wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

SEC+ Ch.9 Review Test

Total questions: 15

Worksheet time: 8mins

Name
Class
Date
1.

Employees access the data center by entering a cipher code at the door.

However, everyone uses the same code, so it does not identify individuals. After a recent security incident, management has decided to implement a key card system that will identify individuals who enter and exit this secure area. However, the installation might take six months or longer. Which of the following choices can the organization install immediately to identify individuals who enter or exit the secure area?

a)

Access control vestibule

b)

Access list

c)

CCTV

d)

Bollards

e)

Compensating control

2.

Your local library is planning to purchase new laptops that patrons can use for Internet research. However, management is concerned about possible theft. Which of the following is the BEST choice to prevent theft of these laptops?

a)

Mantrap

b)

Anti-malware software

c)

Cable locks

d)

Disk encryption

3.

Your organization needs to create a design for a high-security network for a U.S. government contract. The network should not be accessible by your organization’s existing networks or the Internet. Which of the following options will BEST meet this need?

a)

Faraday cage

b)

Air gap

c)

Protected cable distribution

d)

Vault

4.

You need to secure access to a data center. Which of the following choices provides the BEST physical security to meet this need? (Select THREE.)

a)

Biometrics

b)

Cable locks

c)

Access control vestibule

d)

CCTV

e)

HVAC

5.

You need to add disk redundancy for a critical server in your organization’s screened subnet. Management wants to ensure it supports two-drive failure. Which of the following is the BEST solution for this requirement?

a)

RAID-0

b)

RAID-1

c)

RAID-5

d)

RAID-6

6.

Your organization hosts several databases on two servers. Management wants to increase the redundancy of data storage for these servers. Which of the following is the BEST choice to meet this requirement?

a)

NIC teaming

b)

Managed PDUs

c)

UPS

d)

Multipath

7.

Your organization hosts an e-commerce website that has been receiving a significant increase in traffic. The CPU is handling the load, but the server is unable to process the bandwidth consistently. Which of the following is the BEST choice to solve this problem?

a)

SAN

b)

NIC Teaming

c)

Multipath

d)

Managed PDUs

8.

Your organization is planning to deploy a new e-commerce website. Management anticipates heavy processing requirements for a back-end application used by the website. The current design will use one web server and multiple application servers. Additionally, when beginning a session, a user will connect to an application server and remain connected to the same application server for the entire session.

Which of the following BEST describes the configuration of the application servers?

a)

Load balancing

b)

Active/active

c)

Active/passive

d)

Persistence

9.

Your organization recently implemented two servers in an active/passive load-balancing configuration. What security goal does this support?

a)

Obfuscation

b)

Integrity

c)

Confidentiality

d)

Resilience

10.

Your database backup strategy includes full backups performed on Saturdays at 12:01 a.m. and differential backups performed daily at 12:01 a.m. If the database fails on Thursday afternoon, how many backups are required to restore it?

a)

1

b)

2

c)

3

d)

5

11.

After reading about increased ransomware attacks against the health sector, hospital administrators want to enhance organizational resilience against these attacks. Which of the following could IT personnel implement to support this goal?

a)

Use email filtering to block malicious emails

b)

Perform regular testing and validation of full backups

c)

Ensure all systems are patched

d)

Increase end-user training related to ransomware and other risks

12.

Your organization hired a security consultant to create a BIA. She is trying to identify processes that can potentially cause losses in revenue if they stop functioning. Which of the following BEST describes what she is identifying?

a)

Single points of failure

b)

Critical systems

c)

Mission-essential functions

d)

MTBF

13.

After a recent attack causing a data breach, an executive is analyzing the financial losses. She determined that the attack is likely to result in losses of at least $1 million. She wants to ensure that this information is documented for future planning purposes. Which of the following documents is she MOST likely to use?

a)

DRP

b)

BIA

c)

MTTR

d)

RTO

14.

A project manager is reviewing a business impact analysis. It indicates that a key website can tolerate a maximum of three hours of downtime. Administrators have identified several systems that require redundancy additions to meet this maximum downtime requirement. Of the following choices, what term refers to the maximum of three hours of downtime?

a)

RPO

b)

MTTR

c)

MTBF

d)

RTO

e)

DRP

15.

Lisa has scheduled quarterly meetings with department leaders to discuss how they would respond to various scenarios such as natural disasters or cyberattacks. During the meetings, she presents a scenario and asks attendees to indicate their responses. Also, during the meetings, she injects variations on the scenario similar to what may happen during a live event and encourages attendees to discuss their responses. What does this describe?

a)

Simulation

b)

Tabletop exercise

c)

Incident response

d)

Testing site resiliency