8 2c

What is the primary goal of network vulnerability mitigation?

• To enhance network speed

• To increase data storage capacity

• To protect against threats and unauthorized access

• To reduce the cost of network maintenance

Which of the following is NOT a common network threat mentioned in the text?

• System crashes

• Unauthorized access

• Data manipulation

• Internal controls

According to the text, what does NIST define as fault tolerance?

• The ability of a system to operate without electricity

• The ability of a system to prevent all cyber attacks

• The property of a system that allows proper operation even if components fail

• The process of updating system software regularly

What is a recommended solution for achieving fault tolerance in a network?

• Using a single power supply

• Limiting access to the network

• Implementing Redundant Arrays of Independent Disks (RAIDs)

• Decreasing the number of servers

What is the primary benefit of implementing the Principle of Least Privilege (PoLP) in assigning rights and permissions?

• To give everyone equal access

• To minimize security risks by limiting access

• To increase system efficiency by allowing more access

• To simplify the management of network systems

What is the role of an Access Control List (ACL) in a system?

• It defines the physical components of a system

• It lists the users who can access the system hardware

• It specifies what users can and cannot do within a system

• It monitors and logs user activity on a system

According to the text, why is it important to have data backups?

• To prevent system crashes

• To restore lost data in the event of a system failure

• To increase data processing speed

• To comply with user access policies

What does NIST define as malware?

• A program that is covertly inserted into another program to destroy data.

• A software that enhances the performance of a system.

• A tool used for data recovery.

• A network service that improves data availability.

According to NIST, what is social engineering?

• The process of improving social skills via technology.

• The act of deceiving individuals to gain unauthorized access or information.

• A method of securing networks against unauthorized access.

• The study of social interactions in a digital environment.

What is phishing often used for in the context of social engineering?

• To verify legitimate user credentials.

• To enhance the security of online transactions.

• To fraudulently obtain private information by posing as a legitimate source.

• To provide educational information about cybersecurity.