The city of Grampon wants to know where all its public vehicles (garbage trucks, police cars, etc.) are at all times, so the city has GPS transmitters installed in all the vehicles. What kind of control is this?

Triffid Corporation has a rule that all employees working with sensitive hardcopy documents must put the documents into a safe at the end of the workday, where they are locked up until the following workday. What kind of control is the process of putting the documents into the safe?

Grampon municipal code requires that all companies that operate within city limits will have a set of processes to ensure employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities employees must follow while working with hazardous materials inside Grampon city limits. The municipal code is a ______, and the Triffid checklist is a ________.

Tina is an (ISC)² member and is invited to join an online group of IT security enthusiasts. After attending a few online sessions, Tina learns that some participants in the group are sharing malware with each other, in order to use it against other organizations online. What should Tina do?

A bollard is a post set securely in the ground in order to prevent a vehicle from entering an area or driving past a certain point. Bollards are an example of ______ controls.

Triffid Corporation has a policy that all employees must receive security awareness instruction before using email; the company wants to make employees aware of potential phishing attempts that the employees might receive via email. What kind of control is this instruction?

The Triffid Corporation publishes a strategic overview of the company's intent to secure all the data the company possesses. This document is signed by Triffid senior management. What kind of document is this?

Chad is a security practitioner tasked with ensuring that the information on the organization's public website is not changed by anyone outside the organization. This task is an example of ensuring _________.

The city of Grampon wants to ensure that all of its citizens are protected from malware, so the city council creates a rule that anyone caught creating and launching malware within the city limits will receive a fine and go to jail. What kind of rule is this?

Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma what the test questions are like. What should Zarma do?

Druna is a security practitioner tasked with ensuring that laptops are not stolen from the organization's offices. Which sort of security control would probably be best for this purpose?

For which of the following assets is integrity probably the most important security aspect?

Jengi is setting up security for a home network. Jengi decides to configure MAC address filtering on the router, so that only specific devices will be allowed to join the network. This is an example of a(n)_______ control.

Siobhan is an (ISC)² member who works for Triffid Corporation as a security analyst. Yesterday, Siobhan got a parking ticket while shopping after work. What should Siobhan do?

Hoshi is an (ISC)² member who works for the Triffid Corporation as a data manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a product for Triffid to acquire and implement. Hoshi's cousin works for a firewall vendor; that vendor happens to make the best firewall available. What should Hoshi do?

Of the following, which would probably not be considered a threat?

Sophia is visiting Las Vegas and decides to put a bet on a particular number on a roulette wheel. This is an example of _________.

In risk management concepts, a(n) ___________ is something or someone that poses risk to an organization or asset.

Who approves the incident response policy?

When should a business continuity plan (BCP) be activated?

True or False? Business continuity planning is a reactive procedure that restores business operations after a disruption occurs.

What is the goal of an incident response effort?

What is the risk associated with delaying resumption of full normal operations after a disaster?

You are reviewing log data from a router; there is an entry that shows a user sent traffic through the router at 11:45 am, local time, yesterday. This is an example of a(n) _______.

Which of the following are not typically involved in incident detection?

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs onto the system, an access control list (ACL) checks to determine which permissions Prachi has.

In this situation, what is the database?

Gelbi is a Technical Support analyst for Triffid, Inc. Gelbi sometimes is required to install or remove software. Which of the following could be used to describe Gelbi's account?

A human guard monitoring a hidden camera could be considered a ______ control.

In order for a biometric security to function properly, an authorized person's physiological data must be ______.

A _____ is a record of something that has occurred.

Trina and Doug both work at Triffid, Inc. Doug is having trouble logging into the network. Trina offers to log in for Doug, using Trina's credentials, so that Doug can get some work done.

What is the problem with this?

Which of the following is a biometric access control mechanism?

Which of the following statements is true?

Which of the following would be considered a logical access control?

Which of the following is probably most useful at the perimeter of a property?

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that employees who are assigned to new positions in the company do not retain whatever access they had in their old positions. Which method should Handel select?

Prina is a database manager. Prina is allowed to add new users to the database, remove current users and create new usage functions for the users. Prina is not allowed to read the data in the fields of the database itself. This is an example of:

Gary is unable to log in to the production environment. Gary tries three times and is then locked out of trying again for one hour. Why?

Larry and Fern both work in the data center. In order to enter the data center to begin their workday, they must both present their own keys (which are different) to the key reader, before the door to the data center opens.

Which security concept is being applied in this situation?

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs onto the system, an access control list (ACL) checks to determine which permissions Prachi has.

In this situation, what is Prachi?

Tekila works for a government agency. All data in the agency is assigned a particular sensitivity level, called a "classification." Every person in the agency is assigned a "clearance" level, which determines the classification of data each person can access.

What is the access control model being implemented in Tekila's agency?

Guillermo logs onto a system and opens a document file. In this example, Guillermo is:

A tool that monitors local devices to reduce potential threats from hostile software.

Inbound traffic from an external source seems to indicate much higher rates of communication than normal, to the point where the internal systems might be overwhelmed. Which security solution can often identify and potentially counter this risk?

Ludwig is a security analyst at Triffid, Inc. Ludwig notices network traffic that might indicate an attack designed to affect the availability of the environment. Which of the following might be the attack Ludwig sees?

Gary is an attacker. Gary is able to get access to the communication wire between Dauphine's machine and Linda's machine and can then surveil the traffic between the two when they're communicating. What kind of attack is this?

A VLAN is a _____ method of segmenting networks.

Triffid, Inc., has deployed anti-malware solutions across its internal IT environment. What is an additional task necessary to ensure this control will function properly?

Cyril wants to ensure all the devices on his company's internal IT environment are properly synchronized. Which of the following protocols would aid in this effort?

Barry wants to upload a series of files to a web-based storage service, so that people Barry has granted authorization can retrieve these files. Which of the following would be Barry's preferred communication protocol if he wanted this activity to be efficient and secure?

The common term for systems that ensure proper temperature and humidity in the data center.

A device typically accessed by multiple users, often intended for a single purpose, such as managing email or web pages.

A tool that filters inbound traffic to reduce potential threats.

Which of the following is one of the common ways potential attacks are often identified?

A device that is commonly useful to have on the perimeter between two networks.

Bert wants to add a flashlight capability to a smartphone. Bert searches the internet for a free flashlight app, and downloads it to the phone. The app allows Bert to use the phone as a flashlight, but also steals Bert's contacts list. What kind of app is this?

To adequately ensure availability for a data center, it is best to plan for both resilience and _______ of the elements in the facility.

Which common cloud service model only offers the customer access to a given application?

A means to allow remote users to have secure access to the internal IT environment.

Proper alignment of security policy and business goals within the organization is important because:

If two people want to use asymmetric communication to conduct a confidential conversation, how many keys do they need?

Hashing is often used to provide _______.

One of the benefits of computer-based training (CBT):

Bluga works for Triffid, Inc. as a security analyst. Bluga wants to send a message to several people and wants the recipients to know that the message definitely came from Bluga. What type of encryption should Bluga use?

The output of any given hashing algorithm is always _____.

Who dictates policy?

Triffid, Inc., wants to host streaming video files for the company's remote users, but wants to ensure the data is protected while it's streaming. Which of the following methods are probably best for this purpose?

Which of these is the most important reason to conduct security instruction for all employees.

______ is used to ensure that configuration management activities are effective and enforced.

If two people want to use symmetric encryption to conduct a confidential conversation, how many keys do they need?

Which of the following is probably the main purpose of configuration management?

The organization should keep a copy of every signed Acceptable Use Policy (AUP) on file, and issue a copy to _______.

Phrenal is selling a used laptop in an online auction. Phrenal has estimated the value of the laptop to be $100, but has seen other laptops of similar type and quality sell for both more and less than that amount. Phrenal hopes that the laptop will sell for $100 or more, but is prepared to take less for it if nobody bids that amount. This is an example of ___________.

Kerpak works in the security office of a medium-sized entertainment company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter this threat would be to purchase and implement a particular security solution. This is an example of _______.

Which of the following is an example of a "something you are" authentication factor?

The Payment Card Industry (PCI) Council is a committee made up of representatives from major credit card providers (Visa, Mastercard, American Express) in the United States. The PCI Council issues rules that merchants must follow if the merchants choose to accept payment via credit card. These rules describe best practices for securing credit card processing technology, activities for securing credit card information, and how to protect customers' personal data. This set of rules is a _____.

A system that collects transactional information and stores it in a record in order to show which users performed which actions is an example of providing ________.

Within the organization, who can identify risk?

Glen is an (ISC)² member. Glen receives an email from a company offering a set of answers for an (ISC)² certification exam. What should Glen do?

Olaf is a member of (ISC)² and a security analyst for Triffid Corporation. During an audit, Olaf is asked whether Triffid is currently following a particular security practice. Olaf knows that Triffid is not adhering to that standard in that particular situation, but that saying this to the auditors will reflect poorly on Triffid. What should Olaf do?

The European Union (EU) law that grants legal protections to individual human privacy.

Aphrodite is a member of (ISC)² and a data analyst for Triffid Corporation. While Aphrodite is reviewing user log data, Aphrodite discovers that another Triffid employee is violating the acceptable use policy and watching streaming videos during work hours. What should Aphrodite do?

A software firewall is an application that runs on a device and prevents specific types of traffic from entering that device. This is a type of ________ control.

Steve is a security practitioner assigned to come up with a protective measure for ensuring cars don't collide with pedestrians. What is probably the most effective type of control for this task?

Which of the following probably poses the most risk?

(ISC)² publishes a Common Body of Knowledge (CBK) that IT security practitioners should be familiar with; this is recognized throughout the industry as a set of material that is useful for practitioners to refer to. Certifications can be issued for demonstrating expertise in this Common Body of Knowledge. What kind of document is the Common Body of Knowledge?

The Triffid Corporation publishes a policy that states all personnel will act in a manner that protects health and human safety. The security office is tasked with writing a detailed set of processes on how employees should wear protective gear such as hardhats and gloves when in hazardous areas. This detailed set of processes is a _________.

For which of the following systems would the security concept of availability probably be most important?

Preenka works at an airport. There are red lines painted on the ground next to the runway; Preenka has been instructed that nobody can step or drive across a red line unless they request, and get specific permission from, the control tower. This is an example of a(n)______ control.

In risk management concepts, a(n) _________ is something a security practitioner might need to protect.

Triffid Corporation has a rule that all employees working with sensitive hardcopy documents must put the documents into a safe at the end of the workday, where they are locked up until the following workday. What kind of control is the process of putting the documents into the safe?

What is the most important goal of a business continuity effort?

What is the risk associated with resuming full normal operations too soon after a DR effort?

All of the following are important ways to practice an organization disaster recovery (DR) effort; which one is the most important?

Which of the following is likely to be included in the business continuity plan?

What is the overall objective of a disaster recovery (DR) effort?

An attacker outside the organization attempts to gain access to the organization's internal files. This is an example of a(n) ______.

What is the goal of Business Continuity efforts?

Which of the following will have the most impact on determining the duration of log retention?

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that operational managers have the utmost personal choice in determining which employees get access to which systems/data. Which method should Handel select?

Which of the following is not an appropriate control to add to privileged accounts?

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs onto the system, an access control list (ACL) checks to determine which permissions Prachi has.

In this situation, what is the ACL?

All visitors to a secure facility should be _______.

Which of these is an example of a physical access control mechanism?

Network traffic originating from outside the organization might be admitted to the internal IT environment or blocked at the perimeter by a ________.

Trina is a security practitioner at Triffid, Inc. Trina has been tasked with selecting a new product to serve as a security control in the environment. After doing some research, Trina selects a particular product. Before that product can be purchased, a manager must review Trina's selection and determine whether to approve the purchase. This is a description of:

All of the following are typically perceived as drawbacks to biometric systems, except:

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that employees transferring from one department to another, getting promoted, or cross-training to new positions can get access to the different assets they'll need for their new positions, in the most efficient manner. Which method should Handel select?

At Parvi's place of work, the perimeter of the property is surrounded by a fence; there is a gate with a guard at the entrance. All inner doors only admit personnel with badges, and cameras monitor the hallways. Sensitive data and media are kept in safes when not in use.

This is an example of:

Bruce is the branch manager of a bank. Bruce wants to determine which personnel at the branch can get access to systems, and under which conditions they can get access. Which access control methodology would allow Bruce to make this determination?

Visitors to a secure facility need to be controlled. Controls useful for managing visitors include all of the following except:

Suvid works at Triffid, Inc. When Suvid attempts to log in to the production environment, a message appears stating that Suvid has to reset the password. What may have occurred to cause this

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachis logs onto the system, an access control list (ACL) checks to determine which permissions Prachi has.

Which security concept is being applied in this situation?

Which of the following roles does not typically require privileged account access?

What is the access control model being implemented in Tekila's agency?

Which of the following is not a typical benefit of cloud computing services?

"Wiring _____" is a common term meaning "a place where wires/conduits are often run, and equipment can be placed, in order to facilitate the use of local networks."

The section of the IT environment that is closest to the external world; where we locate IT systems that communicate with the Internet.

Which common cloud service model offers the customer the most control of the cloud environment?

Which common cloud deployment model typically features only a single customer's data/functionality stored on specific systems/hardware?

An IoT (Internet of Things) device is typified by its effect on or use of the _____ environment.

The logical address of a device connected to the network or Internet.

A tool that inspects outbound traffic to reduce potential threats.

Which type of fire-suppression system is typically the safest for humans?

Which of the following activities is usually part of the configuration management process, but is also extremely helpful in countering potential attacks?

The concept that the deployment of multiple types of controls provides better security than using a single type of control.

Cheryl is browsing the Web. Which of the following protocols is she probably using?

A tool that aggregates log data from multiple sources, and typically analyzes it and reports potential threats.

Triffid, Inc., has many remote workers who use their own IT devices to process Triffid's information. The Triffid security team wants to deploy some sort of sensor on user devices in order to recognize and identify potential security issues. Which of the following is probably most appropriate for this specific purpose?

Which type of fire-suppression system is typically the least expensive?

Carol is browsing the Web. Which of the following ports is she probably using?

Garfield is a security analyst at Triffid, Inc. Garfield notices that a particular application in the production environment is being copied very quickly, across systems and devices utilized by many users. What kind of attack could this be?

Which of the following would be best placed in the DMZ of an IT environment?

When Pritha started working for Triffid, Inc., Pritha had to sign a policy that described how Pritha would be allowed to use Triffid's IT equipment. What policy was this?

Every document owned by Triffid, Inc., whether hardcopy or electronic, has a clear, 24-point word at the top and bottom. Only three words can be used: "Sensitive," "Proprietary" and "Public."

This is an example of _____.

An organization must always be prepared to ______ when applying a patch.

Security controls on log data should reflect ________.

Archiving is typically done when _________.

By far, the most crucial element of any security instruction program.

Log data should be kept ______.

Data _____ is data left behind on systems/media after normal deletion procedures have been attempted.

Data _____ is data left behind on systems/media after normal deletion procedures have been attempted.

Data retention periods apply to ____ data.

Dieter wants to send a message to Lupa and wants to be sure that Lupa knows the message has not been modified in transit. What technique/tool could Dieter use to assist in this effort?

When data has reached the end of the retention period, it should be _____.

Security needs to be provided to ____ data.

Logs should be reviewed ______.