Unit 2 Test: Configuring Security Controls

In the Bell-LaPadula model, what does the Simple Security property state?

• Subjects can read any object
• Subjects may not write to objects below their level
• Subjects may not read objects above their level
• Subjects can modify objects at their own level

Which of the following can help prevent attacks from moving laterally on a network and impacting other subnets?

• Network segmentation
• Vulnerability scanning
• Network encryption
• Intrusion detection system

What does the numeric permission '7' represent in Linux file permissions?

• Read only
• Write only
• Read and write
• Read, write, and execute

If an adversary has already cracked a user’s password, which of the following security requirements could result in the adversary getting locked out?

• Requiring at least one symbol in a password
• Requiring a password history to prevent reuse
• Requiring a maximum password age
• Requiring a maximum password length

What factors influence the placement of firewalls in a network?

• Number of network segments
• Type of data encryption
• Amount of stored data
• Internet speed

Why is it important for organizations to regularly review and update their security policies?

• To keep employees busy
• To impress clients
• To address evolving cybersecurity threats
• To reduce printing costs

How does a deny list function in network security?

• It allows access to all entities
• It denies access to specific entities
• It encrypts all traffic
• It stores user credentials

Which access control model allows users to set permissions for objects they own?

• Role-based Access Control (RBAC)
• Rule-based Access Control (RuBAC)
• Discretionary Access Control (DAC)
• Mandatory Access Control (MAC)

Which of the following is a key benefit of implementing security awareness training?

• It eliminates all security risks
• It teaches users to identify and report suspicious activities
• It automatically blocks all malicious emails
• It encrypts all company data

Which of the following is contained within an anti-malware software?

• A virtual private network (VPN)
• A desk defragmenter
• A malware encryption tool
• A malware signature database