Module 1 - General Security Concepts

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

• Key stretching
• Data masking
• Steganography
• Salting

Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?

• Compensating control
• Network segmentation
• Transfer of risk
• SNMP traps

Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

• Integrity
• Availability
• Confidentiality
• Non-repudiation

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

• Corrective
• Preventive
• Detective
• Deterrent

An administrator notices that several users are logging in from suspicious IP addresses. After speaking with the users, the administrator determines that the employees were not logging in from those IP addresses and resets the affected users' passwords. Which of the following should the administrator implement to prevent this type of attack from succeeding in the future?

• Multifactor authentication
• Permissions assignment
• Access management
• Password complexity

An analyst is evaluating the implementation of Zero Trust principles within the data plane. Which of the following would be most relevant for the analyst to evaluate?

• Secured zones
• Subject role
• Adaptive identity
• Threat scope reduction

A security administrator would like to protect data on employees' laptops. Which of the following encryption techniques should the security administrator use?

• Partition
• Asymmetric
• Full disk
• Database

Which of the following security control types does an acceptable use policy best represent?

• Detective
• Compensating
• Corrective
• Preventive

Which of the following should a security administrator adhere to when setting up a new set of firewall rules?

• Disaster recovery plan
• Incident response procedure
• Business continuity plan
• Change management procedure

A technician needs to apply a high-priority patch to a production system. Which of the following steps should be taken first?

• Air gap the system
• Move the system to a different network segment
• Create a change control request
• Apply the patch to the system