Chapt 19-20
1. In a secure authentication system, which type of authentication token relies on physical devices to generate authentication codes or keys?
Hard Authentication Tokens
Soft Authentication Tokens
Biometric Authentication Tokens
Hybrid Authentication Tokens
2. You are configuring secure access to an Apache web server. To enhance security, you enable passwordless access. Which technology should you primarily use for this?
HTTPS with SSL/TLS
SSH keys
2FA
Username and password authentication
3. What is the main purpose of ephemeral credentials in the context of security?
To securely store passwords
To grant temporary access rights
To manage privileged accounts
To provide long-lasting access tokens
4. In a multi-factor authentication implementation, which of the following factors would be classified as a "something you are" factor?
Username and Password
OTP sent via SMS
Fingerprint Scan
Security Questions Answers
5. You have discovered that someone is using the same password for all their online accounts, including email, social media, and banking. What should you recommend implementing to enhance their online security?
2FA
Stronger encryption protocols
Regularly changing passwords
Password manager
6. How many factors of authentication does using a smart card involve?
Single
Two factors
Multiple factors
Dual-factor
7. In an organization, the IT security team wants to prevent users from recycling their passwords too frequently. Which security policy should they implement to achieve this goal?
Maximum password age
Minimum password age
Password complexity requirements
Account lockout policy
8. Which security concept involves granting users temporary administrative access rights for a specific task or period to reduce the exposure of privileged access? Select the BEST choice.
Just-in-time permissions
Password vaulting
Ephemeral credentials
Privileged access management
9. Two organizations are collaborating on a joint venture and need to establish secure access to shared resources. Which approach is most suitable for achieving seamless authentication and access control on these resources?
Password sharing
Identity proofing
Federation services
Provisioning user accounts
10. In a scenario where two organizations are sharing resources and need to implement secure identity federation, which service can they leverage to enable authentication and authorization between their systems?
LDAP
OAuth 20
SAML
Kerberos
1. You are an IT consultant tasked with explaining the use cases of automation and scripting related to secure operations to a group of business executives during a presentation. You need to clarify which of the following options is a use case for automation and scripting in the context of ensuring secure operations within an organization.
User provisioning
Cost management
Marketing strategy
Office space allocation
2. You are the chief information security officer of a medium-sized company, and you have been asked to present the benefits of automation and orchestration in secure operations to your executive team during a meeting. Which of the following is the BEST reason for introducing automation and orchestration in secure operations?
Increasing complexity
Slowing down response time
Enhancing efficiency
Encouraging employee retention
3. A cybersecurity analyst performs automated weekly vulnerability scans on their organization's database servers.
Which of the following describes the administrator's activities?
Continuous validation
Continuous integration
Continuous deployment
D. Continuous monitoring
4. You are the IT security manager of a midsized technology company, and you are conducting a training session for your IT team on the importance of enforcing security baselines. During the training, you want to emphasize the significance of adhering to security policies and standards.
Which of the following represents an example of enforcing baselines related to security?
Automating software updates
Regularly conducting security awareness training
Allowing unauthenticated access
Using weak passwords
5. Which consideration is crucial to avoid technical debt when implementing automation?
Complexity
Cost
Standardization
D. Speed of deployment
6. You are the head of the cybersecurity department in a large financial institution, and you are meeting with your team to discuss improving incident detection and response procedures. You want to find a solution that allows your team to establish workflows for detecting four new types of incidents while incorporating automated decision points and actions based on predefined playbooks. Which of the following is the BEST solution?
SOAR
CASB
SWG
SIEM
7. What is a key benefit of scaling in a secure manner using automation?
Reducing efficiency
Increasing security risks
Adapting to changing workloads
Encouraging technical debt
8. You are the director of IT operations for a large technology company, and you are conducting a staff training session on the importance of ongoing supportability in the context of automation and orchestration. Which of the following are the BEST reasons for ongoing supportability in the context of automation and orchestration? Select TWO.
To increase complexity
To enhance efficiency
To sustain effectiveness
To discourage employee retention
9. You are the chief executive officer for a multinational corporation who just suffered a data breach. As part of the lessons-learned phase, the cybersecurity team needs to develop an early detection system to prevent such an incident in future. Which of the following should the cybersecurity team implement?
A. Implement a Data Loss Prevention system
Implementing rules in the NGFW
Creating a playbook within the SOAR
Implement an audit trail so the incident can be tracked
10. Which of the following involves ten programmers' development all writing their own code and then merging it in a shared repository as soon as it is finished?
Continuous integration
Continuous deployment
Continuous validation
Continuous monitoring
1. You are an IT consultant tasked with explaining the use cases of automation and scripting related to secure operations to a group of business executives during a presentation. You need to clarify which of the following options is a use case for automation and scripting in the context of ensuring secure operations within an organization.
User provisioning
Cost management
Marketing strategy
Office space allocation
2. You are the chief information security officer of a medium-sized company, and you have been asked to present the benefits of automation and orchestration in secure operations to your executive team during a meeting. Which of the following is the BEST reason for introducing automation and orchestration in secure operations?
Increasing complexity
Slowing down response time
Enhancing efficiency
Encouraging employee retention
3. A cybersecurity analyst performs automated weekly vulnerability scans on their organization's database servers.
Which of the following describes the administrator's activities?
Continuous validation
Continuous integration
Continuous deployment
D. Continuous monitoring
4. You are the IT security manager of a midsized technology company, and you are conducting a training session for your IT team on the importance of enforcing security baselines. During the training, you want to emphasize the significance of adhering to security policies and standards.
Which of the following represents an example of enforcing baselines related to security?
Automating software updates
Regularly conducting security awareness training
Allowing unauthenticated access
Using weak passwords
5. Which consideration is crucial to avoid technical debt when implementing automation?
Complexity
Cost
Standardization
D. Speed of deployment
6. You are the head of the cybersecurity department in a large financial institution, and you are meeting with your team to discuss improving incident detection and response procedures. You want to find a solution that allows your team to establish workflows for detecting four new types of incidents while incorporating automated decision points and actions based on predefined playbooks. Which of the following is the BEST solution?
SOAR
CASB
SWG
SIEM
7. What is a key benefit of scaling in a secure manner using automation?
Reducing efficiency
Increasing security risks
Adapting to changing workloads
Encouraging technical debt
8. You are the director of IT operations for a large technology company, and you are conducting a staff training session on the importance of ongoing supportability in the context of automation and orchestration. Which of the following are the BEST reasons for ongoing supportability in the context of automation and orchestration? Select TWO.
To increase complexity
To enhance efficiency
To sustain effectiveness
To discourage employee retention
9. You are the chief executive officer for a multinational corporation who just suffered a data breach. As part of the lessons-learned phase, the cybersecurity team needs to develop an early detection system to prevent such an incident in future. Which of the following should the cybersecurity team implement?
A. Implement a Data Loss Prevention system
Implementing rules in the NGFW
Creating a playbook within the SOAR
Implement an audit trail so the incident can be tracked
10. Which of the following involves ten programmers' development all writing their own code and then merging it in a shared repository as soon as it is finished?
Continuous integration
Continuous deployment
Continuous validation
Continuous monitoring