NEW
Font size
WorksheetsGEE 27 | LONG QUIZ - FINALS
Total questions: 60
Worksheet time: 3hrs 0mins
What is the primary purpose of a security policy?
To provide specific low-level technical coding instructions.
To spell out the rules, expectations, and approach for maintaining data confidentiality, integrity, and availability.
To list all the hardware and software assets of an organization.
To manually configure firewalls and routers.
Which document type provides specific details enabling policies to be implemented using different technologies?
Information Security Procedures
Information Security Standards
Information Security Guidelines
Information Security Baselines
In the hierarchy of security documents, what provides the step-by-step instructions for implementing policies?
Standards
Frameworks
Procedures
Manifestos
Which of the following is NOT one of the four reasons a security policy is important?
It guides the implementation of technical controls.
It sets clear expectations for employees.
It guarantees that no security breaches will ever occur.
It helps meet regulatory and compliance requirements.
Which ISO standard focuses on Information Security Management Systems (ISMS)?
ISO 27701
ISO 31000
ISO 27001
ISO 42001
If an organization specifically needs to manage privacy risks regarding personal data, which standard extends ISO 27001?
ISO 27017
ISO 27701
ISO 9001
ISO 20000
ISO/IEC 42001 is the first international standard designed to manage:
Cloud Computing Security
Artificial Intelligence Management Systems (AIMS)
Payment Card Data
Medical Records
What is the primary function of ISO 31000?
Providing a checklist for firewall configuration.
Providing guidelines for managing risks faced by organizations.
Certifying specific cloud service providers.
Defining coding standards for Python.
Which standard provides guidelines for information security controls specific to cloud services?
ISO 27017
ISO 27001
ISO 27701
ISO 31000
What is the relationship between Security Risk Assessments and Security Audits?
They are the same thing.
Audits identify the risks, while assessments verify the controls.
Assessments identify and evaluate risks, while audits confirm that controls are working correctly.
Audits are performed daily, while assessments are performed once a decade.
Which of the following best describes 'Security Audits'?
A casual conversation about security flaws.
A formal, objective evaluation of an organization's security posture, controls, and policies.
The process of installing antivirus software.
The initial step of identifying assets.
Which regulatory standard is specifically mentioned as a requirement for protecting health information?
GDPR
HIPAA
PCI-DSS
ISO 42001
What was the first multiprogramming operating system introduced by IBM in 1964?
Unix
MS-DOS
OS/360
Linux
Which component of an Operating System is considered the central core that manages critical system processes and hardware interaction?
User Interface
Kernel
File System Manager
Process Scheduler
Which innovation allows multiple virtual machines (VMs) to run on a single physical machine?
Containerization
Virtualization
Encryption
Fragmentation
What is the key difference between Virtual Machines (VMs) and Containers?
VMs share the host OS, while containers have their own full OS.
Containers do not include a full copy of the OS, while VMs do.
Containers are slower than VMs.
VMs are only used for Linux, containers for Windows.
Which OS function ensures that programs have enough resources to run without interfering with others, using techniques like paging and swapping?
Process Management
Memory Management
Device Management
File System Management
Which type of Operating System is designed to handle time-sensitive tasks with precise timing constraints, such as in industrial automation?
Distributed Operating System
Network Operating System
Real-Time Operating System (RTOS)
Cluster Operating System
Which operating system is widely used for server management, cloud infrastructure, and is open-source?
macOS
Windows
iOS
Linux
Which component of the OS allocates CPU time to processes and handles context switching?
Memory Manager
I/O Manager
Process Scheduler
File System Manager
A "Cluster Operating System" is typically used in which environment?
Smartphones
High-Performance Computing (HPC)
Single-user laptops
Embedded household appliances
Which of the following is NOT a step in the Secure Software Development Lifecycle (SDLC)?
Threat Modeling
Marketing Strategy
Secure Coding Standards
Automated Security Testing
What is "Threat Modeling"?
A proactive approach to identify potential threats and vulnerabilities before development.
Testing software after it has been hacked.
A method of designing graphical user interfaces.
Writing code without planning.
Which model is commonly used for Threat Modeling to analyze potential threats like Spoofing and Tampering?
SWOT
STRIDE
AGILE
PESTLE
To prevent SQL injection attacks, which secure coding practice is recommended?
Using hardcoded credentials
Using parameterized queries and prepared statements
Disabling error handling
Using blocklists instead of allowlists
Why should hardcoded credentials (like API keys or passwords) be avoided in source code?
They take up too much memory.
They make the code look messy.
They can be easily discovered by attackers if the code is exposed.
They slow down the compilation process.
Which encryption standard is recommended for protecting data at rest?
AES-256
DES
ROT13
Plaintext
What is the purpose of "Salting" when hashing passwords?
To make the password shorter.
To add random data to the password before hashing to increase security.
To convert the password into plaintext.
To remove special characters from the password.
Which protocol should be used to encrypt data in transit to prevent Man-in-the-Middle (MITM) attacks?
HTTP
FTP
Telnet
TLS 1.2 or higher
What does "MFA" stand for in the context of authentication?
Multi-Factor Authorization
Multi-Factor Authentication
Main-Factor Access
Managed-File Access
Which principle restricts user permissions to only what is necessary for their role?
Principle of Maximum Authority
Principle of Least Privilege
Principle of Open Access
Principle of Redundancy
Which mechanism helps prevent abuse and Denial-of-Service (DoS) attacks on APIs?
Rate limiting and throttling
Disabling HTTPS
Allowing all CORS origins
Hardcoding API keys
What is a "Supply Chain Attack" in the context of application security?
An attack on the physical delivery trucks.
Exploiting vulnerabilities in third-party libraries or dependencies used by an application.
Stealing hardware from the warehouse.
Phishing emails sent to customers.
Which tool is used to monitor and block malicious web traffic before it reaches the application?
IDE
WAF (Web Application Firewall)
SQL Database
Load Balancer
What is "DevSecOps"?
A development team that ignores security.
Integrating security practices into the DevOps process from the start.
A load balancer that manages security.
A tool for encrypting passwords.
In the context of API security, what does CORS stand for?
Cross-Origin Resource Sharing
Computer Operating Resource System
Central Online Registration Service
Code Optimization and Retrieval System
Which of the following is a method to prevent Cross-Site Scripting (XSS)?
Input validation and output encoding (sanitization)
Using weak passwords
Disabling firewalls
Storing data in plain text
What is the purpose of an API Gateway?
To generate code automatically.
To provide security controls like authentication and rate limiting for backend services.
To increase the cost of hosting.
To store the database files.
According to Lesson 7, what is the first phase of the Incident Response Lifecycle?
Containment
Preparation
Recovery
Detection and Analysis
Which phase of Incident Response involves cleaning the system of malicious artifacts?
Identification
Eradication
Lessons Learned
Preparation
What is the main goal of the "Containment" phase?
To punish the hacker.
To keep the incident impact as small as possible and mitigate service disruptions.
To restore systems to normal operation immediately.
To training employees on phishing.
Which phase is considered the most difficult part of incident response according to NIST?
Post-Event Activity
Detection and Analysis
Preparation
Recovery
What happens during the "Post-Event Activity" or "Lessons Learned" phase?
The team goes on vacation.
The incident is analyzed to identify what went wrong and how to improve future responses.
The backups are deleted.
The servers are formatted.
Incident response is defined as an organization's process of reacting to:
Market fluctuations.
IT threats such as cyberattacks, security breaches, and server downtime.
Competitor marketing campaigns.
Hiring new employees.
What is a key benefit of using a solution like Jira Service Management in incident detection?
It automatically writes code fixes.
It allows teams to customize and filter alerts to avoid alert fatigue.
It replaces the need for a security team.
It slows down the network to prevent attacks.
In a Business Continuity Plan (BCP), what does "Business Impact Analysis" (BIA) do?
It reviews the budget for the Christmas party.
It creates a holistic review of critical business processes and how they are affected by disasters.
It lists the names of all employees.
It designs the company logo.
What is the "Recovery Point Objective" (RPO)?
The maximum amount of time a system can be down.
The maximum amount of data loss (measured in time) an organization can tolerate.
The location where backups are stored.
The cost of the recovery process.
What is the "Recovery Time Objective" (RTO)?
The target time to restore a business process or system after a disaster.
The time it takes to backup data.
The time it takes to discover a breach.
The age of the oldest file on the server.
Which of the following is a difference between Disaster Recovery (DR) and Business Continuity (BC)?
BC focuses on technical restoration of data; DR focuses on keeping the business running.
DR focuses on IT infrastructure recovery; BC focuses on maintaining critical business operations.
There is no difference.
DR is for small businesses; BC is for large enterprises.
What is the Melissa Virus known for?
Exploiting Microsoft Word macro functionality to spread via email.
Creating a botnet of IoT devices.
Being the first ransomware.
Stealing credit card numbers from Target.
The 2007 Cyberattacks on Estonia are an example of what type of attack?
Phishing
DDoS (Distributed Denial of Service)
SQL Injection
Ransomware
The Marriott Hotel Data Breach (2018) compromised the personal information of approximately how many guests?
1 million
500 million
10,000
50 million
Which phase of the Incident Response lifecycle includes "establishing the right tools and resources and training the team"?
Detection
Preparation
Recovery
Containment
When setting up team communication channels during an incident, what is the goal?
To confuse the attackers.
To focus team communications in well-known places to avoid disjointed response.
To broadcast the incident to the public immediately.
To use as many different apps as possible.
What is the purpose of "Secure Session Management"?
To allow users to stay logged in forever.
To use short-lived tokens and invalidate sessions after inactivity to prevent hijacking.
To store session IDs in a public text file.
To speed up the internet connection.
Which concept involves "reviewing security policies to ensure they are followed and effective"?
Risk Assessment
Security Audit
Threat Modeling
Code Obfuscation
Which of the following represents a "strong" password policy?
Requiring 4-digit pins only.
Encouraging complex passwords/passphrases and preventing common weak passwords.
Asking users to change passwords every day.
Allowing the use of the username as the password.
What is the role of a "Hypervisor"?
To manage virtual machines and handle resource management without a full host OS.
To compile Java code.
To act as a web server.
To clean physical viruses from hardware.
Which Linux distribution is mentioned as a notable enterprise version used in business environments?
Android
Red Hat Enterprise Linux (RHEL)
Kali Linux
Arch Linux
In the context of Mobile App Security, what is the purpose of code obfuscation?
To make the app run faster.
To make it harder for attackers to reverse-engineer or tamper with the code.
To reduce the file size of the app.
To automatically fix bugs.
