A Chief Information Security Officer is developing procedures to guide detective and corrective activities associated with common threats, including phishing, social engineering, and business email compromise. Which of the following documents would be most relevant to revise as part of this process?
An Incident Response Plan (IRP) provides the procedures needed to address common security threats such as phishing and social engineering.
A database engineer needs test data with no PII but realistic values. Which technique removes sensitive info while preserving format?
Obfuscation hides or masks sensitive data while preserving the original format and structure. It is commonly used to create realistic but non-sensitive test data, ensuring that personally identifiable information is not exposed.
Which of the following would be the most appropriate way to protect data in transit?
TLS 1.3 is the most secure protocol for protecting data in transit, providing encryption for communication channels.
An audit reveals that cardholder database logs are exposing account numbers inappropriately. Which of the following mechanisms would help limit the impact of this error?
Encryption would protect sensitive information by converting it into an unreadable format that can only be reversed with a decryption key, securing the exposed account numbers in the logs.
A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?
Enabling multifactor authentication helps to prevent unauthorized access even if the attacker successfully guesses the password.
An organization is preparing to export proprietary software to a customer. Which of the following is the best way to prevent the loss of intellectual property?
Obfuscation transforms code into a form that's hard to understand while preserving functionality. This makes reverse-engineering far more difficult and protects intellectual property.
Which of the following would most likely prevent exploitation of an end-of-life, business-critical system?
End-of-life systems can no longer receive patches or updates, leaving them vulnerable. Isolating such systems from the rest of the network minimizes the risk of exploitation by preventing attackers from easily reaching them.
A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?
Multifactor authentication provides an extra layer of security to prevent unauthorized access, even in brute-force attacks.
Which of the following is the MOST effective way to protect sensitive data in the cloud?
Data encryption is the most effective protection for cloud-stored sensitive data as it ensures the data remains secure even if unauthorized access occurs.
Which of the following encryption methods protects data if a user loses their laptop?
Full-disk encryption (FDE) encrypts all data on the laptop, including the operating system and user files. If the laptop is lost or stolen, the data cannot be accessed without the encryption key.
A business manager is concerned about application availability in a local data center. Which of the following solutions will improve availability while reducing maintenance overhead?
Migrating to cloud services improves availability because cloud providers offer redundant infrastructure and distributed systems. It also reduces the burden of hardware maintenance since the provider handles scalability and uptime guarantees.
To which of the following security categories does an EDR solution belong?
Endpoint Detection and Response (EDR) is a technical control because it uses software agents to monitor, detect, and respond to threats on endpoints. It operates at the system level rather than as a policy or physical safeguard.
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of the following security requirements does this project fulfill?
Load balancers distribute traffic across multiple servers to ensure no single server is overwhelmed, improving uptime and preventing service disruptions. This project primarily addresses availability, as it focuses on maintaining the accessibility of services.
A company must ensure sensitive data at rest is protected. Which of the following will the company most likely use?
Encryption converts data into a ciphertext, making it unreadable without the decryption key. This is a standard method for protecting data at rest, ensuring its confidentiality even if unauthorized access occurs.
When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure. Which of the following certificate types is the site most likely using?
Self-signed certificates are not trusted by default, which can result in security warnings when accessing websites that use them.
Quiz Complete!
Domain 1: General Security Concepts