Chapter 1: Introduction to Security
Which of the following is an enterprise critical asset? - (correct Answer) - Information
What is a race condition? - (correct Answer) - When two concurrent threads of execution access a
shared resource simultaneously, resulting in unintended consequences
Which the following is NOT a reason why it is difficult to defend against today's attackers? - (correct
Answer) - Greater sophistication of defense tools
What is the category of threat actors that sell their knowledge of vulnerabilities to other attackers or
governments? - (correct Answer) - Brokers
Gunnar is creating a document that explains risk response techniques. Which of the following would he
NOT list and explain in his document? - (correct Answer) - Extinguish risk
Alyona has been asked by her supervisor to give a presentation regarding reasons why security attacks
continue to be successful. She has decided to focus on the issue of widespread vulnerabilities. Which of
the following would Alyona NOT include in her presentation? - (correct Answer) - Misconfigurations
Adone is attempting to explain to his friend the relationship between security and convenience. Which
of the following statements would he use? - (correct Answer) - Security and convenience are inversely
proportional
What is an objective of state-sponsored attackers? - (correct Answer) - To spy on citizens
Why do cyberterrorists target power plants, air traffic control centers, and water systems? - (correct
Answer) - They can cause significant disruption by destroying only a few targets
Ian recently earned his security certification and has been offered a promotion to a position that
requires him to analyze and design security solutions as well as identifying users' needs. Which of these
generally recognized security positions has Ian been offered? - (correct Answer) - Security administrator
Which of the following is NOT true regarding security? - (correct Answer) - Security is a war that must be
won at all costs
Tatyana is discussing with her supervisor potential reasons why a recent attack was successful against
one of their systems. Which of the following configuration issues would NOT be covered? - (correct
Answer) - Vulnerable business processes
Which act requires banks and financial institutions to alert their customers of their policies in disclosing
customer information? - (correct Answer) - Gramm-Leach-Bliley Act (GLBA)
Which of the following is an enterprise critical asset? - (correct Answer) - Information
What is a race condition? - (correct Answer) - When two concurrent threads of execution access a
shared resource simultaneously, resulting in unintended consequences
Which the following is NOT a reason why it is difficult to defend against today's attackers? - (correct
Answer) - Greater sophistication of defense tools
What is the category of threat actors that sell their knowledge of vulnerabilities to other attackers or
governments? - (correct Answer) - Brokers
Gunnar is creating a document that explains risk response techniques. Which of the following would he
NOT list and explain in his document? - (correct Answer) - Extinguish risk
Alyona has been asked by her supervisor to give a presentation regarding reasons why security attacks
continue to be successful. She has decided to focus on the issue of widespread vulnerabilities. Which of
the following would Alyona NOT include in her presentation? - (correct Answer) - Misconfigurations
Adone is attempting to explain to his friend the relationship between security and convenience. Which
of the following statements would he use? - (correct Answer) - Security and convenience are inversely
proportional
What is an objective of state-sponsored attackers? - (correct Answer) - To spy on citizens
Why do cyberterrorists target power plants, air traffic control centers, and water systems? - (correct
Answer) - They can cause significant disruption by destroying only a few targets
Ian recently earned his security certification and has been offered a promotion to a position that
requires him to analyze and design security solutions as well as identifying users' needs. Which of these
generally recognized security positions has Ian been offered? - (correct Answer) - Security administrator
Which of the following is NOT true regarding security? - (correct Answer) - Security is a war that must be
won at all costs
Tatyana is discussing with her supervisor potential reasons why a recent attack was successful against
one of their systems. Which of the following configuration issues would NOT be covered? - (correct
Answer) - Vulnerable business processes
Which act requires banks and financial institutions to alert their customers of their policies in disclosing
customer information? - (correct Answer) - Gramm-Leach-Bliley Act (GLBA)
