Font size
WorksheetsCySA+ Chapter 1
Total questions: 25
Worksheet time: 13mins
An IT professional determines their five servers are operating at only 15 percent of capacity 95 percent of the time. Which of the following can help improve utilization?
Improve the IT infrastructure.
Modify the network architecture.
Implement virtualization.
Use serverless SDN containers.
Which of the following is a true statement regarding containerization?
It only holds the necessary OS components such as binary files and libraries.
It has a small footprint because it cannot share binary files.
It has a small footprint because it cannot share libraries.
It loads very quickly once the entire OS has been started and is up and running.
Damaris works at a company that transitioned away from provisioning, deploying, or managing physical servers. What type of infrastructure are they most likely using?
Serverless because they are no longer using physical servers
Containers because physical servers are not needed to run them
Serverless infrastructure
Wireless infrastructure
Which of the following best describes the ability for computing resources to be provisioned and released with minimal management effort?
On-premises computing
Network appliances
Cloud computing
App servers
In cloud computing, metered services are used for which of the following purposes?
To monitor the performance of cloud resources
To keep track of the amount of storage used in the cloud
To keep track of the computing resources used for billing
To keep track of the traffic flowing into a customer's cloud resources
A company uses IoT devices, a variety of secure database servers, computing devices, and robotic vehicles. What are the most likely computing locations the company has adopted for these devices? Select two.
a. Edge computing for IoT devices
b. Off-premises for the desktop computers
c. On-prem for database servers
d. Fog computing for IoT devices
e. Cloud computing for robotic vehicles
Which of the following best describes the differences or similarities between a jump server and an air gap? Select two.
A jump server is used in a restricted area of a network called a DMZ.
A jump server is used to isolate a network from external sources.
An air gap is used in a secure area between the internal and external network.
An air gap server should only be accessible by a secure admin workstation.
An air gap server should not have USB ports or network interface cards.
A company uses switches wherein the control logic for each switch is bundled with the switching logic. What are the benefits or challenges presented by this type of network device?
It is more secure than the alternative because it has a reduced attack surface.
It facilitates automation because the critical elements of the switch are integrated.
It lacks the flexibility that allows an administrator to add, drop, or change resources quickly.
The company cannot use switches from different vendors because they would be incompatible.
After a network overhaul, an administrator is now able to manage network resources from a central console without the need to modify individual switches. Which of the following are true statements regarding the network?
Switches are capable of managing flow tables created by an SDN controller.
Every switch has been configured with every VLAN used by the organization.
New switches have been installed with an integrated control and data plane.
The SDN controller has been replaced with a network automation server.
Which of the following statements best describe characteristics of IT and OT? Select two.
OT involves the day-to-day management of IT departments.
IT includes testing the security of applications and systems.
Automated braking is an example of a specialized ICS under the IT umbrella.
IT includes governance to ensure IT policies are followed as defined by individual departments.
OT is used to monitor and control physical processes and devices connected to the infrastructure.
Residents in an older neighborhood are being informed their electric meters will be replaced. Even though the existing meters are working fine, which of the following best describes why the utility company would choose to incur such an expense?
The new meters represent a specialized ICS that will help save the company money.
The battery in the new low-powered meters only needs to be replaced every five years.
The new meters are part of a SCADA system allowing the meters to be networked together.
The new meters are of the analog variety and support wireless technology for drive-by reading.
Which of the following best describes the type of computerized embedded systems that control and/or make possible automated parking and autonomous driving?
Specialized IT networking systems
Specialized ICSs
SCADA systems
IoT systems
Nikola wants the ability to turn the lights on and off at her home using her cell phone while at work. Which of the following best describes the type of device Nikola should install?
Networking
Embedded
SCADA
ICS
IoT
Which of the following best describes the consequences of a cybersecurity incident involving IT systems and an incident involving OT systems? Select two.
Since both are typically on the same network, compromising one affects the other.
A successful attack on IT critical systems can cause physical harm.
A successful attack on IT systems can result in a DDoS.
A successful attack on OT systems can be deadly.
Both can be equally harmful.
A security analyst is looking through some files in the /etc directory on a Linux system. What type of files can the security analyst expect to find in this directory?
Configuration files
Application files
Data files
User files
OS files
A college student is taking their first computer hardware course. One of the activities involves replacing the hard drive. When the student replaces the 500 GB drive with a 3 TB drive, the system is no longer able to start. Which of the following best describes the potential problem?
The system does not support drives larger than about 500 GB.
The system has a BIOS chip.
The system uses UEFI.
The MBR is corrupt.
A technician is trying to repair a computer infected with malware capable of surviving the reinstallation of the OS. Which of the following best describes a possible solution?
Replace the BIOS chips.
Replace the hard drive.
Perform a factory reset.
Update the UEFI firmware
Boot security uses a chain of trust mechanisms to ensure integrity during every step in the boot process. Which of the following best describes the beginning of the chain?
The native UEFI security features
The firmware in the BIOS chip
A boot sequence allow list
Hardware verification
An IT administrator wants to apply the most secure mechanism in terms of the boot security mode for a set of servers. Which of the following should the administrator use?
Secure boot
Measured boot
Trusted boot
Hardware boot
The IT department at an organization is rolling out a system hardening program that targets the operating system. Which of the following should be implemented? Select two.
Disable unnecessary ports and protocols.
Implement one of the boot security modes.
Install a hardware verification chip on the motherboard.
Implement an application allow list.
Install a network intrusion prevention system.
Aquinas is asked to develop code to automate a few repetitive tasks to help manage some systems. Which of the following coding languages is Aquinas most likely to use?
C
C++
VBA
JAVA
PowerShell
An IT professional is asked to develop code to automate tasks on various systems running different operating systems. Which of the following statements are most likely to be true? Select three.
Malicious code can be injected from the PowerShell environment without leaving much evidence.
The IT professional can use PowerShell to make modifications to entries in the Windows registry.
Since PowerShell and shell scripting run natively, they are virtually immune to malicious code.
A shell script can be used to copy log files from one location to another on a Linux system.
Cmdlets are functions stored in separate files and invoked through function calls in shell scripts.
Maria is on a software engineering team developing cybersecurity tools with the ability to quarantine infected systems and analyze large log files. Which of the following is the team most likely to use?
Python
PowerShell
A series of shell scripts
Visual Basic for Applications
Two companies merge. One uses XML as their primary data exchange format and the other uses JSON. After multiple meetings they agree on JSON. Which of the following most likely led them to this decision?
Security in JSON can be enhanced by turning off DTD.
JSON creates smaller files allowing faster transmission.
Even though XML is less wordy, it is also more cryptic.
XML uses key-value pairs that are easy to understand.
A security technician is searching a series of large log files looking for every line containing the word WARNING. Which of the following is the analyst most likely to use to accomplish this task?
JSON or XML
Wildcard notation
Regular expressions
The find menu option in a text editor
