Sec Review 5

An administrator notices a sudden spike in system resource consumption, especially bandwidth, with no obvious reason. What might this indicate?

• An impending hardware failure

• A scheduled backup process

• An ongoing DDoS attack

• Regular software updates

Which of the following is NOT a mitigation technique used to secure an enterprise?

• Hardening techniques

• Side loading

• Access control

• Least privilege

A type of malware that holds user data hostage by encrypting it and demanding payment for the decryption key is known as:

• Logic bomb

• Ransomware

• Worm

• Spyware

A company needs a solution to ensure its remote workers can securely access the corporate network. Which of the following is best suited for this purpose?

• Virtual private network (VPN)

• Load balancer

• Intrusion prevention system (IPS)

• Software-defined wide area network (SD-WAN)

Which wireless security protocol provides the strongest encryption and security capabilities as of the most recent standards?

• WEP.

• WPA.

• Open authentication.

• WPA3.

A user has been given temporary elevated access to a database for a specific task. Which concept best describes this kind of permission granting?

• Multifactor authentication

• Just-in-time permissions

• Role-based access control

• Discretionary access control

During a penetration test, an attacker has no prior knowledge of the network infrastructure. Which type of testing environment does this represent?

• Known environment

• Unknown environment

• Integrated environment

• Partially known environment

Which type of governance structure represents the highest level of authority in an organization and might include executive members?

• Boards

• Centralized entities

• Government entities

• Committees

An employee was given a USB stick at a conference, which they want to use at work. Before using it, what is the best security measure they should take?

• Copy the USB contents to the cloud.

• Have the IT department scan it for malware.

• Format the USB stick.

• Use it on a personal computer first.

An organization has set a specific boundary beyond which the risk becomes unacceptable. This boundary is known as:

• Risk threshold

• Risk appetite

• Risk tolerance

• Risk assessment