VIVINT STUDY GUIDE FINAL MOCK TEST WITH
ANSWER RATIONALES 2026
◉ Prevention.
Answer: What can you do ahead of time?
◉ Detection.
Answer: What you can do while the system is running to determine
if something is wrong.
◉ Response.
Answer: When something wrong is detected, what can you do to fix
the problem?
◉ N.I.S.T. Cybersecurity Framework.
Answer: Identify, Protect, Detect, Respond, Recover
◉ CIA Triad.
Answer: Goal of Network Security.
◉ Confidentiality.
,Answer: Data is not revealed. (Protections against unauthorized
access.)
◉ Integrity.
Answer: Data is intact, not modified or corrupted. (Protections
against unauthorized modification)
◉ Availability.
Answer: Data is accessible to allowed users. (Protections against
denial of service)
◉ Data at Rest.
Answer: Storage, information is at rest; usually files, databases, etc
stored on hard drives, USB drives, memory, or DVDs.
◉ Data in Transit.
Answer: Transmission, being moved from one system to another, or
file sharing on a LAN or transfer on the Internet.
◉ Data in Use.
Answer: Processing, file creation by user, data used in an active
session.
,◉ A.A.A.
Answer: Tools Used To Achieve CIA
◉ Authentication.
Answer: Prove who you are.
◉ Access Control.
Answer: What you are allowed to see or get to. (authorization or
permission)
◉ Accounting.
Answer: Keep track of what you've done and what has happened.
◉ Dictionary Attack.
Answer: Software programs that automate the process of rapidly
testing many potential passwords for a given account.
◉ Hybrid Attack.
Answer: Dictionary + Brute Force- Attack assumes most passwords
can be found in cracking dictionaries.
◉ Password Spraying.
, Answer: Testing a weak password against a large number of
accounts.
◉ Credentials.
Answer: Username + password pair used for authentication.
◉ Credential Stuffing.
Answer: Trying username/password from a breach to gain access to
user accounts.
◉ Breach.
Answer: A database is exposed or stolen, which can be accidental,
through insufficient security, or from a malicious actor attack.
◉ Identity Proofing.
Answer: A person claims to be a user but cannot authenticate.
◉ Single Sign-On (SSO).
Answer: One authentication gives access to many servers or
resources.
◉ Passphrases.
ANSWER RATIONALES 2026
◉ Prevention.
Answer: What can you do ahead of time?
◉ Detection.
Answer: What you can do while the system is running to determine
if something is wrong.
◉ Response.
Answer: When something wrong is detected, what can you do to fix
the problem?
◉ N.I.S.T. Cybersecurity Framework.
Answer: Identify, Protect, Detect, Respond, Recover
◉ CIA Triad.
Answer: Goal of Network Security.
◉ Confidentiality.
,Answer: Data is not revealed. (Protections against unauthorized
access.)
◉ Integrity.
Answer: Data is intact, not modified or corrupted. (Protections
against unauthorized modification)
◉ Availability.
Answer: Data is accessible to allowed users. (Protections against
denial of service)
◉ Data at Rest.
Answer: Storage, information is at rest; usually files, databases, etc
stored on hard drives, USB drives, memory, or DVDs.
◉ Data in Transit.
Answer: Transmission, being moved from one system to another, or
file sharing on a LAN or transfer on the Internet.
◉ Data in Use.
Answer: Processing, file creation by user, data used in an active
session.
,◉ A.A.A.
Answer: Tools Used To Achieve CIA
◉ Authentication.
Answer: Prove who you are.
◉ Access Control.
Answer: What you are allowed to see or get to. (authorization or
permission)
◉ Accounting.
Answer: Keep track of what you've done and what has happened.
◉ Dictionary Attack.
Answer: Software programs that automate the process of rapidly
testing many potential passwords for a given account.
◉ Hybrid Attack.
Answer: Dictionary + Brute Force- Attack assumes most passwords
can be found in cracking dictionaries.
◉ Password Spraying.
, Answer: Testing a weak password against a large number of
accounts.
◉ Credentials.
Answer: Username + password pair used for authentication.
◉ Credential Stuffing.
Answer: Trying username/password from a breach to gain access to
user accounts.
◉ Breach.
Answer: A database is exposed or stolen, which can be accidental,
through insufficient security, or from a malicious actor attack.
◉ Identity Proofing.
Answer: A person claims to be a user but cannot authenticate.
◉ Single Sign-On (SSO).
Answer: One authentication gives access to many servers or
resources.
◉ Passphrases.
