Which of these encryption methods is truly unbreakable if it is implemented right?

In our physical access control, we use gates and fences to ensure what happens.?

When we talk about WORM media, what are we referring to?

What handles all access between objects and subjects in the computer kernel?

We are adding hashing to our passwords. Which of these is a hashing function we could consider?

The NSA wanted to embed the clipper chip on all motherboards. Which encryption algorithm did the chip use?

Which of these would be a TRUE statement about symmetric encryption?

We have seen an increasing number of viruses on our systems. As part of our defense in depth, we have implemented multiple overlapping countermeasures to mitigate the issues we have been having with viruses. Which of these are types of viruses?

(Select all that apply).

We are looking at adding type 1 VM Hypervisors to our environments. What do they run on top of?

If you are faced with a fire and you need to use a fire extinguisher, which method should you use?

After the Second World War the US designed and built the SIGABA. How many rotors did it use?

Which type of access control model is based on a subject’s clearance?

We have smoke photoelectric detectors installed in our data center. What do they detect?

In which of these protocols, is IPSEC built into and NOT added on later?

DES is very easy to break today. To remedy the problems with DES, 3DES was developed. Which of these is TRUE about 3DES K1?

Using the Graham Denning model, which of these is NOT something subjects can execute on objects?

We have moved some of our non-critical functions to cloud hosting. We have chosen to go with an IaaS - (Infrastructure as a Service) implementation. Where would our responsibility start?

Prime number factorization is an example of what?

If we have 100 users in our organization that are all needing to communicate securely with each other, would symmetric or asymmetric encryption use the highest number of encryption keys?

The order of the plaintext should be dispersed in the ciphertext. What is this called?

When we experience a power surge, what is happening?

What is the relationship between plaintext and ciphertext is called?

Which security principle is Clark-Wilson based on?

Jane is talking to a colleague about a regular computer bus. What is that connected to?

Which is the MOST secure encryption type of these 4?

What is the MOST important to secure the safety of FIRST in an emergency?

Which of these is NOT part of our server hardening?

With newer CPU (Central Processing Units) we can use pipelining, where each processor cycle does multiple tasks. Which of these are functions the CPU performs?

(Select all that apply).

What could be a type of physical access control that we would use, to prevent cars and vans from entering our perimeter?

Lattice-based access control uses which access control principle?

When we are installing motion sensors, we are implementing which type of control?

Which of these would be the PRIMARY reason we would choose to use hash functions?

We have started issuing cell phones to our employees and we want a centralized way of managing them. What could be something we should consider implementing?

Jack is looking at different types of encryption. Which of these is a type of asymmetric encryption?

You hear a colleague talk about polyinstantiation. What does that mean?

What are Programmable Logic Controllers (PLCs) used for?

Which of these hashing algorithms is still considered secure and collision-free?

The Central Processing Unit (CPU) consists of which two elements?

Which part of the CPU controls fetching from memory and execution of instructions?

BIBA's Invocation Property prohibits users from what?

One of our engineers has found a virus on one of our systems that keeps changing the signature. What type of virus is it?

If we have 5 users and they all need to communicate with each other securely, would we use the MOST encryption keys if we used asymmetric or symmetric encryption?

When we are looking at an IPSec implementation, all of these could be part of it, EXCEPT which?

When a CPU (Central Processing Unit) can execute multiple processes concurrently, it is called what?

When we are talking about the Twofish encryption algorithm, which of these is TRUE?

We have, for many years, used dogs as part of our physical security. However, we are considering implementing other physical security measures and stop using dogs. Which of these could be the reason we would consider NOT using dogs more?

When we are replacing one character with another, what is that called?

A historical type of encryption that was based on a set of disks with random letters; the sender and receiver would agree on the disk order. What is it called?

When we have our private and public keys in key escrow, what does that mean?

When, in telecommunications, we talk about the Demarc, what are we referring to?

Jane is talking to a friend and is explaining what digital signatures do. Which of these could be something that she tells her friend is one of the MAIN reasons we use digital signatures?

Depending on our implementation, we may choose to use asymmetric or symmetric encryption. Which of these are types of symmetric encryption?

(Select all that apply).

As part of our kickoff meeting for our IPSec implementation, Jane is asked a lot of questions by a senior manager. Which of these is something we could implement as part of our IPSec implementation?

(Select all that apply).

If we are using Mandatory Access Control (MAC) and we are looking at the BIBA's * integrity axiom, what can't we do?

We are designing a new data center. Which of these if installed should ALWAYS prevent power fluctuations?

Which type of ASTM standard gate could you have at your house?

Looking at the logical ring model, where would we find a VM hypervisor?

What can we use digital signatures to provide?

When we are rearranging the plaintext what is it called?

When we are replacing memory sticks in a server, we should use which of these to prevent damage to hardware when handling it?

We are having problems with the electricity in the area, where we have one of our data centers. What is happening when a brownout occurs?

We are talking about implementing new encryption in our organization. Which of these would be TRUE about IDEA?

We are using different types of anti-virus in our organization. Which type MUST be constantly updated?

Which historical type of encryption involved the sender switching letters a certain number of spots forwards or back in the alphabet, with the receiver doing the same in the opposite direction?

We have 100 users all needing to communicate with each other.

If we are using asymmetric encryption how many keys would we need?

Which of these is NOT covered by the Wassenaar Arrangement?

When we are using frequency analysis, what are we looking at?

We are using cloud computing and have chosen to use IaaS. Who is responsible for the databases?

Which type of malware is embedded in another normal program?

We are implementing passive monitoring in our data center. We have chosen to use infrared motion detectors.

What do they use to detect movement?

Our organization is considering acquiring one of our competitors. Before we agree to the purchase, we have done a security assessment of their facility. None of the findings were too alarming, but we want them fixed as soon as possible. To ensure we only allow authorized employees inside our fence, which of these physical security problems would you want to fix FIRST?

We are choosing a site to build a new data center and offices in. Which of these would NOT be a valid security concern?

In our data center, we want to ensure proper air circulation. Where would our servers normally pull the air in from?

The original Enigma machine was broken by the Polish in 1939. How many rotors did the Enigma use at the end of the Second World War?

We are looking at implementing a new type of symmetric encryption. Which of these symmetric encryption types are no longer considered secure, and should be something we should NOT consider?

In which order does the CPU process work?

A senior VP stops you in the cafeteria because you are one of those IT people.

She asks you questions about Public Key Infrastructure (PKI).

After you explain it at a high level, they ask for more detail. You could tell them PKI uses which of these?

When a computer uses more than one processor at a time for a task, it is called what?

On which layer of the ring model would we find the applications?

We have implemented different types of anti-virus throughout our organization. Which type of anti-virus can produce a lot of false positives?

Halon is by far the best fire suppression. It can keep hardware, employees, and our building safer by putting the fires out more efficiently.

Why is it we no longer use Halon in our fire suppression systems?

Most newer systems would have multiple Central Processing Units (CPUs). What is it called when multiple tasks share one CPU?

In our data centers, we have microwave motion detectors installed. What do they use to detect movement?

We use different types of fire suppression depending on where it is and what is in that location. Which areas would it be appropriate for us to use CO2 fire suppression?

We have several physical security issues we are wanting to address. Which of these would you want to fix FIRST, if you needed to ensure safe employee evacuation in a disaster event?

We are using cloud computing, and we are responsible for the operating system and up. Which type of cloud computing are we using?

Where would you suggest we place a guard at our perimeter to ensure only authorized employees can get onto our grounds?

How many keys would we have if we had 100 users using symmetric encryption?

In computer architecture, what would the north bridge be connected to?

Which of these is a TRUE about hybrid encryption?

If we are using the Graham Denning model, which of these is NOT something a subject can execute on an object?

We are building a new data center and the walls must be slab-to-slab. What does that mean?

We are designing a new data center. At a presentation to senior management and the board of directors, you are asked: "Why do we need to keep the humidity controlled in the data center?" What should your reply be?

If we are using the Bell-LaPadula *security property," what CAN'T we do?

Which type of fire extinguisher would you use on a metal fire?

When we talk about using cryptanalysis in our work, what are we doing?

Which type of American Society for Testing and Materials (ASTM) standard gate would we have on a loading dock for 18-wheeler trucks?

What is your public key in asymmetric encryption?

When we are implementing IPsec, we would make use of all these, EXCEPT which?

As part of our security posture, we have deployed turnstiles at our exit point from a facility.

Which of these is a TRUE statement about turnstiles?

What would we use Distributed Control Systems (DSCs) for?

We have part of our infrastructure migrated to cloud computing. We are responsible for the applications and the data.

Which type of cloud computing are we using?

If an attacker is using a digraph attack, what is the attacker looking for? ​

If we are using the Bell-LaPadula "simple security property", what can't we do?

What historical encryption was written on a thin piece of parchment that was wrapped around a round stick of a certain diameter?

Which of these countermeasures would be effective against rainbow tables?

Which security principle is Bell-LaPadula based on?

When would a logic bomb go off?

We have decided to change the type of hashing we use to a newer version that is collision-resistant.

What happens when a hash collision occurs?

A monolithic kernel runs in which mode?

Which of these rotary-based encryption machines was NOT known to have been broken while it was in active use?

If we have mantraps in our environment, what should they do?

In which part of the computer are all the calculations done?

When an attacker is using a brute force attack to break a password, what are they doing?

If we want to implement a type of encryption that uses discrete logarithms, which of these could we choose?

The original version of the Enigma machines encryption was broken by the Polish intelligence in 1939. When it was broken in 1939, how many rotors did it use?

Jane and Bob are talking about hashing and they use the abbreviation MAC. What are they talking about?

In newer computer architecture, we have split the bus into a north and a south bridge. The north bridge is much faster than the south bridge. Which of these is the north bridge?