ACI Sec+ Midweek

Which term does NOT represent a pillar of cybersecurity?

• Authentication

• Confidentiality

• Availability

• Integrity

Answer explanation

The term 'Confidentiality' does NOT represent a pillar of cybersecurity. The pillars are Authentication, Availability, and Integrity.

What concept establishes that the parties involved in an action or event cannot deny having been involved?

• Authorization

• Non-repudiation

• Zero Trust

• Honeypot

Answer explanation

Non-repudiation establishes that the parties involved cannot deny their participation in an action or event, ensuring accountability and trustworthiness.

Which access control method is described by resource owners having the authority to grant or deny access to other users?

• RBAC

• ABAC

• MAC

• DAC

Answer explanation

The access control method described by resource owners having the authority to grant or deny access to other users is DAC (Discretionary Access Control). In DAC, users have control over their resources and can decide who can access them.

What physical access control method prevents tailgating by ensuring only one individual at a time can authenticate and be granted physical access through a barrier?

• Policy Enforcement Point

• Access badge

• Access Control Vestibule

• Control plane

Answer explanation

The physical access control method that prevents tailgating by ensuring only one individual at a time can authenticate and be granted access through a barrier is the Access Control Vestibule.

Which security category focuses on policies, procedures, and overall management of security within an organization?

• Managerial

• Operational

• Technical

• Physical

Answer explanation

The security category that focuses on policies, procedures, and overall management of security within an organization is Managerial.

Which security category is exemplified by network security, encryption, authentication mechanisms, IDSs, and firewalls?

• Managerial

• Physical

• Technical

• Operational

Answer explanation

The correct security category exemplified by network security, encryption, authentication mechanisms, IDSs, and firewalls is Technical.

An organization posts "No Trespassing" signs. What type of security control is this considered?

• Deterrent

• Detective

• Preventive

• Corrective

Answer explanation

The 'No Trespassing' signs act as a deterrent by warning individuals not to trespass, aiming to prevent unauthorized access to the organization's property.

As part of its critical workflow, an organization relies on a Windows-8-based application. The application cannot be moved to a newer OS, and the organization does not have the technical capability to write a new application for a newer OS. What type of security control should the organization consider?

• Preventive

• Directive

• Deterrent

• Compensating

Answer explanation

The organization should consider compensating security controls since it cannot upgrade the application to a newer OS and lacks the capability to develop a new one.

What is the most effective way to sanitize an SSD and retain use of it?

• Cryptographic erasure

• Degaussing

• Shredding

• Quick format

Answer explanation

Cryptographic erasure is the most effective way to sanitize an SSD while retaining its use. It securely wipes the data without damaging the drive, ensuring data security and usability.

What data sanitization method involves the use of a magnetic device?

• Cryptographic erasure

• Quick format

• Degaussing

• Shredding

Answer explanation

Degaussing is the data sanitization method that involves the use of a magnetic device, making it the correct choice.