Font size
WorksheetsSecurity + (SY0-601) Domain 3--Architecture & Design
Total questions: 30
Worksheet time: 19mins
Using a combination of firewalls, intrusion detection systems, content filters, encryption, and auditing procedures in the organization for protection against intrusions is an example of which of the following?
Defense in depth
Infrastructure as a Service
Community cloud
Layered security
Which of the following types of control is a surveillance system?
logical control
technical control
physical control
management control
Which of the following are the most compelling reasons that secure configuration baselines have been established? (Select 3 answers.)
industry standards
organization requests
governmental mandates
regulatory bodies
Which of the following devices is used to accept encrypted connections from users and then send the connection to the server unencrypted?
VPN
DMZ
DDoS mitigation appliance
SSL accelerators
You are setting up a switched network and want to group users by department. Which technology should you implement?
DMZ
VPN
VLAN
NAT
An organization has a sensitive network that needs to have physically isolated machines. Which of the following practices would be used to meet this requirement?
air gap
VLAN
RAS
honeynet
An organization is experiencing a large amount of electromagnetic interference (EMI). Which of the following is the best method to provide continuous operations?
extra shielding
A generator
A redundant electric connection
A RAID configuration
Which of the following best describes the result of adding an email address to the blocked list?
It is considered part of the whitelist
It is considered part of the blacklist
It is considered part of the graylist
It is considered part of the brownlist
Which of the following can result in the exploitation of a BIOS vulnerability? (Select all 2 answers.)
Hard drive failure occurs
System cannot boot up
System locks up
Denial of service occurs
Which of the following uses a secure cryptoprocessor to authentic hardware devices such as a PC or laptop?
Public key infrastructure
Full disk encryption
File-level encryption
Trusted platform module
Which of the following provides a sandboxed environment that can be used to investigate unsafe executables?
Virtualization
Network storage
Host software baselining
Application baselining
Which of the following is considered good practice for separation of development and test environments? (Select two correct answers.)
Different physical locations
Firewall
VPN
VLAN
Which of the following is considered good practice for separation of development and test environments?
Application baselines
Integrity measurement
Staging environment
Sandboxing
A vulnerability assessment has revealed that legacy internal heart monitors of a hospital's intensive care unit (ICU) are visibly exposed to the internet. Which of the following should be implemented?
Network segmentation
Code wrappers
Control diversity
Manual updates
Which of the following operating systems is run in a SoC environment?
Windows Server 2016
RedHat Enterprise Linux (RHEL)
CAN bus
RTOS
Which of the following is most likely to use network segmentation as a security method?
SCADA systems
Mainframes
Android devices
Gaming consoles
In which of the following phases should code security first be implemented?
Testing
Review
Implementation
Design
Buffer overflows, format string vulnerabilities, and utilization of shell escape codes can be mitigated by using which of the following practices to test an application?
Fuzzing
Testing
Input Validation
Browser-initiated token request
The organization is building a new application and is more interested in being able to use a rigorous methodical process to verify each phase along the way than it is in selecting a fast delivery method. Which of the following should the organization choose?
IaC
Agile
Waterfall
Continuous integration
An organization is interested in using a vendor SaaS application but is concerned about the lack of cloud security. What type of cloud architecture is the most appropriate?
public
private
hybrid
community
Which of the following methods of cloud computing allows the client to literally outsource everything that would normally be in a typical IT department?
SaaS
IaaS
PaaS
DaaS
An organization wants to use a service provider to implement processes for the organization such as identity and access management (IAM) and encryption. Which of the following should the organization choose?
IaaS
SecaaS
DRaaS
SaaS
An organization that operates a small web-based photo backup business is evaluating single points of failure. The organization has three servers, four switches, and 100 client systems. Which of the following is the most likely component(s) to be the single point of failure?
Servers
ISP connection
Client systems
Switches
An organization is implementing a data availability solution based on a striped disk array without redundancy. Which of the following best describes this implementation?
RAID 0
RAID 1
RAID 5
RAID 10
Because of seasonal business fluctuations, an organization uses cloud environments to purchase resources for a short period of time based on demand. Which of the following terms best describes this principle?
Snapshots
Elasticity
Scalability
Server redundancy
Which type of fire extinguisher is best for putting out burning wires?
Water
Carbon dioxide
Sodium chloride
Copper powder
What is the plenum?
A mesh enclosure designed to block EMI
mechanism for controlling condensation
A type of dry-pipe fire control system
A mechanism for thermal management
The ASHRAE recommends humidity levels in which range?
25%-40%
40%-55%
55%-70%
70%-85%
An organization that has several small branches in North Dakota, Minnesota, and Ontario, Canada, is planning for a fire-suppression system installation. Which of the following best fits the needs of the organization?
Dry pipe
Wet pipe
Deluge
Preaction
You are setting up a switched network and want to group users by department. Which technology should you implement?
DMZ
VPN
VLAN
NAT
