Sec Review 1

Which of the following is considered a managerial control?

• Encryption

• Firewall

• Security Policy

• Video Surveillance

What is the primary purpose of a maintenance window in the change management process?

• To schedule a specific time frame for performing maintenance or changes to the IT systems.

• To document the approval process of the change.

• To analyze the impact of the change on the organization.

• To define the steps to revert to the original state if the change is unsuccessful.

A threat actor who is motivated by philosophical or political beliefs is typically known as a:

• Unskilled attacker

• Insider threat

• Nation-state

• Hacktivist

To prevent unauthorized devices from accessing certain parts of the network, an administrator should implement:

• Segmentation

• Decommissioning

• Patching

• Monitoring

What is the primary advantage of Infrastructure as Code (IaC)?

• It provides a real-time operating system.

• Ease of deployment and scalability.

• It reduces the cost of physical infrastructure.

• It replaces the need for cloud solutions.

Which of the following is considered non-human-readable data?

• Printed financial reports

• Encrypted email message

• Organizational policy in PDF format

• Bar graph depicting quarterly profits

After patching a system to address a known vulnerability, what should be done next to ensure the vulnerability has been resolved?

• Enumeration.

• Prioritize other vulnerabilities.

• Activate compensating controls.

• Validation of remediation.

Which tool is specifically designed to detect malicious activities on an endpoint and respond by removing or containing the threat?

• Endpoint detection and response (EDR)

• File integrity monitoring

• Data loss prevention (DLP)

• URL scanner

What is a primary concern when introducing automation and orchestration in security operations?

• Continuous integration and testing

• Enabling/disabling services and access

• Complexity

• Workforce multiplier

Which term represents the amount of financial loss expected from a single threat event affecting an asset?

• Impact

• Annualized loss expectancy (ALE)

• Single loss expectancy (SLE)

• Likelihood