stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ 701 Lesson 1 Fundamental Security concepts Flashcards | StudBud
Explore
/
Sec+ 701 Lesson 1 Fundamental Security concepts
Sec+ 701 Lesson 1 Fundamental Security concepts
15 terms
·
StudBud Administration
Domain 1.0
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
A manager auditing tickets discovered a new computer setup trend & implemented a new SOP. What control function is this?
Corrective
Directive
Compensating
Deterrent
2
What is the term for a security risk that is intentionally accepted by an organization?
Risk transerence
Risk acceptance
Risk mitigation
risk avoidance
3
What access control implementation can streamline account creation for new hires in a mechanical engineering firm?
CISO
CTO
IAM
LDAP
4
A CISO met with HR to discuss how to secure sensitive data. What is the role of the CISO? (Choose 2)
Documenting access controls
Managing security-related incident response
Review user permissions
Monitor Audit Logs
5
What first NIST Cybersecurity Framework function helps a CISO develop security policies and recommend controls?
Detect
Protect
Respond
Identify
6
What is the term for a security control that is intended to deceive attackers?
Firewall
Honeypot
Encryption
Intrusion Detection System
7
Corrective controls eliminate or reduce the impact of a security policy violation.
True
False
8
How does enabling file auditing help identify who deleted a file, despite existing permissions?
Non-remediation
Availability
Non-repudiation
Confidentiality
9
What security control is absent when an employee accidentally unplugs a server in an unsecured closet causing an outage?
Physical
Managerial
Technical
Operational
10
After implementing NIST CSF, what process helps a CISO assess security posture & identify deficiencies for improvement?
Gap Analysis
Penetration test
Implement disaster recovery plan
Implement business continuity plan
11
What is the best description of the new team's location within the company's structure after hiring a CISO?
NOC
SOC
Help desk
MSP
12
What is the primary benefit of implementing a defense-in-depth strategy?
Reduced costs
Improve network performance
Enhanced security posture
Simplified security management
13
What security method assures only authorized users can read sensitive data on shared drives from an owner's perspective?
Availability
Integrity
Confidentiality
Recovery
14
What component of modern access controls determines what rights a user should have on each resource?
Authorization
Identification
Accounting
Authentication
15
What is the primary goal of a security awareness program?
To detect malware
To conduct vulnerability scans
To implement firewalls
To educate employees on security policies
