Font size
WorksheetsSecurity+ Part 2 - Architecture and Design
Total questions: 80
Worksheet time: 1hrs 20mins
Which of the following is not a state of data in the enterprise?
At rest
In storage
In processing
In transit/motion
Creating fake network traffic to deceive attackers in segments of the network designed to deceive them is called what?
DNS sinkhole
Honeytraffic
Fake telemetry
Masking
If end-to-end encryption is used, which of the following technologies facilitates security monitoring of encrypted communication channels?
Fake telemetry
Tokenization
Hashing
TLS inspection
Enterprises can employ _________ to block malicious command-and-control traffic from malware.
encryption
honeyfiles
DNS sinkholes
honeynets
Which of the following can provide complete traceability to an original transaction without revealing any personal information if disclosed to an outside party?
Tokenization
Data sovereignty
Rights management
Baseline configuration
A system that is ready for immediate use in the event of an outage is called what?
Standby system
Disaster recovery site
Backup site
Hot site
Data protection includes all of the following topics except which ones? (Choose all that apply.)
Honeypots
Masking
Tokenization
DNS sinkholes
Which of the following is important to consider when specifically examining configuration management?
Data loss prevention
Standard naming conventions
Rights management
Hashing
What is masking?
The use of stand-in data to replace real-time data
The marking of regions where data is not allowed by policy
The use of backups to preserve data during disruptive events
Redaction portions of data using a covering symbol such as * or x
What is the purpose of deception in an enterprise? (Choose all that apply.)
To trick attackers into stealing fake data
To identify misconfigured systems
To permit easy identification of unauthorized actors
To provide a place to test new systems without impacting regular operations
How do hypervisor enable multiple guest operating systems to run concurrently on a host computer?
Via a specialized driver package
By abstracting the hardware from the guest operating system
By providing specific virtual hardware to each guest OS
By hiding the underlying Linux operating system
You have deployed a network of Internet-connected sensors across a wide geographic area. These sensors are small, low-power IoT devices, and you need to perform temperature conversions and collect the data into a database. The calculations would be best managed by which architecture?
Fog computing
Edge computing
Thin client
Decentralized database in the cloud
Your new application has multiple small processes that provide services to the network. You want to make this application run more efficiently by virtualizing it. What is the best approach for virtualization of this application?
Type 2 Hypervisor
Linux KVM
Containerization
Type 1 Hypervisor
Why is VM sprawl an issue?
VM sprawl uses too many resources on parallel functions.
The more virtual machines in use, the harder it is to migrate a VM to a live server.
Virtual machines are so easy to create, you end up with hundreds of small servers only performing a single function.
When servers are no longer physical, it can be difficult to locate a specific machine.
When doing incident response for you company, you review the forensics of several virtual servers and you see the attacker on the web server injecting code into uninitialized memory blocks. What attack is the attacker likely attempting?
Denial-of-service attack on the hypervisor
VM escape
Containerization attack
Crashing the CASB
You are planning to move some applications to the cloud, including your organization's accounting application, which is highly customized and does not scale well. Which cloud deployment model is best for this application?
SaaS
PaaS
IaaS
None of the above
You need to move to the cloud a specific customer service module that has a web front end. This application is highly scalable and can be provided on demand. Which cloud deployment model is best for this application?
SaaS
PaaS
IaaS
None of the above
One of the primary resources in your organization is standard database that many applications tie into. Which cloud deployment model is best for this kind of application?
SaaS
PaaS
IaaS
None of the above
Which cloud deployment model has the fewest security controls?
Private
Public
Hybrid
Community
What is the primary downside of a private cloud model?
Restrictive access rules
Cost
Scalability
Lack of vendor support
To develop secure software that prevents attackers from directly injecting attacks into computer memory and manipulating the application's process, one should employ which method?
Elasticity
Dead Code
Normalization
Software diversity
Problems in which phase will specifically stop continuous deployment but not necessarily continuous delivery?
Continuous integration
Continuous monitoring
Continuous validation
Continuous development
Why is memory management important in software development?
A program can grow and consume other program spaces.
Memory is expensive.
Memory can be a speed issue.
None of the above.
When a program is installed and needs permissions, what is this called?
Staging
Provisioning
Continuous integration
Version control
Which of the following statements concerning elasticity and scalability are true?
Scalability requires elasticity.
Elasticity involves enabling software to use more processors to do more work.
Elasticity means being prepared to take advantage of scalability.
All of the above.
To protect software from reverse engineering by attackers, developers can use which of the following?
Dead code
Obfuscation
Binary diversity
Stored procedures
To manage various releases of software over time, the organization uses which of thee following?
Staging environment
Provisioning and deprovisioning steps
Version control
Continuous integration
Which of the following environments is used to test compatibility against multiple target environments?
Production
Test
Quality assurance
Staging
The fact that there are multiple methods of representing an object in a computer system can lead to issues when logical comparisons are needed. What can be used to ensure accuracy of comparison elements?
Normalization
Stored procedures
Third-party libraries
Third-party software development kits
What is the only sure method of ensuring input is valid before use on a server?
Use of third-party libraries and software development kits
Server-side validation
Stored procedures
Client-side validation
During a visit to a hosting center where your organization keeps some offsite servers, you see a door with an odd-looking panel next to it. You see people approaching the panel and placing their eyes into a hooded viewer. A few seconds after they've done this, the door unlocks. What type of biometric scanner might this be?
Voice recognition scanner
Retinal scanner
Fingerprint scanner
Facial recognition scanner
You've spent the last week tweaking a fingerprint-scanning solution for your organization. Despite your best efforts, roughly 1 in 50 attempts will fail, even if the user is using the correct finger and their fingerprint is in the system. Your supervisor says 1 in 50 is "good enough" and tells you to move on to the next project. Your supervisor just defined which of the following for your fingerprint scanning system?
False rejection rate
False acceptance rate
Critical threshold
Failure acceptance criteria
Which of the following algorithms uses a secret key with a current timestamp to generate a one-time password?
Hash-based Message Authentication Code
Date-Hashed Message Authorization Password
Time-based One-Time Password
Single sign-on
With regard to authentication, an access token falls into which factor category?
Something you are
Something you have
Something you know
Something you see
Which of the following is not a common form of hardware token?
Proximity card
Common access card
USB token
Iris scan
While depositing cash from a charity fundraiser at a local bank, you notice bank employees are holding up cards next to a panel near a door. A light on the panel turns green and the employees are able to open the door. The light on the panel is normally red. What type of electronic door control is this bank using?
Iris scanner
Hardware token
Proximity card
Symmetric key token
Your colleague is telling you a story she heard about a way to trick fingerprint scanner using gummy bears. She heard that if you press a gummy beat against an authorized user's finger, you can then use that gummy bear as their fingerprint to fool a fingerprint scanner. If this works, the result is an example of which of the following?
False negative
False positive
Crossover positive
Crossover negative
To ensure customers entering credentials in your website are valid and not someone with stolen credentials, your team is tasked with designing multifactor authentication. Which of the following would not be a good choice?
Static code
Phone call
Authentication application
Short message service
When you're designing and tweaking biometric systems, the point where both the accept and reject error rates are equal is known as which of the following?
Crossover acceptance rate
Accept-reject overlap rate
Crossover error rate
Overlap acceptance rate
Which of the following is not a term used in multifactor authentication?
Someone you know
Somewhere you are
Something you have
Something you see
Which backup strategy includes only the files and software that have changed since the last full backup?
Incremental
Full
Snapshot
Differential
Which backup strategy focuses on copies of virtual machines?
Incremental
Full
Snapshot
Differential
When discussing location for storage of backups, which of the following statements are true? (Choose all that apply.)
The most recent copy should be stored offsite, as it is the one that most current and is thus the most valuable.
Offsite storage is generally not necessary, except in cases where the possibility of a break-in at the main facility is high.
Offsite storage is a good idea so that you don't lose your backup to the same event that cause you to lose your operational data and thus need the backup.
The most recent copy can be stored locally, as it is the most likely to be needed, while other copies can be kept at other locations.
To deal with nonpersistence in a system, which of the following items offer risk mitigation? (Choose all that apply.)
Image backups
Cloud
Last known-good configuration
Revert to a known state
To have easily available quick backup of critical user documents, which of the following is recommended for backing these items up?
Differential
Snapshot
Copy
NAS
You have offices in six locations across town and wish to utilize a common backup restore methodology. Which would be the most efficient solution for your small offices?
SAN
NAS
Cloud
Offline
Which of the following statements is true about redundancy?
It prevents failures
It is complicated and expensive to do
It applies only to hardware
It can be done across many systems
What distinguishes high availability systems?
The ability to change with respect to usage conditions
The ability to process, even in times of disruption
Automated backups and recovery functions
The use of diversity to mitigate single threats
The continual changing of information in a system is referred to as what?
Nonpersistence
Snapshots
Differentials
Images
A PDU provides management of what in an enterprise?
Redundant backup processing
Power distribution servers
Improved network connection to data storage
Load balancing
Which of the following statements is not true?
Embedded systems are designed with a single control purpose in mind and typically have no additional functionality
Embedded systems are free of risk and security concerns
Embedded is the name given to a computer that is included as an integral part of a larger system
Embedded systems can be as complex as the dozens of interconnected embedded systems in a modern automobile
Which of the following statements is true regarding the risk of next-generation vehicles?
There are minimal risks when next-generation automobiles share information
Passing traffic and other information between vehicles does not increase security risks
The sharing of navigation and other inputs between vehicles presents a potential security issue
Time-to-market and cost minimization have minimal impact on potential risks being exploited
Which of the following properly defines supervisory control and data acquisition (SCADA)?
A scaled-down version of Linux designed for use in an embedded system
The standard used for communicating between intelligent car systems
The risk created by connecting control systems in buildings
A system designed to control
Which of the following statements is true about smart devices and the Internet of Things (IoT)?
The use of a Linux-type kernel as the core engine makes programming more complex
Mass production introduces significant security risks
The scaling of the software development over large number of units makes costs scalable, and functionality is paramount
Security or anything that might impact new expanded functionality is considered early and gets the focus and resources necessary
Which of the following statements is true about HVAC and building automation systems?
They have not been exploited to any significant degree yet
Interconnecting these systems and using Internet-based central control mechanisms increases the risk profile from outside attacks
Having a "smart building" that reduces the use of building resources in accordance with the number and distribution of people inside has not increased efficiency or reduced costs
The rise of hyper-connectivity has introduced no additional security concerns
Which of the following statements is not true about system on a chip?
It provides the full functionality of a computing platform on a single chip
It typically has low power consumption and efficient design
Programming of SoC systems can occur at several different levels, and thus potential risks are easily mitigated
Because SoC represents computing platforms with billions of devices worldwide, it has become significant force in the marketplace
What distinguishes real-time operating systems (RTOSs) from general-purpose operating systems?
Unlike RTOSs, most general-purpose operating systems handle interrupts within defined time constraints
Unlike general-purpose OSs, most RTOSs are capable of multitasking by design
Unlike RTOSs, most general-purpose operating systems are multitasking by design
Unlike general-purpose OSs, RTOSs are designed to handle multiple threads
Which of the following statements is true about printers and multifunction devices?
They rely on the computer to manage the printing and scanning processes
Because of their long history and widespread use, security is designed into these products
These devices communicate in a bidirectional fashion, accepting print jobs and sending back job status, printer status, and so forth
So far, they have not been shown to be hackable or capable of passing malware to the computer
Which of the following is a very important aspect to always remember when dealing with security of medical devices?
They are still relatively new in their usage
They can directly affect human life
Security is not related to safety
They are almost exclusively stand-alone devices, without Internet connectivity
Which of the following poses a significant potential risk of unmanned aerial vehicles?
They have sophisticated autopilot functions
They have cameras, sensors, and payloads
Some models have a low price
Because they are pilotless, their remote-control systems may be networked and therefore vulnerable to potential risks
Why is physical security important to protecting data?
Physical access to data will negate the security advantages of the cloud
Information resides on physical assets, linking physical and information security
Social engineering can negate any information security controls
None of the above
Why is proper interior and exterior lighting important?
It can detect people who are where they don't belong
It shows who is in a restricted space
It allows more people and activities to be observed
It is needed for the use of closed-circuit television cameras
Your organization has experienced multiple incidents of graffiti tagging and people loitering in the parking lot despite the chain-link fence surrounding it. What is the best solution to the issue?
"No Trespassing" signage
More guard stations
Additional external lighting
Changing the chain-link fencing to anti-scale fencing
After a physical security incident, what critical data can security guards commonly provide?
Employee ID information
Access logs of who has entered and exited the building
Alarm codes
Blueprints showing unmonitored areas of the building
Alarms are effective only if which of the following is true?
They alert on abnormal conditions
Every entrance is monitored with a sensor
They are not tied to the information systems
They are tuned to provide accurate and useful alerts
You are implementing a test lab at your organization for early alpha software development. To prevent any of the development code from inadvertently getting put on production computers, what should you implement?
Air gap
Strict firewalls
Protected distribution
Patch management
What is the security benefit of a Faraday cage?
Prevents attack by EMP
Prevents accessing a device using a wireless network or cell connection
Works better than anti-scale fencing
Prevents stack overflows by EMI
What is an example of a human-based screened subnet (DMZ)?
A visitor's lobby that is separated from a company office by a receptionist
Hallways between the company lobby and offices
A server room with a locked door
The networking cabinets in the facility
What is a primary problem with biometrics?
Technically, biometrics are difficult to implement
The human body changes over time
Biometrics are easily faked
Biometrics can't be loaned or delegated
What should you do to protect you IP-based CCTV system from a DDoS attack?
Reconfigure your firewalls
Connect it to an intrusion detection system
Require multifactor authentication to access the CCTV system
Place all CCTV components on a separate network
If you need to perform operations such as addition on encrypted elements, what type of encryption scheme would you use?
Asymmetric
Homomorphic
Stream
Lightweight
Which of the following is not a limitation associated with cryptographic solutions?
Speed
Computational overhead
Longevity
Entropy
What set of algorithms is designed for low-power devices such as the Internet of Things and embedded systems?
Lightweight
Hashing
Stream
Blockchain
How do you make a short secret, such as a password, become long enough for use?
Salting
Key elongation
Key stretching
Ephemeral operations
What is the best way to get the plaintext from a hash value?
Use linear cryptanalysis
Use a reverse has function
You cannot get the plaintext out of a hash value
Use an ephemeral key
What does a salt provide?
It tells the algorithm how many digits of primes to use
It primes the algorithm by giving it initial noncritical data
It adds additional rounds to the cipher
It provides additional entropy
What makes a digitally signed message different from an encrypted message?
The digitally signed message has encryption protections for integrity and nonrepudiation
The digitally signed message uses much stronger encryption and is harder to break
The encrypted message only uses symmetric encryption
There is no difference
Steganography is commonly accomplished using which method?
Encryption
Initialization vectors (IVs)
LSB encoding
Entropy substitution
To prevent the loss of a single message due to accidental decryption from affecting other encrpyted messages, which of the following properties is needed?
Stream encryption
Perfect forward secrecy
Entropy
Obfuscation
Given a large quantity of data in the form of a streaming video file, what is the best type of encryption method to protect the content from unauthorized live viewing?
Symmetric block
Hashing algorithm
Stream cipher
Asymmetric block
