AP Cybersecurity Quiz 4.3 and 4.4 Test

An IT audit finds employees repeatedly reuse previous passwords when required to change them. Which administrative control would most directly prevent this behavior?

• Password complexity requirements

• Password history enforcement

• Account lockout rules

• Multi-factor authentication

A user installs a free video converter downloaded from a random website, which later installs malware on the device. Which policy should have prevented this incident?

• Acceptable Use Policy restricting unapproved software

• Password complexity policy

• Encryption policy

• Network segmentation policy

A company increases its minimum password length to 16 characters. What threat is the company primarily trying to reduce?

• Phishing attacks

• Brute-force password attacks

• Man-in-the-middle attacks

• Denial-of-service attacks

A security team disables unused USB ports and removes unnecessary applications from workstations. What is the primary goal of this process?

• Improve device performance

• Reduce the attack surface

• Increase system complexity

• Improve user accessibility

An attacker obtains usernames and passwords from a breach on another website and attempts to use them to log into company systems. Which control most directly helps prevent this?

• Password reuse restrictions with breach detection

• Frequent password expiration

• Password salting

• Shorter login timeouts

A company configures computers so that only pre-approved programs can run. Which security control is being implemented?

• Host-based intrusion prevention

• Application allow listing

• File integrity monitoring

• Encryption

A hospital network separates guest Wi-Fi, employee systems, and medical devices into different zones. What security concept is being implemented?

• Data encryption

• Network segmentation

• Least privilege

• Patch management

A laptop containing sensitive customer information is stolen. However, the data on the hard drive cannot be accessed. Which control most likely prevented the data breach?

• Firewall configuration

• Full-disk encryption

• Security log monitoring

• Application allow listing

The principle of least privilege means that:

• All users receive administrative access

• Users receive only the permissions required for their tasks

• Access is determined by job seniority

• Passwords must be changed frequently

Before deploying a new web server, administrators remove default accounts and install security patches. What is the purpose of this action?

• Improving server speed

• Establishing secure system configuration

• Increasing administrator privileges

• Reducing system storage usage