Sec Review 2

A network appliance that inspects traffic at both the transport and application layers, and can make decisions based on both is known as:

• Web application firewall (WAF)

• Next-generation firewall (NGFW)

• Intrusion detection system (IDS)

• Unified threat management (UTM)

When deploying IoT devices in an organization, what is a critical initial step to enhance security?

• Hardening the device configurations.

• Assigning them public IP addresses.

• Using the same password for all devices for uniformity.

• Regularly rebooting the devices.

When trying to streamline the access to a cloud application from the company’s internal application, which authentication mechanism would be best to use?

• Security Assertions Markup Language (SAML)

• Multifactor authentication

• File integrity monitoring

• Federation

The right for an individual to have their personal data erased by an entity that is storing it, especially online, is referred to as:

• Data integrity

• Right to be forgotten

• Data retention

• Data accountability

Which of the following best defines the maximum time an organization aims to recover its operations after a disaster?

• Recovery point objective (RPO)

• Recovery time objective (RTO)

• Mean time between failures (MTBF)

• Annualized loss expectancy (ALE)

During an incident response, what is the first stage to consider?

• Eradication

• Preparation

• Analysis

• Recovery

An organization wants to ensure that only HTTPS traffic is allowed while blocking HTTP. Which of the following would be the MOST effective in achieving this?

• Adjust the group policy to deny web traffic.

• Implement data loss prevention (DLP) on all network traffic.

• Modify firewall rules to block port 80.

• Modify firewall rules to block port 443.

Which of the following vulnerability identification methods involves paying independent security researchers for discovering and reporting vulnerabilities?

• Vulnerability scanning.

• Penetration testing.

• Threat feed.

• Bug bounty program.

An organization wants to ensure that its data cannot be accessed outside the United States due to regulatory requirements. Which method would be most appropriate?

• Geographic restrictions

• Hashing

• Tokenization

• Encryption

What is the primary goal of software-defined networking (SDN)?

• Ensure high availability.

• Logical segmentation and management of network resources.

• Provide real-time operating capabilities.

• Reduce power consumption.