Network Appsec 1

Which of the following is not a component of the CIA Triad?

• Authentication

• Confidentiality

• Availability

• Integrity

Which of the following refers to restriction of data access to only authorized parties?

• Firewalls

• Access Control Lists

• Confidentiality

• Integrity

Which of the following are examples of assets (choose 2)?

• Servers

• Customer Data

• Encryption

• Hackers

Which of the following are preventative controls (Choose 2):

• SIEM Rules

• Education & Training

• Access Controls

• IDS

Which of the following are (at least) detection controls (Choose 2):

• IDS

• 2FA

• EDR

• Secure Email Gateways

According to the NIST framework, there are four crucial steps for responding to cybersecurity incidents. Which of the following is NOT included in the framework?

• Identification

• Detection & Analysis

• Preparation

• Containment, Eradication & Recovery

Which type of firewall keeps track of all communication sessions?

• Network

• Stateful

• Packet Filtering

• Host-based

Of the choices below, which type of firewall operates at the highest layer of the OSI model?

• Circuit-level gateway

• WAF

• Stateful

• Packet Filtering

Endpoint Detection and Response tools (EDR) can be classified as what?

• signature-based antivirus

• behavior-based antivirus

• both

Which security tool is most likely to detect or prevent an insider threat attempting to transfer sensitive data outside of their organization?

• Access Controls

• Firewalls

• DLP

• EDR