wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Security + (SY0-601) Domain 3--Architecture & Design

Total questions: 30

Worksheet time: 19mins

Name
Class
Date
1.

Using a combination of firewalls, intrusion detection systems, content filters, encryption, and auditing procedures in the organization for protection against intrusions is an example of which of the following?

a)

Defense in depth

b)

Infrastructure as a Service

c)

Community cloud

d)

Layered security

2.

Which of the following types of control is a surveillance system?

a)

logical control

b)

technical control

c)

physical control

d)

management control

3.

Which of the following are the most compelling reasons that secure configuration baselines have been established? (Select 3 answers.)

a)

industry standards

b)

organization requests

c)

governmental mandates

d)

regulatory bodies

4.

Which of the following devices is used to accept encrypted connections from users and then send the connection to the server unencrypted?

a)

VPN

b)

DMZ

c)

DDoS mitigation appliance

d)

SSL accelerators

5.

You are setting up a switched network and want to group users by department. Which technology should you implement?

a)

DMZ

b)

VPN

c)

VLAN

d)

NAT

6.

An organization has a sensitive network that needs to have physically isolated machines. Which of the following practices would be used to meet this requirement?

a)

air gap

b)

VLAN

c)

RAS

d)

honeynet

7.

An organization is experiencing a large amount of electromagnetic interference (EMI). Which of the following is the best method to provide continuous operations?

a)

extra shielding

b)

A generator

c)

A redundant electric connection

d)

A RAID configuration

8.

Which of the following best describes the result of adding an email address to the blocked list?

a)

It is considered part of the whitelist

b)

It is considered part of the blacklist

c)

It is considered part of the graylist

d)

It is considered part of the brownlist

9.

Which of the following can result in the exploitation of a BIOS vulnerability? (Select all 2 answers.)

a)

Hard drive failure occurs

b)

System cannot boot up

c)

System locks up

d)

Denial of service occurs

10.

Which of the following uses a secure cryptoprocessor to authentic hardware devices such as a PC or laptop?

a)

Public key infrastructure

b)

Full disk encryption

c)

File-level encryption

d)

Trusted platform module

11.

Which of the following provides a sandboxed environment that can be used to investigate unsafe executables?

a)

Virtualization

b)

Network storage

c)

Host software baselining

d)

Application baselining

12.

Which of the following is considered good practice for separation of development and test environments? (Select two correct answers.)

a)

Different physical locations

b)

Firewall

c)

VPN

d)

VLAN

13.

Which of the following is considered good practice for separation of development and test environments?

a)

Application baselines

b)

Integrity measurement

c)

Staging environment

d)

Sandboxing

14.

A vulnerability assessment has revealed that legacy internal heart monitors of a hospital's intensive care unit (ICU) are visibly exposed to the internet. Which of the following should be implemented?

a)

Network segmentation

b)

Code wrappers

c)

Control diversity

d)

Manual updates

15.

Which of the following operating systems is run in a SoC environment?

a)

Windows Server 2016

b)

RedHat Enterprise Linux (RHEL)

c)

CAN bus

d)

RTOS

16.

Which of the following is most likely to use network segmentation as a security method?

a)

SCADA systems

b)

Mainframes

c)

Android devices

d)

Gaming consoles

17.

In which of the following phases should code security first be implemented?

a)

Testing

b)

Review

c)

Implementation

d)

Design

18.

Buffer overflows, format string vulnerabilities, and utilization of shell escape codes can be mitigated by using which of the following practices to test an application?

a)

Fuzzing

b)

Testing

c)

Input Validation

d)

Browser-initiated token request

19.

The organization is building a new application and is more interested in being able to use a rigorous methodical process to verify each phase along the way than it is in selecting a fast delivery method. Which of the following should the organization choose?

a)

IaC

b)

Agile

c)

Waterfall

d)

Continuous integration

20.

An organization is interested in using a vendor SaaS application but is concerned about the lack of cloud security. What type of cloud architecture is the most appropriate?

a)

public

b)

private

c)

hybrid

d)

community

21.

Which of the following methods of cloud computing allows the client to literally outsource everything that would normally be in a typical IT department?

a)

SaaS

b)

IaaS

c)

PaaS

d)

DaaS

22.

An organization wants to use a service provider to implement processes for the organization such as identity and access management (IAM) and encryption. Which of the following should the organization choose?

a)

IaaS

b)

SecaaS

c)

DRaaS

d)

SaaS

23.

An organization that operates a small web-based photo backup business is evaluating single points of failure. The organization has three servers, four switches, and 100 client systems. Which of the following is the most likely component(s) to be the single point of failure?

a)

Servers

b)

ISP connection

c)

Client systems

d)

Switches

24.

An organization is implementing a data availability solution based on a striped disk array without redundancy. Which of the following best describes this implementation?

a)

RAID 0

b)

RAID 1

c)

RAID 5

d)

RAID 10

25.

Because of seasonal business fluctuations, an organization uses cloud environments to purchase resources for a short period of time based on demand. Which of the following terms best describes this principle?

a)

Snapshots

b)

Elasticity

c)

Scalability

d)

Server redundancy

26.

Which type of fire extinguisher is best for putting out burning wires?

a)

Water

b)

Carbon dioxide

c)

Sodium chloride

d)

Copper powder

27.

What is the plenum?

a)

A mesh enclosure designed to block EMI

b)

mechanism for controlling condensation

c)

A type of dry-pipe fire control system

d)

A mechanism for thermal management

28.

The ASHRAE recommends humidity levels in which range?

a)

25%-40%

b)

40%-55%

c)

55%-70%

d)

70%-85%

29.

An organization that has several small branches in North Dakota, Minnesota, and Ontario, Canada, is planning for a fire-suppression system installation. Which of the following best fits the needs of the organization?

a)

Dry pipe

b)

Wet pipe

c)

Deluge

d)

Preaction

30.

You are setting up a switched network and want to group users by department. Which technology should you implement?

a)

DMZ

b)

VPN

c)

VLAN

d)

NAT