CASP+ Chapter 4 - Review

Which of the following BEST defines risk in IT?

• You have a vulnerability with a known active threat.

• You have a threat with a known vulnerability

• You have a risk with a known threat

• You have a threat with a known exploit

Charles is a system manager. He is conducting a vulnerability assessment. Which of the following is not a requirement for him to know?

• Access controls

• Understanding of the systems to be evaluated

• Potential threats

• Passwords

Gavin has been assigned to hire a third party to do a security assessment of his automotive manufacturing plant. What type of testing will give him the most neutral review of his company's security profile?

• OSINT

• Vulnerability scanning

• No knowledge

• Blue hat

Olivia is the senior security analyst for a large online news organization. She was briefed by the incident response team that the organization has fallen victim to an XSS attack and malicious web scripting code had executed in a trusted web page. What does she do to prevent this from happening in the future?

• Make sure the web application can validate and sanitize input

• Implement patch management immediately

• Request an external penetration test

• There is no way to prevent this from happening on a publicly facing web server

Alonso, a security administrator, has been contacted by a senior human resources manager to investigate a possible situation. They suspect that malicious activities are being caused by internal personnel and need to know if it is intentional or unintentional. After investigating, you believe it is unintentional and the most likely cause is which of the following?

• Fraud

• Espionage

• Embezzlement

• Social engineering

MaryAnn work for an insurance company. The company has experienced a natural disaster and used a hot site for three months an now is going to return to the primary site. What processes should be restored first?

• Finance department

• External communication

• Mission critical

• Least-business critical

Paul has a mission-critical Windows server with the CVE-2021-24086 vulnerability in his network. It is the target of a distributed denial of service attack and has blue screened twice, Multiple systems are flooding the bandwidth of that system. Which information security goal is being impacted by this type of an attack?

• Availability

• Baselines

• Integrity

• Emergency Response

Sergio works as a security analyst for a global manufacturer. His organization has had an incident in its production environment and needs to verify that chain of custody, due diligence, and proper processes have been followed. He has been told to verify the forensic bit stream. Of the options listed, which would be done first?

• Verify backups

• Create containment

• Compare hashes

• Prepare documentation

An IoT software startup company has hired Don to provide expertise on data security. Clients are very concerned about confidentiality. If confidentiality is stressed more than availability and integrity, which of the following scenarios is the best suited for the client?

• Virtual servers in a highly available environment. The client will use redundant virtual storage and terminal services to access software.

• Virtual servers in a highly available environment. The client will use a single virtual storage and terminal services to access software.

• The client is assigned virtual hosts running on shared hardware. Physical storage is partitioned with block cipher encryption.

• The client is assigned virtual hosts running on shared hardware. Physical storage is partitioned with streaming cipher encryption.

Pieter discovered a meterpreter shell running a keylogger on the CFO's laptop. What security tenet is the keylogger most likely to break?

• Availability

• Threats

• Integrity

• Confidentiality