SSCP - Security Operations & Administration

Question 1

What security principle requires two individuals to perform a sensitive action?

Accepted Answer

Two Person Control

Question 2

Which element of the security policy framework includes suggestions that are not mandatory?

Accepted Answer

Guidelines

Question 3

Which one of the following is not a commonly-used business classification level?

Accepted Answer

Top Secret

Question 4

Audits may be performed by either internal or external entities.

Accepted Answer

True

Question 5

Which one of the following is the lowest level of classification in the government's classification scheme?

Accepted Answer

Confidential

Question 6

RFCs should contain a plan to roll back the change if it fails.

Accepted Answer

True

Question 7

What are the two key issues for cloud data security?

Accepted Answer

Encryption and Access Control

Question 8

Which one of the following is not one of the GAPP principles?

Accepted Answer

Integrity

Question 9

Which one of the following is not an example of security education?

Accepted Answer

Reminder posters in the hallway

Question 10

What hardware technology may be embedded in a laptop computer to protect encrypted hard drives from removal?

Accepted Answer

TPM

Question 11

What class of fire extinguisher is designed to work on electrical fires?

Accepted Answer

Class C

Question 12

What type of lock always requires entering a code to enter the facility?

Accepted Answer

Cipher Lock

Question 13

Which security control provides the best ability to detect integrity issues?

Accepted Answer

Hashing

Question 14

What goal of information security is enforced by applying access controls to ensure employees can only read related file

Accepted Answer

Confidentiality

Question 15

Which one of the following is not one of the major principles of COBIT?

Accepted Answer

Securing the Enterprise end-to-end

Question 16

What technology is commonly used for Big Data datasets?

Accepted Answer

No SQL

Question 17

What security control is designed to scare a potential intruder into not attempting a break-in in the first place?

Accepted Answer

Detterent Control

Question 18

_____ controls mitigate the risk of exceptions to security policies.

Accepted Answer

Compensating

Question 19

What security principle most directly applies to limiting information access?

Accepted Answer

Need to Know

Question 20

What technique hides sensitive information inside another file, such as an image?

Accepted Answer

Steganography

Question 21

Which one of the following regulatory schemes applies to healthcare providers in the United States?

Accepted Answer

HIPAA

Question 22

What data security role is normally filled by a senior-level official who bears overall responsibility for the data?

Accepted Answer

Data Owner

Question 23

What type of social engineering attack targets end users via email messages?

Accepted Answer

Phishing

Question 24

What U.S. federal government agency publishes security standards that are used throughout the government & private indus

Accepted Answer

NIST

Question 25

What letter is used to describe the file permissions given to all users on a Linux system?

Accepted Answer

o

Question 26

Account reviews should verify that every inactive account is associated with a current employee

Accepted Answer

False

Question 27

Security baselines often require hundreds or thousands of individual security settings on a particular device.

Accepted Answer

True

Question 28

Organizations often customize industry security standards to meet their specific security and business requirements.

Accepted Answer

True

Question 29

Security leaders planning to deploy a new security control should develop a business case for that control.

Accepted Answer

True

Question 30

A HR department replaced the first five digits of employee Social Security Numbers with Xs, What technique did they use?

Accepted Answer

Masking

Question 31

What security principle prevents against an individual having excess security rights?

Accepted Answer

Least Privilege

Question 32

GAPP says collect as much information as possible to provide good service, provided that they remain GAPP compliant.

Accepted Answer

False

Question 33

_____ demonstrate the success of a security program.

Accepted Answer

KPIs

Question 34

What is the name of the practice where a user holds a door open for the individual following them into a building?

Accepted Answer

Tailgating

Question 35

The results of backup verification are an example of _____ data.

Accepted Answer

Security Process

SSCP - Security Operations & Administration

Questions 35

SSCP - Security Operations & Administration

Questions 35