Cybersecurity

Which hashing algorithm is recommended for the protection of sensitive, unclassified information? Select one: MD5 SHA-256 3DES AES-256

Which technology would you implement to provide high availability for data storage? Select one: RAID software updates N+1 hot standby

Which two values are required to calculate annual loss expectancy? (Choose two.) Select one or more:

An organization has determined that an employee has been cracking passwords on administrative accounts in order to access very sensitive payroll information. Which tools would you look for on the system of the employee? (Choose three) Select one or more:

Which wireless standard made AES and CCM mandatory? Select one:

Which statement describes a characteristics of block ciphers? Select one:

What is a feature of a cryptographic hash function? Select one:

The awareness and identification of vulnerabilities is a critical function of a cybersecurity specialist. Which of the following resources can be used to identify specific details about vulnerabilities? Select one:

What Windows utility should be used to configure password rules and account lockout policies on a system that is not part of a domain?

Which access control should the IT department use to restore a system back to its normal state? Select one:

What describes the protection provided by a fence that is 1 meter in height? Select one:

What technology should be implemented to verify the identity of an organization, to authenticate its website, and to provide an encrypted connection between a client and the website? Select one:

A cybersecurity specialist is working with the IT staff to establish an effective information security plan. Which combination of security principles forms the foundation of a security plan?

What is an impersonation attack that takes advantage of a trusted relationship between two systems? Select one:

Which technology can be implemented as part of an authentication system to verify the identification of employees? Select one:

An organization has implemented antivirus software. What type of security control did the company implement? Select one:

Your risk manager just distributed a chart that uses three colors to identify the level of threat to key assets in the information security systems. Red represents high level of risk, yellow represents average level of threat and green represents low level of threat. What type of risk analysis does this chart represent? Select one:

What approach to availability provides the most comprehensive protection because multiple defenses coordinate together to prevent attacks? Select one:

What is the most difficult part of designing a cryptosystem? Select one:

What technology should you implement to ensure that an individual cannot later claim that he or she did not sign a given document? Select one:

The team is in the process of performing a risk analysis on the database services. The information collected includes the initial value of these assets, the threats to the assets and the impact of the threats. What type of risk analysis is the team performing by calculating the annual loss expectancy? Select one:

Which utility uses the Internet Control Messaging Protocol (ICMP)? Select one:

Mutual authentication can prevent which type of attack? Select one

The employees in a company receive an email stating that the account password will expire immediately and requires a password reset within 5 minutes. Which statement would classify this email? Select one:

A VPN will be used within the organization to give remote users secure access to the corporate network. What does IPsec use to authenticate the origin of every packet to provide data integrity checking? Select one:

Which law was enacted to prevent corporate accounting-related crimes? Select one:

What type of application attack occurs when data goes beyond the memory areas allocated to the application? Select one:

Which website offers guidance on putting together a checklist to provide guidance on configuring and hardening operating systems? Select one:

An organization wants to adopt a labeling system based on the value, sensitivity, and criticality of the information. What element of risk management is recommended?

What is it called when an organization only installs applications that meet its guidelines, and administrators increase security by eliminating all other applications? Select one:

Which type of cybercriminal attack would interfere with established network communication through the use of constructed packets so that the packets look like they are part of the normal communication? Select one:

HVAC, water system, and fire systems fall under which of the cybersecurity domains? Select one:

What happens as the key length increases in an encryption application? Select one:

Which protocol would be used to provide security for employees that access systems remotely from home? Select one

Which hashing technology requires keys to be exchanged? Select one:

An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario? Select one:

Which two protocols pose switching threats? (Choose two.) Select one or more:

Keeping data backups offsite is an example of which type of disaster recovery control? Select one:

Which methods can be used to implement multifactor authentication? Select one:

What are the two most effective ways to defend against malware? (Choose two.) Select one or more:

As a security professional, there is a possibility to have access to sensitive data and assets. What is one item a security professional should understand in order to make informed ethical decisions? Select one:

A breach occurs in a company that processes credit card information. Which industry specific law governs credit card data protection? Select one:

What are the three broad categories for information security positions? (Choose three.) Select one or more:

An organization has implemented a private cloud infrastructure. The security administrator is asked to secure the infrastructure from potential threats. What three tactics can be implemented to protect the private cloud? (Choose three.) Select one or more:

What are two items that can be found on the Internet Storm Center website? (Choose two.) Select one or more:

A company is attempting to lower the cost in deploying commercial software and is considering a cloud based service. Which cloud based service would be best to host the software? Select one:

A security professional is asked to perform an analysis of the current state of a company network. What tool would the security professional use to scan the network only for security risks? Select one:

A consultant is hired to make recommendations on managing device threats in a company. What are three general recommendations that can be made? (Choose three.) Select one or more:

An auditor is asked to assess the LAN of a company for potential threats. What are three potential threats the auditor may point out? (Choose three.) Select one or more:

What three services does CERT provide? (Choose three.) Select one or more:

What are three disclosure exemptions that pertain to the FOIA? (Choose three.) Select one or more:

If a person knowingly accesses a government computer without permission, what federal act laws would the person be subject to? Select one:

A company has had several incidents involving users downloading unauthorized software, using unauthorized websites, and using personal USB devices. The CIO wants to put in place a scheme to manage the user threats. What three things might be put in place to manage the threats? (Choose three.) Select one or more:

A school administrator is concerned with the disclosure of student information due to a breach. Under which act is student information protected? Select one:

What can be used to rate threats by an impact score to emphasize important vulnerabilities? Select one:

What are two potential threats to applications? (Choose two.) Select one or more:

Why is Kali Linux a popular choice in testing the network security of an organization? Select one:

As part of HR policy in a company, an individual may opt-out of having information shared with any third party other than the employer. Which law protects the privacy of personal shared information? Select one:

Unauthorized visitors have entered a company office and are walking around the building. What two measures can be implemented to prevent unauthorized visitor access to the building? (Choose two.)