SYO 701 INTRO TO SECURITY Module FC-2

239. To improve the security at a data center, a security administrator implements a CCTV system and posts several signs about the possibility of being filmed. Which of the following best describe these types of controls? (Choose two)

• A. Preventive

• B. Deterrent

• C. Corrective

• D. Detective

267. Which of the following is a possible factor for MFA?

• A. Something you know

• B. Something you have

• C. Something you are

• D. Something you do

215. A new employee logs in to the email system for the first time and notices a message from human resources about onboarding. The employee hovers over a few of the links within the email and discovers that the links do not correspond to links associated with the company. Which of the following attack vectors is most likely being used?

• A. Business email

• B. Phishing

• C. Spoofing

• D. Malware

158. A security analyst is reviewing the following logs:

Which of the following attacks is most likely occurring?

• A. Password spraying

• B. SQL injection

• C. Cross-site scripting

• D. Denial of service

157. A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

• A. RBAC

• B. ACL

• C. IAM

• D. SSO

200. A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?

• A. Cloud Computing

• B. Traditional Hosting

• C. Virtualization

• D. Dedicated Servers

213. Client files can only be accessed by employees who need to know the information and have specified roles in the company. Which of the following best describes this security concept?

• A. Integrity

• B. Confidentiality

• C. Availability

• D. Authentication

261. A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a security warning and purchases an upgraded seat. When the flight lands, the user finds unauthorized credit card charges. Which of the following attacks most likely occurred?

• A. Phishing attack

• B. Man-in-the-middle attack

• C. On-path attack

• D. Denial of Service attack

232. Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

• A. Unidentified removable devices

• B. Phishing emails

• C. Unsecured cloud storage

• D. Weak passwords

193. Which of the following threat actors is the most likely to be motivated by profit?

• A. Hacktivists

• B. Nation-state actors

• C. Organized crime

• D. Script kiddies