Font size
WorksheetsSecurity+ Domain 2: Architecture and Design Part 1
Total questions: 54
Worksheet time: 40mins
What is configuration management?
Managing default usernames and passwords
A process for maintaining computer systems, servers, and software in a desired, consistent state
The removal of secure configurations done by a malicious actor
None of the above
A (a) is an agreed upon description of product attributes at some point in time, serving as a basis for measuring change.
Which baseline refers to the state of work products after approved requirements?
Allocated baseline
Developmental baseline
Functional baseline
Product baseline
Which baseline refers to the establishment of initial specifications?
Allocated baseline
Developmental baseline
Functional baseline
Product baseline
Which of the following is NOT part of the list of naming conventions for attributes?
Warranty expiration date
RFC Numbers
Status
Case Numbers
Which of the following is a hardware security module responsible for?
Onboard secure cryptographic key generation
Onboard secure cryptographic key storage
Key management
All of the above
Natural disasters are a form of an incident.
True
False
What does CASB stand for?
Creative Architecture Standards Broker
Cloud Access Security Broker
Cipher and Security Broker
Clear Archive Standards Broker
CASB is NOT designed to extend across which of the following?
IaaS
SaaS
RaaS
PaaS
_______ are used to allow an organization to respond to an issue.
Recall controls
Recovery controls
Response controls
Reaction controls
_______ and techniques focus on getting the organization back to normal operations.
Recall controls
Recovery controls
Response controls
Reaction controls
SSL/TLS _______ is the process of intercepting SSL/TLS encrypted internet communication between the client and the server and verifying the content.
Capture
Inspection
Decryption
Verification
A hash is a one-way encryption that converts any form of data into a unique string of text known as a ________.
digest
ciphertext
crinkle
shred
Which of the following are API considerations? (Select three)
Version
Price
Security
Resources
Authorization
What is another name for software as a service?
Mobile backend as a service
Subscribe-ware
Platform-based service
Hardware as a service
What is another name for platform as a service?
Mobile backend as a service
Subscribe-ware
Platform-based service
Hardware as a service
What is another name for infrastructure as a service?
Mobile backend as a service
Subscribe-ware
Platform-based service
Hardware as a service
What is software as a service?
A category of cloud computing services that provides a platform allowing customers to develop, run, and manage applications
A software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet
An instant computing infrastructure, provisioned and managed over the internet
A software that separates the desktop environment from the physical client device
What is platform as a service?
A category of cloud computing services that provides a platform allowing customers to develop, run, and manage applications
A software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet
An instant computing infrastructure, provisioned and managed over the internet
A software that separates the desktop environment from the physical client device
What is infrastructure as a service?
A category of cloud computing services that provides a platform allowing customers to develop, run, and manage applications
A software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet
An instant computing infrastructure, provisioned and managed over the internet
A software that separates the desktop environment from the physical client device
Which is an example of SaaS?
Apache Cloudstack
Windows Azure
Office 365
None of the above
Which is an example of PaaS?
Apache Cloudstack
Windows Azure
Office 365
None of the above
Which is an example of IaaS?
Apache Cloudstack
Windows Azure
Office 365
None of the above
What does MSP stand for?
Managed Service Provider
Managed Security Provider
Managed Secrecy Provider
Managed Security Protocol
Which of the following could be outsourced to an MSP?
IT
HR
Vendor management
All of the above
An ______ is an outsourced third-party company that provides monitoring and management of security devices and systems.
MSSP
MSRP
MRSP
MXP
Which of the following could be outsourced to an MSSP?
Contract management
Intrusion detection
Payroll
All of the above
Cloud monitoring solutions can be done on-premises.
True
False
Which architecture transmits data from endpoints to a transit gateway?
Fog computing
Edge computing
Sky computing
River computing
A _______ is a lightweight computer designed to remote into a server.
microcomputer
thin client
tinyPC
floatdrive
A(n) _______ is a standard unit of software that packages up code and all its dependencies so an application runs quickly and reliably from one computing environment to another.
microservice
API
microcomputer
container
With SDN, you separate the functionality of your networking devices into two parts, a _______ plane and a _______ plane.
control
file
data
kernel
service
Virtualization _______ is a phenomenon that occurs when the number of virtual machines on a network reaches a point where the administrator can no longer manage them effectively.
Overload
Sprawl
Burden
Overcharge
How can you avoid VM sprawl?
VM sprawl avoidance
Polymerization
Limiting screen time
Disconnect the network
_______ is a security exploit that enables a hacker to gain access to the primary hypervisor and its created virtual machines.
Social Engineering
VM Escape
Hypervisory Robin Hood
1337 H4X0R
Which of the following is a computer hacking contest?
H4X0RCon
1337 Pwnage
Pwn2Own
NVL
During the March 2017 hacker competition, which exploit was used to access the host machine?
A JavaScript engine bug in Microsoft Edge allowed hackers to perform code execution in the Edge sandbox
Hackers took advantage of a bug in the Windows 10 kernel to compromise the guest OS
Hackers used a hardware simulation bug in the VMware hypervisor to escape the host
All of the above
What is the unofficial term used to refer to when Microsoft regularly releases software patches for its software products?
Patch Adams
Patch Friday
Patch Tuesday
Patch Thursday
Why would Microsoft release a patch outside of their regularly scheduled releases?
Someone forgot to patch on Tuesday
It's a critical security patch
It's the end of the month
It's the end of the quarter
A ________ is an isolated testing environment, disconnected from the outside worlds or your production systems.
Steamroller
Chimney
Dutch oven
Sandbox
In regards to the previous answer, what can be done inside it?
Change code
Implement new systems
Evaluate results
All of the above
Which of the following is the proper order of application deployment?
Development, staging, testing, production
Development, testing, staging, production
Staging, development, testing, production
Staging, development, production, testing
What is the maintenance of a desired level of quality in a service or product?
Quality Assurance
Quality Control
Quality Maintenance
None of the above
What does SPOF stand for?
Single Point of Failure
Scientific Process of Fragility
Secure Protocol Obscuring Forgery
Stop Putting Offensive Foolishness
_____ are files in a machine language that are specific to a processor.
CPU archives
Encoding files
Processing code
Binary executable files
_____ refers to the processes and tools an organization uses to reduce the manual efforts associated with provisioning and managing cloud computing workloads.
Outsourcing
Automation
Offshoring
Provisionalization
______ is creating a list of commands executed by an application.
Cloudifying
Forging
Scripting
Imaging
______ are the building blocks for scripts.
Ciphers
Code
Images
Templates
Which of the following do templates provide?
The ability to upscale
A basic structure of an application
How to change network settings
All of the above
How do you continuously monitor software?
Scripts
Images
Ciphers
Hashes
With continuous ______ developers merge their changes back to the main branch as often and as quickly as possible.
monitoring
integration
automation
updating
What is the purpose of continuous delivery?
Merge changes back to the main branch
To make sure the system is updated
To automatically updates changes to environments
All of the above
With continuous __________, developers make sure the system is updated.
monitoring
automation
integration
validation
What is elasticity?
The ability to fit the resources needed to cope with loads dynamically usually in relation to scale out
The ability of the system to accommodate larger loads just by adding resources either making hardware stronger
The ability of a system to flow back and forth between the cloud and local infrastructure
An attack used to stretch out resources
