What is the five nines concept?

Services being available 99.999% of the time

What is a Network Attached Storage (NAS) device?

A storage device that allows for networked storage access

What does the third dimension of the cybersecurity cube identify?

The skills and discipline used to protect cyberspace

Which of the following cloud services provides virtualized computing resources over the Internet?

Infrastructure as a Service (IaaS)

What does a strong password typically include?

More than 7 characters, numbers, upper/lowercase letters, and symbols

What does the first dimension of the cybersecurity cube identify?

The goals to protect cyberspace

A value used to verify the integrity of files before and after transfer

Which of the following is NOT one of the domains of the ISO/IEC 27000 standard (Question 2 of 2)?

Authorization, Authentication, and Accounting

What is the difference between an IDS and an IPS?

An IPS takes corrective actions and an IDS does not

What does AAA stand for?

Authorization, Authentication, and Accounting

What is Direct-Attached Storage (DAS)?

Storage connected to a computer

What is the name for a document that defines the control objectives an organization decides they need to use?

Statement of Applicability (SOA)

What does CIA stand for in the CIA Triad?

Confidentiality, Integrity, Availability

What does the second dimension of the cybersecurity cube identify?

The problems of protecting all the states of data in cyberspace

Which of the following is the best way to keep your account secure?

Use multifactor authentication (MFA)

Why are the ISO and IEC organizations important to cybersecurity specialists?

Their model is used as the framework for implementing cybersecurity

studbud

Cybersecurity Essentials: Chapter 2 Review

76 termsStudBud Administration199 plays

A review of Chapter 2 of the Cybersecurity Essentials curriculum from Cisco NetAcad, The Cybersecurity Cube

Flashcards76 cardsFPractice quizPHost liveL

Questions 76

Answers

1
Which approach to the five nines concept means multiple devices grouped together to provide a service?
Backup Testing
Standardized Systems
Clustering
Shared Components Systems
2
What does NAC stand for?
Null Address Computer
Network Access Controls
Network Autonomy Cache
Network Application Controls
3
What is the term for preventing accidental changes by authorized users?
Data Backups
Access Control
Version Control
Network Access Controls
4
Which of the following is NOT one of the domains of the ISO/IEC 27000 standard (Question 1 of 2)?
Communications and Operations Management
Domain Security
Compliance
Organization of Information Security
5
What is the five nines concept?
An IP address of 99.9.9.9
Services being available 99.999% of the time
A data center should have five racks of nine network devices
Items owned by the Pirate Lords of the Brethren Court
6
Which of the following is a way to ensure data integrity?
Password Protection
Data Consistency Checks
Firewalls
Data Logging
7
What is a Network Attached Storage (NAS) device?
A network architecture that connects servers to centralized disk storage
A storage drive that is connected directly to a router
A shared hard drive on a PC
A storage device that allows for networked storage access
8
What does the third dimension of the cybersecurity cube identify?
The skills and discipline used to protect cyberspace
The goals to protect cyberspace
The establishment of policies, procedures, and guidelines
The problems of protecting all the states of data in cyberspace
9
Which of the following is NOT a cybersecurity safeguard?
People
Policies and Practices
Practicality
Technology
10
Which of the following cloud services provides virtualized computing resources over the Internet?
Platform as a Service (PaaS)
Software as a Service (SaaS)
IT as a Service (ITaaS)
Infrastructure as a Service (IaaS)
11
What does a strong password typically include?
More than 7 characters, numbers, upper/lowercase letters, and symbols
The word "password" and nothing else
Numbers only
Only uppercase and lowercase letters
12
Which network-based technology requires a set of passed checks before allowing a device to connect to a network?
Integrity Checks
Wireless Access Point Security
VPN
NAC
13
Which approach to the five nines concept refers backup systems designed to replace a system that fails?
Clustering
Standardized Systems
Shared Components Systems
Backup Testing
14
What does the first dimension of the cybersecurity cube identify?
The goals to protect cyberspace
The establishment of policies, procedures, and guidelines
The problems of protecting all the states of data in cyberspace
The skills and discipline used to protect cyberspace
15
What is the name for a document that states resources and usages that are agreed to by an organization?
An acceptable use policy
A guideline
A standard
A remote access policy
16
What is a checksum?
A value used to verify the integrity of files before and after transfer
A value used to improve confidentiality of data
A way to pay for network equipment
A mathematical operation in many programming languages
17
Which cloud service provides support for people using cloud-based services?
Software as a Service (SaaS)
IT as a Service (ITaaS)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
18
Which ISO/IEC standard relates directly to an organization's cybersecurity policies, procedures, and guidelines?
ISO 27002
ISO 27003
ISO 27000
ISO 27001
19
What is NOT one of the ways to protect data in process?
Data Validation
Data Backups
Access Control
Redundancy
20
What does the ISO 27002 standard consist of?
Checklists
Control Objectives
Controls
Domains
21
Which of the following is NOT one of the domains of the ISO/IEC 27000 standard (Question 2 of 2)?
Information Systems Acquisition, Development, and Maintenance
Authorization, Authentication, and Accounting
Human Resources Security
Business Continuity Management
22
What is the difference between an IDS and an IPS?
Nothing, they are the same
An IPS takes corrective actions and an IDS does not
An IDS takes corrective actions and an IPS does not
One is made of metal and the other is made of plastic
23
Where should an organization avoid storing critical data?
Network Attached Storage
On Backup Server
Direct-Attached Storage
Using a Cloud-Based Service Provider
24
Which of the following programs is an example of a network and port scanner?
Zenmap
Windows Defender Firewall
Windows Defender
SolarWinds Security Event Manager
25
Which of the following would be an example of a protocol/signature analyzer?
Zenmap
SolarWinds Security Event Manager
Wireshark
Windows Defender Firewall
26
True or False: Keeping data confidential is a legal obligation.
True
False
27
What is NOT one of the three dimensions of the Cybersecurity Cube?
Security Principles
Cybersecurity Domains
Countermeasures
Information States
28
Which of the following is most affected by a DoS or DDoS attack?
Confidentiality
Availability
Data in Process
Integrity
29
What does AAA stand for?
Artificial Antivirus Architecture
Abstraction, Access, and Algorithms
Active Application Algorithms
Authorization, Authentication, and Accounting
30
Which term legally describes the appropriate use of data?
Integrity
Availability
Privacy
Confidentiality
31
What is Direct-Attached Storage (DAS)?
Storage connected to a computer
Storage that is directly accessible from anywhere in the network
Storage connected to a router
Storage shared between two computers
32
True or False: People are the weakest link in an organization's cybersecurity.
False
True
33
What is NOT one of the levels of need for data integrity?
High
Never
Low
Critical
34
Which of the following is an example of a software-based safeguard?
Wireless Access Point Security
Virtualized Security Appliances
Vulnerability Scanners
Dedicated Intrusion Detection Systems (IDS)
35
Which security principle refers to the accuracy, consistency, and trustworthiness of data?
Confidentiality
Policies and Practices
Integrity
Availability
36
What is NOT one of the three ways to approach the five nines concept?
Standardized Systems
Shared Clustering Systems
Clustering
Shared Components Systems
37
Which approach to the five nines concept refers to systems that use the same components?
Shared Components Systems
Clustering
Backup Testing
Standardized Systems
38
What does the ISO 27001 standard consist of?
Controls
Domains
Checklists
Control Objectives
39
What term refers to any changes made to the original data?
Data Modification
Data Corruption
Data Correction
Data Changing
40
True or False: MD5 is the best hashing function to use.
False
True
41
What is the name for a document that defines the control objectives an organization decides they need to use?
National Security Agency (NSA) Security Configuration Guides
The Common Criteria Standard
NIST Computer Security Resources
Statement of Applicability (SOA)
42
Which of the following can be improved by having correct backups of all data on the network?
Integrity
Availability
People
Confidentiality
43
What does CIA stand for in the CIA Triad?
Confidentiality, Integrity, Access
Confidentiality, Integrity, Availability
Central Intelligence Agency
Computer Information Availability
44
What does the second dimension of the cybersecurity cube identify?
The goals to protect cyberspace
The skills and discipline used to protect cyberspace
The establishment of policies, procedures, and guidelines
The problems of protecting all the states of data in cyberspace
45
What is NOT one of the three types of sensitive information?
Business Information
Password Information
Personal Information
Classified Information
46
Which of the following is an example of a hash function?
SHA-512
CSS
MD
SHA-200
47
Which of the following is the best way to keep your account secure?
Use a special character in your password
Funny joke, nothing is secure
Use a password that is 25 characters long
Use multifactor authentication (MFA)
48
Which of the following is NOT a network-based technology to improve cybersecurity?
Wireless Access Point Security
Firewalls
Network Access Control (NAC)
Virtual Private Networks (VPNs)
49
Why are the ISO and IEC organizations important to cybersecurity specialists?
They monitor all Internet traffic to identify newly developed cyberattacks
They have published guidelines on best cybersecurity practices
Their model is used as the framework for implementing cybersecurity
They can be hired to create cybersecurity systems for companies
50
Which of the following is typically NOT included in a security policy?
Password Policies
User Maintenance Policies
Network Maintenance Policies
Remote Access Policies
51
Which of the following types of companies require a critical level of data integrity?
Ecommerce
Schools
Hospitals
Search Engines
52
What defines a number of protection schemes that prevent unauthorized access to a computer/network/database/etc.?
Multifactor Authentication (MFA)
Privacy
Access Control
Authentication, Authorization, and Accounting (AAA)
53
Which security principle refers to ensuring that information is accessible by authorized users when needed?
System Redundancy
Confidentiality
Integrity
Availability
54
Which of the following cloud services allows users to gain access to application software and databases?
IT as a Service (ITaaS)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)
55
Which of the following requires users to authenticate to the server and the server authenticate to the user?
Hashing
Multifactor Authentication (MFA)
VPNs
Mutual-Authentication Systems
56
Which of the following is the most dangerous type of network?
Virtual Private Network
Wireless Networks
Wired Networks
Sneaker Net
57
Which of the following is an example of a direct-attached storage device?
Storage Drive (Hard Drive or SSD)
USB Drive
NAS
RAM
58
Which terms describes keeping track of what users do, including what they access and for how long and any changes made?
Authorization
Authentication
Accounting
Availability
59
Which term describes services that determine which resources users can access and the operations users can perform?
Availability
Authentication
Accounting
Authorization
60
What is a Virtual Private Network (VPN)?
An invisible network
A secure virtual network that uses the public network
A tool that only corporate networks use to allow remote access
A network uses virtualized hardware
61
Which term describes the verification of the identity of a user to prevent unauthorized access?
Authorization
Accounting
Availability
Authentication
62
Which cloud service provides access to the development tools and services used to deliver applications?
Software as a Service (SaaS)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
IT as a Service (ITaaS)
63
Which security principle refers to preventing the disclosure of information to unauthorized people/resources/processes?
Availability
Confidentiality
Countermeasures
Integrity
64
What is NOT one the ways organizations can ensure availability?
New Technology Implementations
Unusual Activity Monitoring
Data Encryption
Equipment Maintenance
65
Which of the following would affect availability?
A DoS attack
All of these answers
Natural Disasters
Equipment Failure
66
Which of the following refers to data during initial input, modification, computation, or output?
Data in Transit
Data in Process
Data in Conversion
Data at Rest
67
What is NOT one of the three design principles for high availability systems?
Detecting failures as they occur
Providing for reliable crossover
System redundancy
Eliminating single points of failure
68
What is NOT one of the three methods to transmit data between devices?
Virtual Private Network
Sneaker Net
Wireless Networks
Wired Networks
69
What is a Storage Area Network (SAN)?
A shared hard drive on a PC
A storage device that allows for networked storage access
A network architecture that connects servers to centralized disk storage
A storage drive that is connected directly to a router
70
What is NOT one of the three states of data?
Data at Rest
Data in Transit
Data in Entry
Data in Process
71
What is NOT one of the three methods used to ensure confidentiality of data?
Policies
Access Control
Data Encryption
Authentication
72
How many domains represent the components of the ISO 27000 standard?
13
12
10
11
73
What does ACL stand for?
Account Creation Lock
Access Control Lock
Available Controller Link
Access Control List
74
What does RAID stand for?
Redundant Array of Independent Disks
Really Awesome Internet Dogs
Reduced Array of Intertwined Disks
Redundant Array of Interconnected Disks
75
What is NOT one of the three ways a user proves their identity in authentication?
Something They Are
Something They Know
Something They Have
Something They Feel
76
What is the relationship between policies and standards?
Policies must be followed and standards do not have to be followed
Standards documents are short and policy documents are much longer
Standards state the technologies and strategies used to support the policy
They have no relationship

Cybersecurity Essentials: Chapter 2 Review Flashcards | StudBud