Which of the following best describes the purpose of a data handling policy?

To establish guidelines for the proper handling of data.

To ensure that data is accessible to all employees.

To delegate responsibility for data handling to a third-party provider.

To prevent any access to data by employees.

Which of the following best describes a digital signature?

A mathematical scheme that verifies the authenticity and integrity of a digital message or document

An electronic image of a handwritten signature

A password used to access a digital account

What are some methods of data destruction?

Overwriting, physical destruction, and degaussing.

Encryption, compression, and backup.

Archiving, metadata removal, and compression.

How can data remanence be addressed?

By using secure data destruction techniques

By using data encryption to protect sensitive data

By performing regular backups of important data

By implementing access controls to restrict who can view or modify data

What is the primary objective of change management in cybersecurity?

To minimize the impact of changes to security measures.

To increase the complexity of security measures.

To delegate responsibility for changes to a third-party provider.

To eliminate all cybersecurity risks.

What are the key topics covered in security awareness training?

Phishing, password management, data protection, mobile device security, social engineering

Employee benefits, HR policies, supply chain management, workplace culture

Physical security, workplace safety, first aid, emergency response procedures

Customer service, software tools, data analysis, financial management, marketing strategies

Which of the following is an advantage of using symmetric encryption algorithms?

They are faster and more efficient than asymmetric encryption algorithms

They do not require a shared secret key

They can be used for digital signatures and key exchange

They are more secure than asymmetric encryption algorithms

Why is it important to regularly review and update an AUP?

To keep the policy up-to-date with changing technology and security risks.

To make the policy more restrictive and limit employee access.

To ensure that employees are following the policy.

To delegate responsibility for policy management to a third-party provider.

What is a privacy policy?

A legal document that outlines an organization's data protection practices and how it handles personal information

A document that outlines an organization's employee benefits and compensation policies

A marketing tool used by organizations to promote their products or services

A document that outlines an organization's financial policies and procedures

What is the purpose of a security information and event management (SIEM) system?

To collect, correlate, and analyze logs and events from multiple sources

To delete logs and events that are no longer needed

To provide a backup of all system and network data

To block all incoming network traffic

What is the primary disadvantage of a packet filtering firewall?

They are unable to filter traffic based on application layer protocols.

They are unable to block traffic based on IP addresses.

They are unable to maintain state information about connections.

They are vulnerable to attacks that exploit network-layer protocols.

Which of the following is a valid shortening of the IPv6 address "2001:0db8:85a3:0000:0000:8a2e:0370:7334"?

"20:01:db:8:85:a3:0:0:8a:2e:37:0:73:34"

"2001:db8:85a3:0:0:8a2e:370:7334"

"2:01:d:b:8:85:a3:0:0:8:a2:e:3:7:0:73:34"

What is the difference between a managed service provider (MSP) and a cloud service provider (CSP)?

CSPs provide SaaS, PaaS, or IaaS, while MSPs provide managed IT services

MSPs provide IT consulting services, while CSPs manage cloud infrastructure

MSPs and CSPs are the same thing

MSPs manage IT infrastructure, while CSPs provide cloud-based services

Which of the following is a key function of an antivirus program?

Detecting and removing malware.

Protecting against zero-day attacks.

Blocking unauthorized access to the network.

Preventing denial-of-service attacks.

What is the main difference between a DoS and a DDoS attack?

A DoS attack is launched from a single computer, while a DDoS attack uses multiple computers.

There is no difference between a DoS and a DDoS attack.

A DDoS attack is carried out by a single attacker, while a DoS attack involves multiple attackers.

A DoS attack is designed to overwhelm a single server, while a DDoS attack is designed to overwhelm multiple servers.

Which of the following parties is responsible for drafting a Memorandum of Understanding (MOU) or a Memorandum of Agreement (MOA)?

Both parties involved in the agreement

The party with the most negotiating power

The legal department of one of the parties involved in the agreement

The party with the most to gain from the agreement

Which of the following is an example of a Man-in-the-Middle (MITM) attack?

A hacker intercepts communication between two parties to steal data

A hacker sends an email pretending to be a legitimate company to steal login credentials

A hacker uses malware to control a victim's computer

A hacker uses a fake website to steal personal information

What is a hybrid cloud, and what are some benefits of using one?

A hybrid cloud is a cloud computing model that combines public and private clouds. It provides the ability to balance cost and control

Hybrid cloud is an environment where computing resources are dedicated to a single organization which provides more security

hybrid cloud is a cloud computing model that combines public and community clouds which provides better infrastructure

In a hybrid cloud, computing resources are shared among multiple organizations and are provided over the internet by a third-party

What is the main difference between a virus and a worm?

A worm can replicate on its own, while a virus cannot.

A virus is a program that is attached to a file, while a worm is a standalone program.

A worm spreads through email, while a virus spreads through instant messaging.

A virus is designed to harm a computer system, while a worm is not.

Which of the following is an example of a zero-day attack?

A new malware variant that exploits a previously unknown vulnerability.

A malware variant that uses an existing exploit.

A phishing email that contains a malicious attachment.

A brute-force attack that attempts to guess a user's password.

How can nmap/zenmap be used for vulnerability scanning?

By identifying potential vulnerabilities based on version information of software running on network devices.

By scanning for open ports on network devices.

By identifying hosts and services on a network.

By testing the strength of user passwords on a network.

Which of the following best describes an SLA?

A legal contract between a service provider and a client that outlines the quality and scope of the services

A non-binding agreement between a service provider and a client that outlines the quality and scope of the services

A binding agreement between a service provider and a client that outlines the quantity of services provided.

An informal agreement between a service provider and a client that outlines the quality and scope of the services

What is the primary function of a traditional firewall?

To filter network traffic based on predefined rules.

To monitor network traffic for signs of malware.

To block all incoming and outgoing network traffic.

To encrypt network traffic to prevent interception.

How does a virus spread to other systems?

Through infected software downloads

In an organization that uses Discretionary Access Control (DAC), a user wants to grant access to a file he created to a colleague. What is the user's next step?

The user can grant the access to the colleague without any additional approval.

The user must modify the file permissions and add the colleague to the access control list.

The user must obtain approval from the resource owner before granting access to the colleague.

The user must obtain approval from the system administrator before granting access to the colleague.

What is the benefit of implementing the Principle of Least Privilege?

It reduces the potential damage from a security breach or human error.

It makes it easier for employees to do their jobs.

It increases the amount of access employees have to sensitive information.

It increases the risk of data breaches.

Which of the following is a limitation of MAC?

It can be too rigid and inflexible.

It can be easily circumvented by malicious users.

It can result in users having too much access to resources.

It can be difficult to implement and manage.

What is the purpose of Crime Prevention Through Environmental Design (CPTED)?

To decrease crime through physical design and management of the built environment

To increase crime through physical design and management of the built environment

To have no impact on crime through physical design and management of the built environment

To increase crime through law enforcement practices

What is the main purpose of a mantrap in physical security?

To allow entry of only one person at a time

What is the importance of testing an IT business continuity plan?

To ensure that the plan is up-to-date and relevant to current business operations

To identify and resolve potential problems before a disaster occurs

To determine the effectiveness of the plan in the event of a disaster

What is the purpose of a cold site?

To provide an unused facility that can be converted to a functional backup site in the event of a disaster

To provide a means of recovering data in the event of a disaster

To provide a plan for restoring normal business operations in the event of a disaster

To provide a minimal level of infrastructure that can be used in the event of a disaster

What is the role of a business impact analysis in an IT disaster recovery plan?

To determine the impact of a disaster on the organization's operations

To develop a strategy for restoring normal business operations as quickly as possible

To identify the critical business processes that must be protected

CC exam V3

Quiz

•

Computers

•

University

•

Practice Problem

•

Hard

Yuri Bullcatsz

FREE Resource

100 questions

Show all answers

1.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

Which of the following is an example of an information asset registry?

A list of all the suppliers and vendors used by an organization

A database of all the financial transactions of an organization

A list of all the employees in an organization and their roles

A list of all the hardware and software assets in an organization

2.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

Which of the following is an important consideration when implementing system hardening measures?

System hardening measures should be tested and evaluated to ensure that they are effective.

Password policies should be relaxed to make it easier for users to access the system.

System performance should always be prioritized over security.

All security measures should be disabled when performing software updates.

3.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

How can security awareness training be integrated into everyday work activities?

By hosting regular in-person seminars or workshops

By requiring employees to complete a training course before accessing company resources

By providing employees with security-related tasks to complete as part of their job responsibilities

By providing ongoing reminders and updates about security best practices through email or messaging systems

4.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

Which of the following is an example of system hardening?

Allowing all incoming traffic through a firewall.

Disabling unnecessary services and ports on a server.

Allowing users to connect to a network without a password.

Enabling all user accounts with administrative privileges.

5.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

What is the difference between a log and an event?

A log is a record of events, while an event is a specific occurrence

A log is a record of security-related events, while an event is a record of all types of events

A log and an event are the same thing

A log is a specific occurrence, while an event is a record of events

6.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

What are some best practices for data retention?

Deleting all data as soon as it is no longer needed, regardless of legal or business requirements.

None

Storing all data indefinitely, regardless of its importance or sensitivity.

Regularly reviewing and updating data retention policies to ensure compliance with regulatory requirements.

7.

MULTIPLE CHOICE QUESTION

10 mins • 1 pt

What are some examples of storage devices where data remanence can occur?

Hard disk drives

USB flash drives

Solid-state drives

All options

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

100 questions

STS101_MidtermExam

Quiz

•

University

101 questions

Linked List Quiz

Quiz

•

University

102 questions

UTS2024C-Susulan

Quiz

•

University

100 questions

FCPC-HCI-FinalExam

Quiz

•

University

100 questions

1er Parcial Comunicación entre computadoras

Quiz

•

University

100 questions

QUIZ SEMESTER 1

Quiz

•

University

100 questions

NWC204 module 1-2-3

Quiz

•

University

102 questions

C# NAHU!!!

Quiz

•

University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

20 questions

Figurative Language Review

Quiz

•

6th Grade

Discover more resources for Computers

30 questions

Quiz 1 Review

Quiz

•

University

CC exam V3

100 questions

Which of the following is an example of an information asset registry?

Which of the following is an important consideration when implementing system hardening measures?

How can security awareness training be integrated into everyday work activities?

Which of the following is an example of system hardening?

What is the difference between a log and an event?

What are some best practices for data retention?

What are some examples of storage devices where data remanence can occur?

Which of the following best describes the purpose of a data handling policy?

What are some legal and regulatory requirements related to data destruction?

Which of the following best describes a digital signature?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers