WorksheetsSec Arch Final Exam
Total questions: 24
Worksheet time: 24mins
One of the best methods for reducing risks to the data of an organization is to implement a program that establishes an information security governance framework.
TRUE
FALSE
The overall process of risk identification, risk analysis and risk evaluation is called:
Management Review
Risk Assessment
Risk Management
ISMS Internal Audit
What does the C in the CIA of Information Security stand for?
Confidentiality
Context
Conformity
What are the key principles of Information Security?
Accessibility, Continuity & Informative
Availability, Confidentiality & Integrity
Answerable, Continuity & Integrity
Achievable, Continuous & Informative
In cybersecurity, what does CIA stand for?
Confidentiality, Integrity, Availability
Central Intelligence Agency
Cybersecurity Investigation Agency
Cybersecurity, Internet, Accessibility
What does integrity of data refer to?
The level of assurance which can be given as to how structured data is
The level of assurance which can be given as to how accurate and trustworthy data is
The level of assurance which can be given as to how strong data is
The level of assurance which can be given as to how relevant the data is
What does availability of data refer to?
The level of assurance that data exists
The level of assurance that data will be restricted to people who need it, when they need it
The level of assurance that data will be accurate and trustworthy
The level of assurance that data will be available to people who need it, when they need it
Why is it important to protect information like Social Security Numbers?
How does limiting access contribute to maintaining confidentiality?
Which of the regulatory compliance laws ensures proper handling of patient health information?
HIPAA
CCPA
GDPR
FISMA
What is the purpose of PCI DSS in the travel and tourism industry?
To ensure transaction accuracy and efficiently process payments
To govern the handling of credit card data in travel and tourism industry
To resolve customer service related issues in the tourism industry
To incentivize customers to select online services over retail
"Ongoing process of identifying risks and opportunities and implementing plans to address them" is the definition of:
Risk and Opportunities
Risk Management
Risk Treatment
Risk Monitoring
___ is a weakness that can be exploited by hackers
System with virus
System without firewall
System with Vulnerabilities
System with a strong password
Which of the following is the most popular scanning software used to check the vulnerabilities in an organization’s Network?
Snort
WebInspect
Wireshark
Nessus
What should provide a report of what needs security attention and where on the list of priorities it should be placed?
Known vulnerabilities
Vulnerability Assessment
Security policy
None of the above
Which of the following is the most secure way of giving access to AWS services to applications running on Ec2 instances?
Creating Service users
Creating service groups
Roles
Attaching policies to applications
TRUE or FALSE : By default a new user in IAM has permisiions to log in to the AWS Console.
TRUE
FLASE
Wch of the following set of credentials are used to log in to AWS programmatically? (Choose two)
Username
Access Key
Password
Secret Key
How do I invoke an AWS Lambda function over HTTPS?
Boto
API Gateway
Step function
Fiddler
How do I allow my AWS Lambda function access to other AWS resources?
Cloudtrail
Boto
IAM User
IAM Role
Does AWS VPC is using same concept as on-premise network?
True
False
What does VPC peering allow you to do in AWS?
Share VPC resources with other AWS accounts
Connect multiple VPCs within the same AWS account
Establish a VPN connection to AWS resources
Access public S3 buckets
