Security - take the quiz

You work for a community health care organization that uses an electronic health record (EHR) system. You need to implement the physical and technical safeguards required by HIPAA Which two approaches should you use to verify that the EHR system is compliant with those safeguards? (Choose 2.) Note: You will receive partial credit for each correct selection.

While conducting a risk evaluation at your company, you identify risks that are related to the web server located in the office. The risks include hardware and software failure as well as web service interruption caused by cyber attacks. You recommend purchasing insurance and a maintenance contract to help mitigate the risks. Which risk mitigation strategy is this an example of?

Which classification of security alert is the greatest threat to an organization because it represent undetected exploits?

What does hashing provide for data communication?

You are a security technician. You just completed a full scan of a Windows 10 PC. Where should you go to view the scan result?

1: Contain 2: Record 3: List 4: Record

Which data type is protected through hard disk encryption?

You need to allow employees to access your company's secure network from their homes. Which type of security should you implement?

In order to do online banking, you enter a strong password and then enter the 5-digit code sent to you on your smartphone. Which type of authentication does this situation describe?

After an administrator install an operating system update on a laptop, the laptop user can no longer print to their wireless printer.

Which wireless encryption technology requires (AES) to secure home wireless networks?

Which command displays both the configured DNS server information and the IP address resolution for a URL?

A security analyst discover that a hacker was able to gain root access to an enterprise (Linux server.) root user

You need to filter the websites that are available to employees on the company network. Which type of device should you deploy?

The analyst enters the ls -l command in the terminal.

Which three authentication factors are valid for use in a multifactor authentication scenario? (Choose 3)

Your organization's SIEM system + URL

What are two natural disasters that would cause a company to implement a disaster recovery plan? (Choose 2)

Your home network seems to have slowed down considerably.

You issue the netstat -l command to display all TCP ports that are in the Listening state

Several staff members are experiencing unexplained computer crashes (Choose 2)

As a security officer, you notice that the hyperlink points to an unknown party.

You are working with the senior administration team to identify which risks are acceptable. Which paste of risk management are you in?

Which activity by an adversary is an example of exploit that is attempting to gain users credential

What is the purpose of a hypervisor?

Which two basic metrics should be taken into consideration when assigning a severity to a vulnerability during an assessment? (Choose 2)

Which two private IPv4 addresses would be blocked on the internet to prevent security and performance issues? (Choose 2)

A corporation hires a group of experienced cyber criminals

You need to transfer configuration files to a router across an unsecured network.

Which activity is an example of active reconnaissance performed during a penetration test?

After 30 minutes, the website crashes again

What enables the network security team to keep track of the operating system versions, security updates, and patches on end users devices?

A remote worker is visiting a branch office to attend face to face meetings

National Institute of Standards and Technology (NIST) guidelines for user password security

You are planning to work from home. Your company requires that you connect to the company networks the company (Choose 3)

A client connect to the corporate web server. You discover a large number of half open TCP connection to the server.

What is the main purpose of a disaster recovery plan as compared to a business continuity plan?

What are two disadvantages of public vulnerability databases? (Choose 2.)

Which network security technology passively monitors network traffic and compares the captured packet stream with known malicious signatures?

What should you create to prevent spoofing of the internet network?

Which macOS security features encrypts the entire macOS volume?

A new operating system security patch has been released. Before deploying it to endpoints, you need to test the patched operating system in a safe and isolated environment. Which technology provides these testing benefits?

Which type of attack occurs when threat actors utilize botnets on several computers to overwhelm a targeted web server?