CSX EXAM PRACTICE QUESTIONS
and answers
Who has the greatest influence over access security in a password authentication environment?
- correct answer ✔✔ Users
Which of the following interpret requirements and apply them to specific situations? - correct
answer ✔✔ Standards
Business continuity plans (BCPs) associated with organizational information systems should be
developed primarily on the basis of: - correct answer ✔✔ Business needs
A segmented network: - correct answer ✔✔ Consists of two or more security zones
Which cybersecurity principle is most important when attempting to trace the source of
malicious activity? - correct answer ✔✔ Nonrepudiation
Which of the following offers the strongest protection for wireless network traffic? - correct
answer ✔✔ Wireless Protected Access 2 (WPA2)
Outsourcing poses the greatest risk to an organization when it involves: - correct answer ✔✔
Core business functions
Risk assessments should be performed: - correct answer ✔✔ on a regular basis
Maintaining a high degree of confidence regarding the integrity of evidence requires a(n): -
correct answer ✔✔ Chain of custody
, A firewall that tracks open connection-oriented protocol sessions is said to be: - correct answer
✔✔ Stateful
During which phase of the system development lifecycle (SDLC) should security first be
considered? - correct answer ✔✔ Planning
A cybersecurity architecture designed around the concept of a perimeter is said to be: - correct
answer ✔✔ System-centric
A passive network hub operates at which layer of the OSI model? - correct answer ✔✔ Physical
Updates in cloud-computing environments can be rolled out quickly because the environment
is: - correct answer ✔✔ homogeneous
During which phase of the six-phase incident response model is the root cause determined? -
correct answer ✔✔ Eradication
The attack mechanism directed against a system is commonly called a(n): - correct answer ✔✔
Payload
Where should an organization's network terminate virtual private network (VPN) tunnels? -
correct answer ✔✔ At the perimeter, to allow for effective internal monitoring
In practical applications: - correct answer ✔✔ Asymmetric key encryption is used to securely
obtain symmetric keys
Which two factors are used to calculate the likelihood of an event? - correct answer ✔✔ Threat
and vulnerability
and answers
Who has the greatest influence over access security in a password authentication environment?
- correct answer ✔✔ Users
Which of the following interpret requirements and apply them to specific situations? - correct
answer ✔✔ Standards
Business continuity plans (BCPs) associated with organizational information systems should be
developed primarily on the basis of: - correct answer ✔✔ Business needs
A segmented network: - correct answer ✔✔ Consists of two or more security zones
Which cybersecurity principle is most important when attempting to trace the source of
malicious activity? - correct answer ✔✔ Nonrepudiation
Which of the following offers the strongest protection for wireless network traffic? - correct
answer ✔✔ Wireless Protected Access 2 (WPA2)
Outsourcing poses the greatest risk to an organization when it involves: - correct answer ✔✔
Core business functions
Risk assessments should be performed: - correct answer ✔✔ on a regular basis
Maintaining a high degree of confidence regarding the integrity of evidence requires a(n): -
correct answer ✔✔ Chain of custody
, A firewall that tracks open connection-oriented protocol sessions is said to be: - correct answer
✔✔ Stateful
During which phase of the system development lifecycle (SDLC) should security first be
considered? - correct answer ✔✔ Planning
A cybersecurity architecture designed around the concept of a perimeter is said to be: - correct
answer ✔✔ System-centric
A passive network hub operates at which layer of the OSI model? - correct answer ✔✔ Physical
Updates in cloud-computing environments can be rolled out quickly because the environment
is: - correct answer ✔✔ homogeneous
During which phase of the six-phase incident response model is the root cause determined? -
correct answer ✔✔ Eradication
The attack mechanism directed against a system is commonly called a(n): - correct answer ✔✔
Payload
Where should an organization's network terminate virtual private network (VPN) tunnels? -
correct answer ✔✔ At the perimeter, to allow for effective internal monitoring
In practical applications: - correct answer ✔✔ Asymmetric key encryption is used to securely
obtain symmetric keys
Which two factors are used to calculate the likelihood of an event? - correct answer ✔✔ Threat
and vulnerability
