Font size
WorksheetsSEC+ Ch.9 Review Test
Total questions: 15
Worksheet time: 8mins
Employees access the data center by entering a cipher code at the door.
However, everyone uses the same code, so it does not identify individuals. After a recent security incident, management has decided to implement a key card system that will identify individuals who enter and exit this secure area. However, the installation might take six months or longer. Which of the following choices can the organization install immediately to identify individuals who enter or exit the secure area?
Access control vestibule
Access list
CCTV
Bollards
Compensating control
Your local library is planning to purchase new laptops that patrons can use for Internet research. However, management is concerned about possible theft. Which of the following is the BEST choice to prevent theft of these laptops?
Mantrap
Anti-malware software
Cable locks
Disk encryption
Your organization needs to create a design for a high-security network for a U.S. government contract. The network should not be accessible by your organization’s existing networks or the Internet. Which of the following options will BEST meet this need?
Faraday cage
Air gap
Protected cable distribution
Vault
You need to secure access to a data center. Which of the following choices provides the BEST physical security to meet this need? (Select THREE.)
Biometrics
Cable locks
Access control vestibule
CCTV
HVAC
You need to add disk redundancy for a critical server in your organization’s screened subnet. Management wants to ensure it supports two-drive failure. Which of the following is the BEST solution for this requirement?
RAID-0
RAID-1
RAID-5
RAID-6
Your organization hosts several databases on two servers. Management wants to increase the redundancy of data storage for these servers. Which of the following is the BEST choice to meet this requirement?
NIC teaming
Managed PDUs
UPS
Multipath
Your organization hosts an e-commerce website that has been receiving a significant increase in traffic. The CPU is handling the load, but the server is unable to process the bandwidth consistently. Which of the following is the BEST choice to solve this problem?
SAN
NIC Teaming
Multipath
Managed PDUs
Your organization is planning to deploy a new e-commerce website. Management anticipates heavy processing requirements for a back-end application used by the website. The current design will use one web server and multiple application servers. Additionally, when beginning a session, a user will connect to an application server and remain connected to the same application server for the entire session.
Which of the following BEST describes the configuration of the application servers?
Load balancing
Active/active
Active/passive
Persistence
Your organization recently implemented two servers in an active/passive load-balancing configuration. What security goal does this support?
Obfuscation
Integrity
Confidentiality
Resilience
Your database backup strategy includes full backups performed on Saturdays at 12:01 a.m. and differential backups performed daily at 12:01 a.m. If the database fails on Thursday afternoon, how many backups are required to restore it?
1
2
3
5
After reading about increased ransomware attacks against the health sector, hospital administrators want to enhance organizational resilience against these attacks. Which of the following could IT personnel implement to support this goal?
Use email filtering to block malicious emails
Perform regular testing and validation of full backups
Ensure all systems are patched
Increase end-user training related to ransomware and other risks
Your organization hired a security consultant to create a BIA. She is trying to identify processes that can potentially cause losses in revenue if they stop functioning. Which of the following BEST describes what she is identifying?
Single points of failure
Critical systems
Mission-essential functions
MTBF
After a recent attack causing a data breach, an executive is analyzing the financial losses. She determined that the attack is likely to result in losses of at least $1 million. She wants to ensure that this information is documented for future planning purposes. Which of the following documents is she MOST likely to use?
DRP
BIA
MTTR
RTO
A project manager is reviewing a business impact analysis. It indicates that a key website can tolerate a maximum of three hours of downtime. Administrators have identified several systems that require redundancy additions to meet this maximum downtime requirement. Of the following choices, what term refers to the maximum of three hours of downtime?
RPO
MTTR
MTBF
RTO
DRP
Lisa has scheduled quarterly meetings with department leaders to discuss how they would respond to various scenarios such as natural disasters or cyberattacks. During the meetings, she presents a scenario and asks attendees to indicate their responses. Also, during the meetings, she injects variations on the scenario similar to what may happen during a live event and encourages attendees to discuss their responses. What does this describe?
Simulation
Tabletop exercise
Incident response
Testing site resiliency
