Dion Practice Test Most Missed Questions

While reviewing application logs during an incident, which item is LEAST likely to appear in a standard app log?

• User IDs tied to transactions

• Timestamps of events

• Server IP or hostname

• Exact GPS coordinates of the user

A developer asks for a quick personal NAS on the office network to back up side projects. IT never approved it. What threat source does this represent?

• Insider threat (malicious)

• Nation-state actor

• Shadow IT

• Unskilled actor

A water utility relies on SCADA controllers that rarely receive firmware updates from the vendor. The MOST likely risk?

• Container breakout

• Limited patch/upgrade cadence

• Excess CPU usage

• QoS misconfiguration

In automation/orchestration, what factor most commonly slows integration and maintenance across many interdependent tools?

• Cost

• Complexity

• Support contracts

• Technical debt only

Why is patching central to vulnerability management?

• It hardens physical entry points

• It updates hardware for performance

• It adds custom UI features

• It fixes known software/firmware flaws

In a backup strategy, the decision to back up data every hour vs. nightly refers to:

• Replication

• Journaling

• Frequency

• Load balancing

A multinational must follow its own country’s privacy laws for resident data. What is this primarily about?

• Consent management tooling

• Data encryption choices

• National legal implications

• GDPR only

To reduce attack surface, an admin shuts off unused USB and network interfaces on endpoints. This control is:

• Monitoring

• Segmentation

• Disabling ports

• Data-at-rest encryption

Which host hardening technique filters inbound/outbound packets by rules on a single machine?

• Host-based firewall

• HIPS only

• Encryption

• Patching

All strategic decisions come from the CIO’s office; departments follow. This structure is:

• Board governance

• Decentralized governance

• Committee governance

• Centralized governance