SEC+ Mod 3 Part 2

Which of the following is a key practice in Patch Management?

• Keeping all software, operating systems, and applications up to date with security patches.

• Assigning permissions and access rights to all users.

• Disabling unnecessary services and ports.

• Educating users about security best practices.

Answer explanation

Keeping all software, operating systems, and applications up to date with security patches is a key practice in Patch Management.

What does the principle of Least Privilege ensure?

• All users have full access to all systems.

• Users and systems are provided with only the minimum access required to accomplish their tasks.

• All unnecessary services are enabled.

• Networks are segmented to limit lateral movement.

Answer explanation

Users and systems are provided with only the minimum access required to accomplish their tasks.

Which of the following is NOT a security measure mentioned in the document?

• Patch Management

• Least Privilege

• Network Segmentation

• Full System Access

Answer explanation

The correct choice is 'Full System Access' because it is NOT a security measure mentioned in the document.

What is the purpose of Network Segmentation?

• To provide full access to all users.

• To segment networks and limit lateral movement and isolate critical assets.

• To disable unnecessary services.

• To educate users about security best practices.

Answer explanation

To segment networks and limit lateral movement and isolate critical assets.

Which of the following is a security tool mentioned for Implementing Security Controls?

• Antivirus

• Network Segmentation

• Patch Management

• User Training

Answer explanation

The security tool mentioned for Implementing Security Controls is Antivirus.

What is the focus of User Training in security measures?

• Educating users about security best practices.

• Disabling unnecessary services.

• Keeping software up to date.

• Segmenting networks.

Answer explanation

User Training in security measures focuses on educating users about security best practices to enhance overall security awareness and reduce risks associated with human error.

Which of the following should be considered when placing and configuring security devices?

• Device connectivity and failure modes.

• User access levels.

• Software update schedules.

• Network segmentation.

Answer explanation

Device connectivity and failure modes should be considered when placing and configuring security devices to ensure proper functionality and response in case of failures.

What is the primary purpose of implementing access control in a secure network?

• To ensure only authorized devices and users can connect to the network

• To increase the speed of the network

• To reduce the cost of network maintenance

• To allow unrestricted access to all users

Answer explanation

To ensure only authorized devices and users can connect to the network

Which encryption protocols are mentioned for securing data in transit?

• SSL/TLS

• HTTP/HTTPS

• FTP/SFTP

• SMTP/POP3

Answer explanation

SSL/TLS encryption protocols are mentioned for securing data in transit, making it the correct choice.

What is the purpose of network segmentation?

• To divide the network into separate zones or segments with its own access controls

• To increase the number of devices on the network

• To reduce the physical size of the network

• To allow all devices to communicate without restrictions

Answer explanation

To divide the network into separate zones or segments with its own access controls