NEW
Font size
WorksheetsCybersecurity MidTerm Exam
Total questions: 25
Worksheet time: 13mins
Who has the greastest influence over access security in a password authentication environment?
Wrong
Users
Wrong
Wrong
Which of the following interpret requirements and apply them to specific situations?
Wrong
Wrong
Standard
Wrong
Business continuity plans (BCPs) associated with organizational information systems should be developed primarily on the basis of:
Business needs
Wrong
Wrong
Wrong
A segmented network:
Wrong
Consists of two or more security zones
Wrong
Wrong
Which cybersecurity principle is most important when attempting to trace the source of malicious activity?
Wrong
Wrong
Wrong
Nonrepudiation
Which of the following offers the strongest protection for wireless network traffic?
Wireless Protected Access 2 (WPA2)
Wrong
Wrong
Wrong
Outsourcing poses the greatest risk to an organization when it involves:
Wrong
Wrong
Core business functions
Wrong
Risk assessments should be performed:
On a regular basis
Wrong
Wrong
Wrong
Maintaining a high degree of confidence regarding the integrity of evidence requires a(n):
Wrong
Chain of custody
Wrong
Wrong
A firewall that tracks open connection-oriented protocol sessions is said to be:
Wrong
Stateless
Wrong
Stateful
During which phase of the system development lifecycle (SDLC) should security first be considered?
Wrong
Design
Planning
Implement
A cybersecurity architecture designed around the concept of a perimeter is said to be:
Data-centric
Wrong
System-centric
Wrong
A passive network hub operates at which layer of the OSI model?
Data Link
Application
Physical
Network
Updates in cloud-computing environments can be rolled out quickly because the environment is:
Wrong
Wrong
Wrong
Homogeneous
During which phase of the six-phase incident response model is the root cause determined?
Wrong
Eradication
Containment
Wrong
The attack mechanism directed against a system is commonly called a(n):
Payload
Wrong
Wrong
Wrong
Where should an organization's network terminate virtual private network (VPN) tunnels?
Wrong
At the destination system, to prevent loss of confidentiality
Wrong
At the perimeter, to allow for effective ininternal monitoring
In practical applications:
Asymmetric key encryption is used to securely obtain symmetric keys
Wrong
Asymmetric key encryption is used in cases where speed is important
Wrong
Which two factors are used to calculate the likelihood of an event?
Wrong
Wrong
Threat and vulnerability
Wrong
What kind of anti-malware program evaluates system processes based on their observed behaviors?
Wrong
Signature-based
Wrong
Heuristic
A business continuity plan (BCP) is not complete unless it includes:
Detailed procedures
Wrong
Wrong
Wrong
Under the US-CERT model for incident categorization, a CAT-3 incident refers to which of the following?
Wrong
Denial of Service (DoS)
Wrong
Malicious code
An interoperability error is what type of vulnerability?
Wrong
Emergent
Wrong
Process
Securing Supervisory Control and Data Acquisition (SCADA) systems can be challenging because they:
Wrong
Support critical infrastructure processes for which any risk of compromise is unacceptable
Operate in specialized environments and often have non-standard design elements
Wrong
Virtual systems should be managed using a dedicated virtual local area network (VLAN) because:
Wrong
Segregation of management traffic and use triffic dramatically improves performance
Insecure protocols could result in a compromise of privileged user credentials
Wrong
