Security+ Chapter 15, 16

Question 1

If information is too valuable to permit any risk of its capture and viewing is severely restricted, it's classified as:

Accepted Answer

Secret

Question 2

A text file used to store information about a user when they visit a website.

Accepted Answer

Cookie

Question 3

A contractual agreement setting out the detailed terms under which a service is provided is called a:

Accepted Answer

Service Level Agreement

Question 4

This data role is primarily responsible for data quality. This involves tasks such as ensuring data is labelled.

Accepted Answer

Steward

Question 5

If information is highly sensitive, for viewing only by approved persons within the organization, it's classified as:

Accepted Answer

Confidential

Question 6

________ privilege escalation is where a user accesses functionality or data that is intended for another user.

Accepted Answer

Horizontal

Question 7

_____ involves a trusted site, a client browsing the trusted site, and the attacker's site.

Accepted Answer

XSS

Question 8

Process of an org. maintaining the existence/control over data in order to comply with business policies, laws, etc is:

Accepted Answer

Data Retention

Question 9

With ________,a string is stripped of illegal characters and converted to the accepted character set.

Accepted Answer

Normalization

Question 10

A software vulnerability that can occur when software does not release allocated memory when it is done using it:

Accepted Answer

Memory Leak

Question 11

This data role is responsible for managing the system on which the data assets are stored.

Accepted Answer

Custodian

Question 12

A formal agreement (or contract) that contains specific obligations rather than a broad understanding is called a:

Accepted Answer

Memorandum of Agreement

Question 13

An attacker inserts an invisible layer into a trusted page that can intercept/redirect input without the user realizing

Accepted Answer

Clickjacking

Question 14

A magnetic disk can be exposed to a powerful electromagnet to disrupt its magnetic pattern. What is this process called?

Accepted Answer

Degaussing

Question 15

_________ states that no one person should have too much power or responsibility.

Accepted Answer

Separation of Duties

Question 16

__________ is the process of deploying an application to the target environment.

Accepted Answer

Provisioning

Question 17

Which of the following software vulnerabilities occurs when certain events fail to execute in the intended order?

Accepted Answer

Race Condition

Question 18

In what waterfall phase do you integrate the units and ensure they work as expected?

Accepted Answer

Testing

Question 19

A binary package that implements some sort of standard functionality, such as establishing a network connection is a:

Accepted Answer

Dynamic Link Library

Question 20

A ________ is a step-by-step listing of the actions that must be completed for any given task.

Accepted Answer

Procedure

Question 21

True or false: the primary vector for attacking applications is to exploit faulty input validation.

Accepted Answer

True

Question 22

A code analysis technique that involves sending an application random/unusual input to evaluate how the app responds:

Accepted Answer

Fuzzing

Question 23

What is the first phase of the Agile model?

Accepted Answer

Concept

Question 24

A preliminary or exploratory agreement to express an intent to work together is called a:

Accepted Answer

Memorandum of Understanding

Question 25

_________ is data that can be used to identify, contact, or locate an individual.

Accepted Answer

Personally Identifiable Information

Security+ Chapter 15, 16

Questions 25

Security+ Chapter 15, 16

Questions 25