The private key for a website was stolen, and a new certificate has been issued. Which of the following needs to be updated next?
After the private key is compromised, the Certificate Revocation List (CRL) should be updated to invalidate the old certificate.
A user sends an email that includes a digital signature for validation. Which of the following security concepts would ensure a user cannot deny they sent the email?
Non-repudiation uses cryptographic signatures to bind the sender to the message, preventing them from later denying they created or sent it. It provides proof of origin and delivery.
Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?
Full Disk Encryption encrypts all data stored on the device. Without the decryption key, an attacker cannot access any files even if they have the physical drive.
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergencies. Which of the following is the most important consideration during development?
Availability is the ability of a system or service to be accessible and usable when needed. For a web application that allows individuals to digitally report health emergencies, availability is the most important consideration during development.
A company uses a cloud-based server for file storage and wants to ensure the security of its data in transit. Which of the following should the company use to secure this type of communication? (Select two)
TLS certificates establish trust and enable HTTPS encryption for data in transit. HTTPS leverages TLS to secure web-based file transfers.
Which of the following cryptographic solutions would allow an organization to recover encrypted data after a key becomes corrupted or is deleted?
Key escrow stores a backup copy of encryption keys with a trusted third party, allowing recovery if the original keys are lost or corrupted. This ensures that encrypted data is not permanently inaccessible.
Which of the following encryption methods protects data if a laptop is lost?
Full disk encryption (FDE) encrypts every bit of data on the laptop’s storage, ensuring it is inaccessible without the decryption key. Even if the drive is removed and accessed separately, the data remains unreadable. This is the strongest measure to protect data on lost or stolen devices.
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access the shared folders from the former team. After opening a ticket, the engineer discovers that the account was never moved to the new group. Which of the following access controls is most likely causing the lack of access?
Role-based access control (RBAC) restricts access based on the user's role within the organization.
A malicious insider from the marketing team alters records and transfers company funds to a personal account. Which of the following methods would be the best way to secure company records in the future?
Permission restrictions prevent unauthorized access to sensitive data, reducing the risk of malicious insiders altering records.
Which of the following is the BEST method for securing wireless network traffic?
WPA3 is the latest and most secure wireless security protocol, offering improved encryption and protection against various wireless attacks.
Which encryption method is most appropriate for protecting data in transit?
Asymmetric encryption is most appropriate for data in transit as it allows secure key exchange and provides both confidentiality and authentication without requiring pre-shared keys.
An organization found gaps in its software development environment and is implementing compensating controls to better protect its systems from external threats. Which of the following would be most effective? (Select two)
Platform hardening involves removing unnecessary services, patching OS components, and tightening configurations to reduce vulnerabilities. An application allow list restricts execution to approved software only, blocking untrusted code from running. Together, these controls significantly shrink the attack surface and prevent unknown or malicious applications from executing.
Which of the following control types is an AUP an example of?
An Acceptable Use Policy (AUP) is a managerial control that defines acceptable and unacceptable use of an organization's resources.
Which of the following is the best way to validate the integrity and availability of a disaster recovery site?
A simulated failover exercises the full switch from primary to recovery infrastructure, testing network configuration, data replication, and application readiness. It verifies that systems come online correctly and that data is intact. This hands-on test is the most direct way to confirm both integrity and availability under realistic conditions.
Which encryption mode is MOST suitable for encrypting large files?
Counter (CTR) mode is ideal for large files as it allows parallel processing and doesn't require padding, making encryption more efficient.
Quiz Complete!
Domain 1: General Security Concepts