FedVTE Cybersecurity for Technical Staff
UPDATED ACTUAL Exam Questions and
CORRECT Answers
The antivirus software on a server repeatedly flags an approved application that the HR
department has installed on their local computers as a threat. This is an example of: - CORRECT
ANSWER False positive
Which of the following was enacted to protect the privacy and security of medical information? -
CORRECT ANSWER HIPPA
Which of the following should be implemented when there is a period of high employee
turnover? - CORRECT ANSWER A review of user access and rights
As a DMZ is a publicly accessible network containing servers with public information, strong
security and monitoring are not required. - CORRECT ANSWER False
Which of the following is described as a high-level blueprint outlining accepted practices to help
build sound policies and procedures for an organization? - CORRECT
ANSWER Standards Framework
Which of the following is a common correlation engine that aggregates logs and events from
multiple devices on a network into one system? - CORRECT ANSWER SIEM
Which of the following should risk assessments be based upon as a best practice? - CORRECT
ANSWER A quantitative measurement of risk and impact and asset value
Which of the following will not reduce EMI? - CORRECT ANSWER Humidity control
Which of the following attacks is MOST likely the cause when a user attempts to go to a website
and notices the URL has changed? - CORRECT ANSWER DNS poisoning
, When would it be appropriate to use time of day restrictions on an account? - CORRECT
ANSWER As an added security measure when employees work set schedules
Which of the following creates separate logical networks? - CORRECT
ANSWER Subnetting
Virtualized applications such as virtualized browsers are capable of protecting the underlying
operating system from which of the following? - CORRECT ANSWER Malware
installation from the Internet site of a suspect
Which of the following id a detailed collection of technical controls and requirements to
accomplish the security objectives of an organization? - CORRECT ANSWER Reference
Architecture
Which of the following would be a best practice to prevent users from being vulnerable to social
engineering? - CORRECT ANSWER Provide thorough and frequent user awareness
training
Packets from a computer outside the network are being dropped on the way to a computer inside
the network. Which of the following would be MOST useful to determine the cause of this? -
CORRECT ANSWER Firewall log
Which of the following contains hardware systems similar to the affected organization but does
not host live data? - CORRECT ANSWER Warm site
An area of the network infrastructure that allows a technician to place public facing systems into
it without compromising the entire infrastructure is which of the following? - CORRECT
ANSWER DMZ
Which of the following is used to check software or hardware for configuration anomalies? -
CORRECT ANSWER Secure Baselines
UPDATED ACTUAL Exam Questions and
CORRECT Answers
The antivirus software on a server repeatedly flags an approved application that the HR
department has installed on their local computers as a threat. This is an example of: - CORRECT
ANSWER False positive
Which of the following was enacted to protect the privacy and security of medical information? -
CORRECT ANSWER HIPPA
Which of the following should be implemented when there is a period of high employee
turnover? - CORRECT ANSWER A review of user access and rights
As a DMZ is a publicly accessible network containing servers with public information, strong
security and monitoring are not required. - CORRECT ANSWER False
Which of the following is described as a high-level blueprint outlining accepted practices to help
build sound policies and procedures for an organization? - CORRECT
ANSWER Standards Framework
Which of the following is a common correlation engine that aggregates logs and events from
multiple devices on a network into one system? - CORRECT ANSWER SIEM
Which of the following should risk assessments be based upon as a best practice? - CORRECT
ANSWER A quantitative measurement of risk and impact and asset value
Which of the following will not reduce EMI? - CORRECT ANSWER Humidity control
Which of the following attacks is MOST likely the cause when a user attempts to go to a website
and notices the URL has changed? - CORRECT ANSWER DNS poisoning
, When would it be appropriate to use time of day restrictions on an account? - CORRECT
ANSWER As an added security measure when employees work set schedules
Which of the following creates separate logical networks? - CORRECT
ANSWER Subnetting
Virtualized applications such as virtualized browsers are capable of protecting the underlying
operating system from which of the following? - CORRECT ANSWER Malware
installation from the Internet site of a suspect
Which of the following id a detailed collection of technical controls and requirements to
accomplish the security objectives of an organization? - CORRECT ANSWER Reference
Architecture
Which of the following would be a best practice to prevent users from being vulnerable to social
engineering? - CORRECT ANSWER Provide thorough and frequent user awareness
training
Packets from a computer outside the network are being dropped on the way to a computer inside
the network. Which of the following would be MOST useful to determine the cause of this? -
CORRECT ANSWER Firewall log
Which of the following contains hardware systems similar to the affected organization but does
not host live data? - CORRECT ANSWER Warm site
An area of the network infrastructure that allows a technician to place public facing systems into
it without compromising the entire infrastructure is which of the following? - CORRECT
ANSWER DMZ
Which of the following is used to check software or hardware for configuration anomalies? -
CORRECT ANSWER Secure Baselines
