SecPlus_Quiz_Review

Multiple Choice

A security manager is assessing the potential financial impact of a cyberattack on critical company data. The manager determines that a breach could result in a 50% loss of asset value. What metric is being used?

• ALE — Annual Loss Expectancy

• SLE — Single Loss Expectancy

• EF — Exposure Factor

• ARO — Annualized Rate of Occurrence

Multiple Choice

A cloud security team is concerned about attackers using stolen credentials to access resources. What control can detect and block suspicious login attempts?

• A.  Secure Boot

• B.  IPS — Intrusion Prevention System

  
  

• C.  TLS — Transport Layer Security

  
  

• D.  Conditional Access Policies

  
  

Multiple Choice

A security operations center (SOC) analyst is overwhelmed by the high volume of security alerts. What strategy would help mitigate this issue?

• Removing all automated alerting

  
  

• Assigning a dedicated team for high-volume alerts

  
  

• Increasing the alert thresholds

• Disabling SIEM logging

Multiple Choice

A security engineer wants to protect a cloud environment from compromised accounts. What security measure should be implemented?

• Conditional Access Policies

• Patch Management

• One-Time Passwords (OTP)

• Secure Email Gateway

Multiple Choice

A SIEM system needs to track failed login attempts across multiple devices using firewall logs to detect a brute-force attack. What technique should be used?

• Network Segmentation

• Log Aggregation

• Data Obfuscation

• Log Correlation

Multiple Choice

What is the correct answer for the function that analyzes relationships and patterns across multiple log sources?

• A. Network Segmentation

• B. Log Aggregation

• C. Data Obfuscation

• D. Log Correlation

Multiple Choice

A security administrator needs to enforce a policy preventing unauthorized data uploads to external websites. What should they implement?

• A.  Secure File Transfer Protocol (SFTP)

• B.  Virtual Private Network (VPN) Enforcement

• C.  Web Content Filtering

• D.  Cloud DLP — Data Loss Prevention