Security Concepts Worksheet

A company’s web filter is configured to scan the URL for strings and deny access when matches are found. Which of the following search strings should an analyst employ to prohibit access to non-encrypted websites?

• encryption=off

• http://

• www.*.com

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization’s network. Which of the following fulfills this request?

• access-list inbound deny ip source 0.0.0.0/0 destination 10.1.4.9/32

• access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0

• access-list inbound permit ip source 10.1.4.9/32 destination 0.0.0.0/0

A security administrator would like to protect data on employees’ laptops. Which encryption technique should be used?

• Partition

• Asymmetric

• Full disk

Only the IT manager and help desk lead will have access to the admin console. Which security technique is being set up?

• Hardening

• Employee monitoring

• Least privilege

Best way to block unknown programs from executing?

• Access control list

• Application allow list

A host-based firewall on a legacy Linux system allows connections only from specific internal IPs. What has been implemented?

• Compensating control

• Network segmentation

Concerned about weather events causing damage to the server room and downtime. What should the company consider?

• Clustering servers

• Geographic dispersion

Implementing FDE for all laptops. Most important to consider? (Choose two.)

• Key escrow

• TPM presence

• Digital signatures

Provide a secure zone, enforce company-wide access control policy, and reduce scope of threats. What is being set up?

• Zero Trust

• AAA

Used to validate a certificate when presented to a user?

• OCSP

• CA