CS 489 - Quiz 1 questions with verified answers
After Angela left her last organization, she discovered that she still had access to
her shared drives and could log in to her email account. What critical process was
likely forgotten when she left? Ans✓✓✓ Offboarding
Alaina is reviewing practices for her reception desk and wants to ensure that the
reception desk's visitor log is accurate. What process should she add to the
guard's check-in procedure? Ans✓✓✓ Check the visitor's ID against their log
book entry.
Amanda scans a Red Hat Linux server that she believes is fully patched and
discovers that the Apache version on the server is reported as vulnerable to an
exploit from a few months ago. When she checks to see if she is missing patches,
Apache is fully patched. What has occurred? Ans✓✓✓ A false positive
Amelia is looking for a network authentication method that can use digital
certificates and does not require end users to remember passwords. Which of the
following would best fit her requirements? Ans✓✓✓ Tokens
As part of an incident response process, Pete puts a compromised system onto a
virtual LAN (VLAN) that he creates that only houses that system and does not
allow it access to the Internet. What mitigation technique has he used? Ans✓✓✓
Isolation
Ben writes down the checklist of steps that his organization will perform in the
event of a cryptographic malware infection. What type of response document has
he created? Ans✓✓✓ A playbook
, Claire has been notified of a zero-day flaw in a web application. She has the
exploit code, including a SQL injection attack that is being actively exploiteHow
can she quickly react to prevent this issue from impacting her environment if she
needs the application to continue to function? Ans✓✓✓ Deploy a fix via her
WAF.
Dan has written a policy that prohibits employees from sharing their passwords
with their coworkers, family members, or others. What type of credential policy
has he created? Ans✓✓✓ Personnel credential policy
Dana wants to discourage potential malicious actors from accessing her facility.
Which of the following is both a deterrent and a physical control? Ans✓✓✓
Fences
Ed is designing the security architecture for his organization's move into an
infrastructure as a service cloud environment. In his on-site datacenter, he has
deployed a firewall in front of the datacenter network to protect it, and he has
built rules that allow necessary services in, as well as outbound traffic for updates
and similar needs. He knows that his cloud environment will be different. Which
of the following is not a typical concern for cloud firewall designs? Ans✓✓✓
Hardware access for updates
Frank is part of a white team for a cybersecurity exercise. What role will he and
his team have? Ans✓✓✓ Performing oversight and judging of the exercise
Gerald is concerned about unauthorized people entering the company's building.
Which of the following would be most effective in preventing this? Ans✓✓✓
Security guards
After Angela left her last organization, she discovered that she still had access to
her shared drives and could log in to her email account. What critical process was
likely forgotten when she left? Ans✓✓✓ Offboarding
Alaina is reviewing practices for her reception desk and wants to ensure that the
reception desk's visitor log is accurate. What process should she add to the
guard's check-in procedure? Ans✓✓✓ Check the visitor's ID against their log
book entry.
Amanda scans a Red Hat Linux server that she believes is fully patched and
discovers that the Apache version on the server is reported as vulnerable to an
exploit from a few months ago. When she checks to see if she is missing patches,
Apache is fully patched. What has occurred? Ans✓✓✓ A false positive
Amelia is looking for a network authentication method that can use digital
certificates and does not require end users to remember passwords. Which of the
following would best fit her requirements? Ans✓✓✓ Tokens
As part of an incident response process, Pete puts a compromised system onto a
virtual LAN (VLAN) that he creates that only houses that system and does not
allow it access to the Internet. What mitigation technique has he used? Ans✓✓✓
Isolation
Ben writes down the checklist of steps that his organization will perform in the
event of a cryptographic malware infection. What type of response document has
he created? Ans✓✓✓ A playbook
, Claire has been notified of a zero-day flaw in a web application. She has the
exploit code, including a SQL injection attack that is being actively exploiteHow
can she quickly react to prevent this issue from impacting her environment if she
needs the application to continue to function? Ans✓✓✓ Deploy a fix via her
WAF.
Dan has written a policy that prohibits employees from sharing their passwords
with their coworkers, family members, or others. What type of credential policy
has he created? Ans✓✓✓ Personnel credential policy
Dana wants to discourage potential malicious actors from accessing her facility.
Which of the following is both a deterrent and a physical control? Ans✓✓✓
Fences
Ed is designing the security architecture for his organization's move into an
infrastructure as a service cloud environment. In his on-site datacenter, he has
deployed a firewall in front of the datacenter network to protect it, and he has
built rules that allow necessary services in, as well as outbound traffic for updates
and similar needs. He knows that his cloud environment will be different. Which
of the following is not a typical concern for cloud firewall designs? Ans✓✓✓
Hardware access for updates
Frank is part of a white team for a cybersecurity exercise. What role will he and
his team have? Ans✓✓✓ Performing oversight and judging of the exercise
Gerald is concerned about unauthorized people entering the company's building.
Which of the following would be most effective in preventing this? Ans✓✓✓
Security guards
