Jasion Dion Practice Exam 1

Which of the following terms BEST describes a situation in which a company avoids addressing known system inefficiencies or shortcuts due to time constraints, potentially leading to future rework and vulnerabilities?

Single point of failure.

Technical debt.

Cost.

Complexity.

Technical debt.

Recently, Antatack, a martial arts company, has had a data breech. Barzan, a security analyst, was hired to investigate. He found a rogue WAP near the building. The attacker used the WAP to gain information about Anatack's clients. Which of the following network attacks is BEST demonstrated by this finding?

On-path.

Reflected.

Amplified.

Wireless.

On-path.

An on-path attack is a type of network attack that involves intercepting or modifying data in transit between two parties, such as by using a packet sniffer or a proxy server, or, in the case above, a rogue WAP.

Kelly Innovations decides to manage its IT infrastructure within its physical location, retaining full control over its hardware, software, and data. Which of the following security implications is MOST directly associated with this approach?

Dependence on external patch availability.

Multi-tenancy risks.

Increased responsibility for physical security.

Risk transference to third-party vendors.

Increased responsibility for physical security.

Which of the following mitigation techniques can help prevent users from making changes to the security features of devices by applying predefined security standards?

Configuration enforcement.

Patching.

Encryption.

Least Privilege.

Configuration enforcement.

Question 11CorrectExplain this further

Which of the following is the BEST action a security professional would undertake to determine the order in which identified vulnerabilities should be addressed, based on potential impact and exploitation likelihood?

Vulnerability prioritization.

Threat intelligence gathering.

False positive assessment.

Dynamic analysis.

Vulnerability prioritization.

Which of the following is a type of unsecure wireless network that uses short-range radio waves to connect devices without encryption or authentication?

Cellular.

Ethernet.

Wi-Fi.

Bluetooth.

Bluetooth.

Which of the following entities is responsible for providing detailed analysis and recommendations to the governance board to aid in informed decision-making, particularly in areas requiring specialized knowledge?

Management Groups.

Committees.

Advisory Councils.

Executive Teams.

Committees.

An application creates a temporary file to save a value for later use. A malicious actor deletes this file after its creation but before its subsequent use by the application. What type of vulnerability is being exploited in this situation?

Time-of-use (TOU).

Memory leaks.

Memory injection.

Race conditions.

Time-of-use (TOU).

Jenny, a newly hired sales representative, has been granted access to view customer records but is unable to modify, delete, or add new ones. Only managers and the IT department have the ability to make changes to these records to maintain data integrity. Which principle is the organization applying?

Data classification.

Attribute-based access control (ABAC).

Principle of least privilege.

Mandatory access control (MAC).

Principle of least privilege

Which email security protocol uses cryptographic signatures to verify the authenticity of an email's sender?

DKIM.

DMARC.

SPF.

MTA.

DKIM.

DKIM (DomainKeys Identified Mail) allows senders to associate a domain name with an email, thus vouching for its authenticity using a cryptographic signature.

Which of the following BEST represents a primary goal when seeking evidence of internal audits from a third-party vendor?

Review of the vendor's client list.

Determination of the vendor's profit margins.

Assessment of external threat landscape to reduce security vulnerabilities.

Verification of compliance with internal security standards.

Verification of compliance with internal security standards.

To protect customers' financial records and adhere to standards set to prevent money laundering and fraud, which of the following is the BEST strategy a bank should adopt?

Creating a schedule for the creation of regular encrypted data backups.

Continuous security monitoring and intrusion detection systems.

Strict adherence to AML/KYC regulations and secure data storage.

Integration of multi-factor authentication for user access.

Strict adherence to AML/KYC regulations and secure data storage.

What is the primary difference between an insider threat and a shadow IT threat actor?

Level of sophistication/capability.

Malicious intent.

Resources/funding.

Level of access.

Malicious intent.

The primary difference between an insider threat and a shadow IT threat actor is the malicious intent. An insider threat has malicious intent and abuses their legitimate access to an organization’s systems or data for harmful purposes, such as revenge, blackmail, or data theft.

While conducting a routine system audit at Kelly Innovations LLC, Enrique, a senior IT administrator, stumbled upon a startling discovery. He found that Jamario, a junior database analyst whose responsibilities typically revolved around running simple queries and generating weekly reports, suddenly had permissions to modify core database structures, including adding and removing tables. Further analysis revealed that these permissions weren't granted through the company's formal access control procedure. Enrique suspected an external intervention that could have allowed Jamario's account to bypass the standard role-based permissions. This is an example of:

SQL injection.

Privilege escalation.

Access control list tampering.

Session hijacking.

Privilege escalation.

Which type of symmetric encryption is BEST suited for scenarios where the total length of the message is not predetermined and encrypts data one byte or bit at a time?

Initialization vector (IV).

AES256.

Stream cipher.

Block cipher.

Stream cipher.

Which email security standard helps prevent email spoofing by allowing domain owners to specify which mail servers are authorized to send email on their behalf?

SPF.

DKIM.

SMTP.

DMARC.

SPF.

Dion Training Solutions is implementing a security system for its research facility, where sensitive data is stored. If the access control system fails, which mode should be adopted to ensure that no unauthorized personnel can enter the facility, even if it means some inconvenience to authorized staff?

Fail-open.

Fail-closed.

Rate-based filtering.

Passive mode.

Fail-closed.

When security is paramount, as with sensitive data storage, a fail-closed mode ensures that all access requests are denied during system malfunctions, preventing any potential unauthorized access.

You are a security analyst for an enterprise that has recently experienced several security incidents related to web browsing. Management has decided to implement a centralized proxy solution to enhance security and mitigate the risk of future incidents. Which of the following actions would be the MOST effective way to enhance security with the centralized proxy in the given scenario?

Permitting employees to install browser extensions from trusted sources to enhance their browsing experience.

Allowing unrestricted access to internal resources for users who are connected to the corporate network.

Implementing SSL inspection to monitor and control encrypted web traffic.

Enforcing the use of HTTP for all web traffic to ensure compatibility with older browsers.

Implementing SSL inspection to monitor and control encrypted web traffic.

Jason and Reed, both IT specialists at Kelly Innovations LLC, are tasked with ensuring the workstations' secure baseline remains uncompromised over time. Which technique would BEST help them achieve this?

Manually check each workstation at month-end for deviations from the baseline.

Use Windows Update without a validation process.

Rely solely on antivirus scans to detect changes in workstation configuration.

Implement playbooks to enforce and verify settings.

Implement playbooks to enforce and verify settings.

Sweet as Thyme, a flavoring supplier, uses a peer to peer network which relies on a public ledger to ensure the integrity of transactions and to provide a permanent record of all transactions. What is this technology they are using called?

Blockchain.

Digital Signatures.

Salting.

Key Stretching.

Blockchain.

As a network administrator, you have been assigned the critical task of upgrading a company's encryption protocol for wireless devices. The current encryption method is outdated and poses a significant security risk. Your objective is to select the most secure option for the upgrade. Which of the following encryption mechanisms BEST represents the ideal choice for this upgrade?

WPA.

TKIP.

AES.

WEP.

AES.

AES (Advanced Encryption Standard) is currently the most secure and widely used encryption protocol for wireless networks.

A software development company regularly releases software updates to its global customer base. Recently, some customers reported receiving unauthorized and potentially malicious software updates. The company is now seeking to implement a security technique to ensure the authenticity and integrity of its software updates when delivered to customers. Which of the following would BEST assist in achieving this goal?

Code signing.

IDS solution.

MFA.

Antivirus scanning.

Code signing.

ason is working with David to enhance the security of the switches at Dion Training. Which technique would be the BEST for them to prioritize?

Implementing regular system backups on the switches.

Disabling unused ports.

Enabling SNMP monitoring.

Using default VLAN for all operations.

Disabling unused ports.

By disabling unused ports, you limit the entry points for potential intruders, making it harder for unauthorized devices to connect to the network.

If a company's server has an estimated Single Loss Expectancy (SLE) of $15,000 due to an operational failure, and the Annual Rate of Occurrence (ARO) of these failures is expected to be 0.1 times per year, what is the Annual Loss Expectancy (ALE)?

$15,000.

$150,000.

$1,500.

$150.

$1,500.

ALE equals $1,500 ($15,000 * 0.1 = $1,500).

Kelly Innovations LLC needs to securely authenticate remote users and needs to be able to handle multiple authentication methods. Which of the following protocols would be BEST suited for this scenario?

EAP.

ICMP.

IPSec.

SD-WAN.

EAP.

Extensible Authentication Protocol (EAP) is a network access authentication protocol that can handle multiple authentication methods, making it apt for this scenario.

Dion Training Solutions has partnered with several smaller companies. They set up a system allowing employees from any company to access resources from another partner company without requiring a separate username and password. Which of the following is this an example of?

Access delegation.

Federation.

RBAC.

Centralized access management.

Federation

Which option BEST explains the importance of having vulnerability scanners?

Vulnerability scanners continuously monitoring network traffic and identifying potential security breaches.

Vulnerability scanners are critical in detecting and assessing security weaknesses in applications and systems.

Vulnerability scanners are responsible for monitoring user activities and detecting suspicious behavior on the network.

Vulnerability scanners detect and mitigate many potential problems on a wide variety of devices.

Vulnerability scanners are critical in detecting and assessing security weaknesses in applications and systems

Reason and Rhyme, a tutoring service, has increased the security of its customers' passwords. They have always converted passwords to fixed length sequences, but now they will do this process more than once to increase the amount of computing power and time it will take for an attacker to decode the password. What is this method known as?

Hashing.

Digital Signatures.

Key Stretching

Salting.

Key stretching.

Tina, an employee of Dion Training Solutions, is browsing the internet from work. She attempted to access a link to a third-party site she frequently uses for market research. Instead of reaching the site, she received a message stating that access to this URL was denied due to policy violations. Which of the following terms BEST describes the action experienced by Tina?

Content filtering.

Firewall rejection.

Blocked content.

Malicious URL.

Blocked content.

In disaster recovery planning, which of the following terms is used to describe the maximum targeted period in which data might be lost from an IT service due to a major incident?

MTBF.

SLA.

RPO.

RTO.

RPO/Recovery Point Objective.

Kelly Innovations LLC is implementing a wireless network and needs a flexible authentication method that supports multiple mechanisms for authenticating both wired and wireless users. Which protocol BEST fits their requirements?

LDAP.

EAP.

RADIUS.

WPA3.

EAP/Extensible Authentication Protocol.

Dion Training Solutions recently integrated a single security solution that provides multiple security functions at one point on their network. This solution incorporates functionalities such as intrusion prevention, gateway anti-virus, and VPN. Which of the following BEST describes this solution?

IPS.

VPN gateway.

Firewall.

UTM,

UTM/Unified Threat Management.

Which of the following BEST explains the importance of exceptions and exemptions in vulnerability management?

Exceptions and exemptions are designed to eliminate the need for regular audits by providing an all-access pass to privileged users.

Exceptions and exemptions allow systems to completely bypass all security policies for maximum efficiency.

Exceptions and exemptions permit organizations to ignore all known vulnerabilities without any consequences from internal procedures but don't affect government compliance.

Exceptions and exemptions are official authorizations that allow specific deviations from established security policies or baseline controls.

Exceptions and exemptions are official authorizations that allow specific deviations from established security policies or baseline controls.

At Dion Training, David is advising on cloud security best practices regarding a company's recent issue with logins. Which measure is the most crucial to inform them when safeguarding against unauthorized logon attempts?

Allow programmatic access without unique secret keys.

Leave default settings on Google's firewall.

Rely solely on the CSP's IAM for user management,

Implementing MFA and using conditional authentication for risky logons.

Implementing MFA and using conditional authentication for risky logons.

When considering data storage, which of the following BEST describes a method to capture the state of a system at a specific point in time, offering a quick recovery solution without the need for a full backup?

Snapshots.

Full backups.

Incremental backups.

Differential backups.

Snapshots.

Dion Training is implementing a security device tasked with inspecting live network traffic and taking immediate action to mitigate potential threats. Which of the following security items would MOST effectively satisfy this requirement?

Fail-closed mode.

A passive device.

Fail-open mode.

An active device.

An active device.

Which of the following mitigation techniques can help enforce compliance with security standards and policies on a system or network by designating programs that are allowed to run and blocking all other programs from being run?

Configuration Enforcement.

Least Privilege.

Application allow list.

Patching.

Application allow list.

Who sets the strategic direction and policies of an organization and holds the ultimate decision-making authority, often relying on support from specialized groups for critical information?

Governance Board.

Operational Management.

Policy Councils.

Strategic Committees.

Governance Board.

In the realm of digital forensics, which activity is MOST essential to maintaining the chain of custody for digital evidence?

Drafting a comprehensive summary of findings after analyzing the evidence.

Utilizing cryptographic hashes to confirm the integrity of stored evidence.

Isolating the digital evidence storage system from network access.

Documenting who has handled the evidence.

Documenting who has handled the evidence

Dion Training Solutions needs a network appliance capable of filtering traffic based on URLs, HTTP headers, and specific web application functionalities. At which layer of the OSI model would this appliance primarily operate?

Layer 6.

Layer 5.

Layer 3.

Layer 7.

Layer 7.

Layer 7, or the application layer, deals with end-user services, and appliances at this layer can make filtering decisions based on specifics like URLs, HTTP headers, and specific application functions.

What term refers to an organization's predetermined level of acceptable risk exposure?

Risk tolerance.

Conservative.

Exposure factor.

Risk appetite.

Risk tolerance.

Which of the following is a part of Zero-Trust Architecture that manages user access based on their roles and responsibilities on the Control Plane?

Least privilege.

Implicit deny.

Role-based access control.

Policy-driven access control.

Policy-driven access control.

Hair and There, an online beauty supply store, has conducted a comprehensive risk assessment and identified potential vulnerabilities in their network infrastructure. They recognize that another global pandemic would seriously harm their business and is a considerable risk. After careful analysis, they determine that they simply cannot control whether another pandemic occurs. They take measures to help reduce the types of damage a pandemic will cause and then hope that it doesn't happen. Which risk management strategy is are they employing?

Avoid.

Mitigate.

Transfer.

Accept.

Mitigate.

You are a cybersecurity analyst for a large enterprise that has experienced several security incidents resulting from insider threats and compromised user accounts. The organization wants to enhance its security posture by implementing User Behavior Analytics (UBA). Which of the following approaches would be the MOST effective way to implement UBA for the given scenario?

Deploying UBA on all endpoint devices to monitor user interactions and application usage.

Using UBA to monitor and analyze the activities of privileged users with elevated access rights only.

Configuring UBA to perform scheduled scans of all user accounts prevent any anomalies.

Implementing UBA on the organization's perimeter firewalls to analyze incoming and outgoing network traffic.

Deploying UBA on all endpoint devices to monitor user interactions and application usage.

Which agreement type outlines the specific services to be provided by the vendor, along with associated timelines and costs?

SOW.

SLA.

MSA.

MOA.

SOW.

Which of the following terms BEST describes the measurement used to describe a 7% possibility of hardware failure in the next year based on past statistical data?

Likelihood.

Probability.

Severity ranking.

Exposure factor.

Probability.

Kelly Innovations LLC has integrated a new payment gateway into their application. To ensure no potential security gaps exist, especially related to data breaches or financial data leaks, which of the following actions would be the MOST effective?

Updating the application to its latest version post-integration.

Deploying a new intrusion detection system for the payment module.

Engaging penetration testers to mimic real-world hacking techniques.

Ensuring two-factor authentication is enabled for application users.

Engaging penetration testers to mimic real-world hacking techniques.

Which of the following statements is NOT true regarding the role of Ticket Creation in the context of automation for secure operations?

Ticket creation enables accountability and better measurement of IT team performance.

Ticket creation facilitates communication and coordination among IT teams

Ticket creation fosters more security team cohesion and makes collaboration within the team more effective..

Ticket creation allows proper tracking and management of user issues, requests, or tasks

Ticket creation fosters more security team cohesion and makes collaboration within the team more effective

Which of the following statements BEST explains the importance of considering technical debt?

Considering technical debt allows organizations to prioritize cybersecurity investments based on the cost of eliminating debt.

Technical debt only applies to non-security-related IT systems such as outdated software and hardware and does not impact the security posture of an organization.

Technical debt can increase the complexity of long term security issues, making automation and orchestration more difficult.

Addressing technical debt helps organizations to automate security operations more effectively, reducing the need for human intervention.

Technical debt can increase the complexity of long term security issues, making automation and orchestration more difficult.

A financial services firm processes high volumes of transactions daily. To minimize data loss in case of a system failure, which backup frequency would you most likely recommend?

Weekly full backups.

Continuous backups.

Differential backups.

Daily incremental backups.

Continuous backups.

Jason receives an email at his Kelly Innovations LLC account. The email seems to be from Reed, a coworker, and states that Reed urgently needs to see the invoice for a recent project. However, Reed specifies he needs it within the next 10 minutes as he is in a meeting with Sasha and top executives. Jason quickly sends over the invoice without double-checking with Reed. Which type of attack best describes this situation?

Brute-force attack.

Whaling.

Cloning.

Pretexting.

Pretexting

Last month at Kelly Innovations LLC, Jamario reported receiving inappropriate images while researching industry competitors. To prevent employees from accidentally accessing such media in the future, which of the following solutions would be MOST effective?

Upgrading to a faster internet connection.

Requiring two-factor authentication for internet access.

Implementing content categorization.

Installing a state-of-the-art firewall.

Implementing content categorization.

Which of the following mitigation techniques can help reduce the exposure of systems to potential attacks by turning off unneeded or unwanted network communication channels?

Removing unnecessary software.

Changing Default Passwords.

Patching.

Disabling ports and protocols.

Disabling ports and protocols.

Which of the following mitigation techniques inspects and controls incoming and outgoing network traffic on a per-application basis?

Data Loss Prevention.

Intrusion Detection System.

Host-based Firewall.

Network Segmentation.

Host-based Firewall.

While analyzing network traffic at Dion Training Solutions, Carlos, a security analyst, discovered a specific workstation repeatedly sending HTTPS requests to unfamiliar IP addresses. These requests contained encoded data that matched sensitive company information. Carlos also noted the workstation downloading unknown executables from various domains. Which of the following terms BEST describes the primary malicious activity of extracting sensitive information that Carlos detected?

Data Exfiltration.

Malware Propagation.

Network Reconnaissance.

C2 Communication.

Data Exfiltration.

Dion Training Solutions, a software-as-a-service company, began facing latency issues and, in some cases, outages. The IT team found that a massive amount of traffic was flooding in, but the peculiarity was that the incoming data appeared to be responses to requests that the company never made. These responses came from a wide range of IP addresses scattered globally. Which of the following types of malicious activities is BEST described in this scenario?

Amplified DDoS attack.

Reflected DDoS attack.

Phishing campaign.

SQL injection.

Reflected DDoS attack.

In a reflected DDoS attack, the attacker sends requests to multiple third-party servers using a forged source IP address, which is the victim's IP. These servers then respond to the victim, thinking the requests originated there.

Toby has just started a new job and, on his first day, is given a stack of documents to review and sign. Among these, he finds a document prohibiting the use of his business email address for personal purchases online. This catches him off guard, as he had previously used his company email for similar purchases at his last job. After some consideration, he realizes that using a business email for non-business activities could pose security risks for the company. He signs the document. What kind of document Toby just signed?

Onboarding/Offboarding Procedure.

AUP.

Incident response policy.

A Physical Security Standard.

AUP.

An AUP (Acceptable Use Policy) defines the rules and guidelines for the appropriate and acceptable use of an organization's IT resources. It outlines the dos and don'ts for employees regarding the use of company devices, networks, software, and data.

Emily is part of the IT team and oversees the secure transmission of sensitive data within her organization, ensuring that all systems comply with integrity protocols. She monitors for any inconsistencies or issues that could compromise data integrity. What role does Emily most likely hold?

Data Owner.

Data Controller.

Data Processor.

Data Custodian.

Data Custodian.

Which of the following BEST describes the phase of a penetration test where information is gathered without directly interacting with the target system?

Known environment.

Active reconnaissance.

Passive reconnaissance.

Defensive.

Passive reconnaissance.