud