Objectives 1.2 + 1.0

Lexicon, an AI company, seeks to implement a security measure to systematically identify, evaluate, and prioritize potential risks to their systems and networks. Which of the following is an example of a managerial security control that would help achieve this?

A. Firewall

B. Security Guards

C. Risk assessments

D. Intrusion detection system

C

A24. What kind of security control is associated with a login banner?

❍ A. Preventive

❍ B. Deterrent

❍ C. Corrective

❍ D. Detective

❍ E. Compensating

❍ F. Directive

B

A56. An organization is installing a UPS for their new data center.

Which of the following would BEST describe this control type?

❍ A. Compensating

❍ B. Directive

❍ C. Deterrent

❍ D. Detective

A

B7. A shipping company stores information in small regional warehouses

around the country. The company maintains an IPS at each warehouse to

watch for suspicious traffic patterns. Which of the following would BEST

describe the security control used at the warehouse?

❍ A. Deterrent

❍ B. Compensating

❍ C. Directive

❍ D. Detective

D

C45. A company is concerned their EDR solution will not be able to stop more advanced ransomware variants. Technicians have created a backup and restore utility to get most systems up and running less than an hour after an attack. What type of security control is associated with this restore process?

❍ A. Directive

❍ B. Compensating

❍ C. Preventive

❍ D. Detective

B

C75. What type of security control would be associated with corporate security policies?

❍ A. Technical

❍ B. Operational

❍ C. Managerial

❍ D. Physical

C

Question 36

Repair Now, a do-it-yourself education company wants to proactively identify and address known weaknesses in its cybersecurity posture that could compromise the company's security. Which of the following operational security controls would help the company achieve this?

A)Vulnerability management

B)Intrusion detection system

C)Firewall

D)Encryption

A

Which component of the Zero Trust architecture is responsible for enforcing policies by allowing or denying access to resources?

A. Identity Provider

B. Policy Enforcement Point

C. Policy Engine

D. Threat Scope Reducer

B

In a Zero Trust model, which of the following principles best describes how access is granted to resources?

A. Role-based Access Control

B. Implicit Trust

C. Trust but Verify

D. Least Privilege

D

A company wants to implement a more flexible access control system that can adjust to changing user behavior. Which of the following technologies can help the company achieve this goal?

A. Security zones

B. MAC

C. Adaptive identity

D. Policy-driven access control

C

Neville, a security engineer, suggests his company create a fake document that appears to contain sensitive information in order to attract attackers. Which of the following is Neville suggesting be created?

A. Honeypot

B. Honeyfile

C. Honeynet

D. Honeytoken

B

Neville, a security engineer, suggests his company create a fake document that appears to contain sensitive information

Which of the following is a physical security measure typically employed outside buildings or sensitive areas to prevent vehicles from causing damage to property or gaining unauthorized access?

A. Intrusion Detection System

B. Wire Fencing

C. Bollards

D. Security Checkpoint

C

Which of the following best describes the primary purpose of a honeypot in a network environment?

A. To detect and divert potential attackers

B. To recover lost data after an attack

C. To block unauthorized access

D. To prevent malware from executing

A

Which of the following is a physical security measure typically employed outside buildings or sensitive areas to prevent vehicles from causing damage to property or gaining unauthorized access?

A. Intrusion Detection System

B. Wire Fencing

C. Bollards

D. Security Checkpoint

C

Which of the following best describes the primary purpose of a honeypot in a network environment?

A. To detect and divert potential attackers

B. To recover lost data after an attack

C. To block unauthorized access

D. To prevent malware from executing

A

In the Zero Trust model, which component primarily ensures the correct and efficient transmission of data once access decisions have been made?

A. Control Plane

B. Threat scope reduction

C. Adaptive identity

D. Data Plane

D

Which term refers to ensuring data is available and usable when needed by authorized users?

A. Availability

B. Integrity

C. Authorization

D. Confidentiality

A

Constance is logging into their bank account online. The website makes sure that she has the correct username and password. This is an example of which common method for authenticating people?

A. Location-based authentication

B. Knowledge-based authentication

C. Biometric authentication

D. Possession-based authentication

B

Dion Training has implemented a Zero Trust model. Which of the following components of the data plane is responsible for the user or device being verified before it interacts with the network?

A. Policy Enforcement Point

B. Policy Engine

C. Subject

D. Policy Administrator

A

Which of the following terms describes a security concept that ensures both parties involved in a communication cannot deny the validity of their sent or received message?

A. Authorization

B. Accounting

C. Confidentiality

D. Non-repudiation

D

A security officer is using a system that involves the use of cameras to monitor activities in a given area. What is this system known as?

A. Sensors

B. Access badge

C. Video surveillance

D. Lighting

C

Which of the following BEST describes Policy-driven access control in the Zero Trust approach?

A. Bases access decisions on predefined security policies.

B. Relies on continuous user behavior assessment.

C. Contains potential threats by segmenting the network.

D. Ensures secure data transfer post-access decision.

A

Reginald, an IT Manager, is the owner of a file on a server and wants to grant his colleagues access to the file. He is the only one who can decide who is allowed access to the file and what actions they can perform on it. Which authorization model is being used in this scenario?

A. ABAC

B. MAC

C. DAC

D. RBAC

C

Within Dion Training's Zero Trust security infrastructure, which component is responsible for defining and managing security policies that dictate access controls?

A. Client host

B. Policy enforcement point

C. Policy administrator

D. Authentication server

C

Which of the following is a part of Zero-Trust Architecture that manages user access based on their roles and responsibilities on the Control Plane?

A. Implicit deny

B. Policy-driven access control

C. Role-based access control

D. Least privilege

B

A21. Which of the following would explain why a company would automatically add a digital signature to each outgoing email message?

❍ A. Confidentiality

❍ B. Integrity

❍ C. Authentication

❍ D. Availability

B

A64. An organization is implementing a security model where all application requests must be validated at a policy enforcement point. Which of the following would BEST describe this model?

❍ A. Public key infrastructure

❍ B. Zero trust

❍ C. Discretionary access control

❍ D. Federation

B

A83. A user has opened a helpdesk ticket complaining of poor system performance, excessive pop up messages, and the cursor moving without anyone touching the mouse. This issue began after they opened a spreadsheet from a vendor containing part numbers and pricing information. Which of the following is MOST likely the cause of this user's issues?

❍ A. On-path

❍ B. Worm

❍ C. Trojan horse

❍ D. Logic bomb

C

A87. A security administrator has configured a virtual machine in a screened subnet with a guest login account and no password. Which of the following would be the MOST likely reason for this configuration?

❍ A. The server is a honeypot for attracting potential attackers

❍ B. The server is a cloud storage service for remote users

❍ C. The server will be used as a VPN concentrator

❍ D. The server is a development sandbox for third-party programming projects

A

B14. A company is launching a new internal application that will not start until a username and password is entered and a smart card is plugged into the computer. Which of the following BEST describes this process?

❍ A. Federation

❍ B. Accounting

❍ C. Authentication

❍ D. Authorization

C

B36. A company is concerned about security issues at their remote sites. Which of the following would provide the IT team with more information of potential shortcomings?

❍ A. Gap analysis

❍ B. Policy administrator

❍ C. Change management

❍ D. Dependency list

A

B87. When a person enters a data center facility, they must check-in before they are allowed to move further into the building. People who are leaving must be formally checked-out before they are able to exit the building. Which of the following would BEST facilitate this process?

❍ A. Access control vestibule

❍ B. Air gap

❍ C. Pressure sensors

❍ D. Bollards

A

C61. A company is updating components within the control plane of their zero-trust implementation. Which of the following would be part of this update?

❍ A. Policy engine

❍ B. Subjects

❍ C. Policy enforcement point

❍ D. Zone configurations

B

C66. A system administrator would like to prove an email message was sent by a specific person. Which of the following describes the verification of this message source?

❍ A. Non-repudiation

❍ B. Key escrow

❍ C. Asymmetric encryption

❍ D. Steganography

A