Information security fundamentals final exam 2024/2025 (Questions With 100% Correct Answers) A+ Graded Verified

Information security fundamentals final exam
2024/2025 (Questions With 100% Correct
Answers) A+ Graded Verified

InformationDsecurityDisDspecificDtoDsecuringDinformation,DwhereasDinformationDsystemsDsecurityDisDfocuse
dDonDtheDsecurityDofDtheDsystemsDthatDhouseDtheDinformation.D(T/F)D-DcorrectDanswer-True



Explanation:DItDisDallDaboutDhardeningDsystemsDinDallDaspects;DhardwareDandDsoftware.



SoftwareDmanufacturersDlimitDtheirDliabilityDwhenDsellingDsoftwareDusingDwhichDofDtheDfollowing?



A.DEnd-UserDLicenseDAgreementsD

B.DConfidentialityDagreementsD

C.DSoftwareDdevelopmentDagreementsD

D.DByDdevelopingDerror-freeDsoftwareDandDcodeDsoDthereDisDnoDliabilityD

E.DNoneDofDtheDaboveD-DcorrectDanswer-End-UserDLicenseDAgreementD(EULA)



Explanation:DCompaniesDwriteDdisclaimersDintoDthatDlongDwallDofDtextDyou'veDneverDreadDbutDagreedDtooD
dozensDofDtimes



TheD__________DtenetDofDinformationDsystemsDsecurityDisDconcernedDwithDtheDrecoveryDtimeDobjective.D



A.DConfidentialityD

B.DIntegrityD

C.DAvailabilityD

D.DAllDofDtheDaboveD

E.DNoneDofDtheDaboveD-DcorrectDanswer-Availability

,Explanation:DTheDRecoveryDTimeDObjectiveD(RTO)DisDtheDamountDofDtimeDthatDitDtakesDforDaDsystemDtoDbeD
upDandDrunningDafterDanDoutage,DthusDbeingD"available"



IfDyouDareDaDpubliclyDtradedDcompanyDorDU.S.DfederalDgovernmentDagency,DyouDmustDgoDpublicDandDannou
nceDthatDyouDhaveDhadDaDdataDbreachDandDmustDinformDtheDimpactedDindividualsDofDthatDdataDbreach.D(T/
F)D-DcorrectDanswer-True



OrganizationsDthatDrequireDcustomerDserviceDrepresentativesDtoDaccessDprivateDcustomerDdataDcanDbestDp
rotectDcustomerDprivacyDandDmakeDitDeasyDtoDaccessDotherDcustomerDdataDbyDusingDwhichDofDtheDfollowin
gDsecurityDcontrols?D



A.DPreventingDcustomerDserviceDrepresentativesDfromDaccessingDprivateDcustomerDdataD

B.DBlockingDoutDcustomerDprivateDdataDdetailsDandDallowingDaccessDonlyDtoDtheDlastDfourDdigitsDofDSocialDS
ecurityDnumbersDorDaccountDnumbersD

C.DEncryptingDallDcustomerDdataD

D.DImplementingDsecond-tierDauthenticationDwhenDaccessingDcustomerDdatabasesD

E.DAllDofDtheDaboveD-DcorrectDanswer-
BlockingDoutDcustomerDprivateDdataDdetailsDandDallowingDaccessDonlyDtoDtheDlastDfourDdigitsDofDSocialDSecu
rityDnumbersDorDaccountDnumbers.



Explanation:DThisDstillDallowsDaccessDtoDsecurityDcheckingDmeasuresDwhileDkeepingDtheDcriticalDcustomerDi
nformationDunavailable.



TheD__________DisDtheDweakestDlinkDinDanDITDinfrastructure.D



A.DSystem/ApplicationDDomainD

B.DLAN-to-WANDDomainD

C.DWANDDomainD

D.DRemoteDAccessDDomainD

E.DUserDDomainD-DcorrectDanswer-UserDDomain



Explanation:DPeopleDareDidiots.DSeeDID10TDerror.

, WhichDofDtheDfollowingDsecurityDcontrolsDcanDhelpDmitigateDmaliciousDemailDattachments?D



A.DEmailDfilteringDandDquarantining

B.DEmailDattachmentDantivirusDscanningD

C.DVerifyingDwithDusersDthatDemailDsourceDisDreputableD

D.DHoldingDallDinboundDemailsDwithDunknownDattachmentsD

E.DAllDofDtheDaboveD-DcorrectDanswer-AllDofDtheDabove



Explanation:DUtilizingDallDofDtheseDwillDfilterDoutDemailsDfromDquestionableDhosts,DquestionableDcontent,Da
ttachments,DandDattachmentDtypes.



YouDcanDhelpDensureDconfidentialityDbyDimplementingD__________.D



A.DAnDacceptableDuseDpolicyD

B.DADdataDclassificationDstandardD

C.DAnDITDsecurityDpolicyDframeworkD

D.DADvirtualDprivateDnetworkDforDremoteDaccessD

E.DSecureDaccessDcontrolsD-DcorrectDanswer-ADvirtualDprivateDnetworkDforDremoteDaccess



Explanation:DConfidentialDinformationDgoingDacrossDtheDinternetDisDlessDsafeDthanDhavingDaDVPNDtoDuseDfor
DcriticalDinformation.




EncryptingDemailDcommunicationsDisDneededDifDyouDareDsendingDconfidentialDinformationDwithinDanDemail
DmessageDthroughDtheDpublicDInternet.D(T/F)D-DcorrectDanswer-True




Explanation:DItDwouldDbeDsentDasDcleartextDotherwise,DwhichDwouldDmakeDitDreadableDbyDanyoneDwhoDpic
kedDitDupDbetweenDsenderDandDdestination.