Cyber ops chapter 8

Which type of access control applies the strictest access control and is commonly used in military?

Which term describes the act of a user, without authority or permission?

Which type of access list works better when implementing RBAC?

What is the purpose of mobile device management (MDM) software?

Which component of AAA is used to determine which resources a user can access and which operations the user is allowed?

What type of access control model is based on an individual's roles and responsibilities within the organization?

Which technology provides the framework to enable scalable access security?

Which term represents the practice of giving employees only those permissions necessary?

What are two characteristics of the RADIUS protocol? (Choose two.)

Which of the following describe what a threat is?

It offers a free service called Automated Indicator that enables the real-time exchange of cyberthreat indicators

What is a cross-site scripting (XSS) vulnerability?

It defines the type of traffic allowed on a network and what users are allowed and not allowed to do?

What is a characteristic of a layered defense-in-depth security approach?

Which type of vulnerability scanner probes the target system to get information?

Which two areas must an IT security person understand in order to identify vulnerabilities on a network? (Choose two.)

Why is a periodic access rights and privileges review important?

What service determines which resources a user can access along with the operations that a user can perform?

With the evolution of borderless networks, which vegetable is now used to describe a defense-in-depth approach?

Which device is usually the first line of defense in a layered defense-in-depth approach?

Which type of business policy establishes the rules of conduct and the responsibilities of employees and employers?

Passwords, passphrases, and PINs are examples of which security term?

What three items are components of the CIA triad? 

Which security principle states that more than one person is required to perform a critical task?

Which AAA component can be established using token cards?

By default, what level of authority does the root-user have?

According to the attribute-based access control (ABAC) model, what is the subject location considered?

In a discretionary access control (DAC) model, who can authorize access to an object?

What common defense-in-depth method can help reduce the attack surface?

what set of specifications is for exchanging cyberthreat information between organizations?

Which method is used to make data unreadable to unauthorized users?

How can an attacker who is using the Windows command line run all the commands with administrator privilege?

What is the principle of least privilege access control model?

Which action is an attacker taking when they attempt to gain root access on the victims system?