stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security + Flashcards | StudBud
Explore
/
Security +
Security +
70 terms
·
StudBud Administration
·
41 plays
Test Prep
Flashcards
70 cards
F
Practice quiz
P
Host live
L
Questions
70
Answers
1
Which of the following best describes a botnet?
A single infected device
A security policy violation
A type of phishing scam
A network of compromised devices controlled remotely
2
Which term describes the likelihood that a threat will exploit a vulnerability?
Threat
Control
Risk
Impact
3
Which protocol provides secure remote command-line access?
Telnet
SSH
FTP
SNMP
4
What is the main objective of compliance monitoring?
To catch hackers
To ensure adherence to policies and regulations
To improve network speed
To back up data
5
What is the primary difference between phishing and spear phishing?
Phishing is targeted, spear phishing is broad
Phishing uses malware, spear phishing uses spyware
Spear phishing is targeted at specific individuals or organizations
Spear phishing is a form of malware
6
What is the purpose of a honeypot in cybersecurity?
To encrypt sensitive information
To monitor employee activity
To trap and analyze attackers
To store backup data
7
Which of the following is a preventive control?
Incident response plan
Security camera
Audit log
Firewall
8
What does the principle of non-repudiation ensure?
Users are anonymous
Data is always available
Users cannot deny their actions
Data remains encrypted
9
Which tool is used for log collection and analysis in a centralized manner?
VPN
SIEM
IDS
Proxy
10
What is the purpose of patch management?
To improve hardware compatibility with new systems
To manage software licenses during updates
To increase processing speed
To fix bugs and close security vulnerabilities
11
Which tool is commonly used to perform penetration testing?
Wireshark
Snort
Nessus
Metasploit
12
What type of backup only saves changes made since the last full backup?
Differential
Incremental
Snapshot
Full
13
What is a compensating control?
A backup control that is used temporarily
A non-technical control that fixes issues
A control used when the primary control isn’t feasible
A control that costs more than the risk
14
What does the CIA triad stand for in information security?
Control, Integrity, Access
Control, Inspection, Authorization
Confidentiality, Integrity, Availability
Confidentiality, Inspection, Access
15
Which framework is commonly used for cybersecurity risk management in the U.S. government?
ISO 27001
HIPAA
COBIT
NIST
16
What is a service-level agreement (SLA)?
A business email configurations
A report on server uptime and availability
A disaster recovery plan and implementation
A contract defining expected service performance
17
What is the purpose of a DMZ (demilitarized zone) in network architecture?
To host encrypted data
To isolate critical internal services from the internet
To serve as a backup data center
To restrict user access within a LAN
18
What kind of team performs red team/blue team exercises?
System Admins
Project Managers
Security Teams
Developers
19
What is the primary purpose of a security policy?
To outline the company's financial goals.
To describe the company's marketing strategy.
To list all employees and their roles.
To define acceptable use of resources and procedures for security.
20
Which term refers to the process of transforming data into an unreadable format to prevent unauthorized access?
Compression
Tokenization
Hashing
Encryption
21
What is the function of a proxy server?
Encrypt traffic
Act as an intermediary between clients and external servers
Perform NAT translation
Block all inbound traffic
22
Which of the following best describes a VPN?
A virus scanning tool
A tool for blocking websites
An encrypted tunnel between devices over an untrusted network
A network firewall
23
What is a rollback plan used for?
After action report that summarizes damage
Reverting to a previous stable state if a change causes issues
Upgrading servers
Backing up personal files
24
An attacker captures data packets on a public Wi-Fi network. What kind of attack is this?
Eavesdropping
Logic bomb
Spoofing
Brute force
25
Which of the following is a business continuity plan primarily concerned with?
Stopping a cyberattack
Training new employees
Reducing operating costs
Ensuring continued operations during disruptions
26
What is the purpose of a risk assessment?
To identify new employees
To evaluate potential security risks and their impact
To implement firewalls
To enforce access controls during work hours
27
Which of the following occurs first in the incident response lifecycle?
Containment
Recovery
Eradication
Preperation
28
Which term describes ensuring a user is who they say they are?
Authentication
Authrization
Identification
Accounting
29
Which attack involves intercepting and potentially altering communication between two parties?
Phishing
Denial-of-service
Man-in-the-middle
SQL injection
30
What is the function of a privacy impact assessment (PIA)?
To measure password strength and complexity
To assess network speed and configurations
To identify how personal data is collected, stored, and used
To review firewall rules
31
Which wireless security protocol is considered the most secure today?
WEP
WPA
AES3
WPA3
32
What is a jump box (jump server) used for?
Scanning for malware
Network diagnostics
Remote access to secure systems
DNS filtering
33
What is the main goal of risk management in cybersecurity?
To ignore low-level risks
To eliminate all risks
To transfer all risks to third parties
To identify, assess, and mitigate risks to acceptable levels
34
What is the purpose of port security on a switch?
To detect malware
To allow only specific MAC addresses to connect
To monitor bandwidth usage
To ensure VLAN assignments
35
Which term refers to the process of ensuring users only access resources necessary for their role?
Role-based access control
Security awareness
Single sign-on
Multifactor authentication
36
Which device inspects packets and decides whether to allow or block them based on predefined rules?
Router
Firewall
Load Balancer
Switch
37
Which of the following best describes an audit trail?
Physical surveillance log
List of all vulnerabilities
Chronological record of system activity
List of backup of files
38
Which of the following is an example of a vulnerability?
A DDoS attack
A phishing attempt
A power outage
Weak password policies
39
Which of the following best describes a logic bomb?
Malware that replicates itself
Malicious code triggered by specific conditions
A type of phishing attack
Unauthorized access to a system
40
What is a playbook in cybersecurity?
A fictional scenario
A book of policies
A set of procedures for responding to specific incidents
A list of contacts
41
What is the primary goal of a denial-of-service (DoS) attack?
To disrupt the availability of services
To steal data
To gain unauthorized access
To install malware
42
What is the function of a digital signature?
To compress files
To encrypt data
To provide anonymity
To ensure data integrity and authenticate the sender
43
What type of control is a firewall considered?
Compensating
Administrative
Technical
Physical
44
What is the primary difference between a virus and a worm?
Worms require user interaction; viruses do not.
Viruses only affect Windows systems; worms affect all systems
Viruses are standalone programs; worms are not.
Worms can self-replicate without user intervention; viruses cannot.
45
What is sandboxing in cybersecurity?
Isolating code for safe execution
Securing physical perimeters
Password hashing
A child-friendly internet filter
46
Which of the following best describes the principle of least privilege?
Users can access resources based on their seniority.
Users have administrative access by default.
Users have access to all system resources.
Users have access only to the resources necessary for their job functions.
47
What is a zero-day vulnerability?
A vulnerability that is publicly known
A vulnerability that has been patched
A vulnerability that only affects zero-day applications
A vulnerability that is unknown to the vendor and has no patch
48
What is the primary goal of incident response?
To restore normal operations quickly
To install antivirus
To run a vulnerability
To fire employees involved
49
What is the difference between a policy and a procedure?
Policies outline “what,” procedures outline “how”
Policies are detailed, procedures are general
Policies are optional, procedures are mandatory
Procedures are legal, policies are not
50
Which of the following roles is typically responsible for overseeing an organization’s information security program?
CISO
CIO
CEO
CIO
51
What is the purpose of a security awareness training program?
To educate employees about security policies and best practices
To teach employees how to use new software
To train employees in physical fitness
To inform employees about company financials
52
Which of the following is an example of a physical security control?
Security guard
Firewall
Antivirus software
Encryption
53
What is the purpose of a data loss prevention (DLP) system?
To detect phishing
To prevent unauthorized data exfiltration
To encrypt drives
To block malware
54
Which method verifies the integrity of a file?
Encryption
Compression
Obfuscation
Hashing
55
Which of the following is used to identify trends and potential issues in security logs?
NIDS
IPS
SEIM
Norton Antivirus
56
Which concept defines how long it should take to recover a system after an incident?
SLA
RTO
RPO
MOU
57
What does "defense in depth" refer to?
Firewalls at every workstation
Using deep packet inspection only
Multiple layers of security controls
A single strong firewall
58
Which of the following technologies is used for network segmentation and isolation?
VLAN
SNMP
DNS
NAT
59
What is the purpose of a vulnerability scan?
To monitor network traffic
To exploit vulnerabilities
To encrypt sensitive data
To identify and assess known vulnerabilities
60
Which term describes an individual who gains unauthorized access to systems for malicious purposes?
Grey-hat hacker
White-hat hacker
Script kiddie
Black-hat hacker
61
What does a policy of mandatory vacation help prevent?
Security vulnerabilities
Burnout
Insider threats and fraud
Overpayment
62
What is separation of duties?
Dividing tasks to prevent fraud or error
Avoiding teamwork
Using only one administrator for certain task
Keeping developers and analysts in separate rooms
63
What is a false positive in threat detection?
A legitimate activity flagged as malicious
A successful attack with minimal disruptions
A missed attack
An unpatched vulnerability
64
Which type of network device can segment traffic using VLANs?
Switch
Hub
Bridge
Repeater
65
Which regulation focuses on protecting health information in the U.S.?
HIPAA
FERPA
PCI-DSS
FISMA
66
What is the primary role of an intrusion detection system (IDS)?
Prevent Attacks
Block malware
Detect and alert suspicious activity
Encrypt data
67
What does GDPR regulate?
Personal Data protection in the EU
Health Care patient rights
Consumer internet laws
Financial reporting
68
Which document outlines roles, responsibilities, and relationships between organizations?
MOU
PO
SLA
NDA
69
Which of the following is a common social engineering attack?
ARP poisoning
Port scanning
Phishing
Buffer overflow
70
Which type of malware is designed to replicate itself and spread to other systems?
Rootkit
Trojan
Spyware
Worm
