CMIT 320 Final Exam Questions with
100% Verified Answers Latest Versions
2025 Graded A+
What kind of security training is most important for a company executive? -
ANSWER✓✓-Overall awareness of the organization's assets and threats to them
What might be a less-expected intangible consequence to an organization's
involvement in the breach of private information, even as a victim? - ANSWER✓✓-
reputation damage
Which automated application-development process primarily reduces manual
requirements during the auditing process? - ANSWER✓✓-continuous validation
On a security forum, you learned that a competitor suffered a data breach when
an industrial spy bypassed cloud-security policies by downloading sensitive data
from a company Google Docs account and sharing it on a personal Google Docs
account. Your organization commonly shares sensitive information internally
using Google Docs on corporate accounts, and you also share less sensitive data
with customers and partners using the service. What security control could
prevent this same fate from befalling your organization with minimal disruption to
business practices? - ANSWER✓✓-instance awareness
our remote access system currently uses RADIUS, but one administrator is
proposing replacing it with TACACS . What benefits might this provide? -
ANSWER✓✓-more secure
better suited to large networks
better able to support non-IP protocols
Which technology or category of products was developed to allow agents
installed on hosts to report a variety of measurable statistics for central
processing and analysis? - ANSWER✓✓-EDR (Endpoint Detection and Response)
,A user complains that every time they open their Internet browser, it no longer
goes to their preferred home page, and advertisements pop up in dialog boxes
that they have to close. What is the likely cause? - ANSWER✓✓-spyware
You're reviewing a web application. Which of these features are security warning
signs? - ANSWER✓✓-Input validation is performed more rigorously on the client
side than on the server side.
Input errors are logged and clearly displayed to users in full detail.
Secret cookies are used to prevent XSRF attacks.
A manufacturer that relies on purchasing various components for the fabrication
of their finished products made the decision to work only with suppliers that use
a particular blockchain solution to track individual items along the supply chain.
What is the key feature of a private blockchain that assures the manufacturer that
the status transformation of any given component along its journey cannot be
forged or corrupted, ensuring all status updates are verified accurately? -
ANSWER✓✓-the public ledger
You require your users to log on using a user name, password, and rolling 6-digit
code sent to a keyfob device. They are then allowed computer, network, and
email access. What type of authentication have you implemented? - ANSWER✓✓-
multifactor authentication
single sign on
Which common utility for creating complete disk images was enhanced by the
Defense Computer Forensics Lab to include features valuable to the field of
forensics, such as hashing on-the-fly and image verification? - ANSWER✓✓-dd
What authentication factor or attribute works well as a form of non-repudiation
because, although it is sometimes able to be hidden, often the subject doesn't
realize it can be detected? - ANSWER✓✓-something you exhibit
What security controls can protect against tailgating? - ANSWER✓✓-security
guards
mantraps
, Which of the following statements about RAID 5 is accurate? - ANSWER✓✓-To
create a RAID 5 array, you not only need enough drives to help cover the desired
capacity of the array, but an additional drive to help cover the necessary amount
of protective parity.
You're classifying data for a private company which uses four classification
levels. Under what classification does PHI most likely fall? - ANSWER✓✓-Private
Which kind of attacker is an APT most commonly associated with? - ANSWER✓✓-
nation states
An administrator has created two EC2 instances in an AWS VPC. Noticing that the
default behavior of the instances is to allow full communication between them,
the administrator investigates ways to control their interaction with one another.
What option best supports the interests of the administrator? - ANSWER✓✓-
Using non-standard security groups
A company decides to invest in embedded systems to improve security by
limiting the number of components used in various critical and sensitive
systems. Which of the following would make it more difficult to justify embedded
systems in certain cases? This task contains the radio buttons and checkboxes
for options. Press the enter key to select the option. option A - ANSWER✓✓-the
wireless networking range
Which features, available to software developers, are used primarily to reduce the
risk associated with injection attacks? - ANSWER✓✓-stored procedures
normalization
If a dummy security camera with a lighted red LED is placed in a transition area
between public and restricted zones in a building before any breach of security
has occurred, what type of security control does the camera represent? -
ANSWER✓✓-deterrent
technical
100% Verified Answers Latest Versions
2025 Graded A+
What kind of security training is most important for a company executive? -
ANSWER✓✓-Overall awareness of the organization's assets and threats to them
What might be a less-expected intangible consequence to an organization's
involvement in the breach of private information, even as a victim? - ANSWER✓✓-
reputation damage
Which automated application-development process primarily reduces manual
requirements during the auditing process? - ANSWER✓✓-continuous validation
On a security forum, you learned that a competitor suffered a data breach when
an industrial spy bypassed cloud-security policies by downloading sensitive data
from a company Google Docs account and sharing it on a personal Google Docs
account. Your organization commonly shares sensitive information internally
using Google Docs on corporate accounts, and you also share less sensitive data
with customers and partners using the service. What security control could
prevent this same fate from befalling your organization with minimal disruption to
business practices? - ANSWER✓✓-instance awareness
our remote access system currently uses RADIUS, but one administrator is
proposing replacing it with TACACS . What benefits might this provide? -
ANSWER✓✓-more secure
better suited to large networks
better able to support non-IP protocols
Which technology or category of products was developed to allow agents
installed on hosts to report a variety of measurable statistics for central
processing and analysis? - ANSWER✓✓-EDR (Endpoint Detection and Response)
,A user complains that every time they open their Internet browser, it no longer
goes to their preferred home page, and advertisements pop up in dialog boxes
that they have to close. What is the likely cause? - ANSWER✓✓-spyware
You're reviewing a web application. Which of these features are security warning
signs? - ANSWER✓✓-Input validation is performed more rigorously on the client
side than on the server side.
Input errors are logged and clearly displayed to users in full detail.
Secret cookies are used to prevent XSRF attacks.
A manufacturer that relies on purchasing various components for the fabrication
of their finished products made the decision to work only with suppliers that use
a particular blockchain solution to track individual items along the supply chain.
What is the key feature of a private blockchain that assures the manufacturer that
the status transformation of any given component along its journey cannot be
forged or corrupted, ensuring all status updates are verified accurately? -
ANSWER✓✓-the public ledger
You require your users to log on using a user name, password, and rolling 6-digit
code sent to a keyfob device. They are then allowed computer, network, and
email access. What type of authentication have you implemented? - ANSWER✓✓-
multifactor authentication
single sign on
Which common utility for creating complete disk images was enhanced by the
Defense Computer Forensics Lab to include features valuable to the field of
forensics, such as hashing on-the-fly and image verification? - ANSWER✓✓-dd
What authentication factor or attribute works well as a form of non-repudiation
because, although it is sometimes able to be hidden, often the subject doesn't
realize it can be detected? - ANSWER✓✓-something you exhibit
What security controls can protect against tailgating? - ANSWER✓✓-security
guards
mantraps
, Which of the following statements about RAID 5 is accurate? - ANSWER✓✓-To
create a RAID 5 array, you not only need enough drives to help cover the desired
capacity of the array, but an additional drive to help cover the necessary amount
of protective parity.
You're classifying data for a private company which uses four classification
levels. Under what classification does PHI most likely fall? - ANSWER✓✓-Private
Which kind of attacker is an APT most commonly associated with? - ANSWER✓✓-
nation states
An administrator has created two EC2 instances in an AWS VPC. Noticing that the
default behavior of the instances is to allow full communication between them,
the administrator investigates ways to control their interaction with one another.
What option best supports the interests of the administrator? - ANSWER✓✓-
Using non-standard security groups
A company decides to invest in embedded systems to improve security by
limiting the number of components used in various critical and sensitive
systems. Which of the following would make it more difficult to justify embedded
systems in certain cases? This task contains the radio buttons and checkboxes
for options. Press the enter key to select the option. option A - ANSWER✓✓-the
wireless networking range
Which features, available to software developers, are used primarily to reduce the
risk associated with injection attacks? - ANSWER✓✓-stored procedures
normalization
If a dummy security camera with a lighted red LED is placed in a transition area
between public and restricted zones in a building before any breach of security
has occurred, what type of security control does the camera represent? -
ANSWER✓✓-deterrent
technical
