Sec+ 701 Final Review Quiz

Which protocol is commonly used to securely transfer files over a network?

• FTP

• SFTP

• Telnet

• SMTP

Answer explanation

SFTP (Secure File Transfer Protocol) is designed to securely transfer files over a network, using encryption to protect data. In contrast, FTP is not secure, while Telnet and SMTP serve different purposes.

What does the acronym CIA stand for in information security?

• Confidentiality, Integrity, Availability

• Control, Inspection, Authorization

• Confidentiality, Inspection, Access

• Control, Integrity, Authentication

Answer explanation

In information security, CIA stands for Confidentiality, Integrity, and Availability. These three principles are essential for protecting data and ensuring it is accessible only to authorized users.

Which of the following is an example of a physical security control?

• Firewall

• Security badge

• Antivirus software

• Encryption

Answer explanation

A security badge is a physical security control used to restrict access to facilities. In contrast, a firewall, antivirus software, and encryption are all examples of logical or technical security controls.

Which access control model is based on predefined roles within an organization?

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

• Rule-Based Access Control

Answer explanation

Role-Based Access Control (RBAC) assigns permissions based on predefined roles within an organization, making it easier to manage access rights compared to Discretionary Access Control (DAC) and Mandatory Access Control (MAC).

What is the primary purpose of a risk assessment in the risk management framework?

• To eliminate all risks

• To identify and evaluate potential threats and vulnerabilities

• To create user accounts

• To install security patches

Answer explanation

The primary purpose of a risk assessment is to identify and evaluate potential threats and vulnerabilities, enabling organizations to understand risks and implement appropriate controls.

Which cryptographic algorithm is classified as symmetric?

• RSA

• AES

• ECC

• DSA

Answer explanation

AES (Advanced Encryption Standard) is a symmetric cryptographic algorithm, meaning it uses the same key for both encryption and decryption. In contrast, RSA, ECC, and DSA are asymmetric algorithms that use key pairs.

Which document outlines the acceptable use of organizational resources by employees?

• Incident Response Plan

• Acceptable Use Policy

• Disaster Recovery Plan

• Business Continuity Plan

Answer explanation

The Acceptable Use Policy defines how employees can use organizational resources, ensuring proper conduct and security. Other options like the Incident Response Plan and Disaster Recovery Plan focus on different aspects of organizational management.

Which of the following best describes the first step in the incident response process?

• Containment

• Eradication

• Identification

• Recovery

Answer explanation

The first step in the incident response process is Identification. This involves recognizing and confirming the occurrence of an incident, which is crucial for determining the appropriate response actions.

A company wants to ensure that only authorized users can access sensitive data. Which access control model should they implement to assign permissions based on job functions?

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Attribute-Based Access Control (ABAC)

Answer explanation

Role-Based Access Control (RBAC) assigns permissions based on job functions, ensuring that only authorized users can access sensitive data. This model is ideal for managing access according to organizational roles.

You are tasked with configuring a firewall to block all incoming traffic except for web services. Which ports should you allow?

• 21 and 22

• 80 and 443

• 25 and 110

• 53 and 8080

Answer explanation

To allow web services, you should open ports 80 (HTTP) and 443 (HTTPS). Ports 21 and 22 are for FTP and SSH, 25 and 110 are for email, and 53 is for DNS, while 8080 is an alternative HTTP port, not standard.