Day 5 Quiz - Security Capabilities

Objective 1.1/Day 5 -

Match each description with the correct type of security control:

• Physical

• Provides an alternative measure when the primary control fails or is insufficient.

• Technical

• Controls that include the creation and enforcement of security policies, procedures, and regulations to manage security practices.

• Operational

• Controls that involve implementing and configuring security technologies, such as firewalls and intrusion detection systems.

• Compensating

• Controls that focus on protecting physical environments, such as locks, security cameras, and access control systems.

• Managerial

• Controls that encompass daily operational practices and procedures, such as user training, incident response plans, and access management.

Answer explanation

Technical - Controls that involve implementing and configuring security technologies, such as firewalls and intrusion detection systems.

Managerial - Controls that include the creation and enforcement of security policies, procedures, and regulations to manage security practices.

Physical - Controls that focus on protecting physical environments, such as locks, security cameras, and access control systems.

Operational - Controls that encompass daily operational practices and procedures, such as user training, incident response plans, and access management.

Compensating - Provides an alternative measure when the primary control fails or is insufficient.

Tags

Objective 1.1

Objective 1.1/Day 5 -

Match each description with the correct type of security control:

• Detective

• Takes action to address and mitigate issues after they have been identified.

• Preventive

• Implements policies and procedures to guide behavior and compliance.

• Directive

• Prevents security incidents by implementing measures to stop them from occurring.

• Corrective

• Alerts administrators to potential security breaches

• Deterrent

• Discourages or prevents users from engaging in unsafe or non-compliant behaviors.

Answer explanation

Preventive - Prevents security incidents by implementing measures to stop them from occurring.

Deterrent - Discourages or prevents users from engaging in unsafe or non-compliant behaviors.

Detective - Alerts administrators to potential security breaches and anomalies.

Corrective - Takes action to address and mitigate issues after they have been identified.

Directive - Implements policies and procedures to guide behavior and compliance.

Tags

Objective 1.1

Objective 1.1/Day 5 -

Which type of security control focuses on safeguarding physical assets and preventing unauthorized access to facilities?

• Technical

• Managerial

• Operational

• Physical

Answer explanation

Physical controls are designed to protect physical assets and infrastructure, such as security guards, locks, and surveillance cameras. They prevent unauthorized physical access to facilities and equipment.

Tags

Objective 1.1

Objective 1.1/Day 5 -

An organization is implementing a new set of procedures to ensure compliance with security policies and regulations. These procedures include developing security policies, conducting risk assessments, and providing security training. What type of security control do these activities represent?

• Technical

• Managerial

• Operational

• Physical

Answer explanation

Managerial controls involve the development and implementation of policies and procedures, such as conducting risk assessments, providing security training, and creating security policies. These controls are focused on managing and overseeing security practices within the organization.

Tags

Objective 1.1

Objective 1.1/Day 5 -

Which type of security control is designed to alert administrators to the occurrence of a security event?

• Preventive

• Deterrent

• Detective

• Corrective

Answer explanation

Detective controls are implemented to identify and alert on security events that have already occurred, such as intrusion detection systems or security information and event management (SIEM) tools. These controls help in recognizing breaches and irregular activities.

Tags

Objective 1.1

Objective 1.1/Day 5 -

A company installs a redundant power supply system to ensure operations continue if the primary system fails. Which type of security control is this an example of?

• Preventive

• Corrective

• Compensating

• Directive

Answer explanation

Corrective controls are designed to restore systems and operations to normal after a security incident or failure has occurred. In this case, the redundant power supply system is meant to correct the situation if the primary power source fails, ensuring continuity of operations.

Tags

Objective 1.1

Objective 1.2/Day 5 -

Which of the following represents a core principle of the CIA triad in cybersecurity?

• Confidentiality

• Security Guard

• Honeypot

• Gap Analysis

Answer explanation

Confidentiality is a core principle of the CIA triad, which ensures that sensitive information is accessed only by authorized individuals. The other options are related to different aspects of security or specific security technologies.

Tags

Objective 1.2

Objective 1.2/Day 5 -
In the Zero Trust security model, which component is responsible for making real-time access decisions based on policies?

• Policy Administrator

• Policy Engine

• Policy Enforcement Point

• Threat Scope Reduction

Answer explanation

The Policy Engine in a Zero Trust architecture evaluates and makes real-time access decisions based on security policies. The Policy Administrator manages policies, the Policy Enforcement Point enforces them, and Threat Scope Reduction pertains to minimizing trust boundaries.

Tags

Objective 1.2

Objective 1.2/Day 5 -

Which security measure involves using physical barriers and monitoring to protect access to a facility?

• Fencing

• Honeytoken

• Access Badge

• Authentication

Answer explanation

Fencing is a physical security measure that involves using barriers to protect a facility. While Access Badge is also a physical security control, fencing specifically relates to physical barriers. Honeytoken is a deception technology, and Authentication is related to access control and verification.

Tags

Objective 1.2

Objective 1.3/Day 5 -

What is the purpose of conducting an impact analysis during the change management process?

• To assess the potential effects of changes on security and operations

• To determine the cost of implementing the change

• To create a new version of the application

• To draft new security policies

Answer explanation

Impact analysis helps in understanding how proposed changes will affect security and business operations. This process is critical for identifying risks and ensuring that the changes will not negatively impact the system or its security posture. The other options are not directly related to assessing the impact of changes.

Tags

Objective 1.3