IBM security analyst practice quiz- solved
A (DDoS) attack typically involves bad actor sending millions of requests to a computer
overwhelming that system's ability to process them all properly. This is a violation of
which aspect of the CIA Triad ? - ANSWER-Availability
A directive from upper management stating that all employees must wear an ID badge
at all times is an example of what ? - ANSWER-Security policy
A subnet mask of 255.0.0.0 is used for which class of network? - ANSWER-Class A
A university just upgraded their email system, so it now encrypts all email by default.
What aspect of the CIA Triad does this upgrade support? - ANSWER-Confidentiality
According to NIST, Cyber Supply Chain Risk Management (SCRM) activities include
which of the following? - ANSWER-All of the above.
Activities performed as a part of security intelligence can be divided into pre-exploit and
post-exploit activities. Which two (2) of these are post-exploit activities? (Select 2) -
ANSWER-Gather full situational awareness through advanced security analytics.
Perform forensic investigation.
Alice sends a message to Bob that is intercepted by Trudy. Which scenario describes
an availability violation? - ANSWER-Trudy deletes the message without reading or
forwarding it.
An employee seeking to damage his company because he did not get an expected
promotion would be classified as which type of actor? - ANSWER-Malicious Insider
An unplanned interruption to an IT Service would be handled by which ITIL process? -
ANSWER-Incident Management
Digital signatures ensure which of the following? - ANSWER-All of the above.
Distributed databases and data warehouses would be considered which data model
type? - ANSWER-Structured data
Holding a cross-departmental meeting to review lessons learned from an incident after it
has been resolved falls into which phase of the incident response lifecycle? - ANSWER-
Post-Incident Activity
How are Rainbow Tables used by hackers? - ANSWER-To decipher stolen passwords
by looking up a hashed password and matching it to a string of clear text.
, How do you indicate some text is only a comment in a Python file? - ANSWER-Use a
hash "#" character. Everything to the right of that character on the same line will be
treated as a comment.
How do you represent the number 8 in binary? - ANSWER-1000
How is Python developed and distributed? - ANSWER-Python is an Open Source
project and distributed free of charge.
How will Quantum computing impact the effectiveness of cryptography? - ANSWER-
Symmetric key encryption will be weakened, and Public Key encryption will be broken.
If data security is the primary concern, which type of cloud should be considered first? -
ANSWER-Private cloud
In Active Directory, Administrator, Guest, HelpAssistant, and KRBTGT are all examples
of what? - ANSWER-Local accounts
In creating an incident response capability in your organization, NIST recommends
taking 6 actions. Which three (3) actions that are a included on that list? (Select 3) -
ANSWER-Develop an incident response plan based on the incident response policy.
Establish policies and procedures regarding incident-related information sharing.
Establish a formal incident response capability.
In digital forensics, the record that documents the sequence of custody, control,
transfer, analysis, and disposition of physical or electronic evidence is called what? -
ANSWER-Chain of custody
In Windows, how many unique address spaces are used by applications running in user
mode? - ANSWER-As many as there are processes running.
Mary has access to certain resources because she is in the Research division of her
company. She has access to other resources because she is a manager. Which access
control system is probably in use in her company? - ANSWER-Role Based Access
Control (RBAC)
Money is the primary motivation for which type of hacking organization ? - ANSWER-
Black Hats
Policies, procedures and tactical plans are all part of what ? - ANSWER-The IT
Governance process.
Question 12
Alice, Bob and Trudy are fictional characters commonly used to illustrate which aspect
of information security? - ANSWER-The CIA Triad.
A (DDoS) attack typically involves bad actor sending millions of requests to a computer
overwhelming that system's ability to process them all properly. This is a violation of
which aspect of the CIA Triad ? - ANSWER-Availability
A directive from upper management stating that all employees must wear an ID badge
at all times is an example of what ? - ANSWER-Security policy
A subnet mask of 255.0.0.0 is used for which class of network? - ANSWER-Class A
A university just upgraded their email system, so it now encrypts all email by default.
What aspect of the CIA Triad does this upgrade support? - ANSWER-Confidentiality
According to NIST, Cyber Supply Chain Risk Management (SCRM) activities include
which of the following? - ANSWER-All of the above.
Activities performed as a part of security intelligence can be divided into pre-exploit and
post-exploit activities. Which two (2) of these are post-exploit activities? (Select 2) -
ANSWER-Gather full situational awareness through advanced security analytics.
Perform forensic investigation.
Alice sends a message to Bob that is intercepted by Trudy. Which scenario describes
an availability violation? - ANSWER-Trudy deletes the message without reading or
forwarding it.
An employee seeking to damage his company because he did not get an expected
promotion would be classified as which type of actor? - ANSWER-Malicious Insider
An unplanned interruption to an IT Service would be handled by which ITIL process? -
ANSWER-Incident Management
Digital signatures ensure which of the following? - ANSWER-All of the above.
Distributed databases and data warehouses would be considered which data model
type? - ANSWER-Structured data
Holding a cross-departmental meeting to review lessons learned from an incident after it
has been resolved falls into which phase of the incident response lifecycle? - ANSWER-
Post-Incident Activity
How are Rainbow Tables used by hackers? - ANSWER-To decipher stolen passwords
by looking up a hashed password and matching it to a string of clear text.
, How do you indicate some text is only a comment in a Python file? - ANSWER-Use a
hash "#" character. Everything to the right of that character on the same line will be
treated as a comment.
How do you represent the number 8 in binary? - ANSWER-1000
How is Python developed and distributed? - ANSWER-Python is an Open Source
project and distributed free of charge.
How will Quantum computing impact the effectiveness of cryptography? - ANSWER-
Symmetric key encryption will be weakened, and Public Key encryption will be broken.
If data security is the primary concern, which type of cloud should be considered first? -
ANSWER-Private cloud
In Active Directory, Administrator, Guest, HelpAssistant, and KRBTGT are all examples
of what? - ANSWER-Local accounts
In creating an incident response capability in your organization, NIST recommends
taking 6 actions. Which three (3) actions that are a included on that list? (Select 3) -
ANSWER-Develop an incident response plan based on the incident response policy.
Establish policies and procedures regarding incident-related information sharing.
Establish a formal incident response capability.
In digital forensics, the record that documents the sequence of custody, control,
transfer, analysis, and disposition of physical or electronic evidence is called what? -
ANSWER-Chain of custody
In Windows, how many unique address spaces are used by applications running in user
mode? - ANSWER-As many as there are processes running.
Mary has access to certain resources because she is in the Research division of her
company. She has access to other resources because she is a manager. Which access
control system is probably in use in her company? - ANSWER-Role Based Access
Control (RBAC)
Money is the primary motivation for which type of hacking organization ? - ANSWER-
Black Hats
Policies, procedures and tactical plans are all part of what ? - ANSWER-The IT
Governance process.
Question 12
Alice, Bob and Trudy are fictional characters commonly used to illustrate which aspect
of information security? - ANSWER-The CIA Triad.
