Choose the best statement for Privileged Account.

True or False: Passwords are vulnerable to brute force regardless of the number of characters.

Which of the following is NOT a threat to identity.

What eKYC feature employs strong counter-measure against deepfakes?

True or False: One-Time-Passwords are considered as part of Multi-factor Authentication strategy

True or False: Identity and Access Management is only for employees.

Select all that apply: Which are vulnerable to brute force attack?

Select the best answer: A type of attack that sends a deceptive emails to fool specific category of people within the organization specially the high-ranking individuals.

Based on the image on the right what is it MOST susceptible to when it comes to data security?

Select the best answer based on this RISK statement about Information Security: Where the content of the information is changed so that it is no longer accurate or complete.

Select the best answer based on this statement about information security: When the information needed is made available when needed.

Select the best answer based on this RISK statement about information securtiy: where one or more person gain unauthorized access to information.

True or False: An SSL/TLS handshake is a negotiation between two parties on a network – such as a browser and web server – to establish the details of their connection.

True or False: The difference between a digital signature and a digital certificate is that the certificate binds the digital signature to the object, while the digital signature must ensure that the data or information remains secure from the moment it is sent.

Fill in the blanks: Hashing is a ______ function that scrambles plain text to produce a unique message digest.

True or False: Hashing is can be virtually reversed.

Which verifies the user application/ request for a digital certificate within a PKI?

Bob encrypts and sends a message for Alice using PKI system. What method does Alice use to decrypt the message when she receives it?

Fill in the blanks: ______ algorithms are faster and are suited for bulk encryption.

Which is NOT part of application security practice to eliminate vulnerabilities?

Fill in the blanks: _______  is the practice of integrating security continuously throughout the software and/or application development lifecycle.

True or False: The attack surface is the number of all possible points, or attack vectors, where an unauthorized user can access a system and extract data.

Fill in the blanks: In the context of Application Security, Mobile phones and APIs are considered ______.

True or False: SAST stands for Static Application Security Testing.

Fill in the blanks: If S in SAST stands for Static, then D in DAST stands for ______.

Fill in the blanks: ______ is a security tool or control that helps protect web applications by filtering and monitoring HTTP traffic between a web application and the Internet.

True or False: A Web Application Firewall (WAF) operates through a set of rules often called policies.

True or False: During a DDoS attack, rate limiting can be quickly implemented by modifying Web Application Firewall (WAF) policies.

Fill in the blanks: ______ only admits traffic that has been pre-approved.

Which is the right answer: An Endpoint Security Control that covers some more advanced capabilities like detecting and investigating security incidents, and ability to remediate endpoints to pre-infection state.

Fill in the blanks: ______ ______ is the framework that gives us insight how attacker sees the organization.

In the context of Attack Surface Monitoring: Company Social Media Pages also considered part of the __________.

Fill in the blanks: ______ is the practice of proactively searching for cyber threats that are lurking undetected in a network.

Which tool is essential in a Security Operations Center (SOC) for it to aggregate data and detect threats in an organization?

Which of the following can detect behavior based threats in an endpoint?

True or False: Mean time to detect (MTTD) is one of the main key performance indicators in incident management.

True or False: In the context of Cyber Incident: Mean Time to Respond (MTTR, sometimes written as Mean Time to Response) is the average time required to return a system to operational condition after receiving notification of a failure or cyberattack.

Fill in the blanks: A ______ is a facility that houses an information security team responsible for monitoring and analyzing an organization's security posture on an ongoing basis

Fill in the blanks: ______ is a technology that can identify and stop evasive network threats that couldn't be easily blocked using known attack patterns or signatures.