Question 1

Below email is an example of _________:

Accepted Answer

A)  sniffing 
B)  spoofing 
C)  monitoring 
D)  phishing 
E)  scanning 
A)  sniffing 
B)  spoofing 
C)  monitoring 
D)  phishing 
E)  scanning D

Question 2

Maintaining a reliable backup system of corporate database satisfies what aspect of security requirements?

Accepted Answer

A)  Confidentiality 
B)  Data integrity 
C)  Authentication 
D)  Authorization 
E)  Availability 
A)  Confidentiality 
B)  Data integrity 
C)  Authentication 
D)  Authorization 
E)  Availability E

Question 3

The following elements/activities cut across all security layers in realizing defense-in-depth EXCEPT:

Accepted Answer

A)  Corporate-wide data encryption 
B)  Regulatory compliance self-assessment 
C)  Security policies & procedures 
D)  Security awareness & training 
E)  Information security self-assessment 
A)  Corporate-wide data encryption 
B)  Regulatory compliance self-assessment 
C)  Security policies & procedures 
D)  Security awareness & training 
E)  Information security self-assessment A

Question 4

In realizing the defense-in-depth principle, the perimeter security technologies of a business organization include the following EXCEPT:

Accepted Answer

A)  Border firewalls 
B)  Corporate file access control 
C)  Access Control List (ACL) on border routers 
D)  Demilitarized zone (DMZ) 
E)  Proxy servers 
A)  Border firewalls 
B)  Corporate file access control 
C)  Access Control List (ACL) on border routers 
D)  Demilitarized zone (DMZ) 
E)  Proxy servers

Question 5

Which of the following is NOT a technology solution intended for authentication?

Accepted Answer

A)  Password and passphrase 
B)  Access control list (ACL) 
C)  Digital signature and digital certificate 
D)  Biometric solutions (e.g., fingerprints). 
E)  Security token 
A)  Password and passphrase 
B)  Access control list (ACL) 
C)  Digital signature and digital certificate 
D)  Biometric solutions (e.g., fingerprints). 
E)  Security token

Question 6

Which is NOT a primary security requirement?

Accepted Answer

A)  confidentiality (privacy) 
B)  data integrity 
C)  authentication 
D)  access control 
E)  spoofing detection 
A)  confidentiality (privacy) 
B)  data integrity 
C)  authentication 
D)  access control 
E)  spoofing detection

Question 7

Maintaining data privacy achieves the _________ aspect of security requirement.

Accepted Answer

A)  confidentiality 
B)  integrity 
C)  authentication 
D)  access control 
E)  reliability 
A)  confidentiality 
B)  integrity 
C)  authentication 
D)  access control 
E)  reliability

Question 8

_____ is a process that validates "you are the person/system you claim to be."

Accepted Answer

A)  Address filtering 
B)  Challenging 
C)  Certification 
D)  Authentication 
E)  Authorization 
A)  Address filtering 
B)  Challenging 
C)  Certification 
D)  Authentication 
E)  Authorization

Question 9

The following technology solution represents an example of the 'simplicity' principle EXCEPT:

Accepted Answer

A)  Relying on a single sign-on based password manager 
B)  Enabling automatic full disk encryption to protect data with no productivity sacrifice 
C)  Automated data and file backups 
D)  Deploying all VPN connections in the transport mode 
E)  Using passphrases rather than passwords 
A)  Relying on a single sign-on based password manager 
B)  Enabling automatic full disk encryption to protect data with no productivity sacrifice 
C)  Automated data and file backups 
D)  Deploying all VPN connections in the transport mode 
E)  Using passphrases rather than passwords

Question 10

Which CORRECTLY pairs a security layer and an available technology in realizing the defense-in-depth principle?

Accepted Answer

A)  Data security -- Access Control List (ACL) on border routers 
B)  Application security -- Hardening intermediary devices 
C)  Host security -- Anti-virus protection 
D)  Internal network security -- Corporate-wide data encryption 
E)  Perimeter security -- Network segmentation (e.g., subnets, VLANs) 
A)  Data security -- Access Control List (ACL) on border routers 
B)  Application security -- Hardening intermediary devices 
C)  Host security -- Anti-virus protection 
D)  Internal network security -- Corporate-wide data encryption 
E)  Perimeter security -- Network segmentation (e.g., subnets, VLANs)

Question 11

The defense-in-depth principle may include security measures of the following layers. Which layer is LEAST relevant?

Accepted Answer

A)  Application security 
B)  External network security 
C)  Host security 
D)  Internal network security 
E)  Perimeter security 
A)  Application security 
B)  External network security 
C)  Host security 
D)  Internal network security 
E)  Perimeter security

Question 12

The following figure is an example of ___________ attack.

Accepted Answer

A)  social engineering 
B)  denial of service 
C)  malware 
D)  fingerprinting 
E)  man-in-the-middle 
A)  social engineering 
B)  denial of service 
C)  malware 
D)  fingerprinting 
E)  man-in-the-middle

Question 13

The following figure demonstrates the ________ principle in security.

Accepted Answer

A)  Limiting 
B)  Simplicity 
C)  Layering 
D)  Defense-in-depth 
E)  Hiding 
A)  Limiting 
B)  Simplicity 
C)  Layering 
D)  Defense-in-depth 
E)  Hiding

Below email is an example of _________:

Maintaining a reliable backup system of corporate database satisfies what aspect of security requirements?

The following elements/activities cut across all security layers in realizing defense-in-depth EXCEPT:

In realizing the defense-in-depth principle, the perimeter security technologies of a business organization include the following EXCEPT:

Which of the following is NOT a technology solution intended for authentication?

Which is NOT a primary security requirement?

Maintaining data privacy achieves the _________ aspect of security requirement.

_____ is a process that validates "you are the person/system you claim to be."

The following technology solution represents an example of the 'simplicity' principle EXCEPT:

Which CORRECTLY pairs a security layer and an available technology in realizing the defense-in-depth principle?

The defense-in-depth principle may include security measures of the following layers. Which layer is LEAST relevant?

The following figure is an example of ___________ attack.

The following figure demonstrates the ________ principle in security.

Networking: Fundamental Concepts

Essential Layers of Computer Networking

Ip Address Planning and Management

Intermediary Devices

Wi-Fi and Cellular Network

Ethernet Lan

Cybersecurity: Threats

Cybersecurity: Network and Host Protection

Cybersecurity: Data Protection

Fundamentals of Packet Routing

Wide Area Network

Physical Layer Data Transmissions

Enterprise Network: LAN Topology, Routing, and Connectivity

Filters

Exam 2: Cybersecurity: Fundamentals

Below email is an example of _________:

Maintaining a reliable backup system of corporate database satisfies what aspect of security requirements?

The following elements/activities cut across all security layers in realizing defense-in-depth EXCEPT:

In realizing the defense-in-depth principle, the perimeter security technologies of a business organization include the following EXCEPT:

Which of the following is NOT a technology solution intended for authentication?

Which is NOT a primary security requirement?

Maintaining data privacy achieves the _________ aspect of security requirement.

_____ is a process that validates "you are the person/system you claim to be."

The following technology solution represents an example of the 'simplicity' principle EXCEPT:

Which CORRECTLY pairs a security layer and an available technology in realizing the defense-in-depth principle?

The defense-in-depth principle may include security measures of the following layers. Which layer is LEAST relevant?

The following figure is an example of ___________ attack.

The following figure demonstrates the ________ principle in security.

Networking: Fundamental Concepts

Essential Layers of Computer Networking

Ip Address Planning and Management

Intermediary Devices

Wi-Fi and Cellular Network

Ethernet Lan

Cybersecurity: Threats

Cybersecurity: Network and Host Protection

Cybersecurity: Data Protection

Fundamentals of Packet Routing

Wide Area Network

Physical Layer Data Transmissions

Enterprise Network: LAN Topology, Routing, and Connectivity

Filters