SY0-701 Security #1

The purpose of PCI DSS is to provide protection for:

Which of the following is a method of implementing security controls?

Which of the following answers refers to a NIST's voluntary framework outlining best practices for computer security?

What is the name of a network protocol that secures web traffic via SSL/TLS encryption?

When is a BCP or DRP design and development actually completed?

Which of the following regulates personal data privacy of the European Union (EU) citizens?

What is the typical use of a public key?

Which alternate site allows for the fastest disaster recovery?

Which of the following answers refers to a data storage device equipped with hardware-level encryption functionality?

The AAA security architecture, the process of tracking accessed services as and amount of consumed resources is called:

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Which part of the AAA security architecture deals with the verification of the identity of a person or process?

Which type of user account violates the concept of non-repudiation?

Which of the answers listed below refers to a deprecated TLS-based method for secure transmission of email messages?

The following is a policy that defines appropriate and inappropriate usage of company resources, assets, and etc?

Which of the answers listed below best describes the characteristics of a public-private key pair?

Which type of attack is WEP extremely vulnerable to?

Which of the following best applies to the concept of non-repudiation?

Which of the following is an entity that accepts and validates information contained within a request for a certificate?

Company requires individuals to use their personal phones for work purposes? Deployment method?

An attacker has circumvented a web-based application to send commands directly to a database. What type of attack?

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

Hierarchical system for the creation, management, storage, distribution, revocation of digital certificates is known as

A mandatory IT security and risk management framework for U.S. federal government developed by NIST is known as:

Which protocol does HTTPS use to offer greater security in web transactions?

Which of the terms listed below can be used to describe the basic principles of information security?

In the AAA security architecture, the process of granting or denying access to resources is known as:

The success of asymmetric encryption is MOST dependent upon which of the following?

A technique that allows to recover changes that occurred since the last backup in the event of a system crash is:

Which malicious actors are likely to show great interest in another country's energy infrastructure?

Which of the following answers refers to a deprecated wireless authentication protocol developed by Cisco?

Which of the following answers refers to an obsolete protocol used for secure data transfer over the web?

An attacker has gained access to the administrator's login credentials. Which type of attack has MOST likely occurred?

What must be protected to maintain the security and benefit of an asymmetric cryptographic solution?

An MS Windows component that enables encryption of individual files is called:

An ISO/IEC standard defining requirements for information security management systems is known as:

Which of the following is the first step in the Waterfall application development model?

What is a honeynet in the context of cybersecurity?

An SMTP server is not properly and securely configured, it can used maliciously as an SMTP relay agent. Type of Attack?

In the certificate authority trust model known as a hierarchy, where does trust start?