D488 OA Questions with Correct Solutions
Question:
1. Digital rights management (DRM)
Answer:
A technology framework that controls how digital content is accessed, copied, and distributed
to prevent unauthorized use.
Question:
2. In-band authentication
Answer:
Authentication that occurs over the same communication channel as the primary transaction
(e.g., logging in via the same web session).
Question:
3. Out-of-band authentication
Answer:
Authentication using a separate communication channel (e.g., sending a code via SMS while
logging in on a website) to enhance security.
Question:
4. Kerberos
Answer:
A network authentication protocol using tickets and symmetric encryption to securely
authenticate users and services.
Question:
5. Challenge-Handshake Authentication Protocol (CHAP)
Answer:
An authentication method where the server sends a challenge, and the client responds with a
hashed value to verify identity.
Question:
6. JSON Web Token (JWT)
Answer:
A compact, URL-safe token format used for securely transmitting claims between parties,
often in web authentication.
, Question:
7. Extensible Authentication Protocol (EAP)
Answer:
A flexible authentication framework used in network access (e.g., Wi-Fi) supporting multiple
methods like certificates or passwords.
Question:
8. Open Authentication (OAuth)
Answer:
An authorization framework allowing third-party applications to access user resources
without sharing credentials.
Question:
9. Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) for industrial control
systems (ICS)
Answer:
MITRE's knowledge base of adversarial tactics and techniques specifically targeting
industrial control systems.
Question:
10. Diamond Model of Intrusion Analysis
Answer:
A cybersecurity model that analyzes intrusions based on four components: adversary,
capability, infrastructure, and victim.
Question:
11. Key performance indicators (KPIs)
Answer:
Measurable values used to assess the effectiveness of security programs or processes. ’ ’ ’
Question:
12. correct sequence of steps in the risk management process
Answer:
Identify risks Assess risks Mitigate risks Monitor and review.
Question:
13. firmware attacks on its industrial control systems
Question:
1. Digital rights management (DRM)
Answer:
A technology framework that controls how digital content is accessed, copied, and distributed
to prevent unauthorized use.
Question:
2. In-band authentication
Answer:
Authentication that occurs over the same communication channel as the primary transaction
(e.g., logging in via the same web session).
Question:
3. Out-of-band authentication
Answer:
Authentication using a separate communication channel (e.g., sending a code via SMS while
logging in on a website) to enhance security.
Question:
4. Kerberos
Answer:
A network authentication protocol using tickets and symmetric encryption to securely
authenticate users and services.
Question:
5. Challenge-Handshake Authentication Protocol (CHAP)
Answer:
An authentication method where the server sends a challenge, and the client responds with a
hashed value to verify identity.
Question:
6. JSON Web Token (JWT)
Answer:
A compact, URL-safe token format used for securely transmitting claims between parties,
often in web authentication.
, Question:
7. Extensible Authentication Protocol (EAP)
Answer:
A flexible authentication framework used in network access (e.g., Wi-Fi) supporting multiple
methods like certificates or passwords.
Question:
8. Open Authentication (OAuth)
Answer:
An authorization framework allowing third-party applications to access user resources
without sharing credentials.
Question:
9. Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) for industrial control
systems (ICS)
Answer:
MITRE's knowledge base of adversarial tactics and techniques specifically targeting
industrial control systems.
Question:
10. Diamond Model of Intrusion Analysis
Answer:
A cybersecurity model that analyzes intrusions based on four components: adversary,
capability, infrastructure, and victim.
Question:
11. Key performance indicators (KPIs)
Answer:
Measurable values used to assess the effectiveness of security programs or processes. ’ ’ ’
Question:
12. correct sequence of steps in the risk management process
Answer:
Identify risks Assess risks Mitigate risks Monitor and review.
Question:
13. firmware attacks on its industrial control systems
