Font size
WorksheetsSec+ Quiz - 2
Total questions: 15
Worksheet time: 16mins
An organization has developed an application that needs a patch to fix a critical vulnerability. In which of the following environments should the patch be deployed LAST?
Test
Staging
Development
Production
Which of the following is the MOST effective control against zero-day vulnerabilities?
Network segmentation
Patch management
Intrusion prevention system
Multiple vulnerability scanners
An engineer wants to inspect traffic to a cluster of web servers in a cloud environment. Which of the following solutions should the engineer implement?
Proxy server
WAF
Load balancer
VPN
A Chief Information Security Officer has defined resiliency requirements for a new data center architecture. The requirements are as follows:
• Critical file shares will remain accessible during and after a natural disaster.
• Five percent of hard disks can fail at any given time without impacting the data.
• Systems will be forced to shut down gracefully when battery levels are below 20%.
Which of the following are required to BEST meet these objectives? (Select THREE)
UPS
RAID
Geographic dispersal
Redundant power supplies
Fiber switching
Which of the following actions would be recommended to improve an incident response process?
Train the team to identify the difference between events and incidents
Modify access so the IT team has full access to the compromised assets
Contact the authorities if a cybercrime is suspected
Restrict communication surrounding the response to the IT team
A security proposal was set up to track requests for remote access by creating a baseline of the users' common sign-in properties. When a baseline deviation is detected, an MFA challenge will be triggered. Which of the following should be configured in order to deploy the proposal?
Context-aware authentication
Simultaneous authentication of equals
Extensive authentication protocol EAP
Agentless network access control
An administrator needs to protect user passwords and has been advised to hash the passwords. Which of the following BEST describes what the administrator is being advised to do?
Perform a mathematical operation on the passwords that will convert them into vague strings.
Add extra data to the passwords so their length is increased, making them harder to brute force.
Store all passwords in the system in a rainbow table that has a centralized location.
Enforce the use of one-time passwords that are changed for every login session.
A database administrator wants to grant access to an application that will be reading and writing data to a database. The database is shared by other applications also used by the finance department. Which of the following account types is MOST appropriate for this purpose?
Service
Shared
Generic
Admin
A security analyst is receiving numerous alerts reporting that the response time of an internet-facing application has been degraded. However, the internal network performance was not degraded. Which of the following MOST likely explains this behavior?
DNS poisoning
MAC flooding
DDoS attack
ARP poisoning
The Chief Information Security Officer directed a risk reduction in shadow IT and created a policy requiring all unsanctioned high-risk SaaS applications to be blocked from user access. Which of the following is the BEST security solution to reduce this risk?
CASB
VPN concentrator
MFA
VPC endpoint
An organization discovered files with proprietary financial data have been deleted. The files have been recovered from backup but every time the Chief Financial Officer logs in to the file server, the same files are deleted again. No other users are experiencing this issue. Which of the following types of malware is MOST likely causing this behavior?
Logic bomb
Crypto malware
Spyware
Remote access Trojan
A security analyst is working on a project to implement a solution that monitors network communications and provides alerts when abnormal behavior is detected. Which of the following is the security analyst MOST likely implementing?
Vulnerability scans
User behavior analysis
Security orchestration, automation, and response
Threat hunting
Which of the following would BEST provide a systems administrator with the ability to more efficiently identify systems and manage permissions and policies based on location, role, and service level?
Standard naming conventions
Domain services
Baseline configurations
Diagrams
A security incident has been resolved. Which of the following BEST describes the importance of the final phase of the incident response plan?
It examines and documents how well the team responded discovers what caused the incident, and determines how the incident can be avoided in the future
It returns the affected systems back into production once systems have been fully patched, data restored and vulnerabilities addressed
It identifies the incident and the scope of the breach how it affects the production environment, and the ingress point
It contains the affected systems and disconnects them from the network, preventing further spread of the attack or breach
How is everything going?
