Quiz: Module 05 Infrastructure Controls
Exam Latest Update
Which of the following is NOT a firewall rule parameter?
a. Time
b. Context
c. Visibility
d. Action - ANSWER C
Daichi is preparing a presentation about active defense. Which of the
following would he NOT include on the report as an advantage of active
defense?
a. Active defense can cause the attacker to waste time and processing
power.
b. Active defense can cause a frustrated and weak-willed attacker to seek
another target.
c. Active defense can replace multiple other security defenses at a lower
cost.
d. Active defense can cause attackers to reveal their attack plans. -
ANSWER C
What is a formal process for making modifications to a system and keeping
track of those changes?
a. Change control
b. Change tracking
c. Change management
d. Change regulation - ANSWER C
, Which firewall rule action is useful for determining if essential network
services are able to communicate?
a. Allow
b. Log only
c. Force Deny
d. Force Allow - ANSWER D
Which of the following contains honeyfiles and fake telemetry?
a. High-interaction honeypot
b. Telemetry honeypot
c. Honeypotnet
d. Honeyserver - ANSWER A
Aito is looking into solutions for DDoS mitigations. Which of the following
should he consider?
a. DDoS Prevention System (DPS)
b. DNS sinkhole
c. DDoS pit
d. IP filter - ANSWER B
Which of the following is NOT a NAC option when it detects a vulnerable
endpoint?
a. Deny access to the network.
b. Give restricted access to the network.
c. Update Active Directory to indicate the device is vulnerable.
d. Connect to a quarantine network. - ANSWER C
Which of the following is NOT a cloud control for cybersecurity?
a. Implement secrets management.
b. Avoid utilizing regions and zones.
c. Enforce functional area mitigations.
d. Conduct audits. - ANSWER B
Which of these is a list of preapproved applications?
a. Whitelist
b. Greenlist
c. Redlist
d. Blacklist - ANSWER A
Exam Latest Update
Which of the following is NOT a firewall rule parameter?
a. Time
b. Context
c. Visibility
d. Action - ANSWER C
Daichi is preparing a presentation about active defense. Which of the
following would he NOT include on the report as an advantage of active
defense?
a. Active defense can cause the attacker to waste time and processing
power.
b. Active defense can cause a frustrated and weak-willed attacker to seek
another target.
c. Active defense can replace multiple other security defenses at a lower
cost.
d. Active defense can cause attackers to reveal their attack plans. -
ANSWER C
What is a formal process for making modifications to a system and keeping
track of those changes?
a. Change control
b. Change tracking
c. Change management
d. Change regulation - ANSWER C
, Which firewall rule action is useful for determining if essential network
services are able to communicate?
a. Allow
b. Log only
c. Force Deny
d. Force Allow - ANSWER D
Which of the following contains honeyfiles and fake telemetry?
a. High-interaction honeypot
b. Telemetry honeypot
c. Honeypotnet
d. Honeyserver - ANSWER A
Aito is looking into solutions for DDoS mitigations. Which of the following
should he consider?
a. DDoS Prevention System (DPS)
b. DNS sinkhole
c. DDoS pit
d. IP filter - ANSWER B
Which of the following is NOT a NAC option when it detects a vulnerable
endpoint?
a. Deny access to the network.
b. Give restricted access to the network.
c. Update Active Directory to indicate the device is vulnerable.
d. Connect to a quarantine network. - ANSWER C
Which of the following is NOT a cloud control for cybersecurity?
a. Implement secrets management.
b. Avoid utilizing regions and zones.
c. Enforce functional area mitigations.
d. Conduct audits. - ANSWER B
Which of these is a list of preapproved applications?
a. Whitelist
b. Greenlist
c. Redlist
d. Blacklist - ANSWER A
