Chapter 1

Question 1

Which of the following answers can be used to describe technical security controls? (Select 3 answers)

Answer 1

Sometimes called logical security controls; Executed by computer systems (instead of people); Implemented with technology

Question 2

Which of the answers listed below refer to examples of technical security controls? (Select 3 answers)

Answer 2

Encryption, IDSs, Firewalls

Question 3

Which of the following answers refer to the characteristic features of managerial security controls? (Select 3 answers)

Answer 3

Also known as administrative controls, Documented in written policies, Focused on reducing the risk of security incidents

Question 4

Examples of managerial security controls include: (Select 3 answers)

Answer 4

Security awareness training, Organizational security policy, Risk assessments

Question 5

Which of the answers listed below can be used to describe operational security controls (Select 3 answers)

Answer 5

Focused on the day-to-day procedures of an organization; Used to ensure that the equipment continues to work as specified; Primarily implemented and executed by people (as opposed to computer systems)

Question 6

Which of the following examples fall into the category of operational security controls? (Select 3 answers)

Answer 6

System backups; Configuration management; Patch management

Question 7

Which of the answers listed below refers to security controls designed to deter, detect, and prevent unauthorized access, theft, damage, or destruction of material assets?

Answer 7

Physical security controls

Question 8

Which of the following examples do not fall into the category of physical security controls? (Select 3 answers)

Answer 8

Data backups, Firewalls, Asset management

Question 9

What are the examples of preventive security controls? (Select 3 answers)

Answer 9

Encryption, Firewalls, AV software

Question 10

Examples of deterrent security controls include: (Select 3 answers)

Answer 10

Warning signs, Lighting, Fencing/Bollards

Question 11

Which of the answers listed below refer(s) to detective security control(s)? (Select 5)

Answer 11

Log monitoring, CCTV, IDS, Security Audits, Vulnerability scanning

Question 12

Which of the following answers refer(s) to corrective security control(s)? (Select 5)

Answer 12

Recovering data from backup copies, Applying software updates and patches to fix vulnerabilities, Developing and implementing IRPs to respond to and recover from security incidents, Activating and executing DRPs to restore operations after a major incident

Question 13

Which of the answers listed below refer(s) to compensating security control(s)? (Select 4)

Answer 13

Backup power systems, Application sandboxing, MFA, Network segmentation

Question 14

The term ‘Directive security controls’ refers to the category of security controls that are implemented through policies and procedures.

Answer 14

True

Question 15

Which of the following terms fall into the category of directive security controls? (Select 2 answers)

Answer 15

IRP, AUP

Question 16

Which of the terms listed below can be used to describe the basic principles of information security?

Answer 16

CIA

Question 17

The term ‘Non-repudiation’ describes the inability to deny responsibility for performing a specific action.

Answer 17

True

Question 18

Which of the following best applies to the concept of non-repudiation?

Answer 18

Digital certificate

Question 19

Which type of user account violates the concept of non-repudiation?

Answer 19

Shared account

Question 20

Which part of the AAA security architecture deals with the verification of the identity of a person or process?

Answer 20

Authentication

Question 21

In the AAA security architecture, the process of granting or denying access to resources is known as:

Answer 21

Authorization

Question 22

In the AAA security architecture, the process of tracking accessed services and logging resource consumption is called:

Answer 22

Accounting

Question 23

Which of the following solutions provide(s) the AAA functionality? (Select all that apply)

Answer 23

TACACS+, RADIUS

Question 24

In the context of the AAA framework, common methods for authenticating people include: (Select 3 answers)

Answer 24

Usernames and passwords, Biometrics, MFA

Question 25

Which of the answers listed below refer to common methods of device authentication used within the AAA framework? (Select 3 answers)

Answer 25

Digital certificates, IP addresses, MAC addresses