Question 1 options:
A company makes a document called "Acceptable Use" that defines what the company
allows users to do and not do on their work systems. The company requires new
employees to read and sign this. What is this type of document called?
Standard
Policy
Procedure
Control
Question 2 options:
A lock on the door of a building is an example of a __________ control.
deterrent
preventative
detective
corrective
Question 3 options:
A script kiddie is a classic example of a(n) _________.
attacker
criminal
threat
threat actor
Question 4 options:
An asset's exposure factor is measured in _______ .
dollars
percentages
units
reputation
Question 5 options:
Financial is one type of business impact. Which of the following names another?
Pride
Technical
Device
Reputation
Question 6 options:
No Trespassing sign is an example of a __________ control.
deterrent
preventative
detective
corrective
Question 7 options:
Risk is often considered formulaically as
Risk = Probability × Threat
Risk = Threat × Impact
Risk = Vulnerability × Threat
Risk = Probability × Impact
Question 8 options:
Under which of the following circumstances would a Windows host use Kerberos instead
of NTLM v2 to authenticate users?
Authenticating to a server using only an IP address
Authenticating to a modern Windows Active Directory domain
Authenticating to a different Active Directory forest with legacy trusts enabled
Authenticating to a server in a Windows workgroup
Question 9 options:
Which of the following access control models allows object creators and owners to assign
permissions to users?
Rule-based access control
Discretionary access control
Mandatory access control
Role-based access control
Question 10 options:
Which of the following algorithms produces a 40-character message digest?
MD5
SHA-1
RIPEMD-128
Blowfish
Question 11 options:
Which of the following allows a user to use one set of credentials throughout an
enterprise?
TACACS
RADIUS
Single sign-on
TACACS+
Question 12 options:
Which of the following authentication factors would require that you input a piece of
information from memory in addition to using a smart card?
Possession
Knowledge
Inherence
Temporal
Question 13 options:
Which of the following equations is correct?
Single Loss Expectancy = Asset Value × Exposure Factor
Annualized Rate of Occurrence = Asset Value × Exposure Factor
Annualized Loss Expectancy = Asset Value × Exposure Factor
Single Rate of Occurrence = Asset Value × Exposure Factor
Question 14 options:
Which of the following is used to prevent the reuse of passwords?
Disabling accounts
Account lockout
Password complexity
Password history
Question 15 options:
Which of the following places secrecy of the key versus secrecy of the algorithm as the
most important factor in developing secure and reliable cryptosystems?
Data Encryption Standard (DES)
Advanced Encryption Standard (AES)
Kerckhoffs' principle
Digital Signature Algorithm (DSA)
Question 16 options:
Which of the following represents the component manufacturer's best guess (based on
historical data) regarding how much time will pass between major failures of that
component?
MTTR
MTBF
MTMB
MOAB
Question 17 options:
Which of the following serves as the master certificate server in an organization?
Intermediate CA server
Root CA server
Subordinate CA server
Kerberos KDC
Question 18 options:
Which of the following states that users should be given only the level of access needed to
perform their duties?
Separation of duties
Accountability
Principle of least privilege
Authorization
Question 19 options:
Which of the following terms describes the process of allowing access to different
resources?
Authorization
Authentication
Accountability
Identification
Question 20 options:
Which of the following types of algorithms encrypts specified sizes of groups of text at a
time?
Asymmetric
Symmetric
Streaming
Block
Question 21 options:
Which type of algorithm is typically used to encrypt data-at-rest?
Symmetric
Asymmetric
Streaming
Block
Question 22 options:
You are implementing an authentication system for a new company. This is a small
company, and the owner has requested that all users be able to create accounts on their
own individual workstations. You would like to explain to the owner that centralized
authentication might be better to use. Which of the following are advantages of centralized
authentication? (Choose two.)
Centralized security policies and account requirements.
Ability of individuals to set their own security requirements.
Ability to use single sign-on capabilities within the entire organization.
Question 23 options:
You must implement a cryptography system in your organization. You need to be able to
send large amounts of data, quickly, over the network. The system will be used by a very
small group of users only, and key exchange is not a problem. Which of the following
should you consider?
Asymmetric cryptography
Symmetric cryptography
Hybrid cryptography
Key escrow
Question 24 options:
The Challenge-Handshake Authentication Protocol (CHAP) is an Internet standard method
(described in RFC 1994) of authenticating users or a host to a centralized authentication
server.
True
False
0
