EXAM BANK FOR SECURITY OPERATIONS- QUESTIONS ANSWERED CORRECTLY LATEST VERSION

EXAM BANK FOR SECURITY OPERATIONS- QUESTIONS ANSWERED CORRECTLY LATEST VERSION QUESTION 1 Operations Security seeks to PRIMARILY protect against which of the following? A. object reuse B. facility disaster C. compromising emanations D. asset threats - Answers D QUESTION 2 The viewing of recorded events after the fact using a closed-circuit TV camera is considered a A. Preventative control. B. Detective control C. Compensating control D. Corrective control - Answers B QUESTION 3 Which of the following questions is LESS likely to help in assessing identification and authentication controls? A. Is a current list maintained and approved of authorized users and their access? B. Are passwords changed at least every ninety days or earlier if needed? C. Are inactive user identifications disabled after a specified period of time? D. Is there a process for reporting incidents? - Answers D QUESTION 4 Which of the following is NOT an example of an operational control? A. Backup and recovery B. Auditing C. Contingency planning D. Operations procedures - Answers B QUESTION 5 In what way can violation of clipping levels assist in violation tracking and analysis? A. Clipping levels set a baseline for acceptable normal user errors, and violations exceeding that threshold will be recorded for analysis of why the violations occurred. B. Clipping levels enable a security administrator to customize the audit trail to record only those violations which are deemed to be security relevant. C. Clipping levels enable the security administrator to customize the audit trail to record only actions for users with access to user accounts with a privileged status. D. Clipping levels enable a security administrator to view all reductions in security levels which have been made to user accounts which have incurred violations. - Answers A QUESTION 6 Which of the following control helps to identify an incident's activities and potentially an intruder? A. Deterrent B. Preventive C. Detective D. Compensating - Answers C QUESTION 7 Which of the following is NOT an example of preventive control? A. Physical access control like locks and door B. User login screen which allows only authorize user to access website C. Encrypt the data so that only authorize user can view the same D. Duplicate checking of a calculation - Answers D QUESTION 8 Which of the following is NOT an example of a detective control? A. System Monitor B. IDS C. Motion detector D. Backup data restore - Answers D QUESTION 9 When attempting to establish liability, which of the following would be described as performing the ongoing maintenance necessary to keep something in proper working order, updated, effective, or to abide by what is commonly expected in a situation? A. Due care B. Due concern C. Due diligence D. Due practice - Answers A QUESTION 10 Which of the following is NOT a critical security aspect of Operations Controls? A. Controls over hardware. B. Data media used. C. Operators using resources. D. Environmental controls. - Answers D QUESTION 11 Which of the following is required in order to provide accountability? A. Authentication B. Integrity C. Confidentiality D. Audit trails - Answers D QUESTION 12 Which of the following assertions is NOT true about pattern matching and anomaly detection in intrusion detection? A. Anomaly detection tends to produce more data B. A pattern matching IDS can only identify known attacks C. Stateful matching scans for attack signatures by analyzing individual packets instead of traffic streams D. An anomaly-based engine develops baselines of normal traffic activity and throughput, and alerts on deviations from these baselines - Answers C QUESTION 13 Which of the following is NOT a characteristic of a host-based intrusion detection system? A. A HIDS does not consume large amounts of system resources B. A HIDS can analyze system logs, processes and resources C. A HIDS looks for unauthorized changes to the system D. A HIDS can notify system administrators when unusual events are identified - Answers A QUESTION 14 Which of the following best describes signature-based detection? A. Compare source code, looking for events or sets of events that could cause damage to a system or network. B. Compare system activity for the behavior patterns of new attacks. C. Compare system activity, looking for events or sets of events that match a predefined pattern of events that describe a known attack. D. Compare network nodes looking for objects or sets of objects that match a predefined pattern of objects that may describe a known attack. - Answers C QUESTION 15 Which of the following questions is LEAST likely to help in assessing controls covering audit trails? A. Does the audit trail provide a trace of user actions? B. Are incidents monitored and tracked until resolved? C. Is access to online logs strictly controlled? D. Is there separation of duties between security personnel who administer the access control function and those who administer the audit trail? - Answers B QUESTION 16 What IDS approach relies on a database of known attacks? A. Signature-based intrusion detection B. Statistical anomaly-based intrusion detection C. Behavior-based intrusion detection D. Network-based intrusion detection - Answers A QUESTION 17 An Intrusion Detection System (IDS) is what type of control? A. A preventive control. B. A detective control. C. A recovery control. D. A directive control. - Answers B QUESTION 18 Which of the following is most appropriate to notify an external user that session monitoring is