Font size
WorksheetsCybersecurity Essentials Chapter 6 Review
Total questions: 20
Worksheet time: 2hrs 40mins
Which of the following is NOT a strategy to ensure high availability?
Eliminate single points of failure.
Design for reliability.
Detect failures as they occur.
Take systems offline at night for updates.
Which organizations would rely on high availability systems?
(PIck 3)
banks
hospitals
fire department
retail businesses
schools
What types of things would be documented in a asset database?
(PIck 3)
operating systems
software applications
networking devices
employees
work groups
What are three criteria used to classify organization assets?
(PIck 3)
Identify owner of information assets
Identify the importance of the asset
Identify the category of asset it is
Identify the age of the asset
Identify how often the asset is used
This type of analysis is being done if a list of all equipment's value is being tallied?
quantitative
qualitative
This type of analysis is being done if employees are being asked rank how likely it would be for a certain type of threat to occur.
quantitative
qualitative
Buying insurance is an example of this type of risk mitigation.
avoidance
transference
reduction
acceptance
Changing the way you do things so a risk is less likely.
avoidance
transference
reduction
acceptance
Encrypting files on a server that is behind a firewall in a building with watch dogs is an example of this defense strategy.
Layering
Limiting
Diversity
Obscurity
Simplicity
Changing file permission to be more restrictive is an example if this type of defense strategy.
Layering
Limiting
Diversity
Obscurity
Simplicity
This device works with a copy of network data to determine if there are concerns without impacting network performance.
IDS
IPS
Firewall
Default Gateway
What does the term N+1 redundancy refer to?
A system that has one backup for similar types of equipment.
A system that has one back up for every piece of equipment.
A system that is fully redundant.
Default Gateway
What RAID level will provide redundancy but necessary give a big performance boost?
0
1
3
5
This technology allows redundancy on a network but prevents data looping from occurring.
STP
NAT
HSRP
RAID
These technologies allows redundancy on layer four devices.
Pick 3
STP
HSRP
VRRP
GLBP
RAID
This is the phase of disaster recovery when changes are implemented from lessons that have been learned from an attack.
Recovery
Preparation
Analyze
Post-Incident
What category of threat would cover a disgruntled former employee that changed the configurations on a company firewall?
Human Error
Hardware Failure
Software Errors
Sabotage
What is a benefit of asset standardization?
Pick 2
Employees don't have to learn about a bunch of different systems.
Working with a single vendor can help with negotiating costs for equipment.
Systems become more complex therefore harder to hack into.
Harder to find replacement components.
Where can you go to see a list of Common Vulnerabilities an and Exposures? (CVE)
The MITRE Corporation Website
Wikipedia
Netacad.com
CV Dictionary
Which of the following is not a strategy that involves improving system resilience?
Fault Tolerant Hardware
Cluster Architechture
Backup and Restore
Limiting
