stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Review Test Flashcards | StudBud
Explore
/
Review Test
Review Test
20 terms
·
StudBud Administration
·
34 plays
For domain 3
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
The least-privilege principle says to give users the minimum permissions they need to accomplish their objectives.
False
True
2
An operating system is the primary interface between the user, application, and computer hardware.
True
False
3
What does BYOD stand for?
Bring Your Own Device (BYOD)
Bring Your Own Digital (BYOD)
Bring Your Own Drive (BYOD)
Bring Your Own Design (BYOD)
4
Which of the following is
not
a regulatory compliance standard?
CIS
GDPR
PCIDSS
HIPAA
5
BYOD policies primarily address which type of risk?
Unauthorized access from personal device
Malware infections
Phishing attacks
Physical theft of company devices
6
Which tool is commonly used in the treatment phase to ensure all traces of malware are removed?
Antivirus software
Packet sniffer
Event Viewer
Wireshark
7
Which of the following BEST describes a social engineering attack that relies on a high executive at a business?
Invoice scam
Pharming
Spam
Whaling
8
If you fall for a phishing scam, what should you do to limit the damage?
Unplug the computer. This will get rid of any malware.
Delete the phishing email.
Change any compromised passwords.
9
_____ is an open-source operating system, which means its code is freely available to anyone.
Linux
macOS
Android
Windows
10
Naomi receives a report of smishing. What type of attack should she be looking for?
Server-based phishing
Voicemail-based phishing
Compressed files in phishing
Text message–based phishing
11
A bad actor tries to persuade someone to provide financial information over the phone in order to gain access to funds.
Phishing
Whaling
Vishing
Spear Phishing
12
Which of the following would satisfy three-factor authentication requirements?
Password, fingerprint scan, and physical token
Password, PIN, and physical token
PIN, fingerprint scan, and iris scan
PIN, physical token, and ID card
13
Which of the following best describes the role of a DMZ in network segmentation?
To isolate sensitive internal data
It restricts access to specific applications within the internal network
It groups devices into separate logical networks to improve traffic
It ensures that only encrypted traffic can pass through the network
14
Which step in malware remediation ensures the malware cannot spread further within a network?
Treatment
Inoculation
Quarantine
Containment
15
What type of information can be gathered using the nslookup command
DNS records of a domain
System log details
Active network sessions
Open ports on a host
16
Which tool is used to harden operating systems by providing security configuration recommendations?
Nessus
Powershell
Wireshark
CIS Benchmarks
17
______
are built, managed, and owned by a single organization and privately hosted in their own data centers
Private Cloud
Public cloud
Hybrid Cloud
Multi cloud
18
What is ransomware?
malware that holds your data hostage until money is paid
software like a harmful virus
a form of cryptocurrency
Computer equipment
19
Which log is most likely to contain information about failed login attempts on a Windows machine?
Application Log
System Log
Audit Log
Security Log
20
Paper files that have sensitive information should be disposed of in a locked trash bin. True or False?
True
False
