SY0-001 Glossary Part 2

What is the primary purpose of an HSM?

• To store user passwords securely

• To manage and secure cryptographic keys

• To increase network bandwidth

• To enhance application performance

Which of the following components is typically included in an XDR solution?

• Only network security tools

• Database management systems

• Traditional antivirus software

• Endpoint detection and response (EDR), network traffic analysis, and security information and event management (SIEM)

Which of the following is a key feature of NGFWs?

• Deep packet inspection and application awareness

• Basic packet filtering

• Static rule management

• Limited logging capabilities

Answer explanation

Next generation firewalls

What is the primary purpose of ECDSA?

• To authenticate users via passwords

• To provide a method for digital signatures

• To generate secure symmetric keys

• To encrypt data

Answer explanation

Elliptic Curve Digital Signature Algorithm (ECDSA)

What is the primary purpose of a MAC?

• To provide key exchange mechanisms

• To compress files

• To ensure the integrity and authenticity of a message

• To encrypt data

Answer explanation

Message Authentication

How is Annualized Loss Expectancy (ALE) calculated?

• ALE = Single Loss Expectancy × Annual Rate of Occurrence

• ALE = Total Risk × Total Exposure

• ALE = Average Loss per Incident × Total Incidents

• ALE = Total Assets - Total Liabilities

Answer explanation

ALE

Which of the following scenarios is an example of DAC?

• A corporate server where access is based solely on user roles.

• A file-sharing system where users can share files and set permissions for others.

• A bank’s secure vault requiring biometric authentication.

• A network firewall that blocks all incoming traffic except specific IP addresses.

What is the primary function of ESP in IPsec?

• To enhance network routing protocols

• To manage user access controls

• To provide a method for data compression

• To ensure secure transmission of data by providing confidentiality, integrity, and authenticity

Which of the following components is commonly included in a DRP?

• Employee performance reviews

• Risk assessment and impact analysis

• Customer satisfaction surveys

• Market analysis

What is a common tool used during the Incident Response process for monitoring and analyzing security events?

• Customer Relationship Management (CRM) tool

• Graphic Design Software

• Security Information and Event Management (SIEM) system

• Word Processor