Anny recently implemented an intrusion prevention system designed to block common network attacks from affecting his organization. What type of risk management strategy is Anny pursuing?

• Risk Mitigation

• Risk Acceptance

• Risk Avoidance

• Risk Transference

Answer explanation

Anny is pursuing a risk mitigation strategy by implementing an intrusion prevention system to block network attacks.

Which of the following principles expects an individual to behave reasonably under any given circumstance?

• Due Care

• Due Diligence

• Separation of Duties

• Least Privilege

Answer explanation

Due Care expects an individual to behave reasonably under any given circumstance.

What type of malware is characterized by spreading from system to system under its own power by exploiting vulnerabilities that do not require user intervention?

• Worm

• Trojan Horse

• Virus

• Logic Bomb

Answer explanation

A worm is a type of malware that spreads from system to system without user intervention by exploiting vulnerabilities. It is the correct choice because it spreads autonomously.

Which one of the following security programs is designed to establish a minimum standard common denominator of security understanding?

• Awareness

• Training

• Education

• Indoctrination

Answer explanation

Awareness is a security program that establishes a minimum standard of security understanding. It promotes knowledge and highlights the correct choice.

Which one of the following is an example of physical infrastructure hardening?

• Fire Suppression System

• Two Factor-Authentication

• Hardware-based Network Firewall

• Antivirus Software

Answer explanation

Physical infrastructure hardening includes measures such as installing fire suppression systems to protect against fire hazards.

Which information security goal is impacted when an organization experiences a DoS or DDoS attack?

• Integrity

• Confidentiality

• Availability

• Authenticity

Answer explanation

A DoS or DDoS attack impacts the availability of an organization's systems, making them inaccessible to users.

 What is the best way to provide accountability for the use of identities?

• Logging

• Authorization

• Digital Signatures

• Type 1 Authentication

Answer explanation

Logging is the best way to provide accountability for the use of identities. It allows tracking and auditing of identity-related activities, ensuring transparency and accountability.

Management support is critical to the success of a business continuity plan. Which of the following should be provided to the management to obtain their support?

• Business Case

• Business Impact Analysis

• Risk Analysis

• Threat Report

Answer explanation

To obtain management support for a business continuity plan, provide a concise Business Case highlighting the benefits and ROI.

Which of the following is a critical first step in disaster recovery and contingency planning?

• Complete a Business Impact Analysis

• Plan Testing and Drills

• Determine Offsite Backup Facility Alternatives

• Organize and Create Relevant Documentation

Answer explanation

A critical first step in disaster recovery and contingency planning is to complete a Business Impact Analysis, which helps identify potential risks and prioritize recovery efforts.

What type of encryption is typically used for data at rest?

• Symmetric Encryption

• Asymmetric Encryption

• DES

• OTP

Answer explanation

Symmetric encryption is typically used for data at rest. It is a type of encryption where the same key is used for both the encryption and decryption of the data. This ensures that the data remains secure and can only be accessed by authorized parties.