Which of the following security measures is required when using a cloud-based platform for IoT management?
Encrypted connections are necessary to secure communications between IoT devices and the cloud platform, ensuring confidentiality and integrity.
Which of the following describes the process of concealing code or text inside a graphical image?
Steganography hides information within another medium, like an image, where the hidden data is not visible and can only be extracted using specific techniques.
Which of the following best protects sensitive data in transit across a geographically dispersed infrastructure?
Encrypting data in transit converts it into ciphertext, ensuring that unauthorized parties cannot read or tamper with it as it travels between locations. This is the fundamental method for securing wide-area communications.
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following types of tests does this represent?
A physical penetration test assesses the security of physical access controls, such as doors, locks, and surveillance systems. In this case, the vendor is attempting to bypass physical security measures using an access badge, making it a physical test.
An engineer needs to ensure that a script has not been modified before it is launched. Which of the following best provides this functionality?
Hashing ensures the integrity of a script by generating a unique value for its content that can be compared to check if it has been modified.
Which of the following is the best security reason for closing service ports that are not needed?
Closing unnecessary service ports helps reduce the attack surface of a system, minimizing opportunities for exploitation.
Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?
Complying with the right to be forgotten requires deleting all data related to the individual so that it cannot be recovered or used. Partial measures like purging identifiers or encryption do not fully satisfy the request if the data itself remains.
Which of the following is a possible consequence of a VM escape?
A VM escape occurs when an attacker breaks out of a virtual machine's isolation to access the hypervisor. This compromise can allow control of the hypervisor and all other VMs on the host, posing significant security risks.
The local administrator account for a company's VPN appliance was used to log in to the remote management interface. Which of the following would have most likely prevented this from happening?
Assigning individual user IDs ensures that each user has a unique account, which reduces the risk of shared credentials and allows better tracking and access control.
Which of the following describes the difference between encryption and hashing?
Encryption replaces cleartext with ciphertext, while hashing generates a fixed-size hash value for data verification.
Which of the following security concepts is the best reason for permissions on a human resources file share to follow the principle of least privilege?
Confidentiality ensures that sensitive information is only accessible to authorized individuals. The principle of least privilege aligns with confidentiality by restricting access to human resources file shares, protecting sensitive employee data from unauthorized viewing.
A security analyst needs to verify the integrity of downloaded files. Which of the following should be used?
Hashing creates a unique fingerprint of a file, allowing verification that the file hasn't been modified since the hash was created.
An organization needs to determine how many employees are accessing the building each day in order to configure the proper access controls. Which of the following control types best meets this requirement?
Detective controls are used to monitor and detect actions, such as tracking employee access to the building.
An administrator must authenticate users to systems using credentials already authenticated by a business partner's LDAP system. Which of the following should the administrator deploy to enable this functionality?
Federation lets different identity domains trust each other so credentials from one LDAP can be accepted by another. It simplifies SSO across organizational boundaries.
Which of the following would most likely prevent exploitation of an end-of-life, business-critical system?
End-of-life systems can no longer receive patches or updates, leaving them vulnerable. Isolating such systems from the rest of the network minimizes the risk of exploitation by preventing attackers from easily reaching them.
Quiz Complete!
Domain 1: General Security Concepts