A company deploys smart lighting and HVAC systems in its office building. Soon after, unauthorized temperature changes are noticed. Which security strategy BEST prevents this issue?

Antion works for a water treatment facility and needs to ensure that pumps and sensors located miles away are operating correctly at all times. Which industrial system is primarily responsible for real-time monitoring and control of this remote equipment?

A manufacturing plant connects its ICS network to the corporate IT network for easier monitoring. Soon after, attackers exploit vulnerabilities to access critical systems. Which action would BEST reduce this risk?

Damian is setting up a smart home system with various IoT devices, such as smart thermostats and security sensors. He notices that standard networking solutions (like traditional Wi-Fi or Ethernet) are not always effective for these devices. Why might this be the case?

A company installs multiple consumer-grade IoT devices in its network. Within weeks, unusual outbound traffic is detected. What is the MOST likely reason?

Which mitigation strategy BEST addresses the increased attack surface created by adding IoT devices to a network?

Which access control model allows the OWNER of a resource to determine who can access it?

A company assigns permissions based on employees’ job titles such as 'HR,' 'Manager,' or 'Technician.' Which access control model is being used?

An IT administrator can create new user accounts, reset passwords, and modify group memberships. To prevent this account from being abused, the security team implements a system that controls, monitors, and audits privileged accounts. Which term BEST describes this system?

Which principle ensures a user only has the minimum permissions required to complete their job tasks?

An employee in accounting can approve vendor payments. Another employee is responsible for entering vendor invoices. This setup prevents one individual from both entering AND approving transactions. Which security concept does this represent?

Which layer of the Defense in Depth model includes VLANs and IDS/IPS systems?

A network administrator notices unauthorized devices connecting to office switch ports. To prevent this, they implement 802.1X and configure MAC filtering. Which security goal are they addressing?

Which element of the CIA triad ensures that information is only accessible to authorized users?

A company wants to assess how a DDoS attack would affect its mission-critical functions. Which risk management process should they use?

Which type of security audit focuses on verifying adherence to laws and regulations such as GDPR or PCI DSS?

A security team scans a server to compare its configuration to the company’s baseline and identify missing patches. What process are they performing?

Which regulatory framework focuses on protecting personal data and giving individuals data rights in the European Union?

What is the primary purpose of encryption?

Which cryptographic method is commonly used for password storage and data integrity verification?

An attacker exploits a vulnerability that developers were not aware of and had no patch for. What type of vulnerability is this?

Which state of data is MOST associated with TLS or HTTPS protection?

A security team deploys fake servers that appear vulnerable to attract attackers and analyze their techniques. What technology is being used?

Imagine Andrew and David have set up a small office network. What is the primary function of a firewall they installed to protect their network?

What does AUP stand for?

What is a limitation of a firewall in an IT network?