PRE TEST FORUM OKI

Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).

• Confidentiality

• Availability

• Integrity

• Continuity

• Authentication

Answer explanation

The concepts included on the three sides of the 'security triangle' are Confidentiality, Availability, and Integrity.

What type of attack involves sending a fake link to multiple users in order to obtain sensitive information?

• Phishing

• Ransomware

• SQL Injection

• Spoofing

Answer explanation

Phishing involves sending fake links to obtain sensitive information from multiple users, making it the correct choice for this type of attack.

Which attack type involves receiving an automated phone call from a seemingly legitimate source to extract credit card information?

• Smishing

• Hoax

• Vishing

• Spoofing

Answer explanation

Vishing involves receiving an automated phone call from a seemingly legitimate source to extract credit card information.

What asset is commonly targeted for Data Loss Prevention (DLP) purposes?

• Application server content

• USB mass storage devices

• Reverse proxy

• Print server

Answer explanation

USB mass storage devices are commonly targeted for Data Loss Prevention (DLP) purposes due to the risk of data leakage through portable storage devices.

A hacker has discovered a simple way to disrupt business for the day in a small company which relies on staff working remotely. In a matter of minutes the hacker was able to deny remotely working staff access to company systems with a script. Which of the following security controls is the hacker exploiting?

• DoS

• Account lockout

• Password recovery

• Password complexity

Answer explanation

The hacker is exploiting the account lockout security control by denying remotely working staff access to company systems with a script.

A user ID and password together provide which of the following?

• Authorization

• Validation

• Encryption

• Authentication

Answer explanation

A user ID and password together provide Authentication, which verifies the identity of the user trying to access a system or application.

Pete, an employee, attempts to visit a popular social networking site but is blocked. Instead, a page is displayed notifying him that this site cannot be visited. Which of the following is MOST likely blocking Pete's access to this site?

• Internet content filter

• Firewall

• Proxy server

• Protocol analyzer

Answer explanation

Pete is most likely blocked by an Internet content filter, which restricts access to certain websites based on content categories.

An internal auditing team would like to strengthen the password policy to support special characters. Which of the following types of password controls would achieve this goal?

• Add reverse encryption

• Password complexity

• Increase password length

• Allow single sign on

Answer explanation

To support special characters, the auditing team should implement password complexity controls, which typically require the use of special characters in passwords.

A network administrator uses an RFID card to enter the datacenter, a key to open the server rack, and a username and password to logon to a server. These are examples of which of the following?

• Biometric authentication

• Single-factor authentication

• Two-factor authentication

• Multi-factor authentication

Answer explanation

The network administrator uses multiple factors (RFID card, key, username/password) for authentication, which falls under multi-factor authentication.

A security administrator is reviewing the below output from a password auditing tool:

P@ss.

@pW1.

S3cU4

 

Which of the following additional policies should be implemented based on the tool's output?

• Decrease minimum password length, allow only numbers, enforce special characters

• Require mix of uppercase and lowercase letters, allow repeating characters, enforce special characters

• Increase minimum password length, allow dictionary words, require mix of uppercase and lowercase letters

• Increase minimum password length, enforce special characters, require mix of uppercase and lowercase letters

Answer explanation

Increase minimum password length, enforce special characters, require mix of uppercase and lowercase letters