Physical control is best illustrated by which example?

Aya and LJ are security officers at a large corporate office. They are discussing the various types of security controls in place. Aya asks, "What is the primary purpose of a detective control?"

In a school, a deterrent control is best characterized as a control that:

During a school event, Phenyo is responsible for ensuring that all attendees are legitimate. Identification control primarily aims to:

In a corporate office, Aya is responsible for managing access to sensitive information. She implements policy-driven access control to ensure that employees can only access data on a need-to-know basis. This approach is most closely associated with which idea?

In a busy office, Nkay and Chloe are discussing how to improve security. They consider implementing a system where two doors interlock to allow only one individual through at a time. Which description best matches this approach to threat scope reduction?

In a high-security building, Aya and Justice are trying to enter a restricted area. They encounter an access control vestibule that has two interlocking doors, allowing only one of them to enter at a time. What is this access control vestibule?

In a corporate office, Chloe and Alejandra are discussing the approval process for accessing sensitive data. Which statement best represents this approval process in security governance?

In the context of access control, dependencies primarily:

In a recent news article, Aya read about a group of individuals who launched a campaign to expose government corruption through online protests and website defacements. Which statement best describes these individuals in the context of threat actors?

Chloe and Kgomotso are discussing different types of cryptography in their computer science class. Kgomotso mentions that public key encryption is a method used for secure communication. Chloe asks, 'Public key encryption is classified as which type of cryptography?'

During a high-security event, Sagrys needs to access a restricted area. To gain entry, he must use a password, his fingerprint, and a smart card. Together, these elements represent which authentication category?

In a network setup at Phenyo's school, they are considering implementing a transparent firewall. Which is true of a transparent firewall in terms of network addressing?

During a recent class project, Phenyo and Nkay were discussing the best practices for backup media connectivity. Phenyo suggested that they should always keep backup media connected for faster restores, while Nkay argued that it is better to keep backup media offline or disconnected except during backup/restore. What is the recommended practice for backup media connectivity?

Justice is a cybersecurity analyst who is assessing the severity of vulnerabilities in a software application. He learns about the Common Vulnerability Scoring System (CVSS) and needs to determine the valid score range for CVSS vulnerabilities. What is the valid score range for CVSS vulnerabilities?

While traveling, LJ and Chloe come across a public charging station. They wonder about the safety of using the chargers available there. Which statement about malicious USB chargers and mobile devices is correct?

Chloe and LJ are discussing internet security protocols. Chloe asks, 'TLS is related to SSL in which way?' What do you think she means?

During a cybersecurity training session, Phenyo asks, "What is a primary function of SIEM systems?"

During a team meeting at a tech company, Phenyo raised a concern about the importance of security awareness training. He asked, when should this training occur?

During a group project, Alejandra and her team members, including Kgomotso and Chloe, are using a shared online document to collaborate. How does accounting (audit logging) support non-repudiation in their project?

During a cybersecurity workshop, Kgomotso and Chloe learned about different types of online scams. Kgomotso asked, 'What distinguishes phishing from spear phishing?'

In a company, Aya and Alejandra are assigned different roles. In Role-Based Access Control (RBAC), permissions are primarily assigned based on which factor?

In a company, Aya is tasked with setting up a network security system. She decides to create a DMZ to enhance security. What best describes a DMZ in network security?

During a class project, Aya was working on a virtual machine to develop a software application. She decided to take a snapshot of her VM before making significant changes. What is a snapshot in the context of virtual machines?

During a school project, Sagrys discovered that sensitive student data was being shared without proper authorization. What is the function of a Data Loss Prevention (DLP) system in this scenario?

Justice and Naledi are tasked with ensuring the security of their school's computer network. They need to establish a secure configuration baseline. What is this baseline used for?

In a tech-savvy company, LJ and Justice are discussing mobile deployment models. They wonder which models allow employees to choose their own devices for work. What do you think they should consider?

During a recent cybersecurity training session, Alejandra and her classmates learned about the importance of configuration management tools in maintaining system security. How do these tools assist vulnerability remediation?

During a team project, Kgomotso and Aya are discussing the implications of allowing USB tethering on their mobile devices while working in the corporate office. What is a risk they should consider?

Choose the correct answer. During a recent compliance audit at their company, Naledi and Aya were tasked with identifying gaps in their adherence to the security framework. Which tool would they use to help with this task?

Choose the correct answer. One day, Sagrys received an email that looked like it was from his bank, asking him to click a link to verify his account. However, when he clicked the link, he was redirected to a fake website that looked identical to his bank's site. Which type of attack does this scenario illustrate?

Choose the correct answer. During a secure online meeting, Sagrys and Chloe are discussing the importance of encryption. Sagrys mentions that there is a protocol that uses asymmetric encryption during the handshake to ensure their conversation is secure. What protocol is he referring to?

In a company where Sagrys and Chloe work, they are implementing a new security model called Zero Trust. Choose the correct answer. Zero Trust assumes which of the following?

Choose the correct answer. In a recent project, Justice and Nkay were tasked with identifying critical assets and functions for their company's cybersecurity strategy. Which method should they use?

Choose the correct answer. During a cybersecurity workshop, Aya and Justice were discussing the functionalities of a SIEM system. Aya mentioned that it is primarily used for a specific purpose. What does a SIEM system primarily do?

Choose the correct answer. During a team meeting, Chloe mentioned that the production line had been experiencing delays. To understand the underlying issues, Justice suggested using the Five Whys method. What is the Five Whys method used for?

Choose the correct answer. Alejandra works at a financial services company that accepts a certain level of cyber risk in exchange for expected growth. Which term best describes the level of risk the company is willing to accept?

Choose the correct answer. During a cybersecurity workshop, LJ, Naledi, and Justice were discussing various compliance standards. Which of the following did they identify as a compliance standard?

Choose the correct answer. Aya runs an e-commerce site that must be back online within 4 hours to avoid major revenue loss. Which term refers to the maximum amount of time the system can be unavailable before it significantly impacts the business?

Naledi is working on a cybersecurity project and needs to ensure that the information she is protecting is secure. Which option correctly expands CIA in cybersecurity and captures its core purpose?

During a cybersecurity workshop, Kgomotso learned about various security tools. One of the tools discussed was FIM, which is primarily used to perform which security function?

In enterprise security, Chloe is tasked with implementing a system to manage user identities and control access to sensitive information. Which description best aligns with the system she is implementing?

In a corporate environment, Justice is tasked with ensuring that all communications over the network are secure. He decides to implement a technology that will secure IP communications through encryption and related protections. What is the primary purpose of this technology in the organization’s network stack?

In a company, Nkay is trying to understand how to access and modify the directory services for user accounts. He learns that LDAP is best described as which of the following?

Chloe is trying to access her online banking account. To enhance security, the bank requires what?

During a cybersecurity workshop, Sagrys and Alejandra were discussing the importance of securing online communications. Alejandra mentioned a system that helps manage digital certificates and supports public key encryption. Which option correctly defines this system?

Chloe's organization is looking to enhance its security measures. They are considering implementing a SIEM platform. What primary function will this platform serve for them?

Justice is using UEBA tools in his organization. These tools focus on which capability?

While working remotely, Nkay wants to ensure that his internet connection is secure when accessing sensitive company data. What is a VPN primarily used for in secure connectivity?

In the DevSecure scenario, which security control category directly restricts who can access proprietary code and when, thereby preventing after-hours misuse?

A developer at DevSecure stole code due to personal grievances and sold it for money. Which combination best classifies the threat actor and motivation?

How does role-based access control (RBAC) reduce the risk posed by insider threats in the DevSecure case?

Which auditing and logging practice would most effectively surface the after-hours unauthorized access seen at DevSecure?

In the DevSecure scenario, which statement best explains how encryption could have protected the stolen proprietary code?

Which combination of technologies and processes would have improved DevSecure’s speed of detection and response to the insider activity?

Which training initiative most directly addresses preventing insider threats at DevSecure?

Refer to the incident response process diagram. Which phase typically comes first when establishing readiness before any security event occurs?

In the incident response lifecycle, which phase focuses on stopping the spread of an active threat to limit damage?

According to the incident response phases shown, which step occurs after containment and before recovery?

In the cyber kill chain diagram, which stage involves pairing a delivered exploit with a payload prior to sending it to the target?

Within the kill chain, which stage is responsible for establishing a persistent channel so the attacker can issue instructions to compromised systems?

Look at the kill chain stages. After delivery succeeds, which stage most directly represents the exploit actually running to take advantage of a vulnerability?

Consider both diagrams. Which pairing correctly matches an incident response phase to the kill chain stage it is most likely to counter first?

DoK 1 — Which option lists an industry standard specifically associated with payment card data security?

DoK 2 — An organization is updating its internal rules to govern how employees access systems, respond to incidents, and handle changes to production. Which combination of policies best addresses these needs?

DoK 3 — A company moving to cloud services wants to formalize privacy controls for personal data while aligning its overall information security management system. Which pair of standards provides the most appropriate match?

What is the primary purpose of a firewall in network security?

Which of the following best describes a DDoS attack?

What does the principle of least privilege entail in access control?