CSX EXAM PRACTICE QUESTIONS AND ANSWERS

Who has the greatest influence over access security in a password authentication environment? - Answer-Users Which of the following interpret requirements and apply them to specific situations? - Answer-Standards Business continuity plans (BCPs) associated with organizational information systems should be developed primarily on the basis of: - Answer-Business needs A segmented network: - Answer-Consists of two or more security zones Which cybersecurity principle is most important when attempting to trace the source of malicious activity? - Answer-Nonrepudiation Which of the following offers the strongest protection for wireless network traffic? - Answer-Wireless Protected Access 2 (WPA2) Outsourcing poses the greatest risk to an organization when it involves: - Answer-Core business functions Risk assessments should be performed: - Answer-on a regular basis Maintaining a high degree of confidence regarding the integrity of evidence requires a(n): - AnswerChain of custody A firewall that tracks open connection-oriented protocol sessions is said to be: - Answer-Stateful During which phase of the system development lifecycle (SDLC) should security first be considered? - Answer-PlanningA cybersecurity architecture designed around the concept of a perimeter is said to be: - Answer-Systemcentric A passive network hub operates at which layer of the OSI model? - Answer-Physical Updates in cloud-computing environments can be rolled out quickly because the environment is: - Answer-homogeneous During which phase of the six-phase incident response model is the root cause determined? - AnswerEradication The attack mechanism directed against a system is commonly called a(n): - Answer-Payload Where should an organization's network terminate virtual private network (VPN) tunnels? - Answer-At the perimeter, to allow for effective internal monitoring In practical applications: - Answer-Asymmetric key encryption is used to securely obtain symmetric keys Which two factors are used to calculate the likelihood of an event? - Answer-Threat and vulnerability What kind of anti-malware program evaluates system processes based on their observed behaviors? - Answer-Heuristic A business continuity plan (BCP) is not complete unless it includes: - Answer-detailed procedures Under the US-CERT model for incident categorization, a CAT-3 incident refers to which of the following? - Answer-Malicious code An interoperability error is what type of vulnerability? - Answer-EmergentSecuring Supervisory Control and Data Acquisition (SCADA) systems can be challenging because they: - Answer-Operate in specialized environments and often have non-standard design elements Virtual systems should be managed using a dedicated virtual local area network (VLAN) because: - Answer-Insecure protocols could result in a compromise of privileged user credentials Which of the following is the best definition for cybersecurity? A. The protection of information from unauthorized access or disclosure B. Protecting information assets by addressing threats to information that is processed, stored, or transported by internet worked systems C. The protection of paper documents, digital and intellectual property, and verbal or visual communications - Answer-B. Protecting information assets by addressing threats to information that is processed, stored, or transported by internet worked systems Which of the following cybersecurity roles is charged with the duty of managing incidents and remediation A.Board of Directors B. Cybersecurity management C. Executive management - Answer-B. Cybersecurity management Which of the following common controls protect the availability of information: A. Access controls, file permissions, encryption B. Access controls, backups, redundancy C. Access controls, logging, encryption - Answer-B. Access controls, backups, redundancy