Module 14

Why is maintaining a hot recovery site is important for e-commerce businesses?

• E-commerce businesses will have a significant number of customers.
• E-commerce businesses cannot risk significant downtime.
• E-commerce businesses should provide high security for users' private data.
• E-commerce businesses should be available all over the world.

Answer explanation

Hot sites are used to restore a service as soon as possible after a disruption. Maintaining hot sites allows e-commerce businesses to function without any downtime.

You are a security administrator for an enterprise. You were asked to implement a cloud app security function in your enterprise network so that login attempts from identified threat actors can be restricted. Which of the following cloud app security function should you use?

• Impossible travel
• Risky IP address
• Suspicious inbox forwarding
• Activity performed by a terminated user

Answer explanation

Risky IP address restricts previously identified threat actors from accessing networks by examining the IP address used to attempt a login and comparing it against a list of IP addresses involved in malicious activities.

Which of the following best describes an acceptable use policy?

• A policy that defines the actions users may perform while accessing systems and networking equipment
• A policy that allows only the minimum number of privileges necessary to perform a job or function should be allocated
• A policy that defines the tasks associated with hiring a new employee
• A policy that addresses assigning labels based on the use and importance of information

Answer explanation

AUP defines the actions users may perform while accessing systems and networking equipment.

After a disaster disrupted your organization's functioning, you were assigned to determine the sequence for reinstating systems. Which of the following documents should you refer to when deciding the restoration order?

• Business impact analysis
• Single point of failure
• Data recovery plan
• COOP plan

Answer explanation

A data recovery plan (DRP) details the process for restoring IT resources following an event that causes a significant service disruption.

Which of the following is an agreement that ensures an employee does not misuse enterprise data?

• Data protection agreement
• Nondisclosure agreement
• Acceptable use policy
• Impossible travel policy

Answer explanation

New hires are often required to sign an employee nondisclosure agreement (NDA) to make it clear that they may not disclose trade secrets and confidential information without permission.

Which of the following RAID configurations have no fault tolerance?

• RAID level 0
• RAID level 1
• RAID level 5
• RAID level 10

Answer explanation

RAID level 0 does not have fault tolerance capacity. If one disk fails, the whole data are lost.

You are a security administrator asked to restrict employees in your organization from accessing their social media accounts at their workplace. Which of the following mobile device location-based policies should you use to accomplish this?

• Geo-tagging
• Geolocation
• Geofencing
• Geomapping

Answer explanation

Geofencing uses a device's GPS to define geographical boundaries where an app can be used.

"Keep passwords secure and do not share accounts. Authorized users are responsible for the security of their passwords and accounts." "All computers and laptops should be secured with a password-protected screensaver, setting the automatic activation feature set at 10 minutes or less, or logging off when the host is unattended." Which policy includes these directives?

• Onboarding and offboarding
• Acceptable use policy
• Separation of duties
• Least Privilege

Answer explanation

An acceptable use policy (AUP) is a policy that defines the actions users may perform while accessing systems and networking equipment.

Which cloud app security features check the last login's location and current login attempts to restrict login if found suspicious?

• Geo-tagging
• Geolocation
• Geofencing
• Impossible travel

Answer explanation

The impossible travel feature checks the last login location and the current location where login is attempted and locks the account if the distance between locations cannot be covered in the period between attempts.

You have been hired as a security administrator. While analyzing your organization's personnel policies, you notice the presence of multiple orphaned accounts. How should you handle this situation?

• Change the accounts password ages
• Change the domain group policy for password complexity
• Change the domain group policy for password history
• Change the account expiration settings

Answer explanation

Account expiration is the process of setting a user's account to expire. Account expiration can be explicit, in that the account expires on a set date, or it can be based on a specific number of days of inactivity.