d827 practice test

What is the purpose of authorization in data security?  

Controlling access to resources 

What is the goal of ensuring integrity in data security?  

Ensuring data is not altered 

What is an example of an availability failure in data security?  

Interruption of access to website services

How can encryption contribute to maintaining confidentiality in data security? 

By securing data from unauthorized access

Which example shows authentication in data security?  

Entering a username and password when logging into an online banking site 

What does non-repudiation mean in data security?

Preventing users from denying their actions 

How does multi-factor authentication (MFA) improve security?   

By requiring multiple forms of verification for access to resources 

What is the purpose of log monitoring in data security?  

To analyze systems for suspicious activity 

What is a mitigation strategy for insider threats? 

Monitoring employee activities 

What is the purpose of an incident response plan?  

To outline the steps to take before and after a data breach 

What is the primary purpose of a firewall in a network security context?  

To monitor and filter incoming and outgoing network traffic 

What is the purpose of role-based access control (RBAC)?  

To restrict privileges based on a user's role in the organization 

Which example illustrates a requirement under the Federal Information Security Modernization Act (FISMA)?

A federal agency implements continuous monitoring of its information systems.   

A retail store wants to comply with the Payment Card Industry Data Security Standard (PCI DSS). 
 
What will PCI DSS help this store achieve?

Secure customers’ payment card data

What is a core function of the NIST Cybersecurity Framework?

To help organizations understand their security risks

A hospital follows the National Institute of Standards and Technology (NIST) Cybersecurity Framework guidelines by conducting a comprehensive risk assessment to inventory its medical devices and patient records, identifying vulnerabilities that could lead to data breaches or unauthorized access.
 
Which function of the NIST Cybersecurity Framework does this represent? 

Identify 

Which attack surface is targeted by exploiting vulnerabilities in web applications? 

Software attack surface   

What is an example of an insider threat? 

An employee accidentally sharing sensitive information

What is the purpose of a worm in cybersecurity?  

To replicate itself and spread to other computers   

How does a cryptographic hash contribute to the security of a Blockchain network?  

It protects data from being tampered with. 

How does modularity affect the maintenance of software security over time?  

Modularity allows for targeted updates and fixes.

Which technique involves replacing sensitive data with a non-sensitive equivalent that can be used for development and testing purposes? 

Tokenization

Which practice involves attaching a digital certificate to software to verify its authenticity and ensure it has not been tampered with?  

Code signing 

Which technique is used to verify the integrity of data in software security?  

Checksums  

A company wants to ensure the integrity of files transferred over a network. 
 
What should the company do to achieve this goal? 

Use checksums for file uploads

A software development team decides to use a cloud service for data storage, but before doing so, they conduct a thorough security assessment to ensure the service meets their organization’s security standards. Post-integration, the team continuously uses tools to track any emerging vulnerabilities or changes in the cloud service, ensuring ongoing compliance with their organization’s security policies. 
 
Which software security best practice does the software development team demonstrate in this situation? 

Vetting and monitoring third-party components 

How does fuzz testing help to identify potential security vulnerabilities in software?  

It simulates real-world attacks by sending malformed data to an application. 

Why are peer reviews important in software and component security?   

Peer reviews help identify bugs and vulnerabilities in code that may be missed by the original developer.

What is an automated method for enhancing code security and quality without having to run the code?

Static analysis tools 

What can Common Weaknesses Enumeration (CWE) help organizations do to improve security?  

Identify and address software vulnerabilities 

Which standard is titled, “the Secure Software Development Framework (SSDF),” a publication that provides guidelines and best practices for incorporating security throughout the software development lifecycle?  

National Institute of Standards and Technology Special Publication (NIST SP) 800-218   

Which resource is a set of guidelines for security and privacy controls for federal information systems and organizations?

National Institute of Standards and Technology Special Publication (NIST SP) 800-53  

An attacker inputs malicious code into a website's search bar, causing the database to execute unintended commands.

Which type of software security threat did the attacker use?

Structured query language (SQL) injection 

An attacker manipulates record files to cover their tracks after a successful breach.  
 
Which weakness allows the attacker to perform this action?  

Insufficient logging and monitoring 

How is cloud security affected by configuration of microservices?  

Improper configuration of microservices can lead to unauthorized access to sensitive data. 

A company that has employees working remotely wants its remote employees to securely access internal resources, like databases and applications, as if they were on the local network, without compromising security. 
 
What should this company use for this purpose? 

Internet Protocol Security (IPSec)

How does a signature-based intrusion detection system protect networks?

By comparing network traffic against known threat patterns

How can a company protect against unauthorized access to network communications?  

Using secure network protocols  

What does rate limiting help prevent?  

Network congestion

Why is it important to implement redundant systems?   

To support continuous service availability during an attack

A manufacturing company performs a thorough vulnerability scan and discovers that its legacy systems are vulnerable, leading them to invest in modern solutions and implement multi-factor authentication to protect sensitive operational data. 
 
Which network security best practices does this company demonstrate?  

Risk mitigation 

What is a proactive measure to protect against distributed denial-of-service (DDoS) attacks?

Implementing rate limiting  

A software company ensures that developers are only able to view and make changes to the code repositories required for their projects to minimize the risk of accidental changes or data leaks. 
 
Which network security best practices does this software company demonstrate?  

Access controls 

A tech startup develops a comprehensive strategy that includes scenario-based drills, ensuring that all employees understand their roles and responsibilities, which enables them to quickly contain a ransomware attack and minimize downtime. 
 
Which network security best practices does this startup demonstrate?  

Incident response planning  

Which standard helps organizations to establish, implement, maintain, and continually improve an information security management system? 

International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001 

A corporation is implementing Internet Protocol Security (IPSec) VPNs for secure remote access to protect confidential communications. 
 
Which standard can the corporation use for guidance to ensure the VPNs are properly configured and encrypted? 

National Institute of Standards and Technology Special Publication (NIST SP) 800-77

What is a key aspect of National Institute of Standards and Technology Special Publication (NIST SP) 800-53? 

	Your Answer	Correct Answer
Security and privacy controls for information systems

What is the purpose of Address Resolution Protocol (ARP) spoofing? 

To intercept and manipulate network traffic 

How can IP spoofing attacks be prevented?  

By analyzing network traffic for inconsistencies 

What is a common vulnerability found in many internet of things (IoT) devices?

They often have hardcoded passwords. 

Which law is primarily concerned with the protection of electronic communications from unauthorized access and interception? 

Electronic Communications Privacy Act (ECPA)

What is the intended effect of Family Educational Rights and Privacy Act (FERPA) on society?

To enhance trust in educational institutions by safeguarding student privacy

How does the Computer Fraud and Abuse Act (CFAA) address societal needs and problems?

By deterring cybercrime with legal repercussions for unauthorized access

What is the intended effect of Sarbanes-Oxley Act (SOX) on society?

To foster investor confidence by enhancing corporate responsibility and transparency

A university implemented new procedures to ensure that student records are only accessible to authorized personnel to comply with a law.
 
Which law is most applicable to this example?

Family Educational Rights and Privacy Act (FERPA)

Which data security law requires companies to establish and maintain internal controls to prevent fraud and protect investors?

Sarbanes-Oxley Act (SOX)

Which data security law regulates the collection and use of personal financial information? 

Gramm-Leach-Bliley Act (GLBA)

Which data protection law applies to any organization that processes the personal data of individuals within the European Union, regardless of where the organization is based?

General Data Protection Regulation (GDPR)

A cybercriminal impersonated the Chief Executive Officer (CEO) of a company in an email to the company’s Chief Financial Officer (CFO), requesting an urgent fund transfer for a supposed business deal. The CFO complied, and the company lost millions of dollars.
 
Which type of security breach is described in this example? 

Whaling

How can organizations protect against whaling attacks? 

By using email authentication mechanisms  

What is smishing in information security?

A social engineering attack that uses fraudulent text messages

What is the goal of pretexting in a cyber attack? 

Deceiving a target into exposing confidential information 

What is an example of a corporate espionage agent?   

A competitor's employee steals trade secrets from a company.

An outsider posing as a delivery person carrying a large package convinces an employee to hold open the door of a restricted area for them to enter and gain access to confidential information.
 
Which type of security breach is described in this example? 

	Your Answer	Correct Answer
Piggybacking

How does the identification phase in an incident response plan (IRP) help in responding to security incidents?

By determining the nature and scope of an incident

What is an example of a technical control in cybersecurity risk mitigation?

Multi-factor authentication

Which component of a cybersecurity policy provides a plan for identifying, containing, and mitigating security breaches?

Incident response

This is an excerpt from an organization’s cybersecurity policy:  Employees are required to use strong passwords and are prohibited from sharing their login credentials with others. Additionally, employees must lock their computers when leaving their desks and report any lost or stolen devices immediately to the IT department.
 
Which component of a cybersecurity policy does this excerpt illustrate?

Access control

An organization conducts regular training sessions for employees to educate them about cybersecurity best practices and how to recognize potential threats.
 
In which phase of the security lifecycle does this risk management activity occur?

Protect

An organization’s security team conducts a forensic analysis to understand the scope and impact of a security incident and to gather evidence for potential legal action.
 
In which phase of the security lifecycle does this risk management activity occur?

Respond