What form of VPN is based on a Transport-layer standard for encryption that is commonly used
for Application-layer protocol protection?
A
PPTP VPN
B
L2TP VPN
C
SSL VPN
D
IPSec VPN - Answers SSL VPN
When using asymmetric cryptography, what is the purpose of using the recipient's public key to
perform an encryption function on a data set before sending it to the recipient?
A
To support non-repudiation
B
To restrict delivery
C
To verify integrity
D
To prove the identity of the sender - Answers To restrict delivery
What are the three categories of controls?
This task contains the radio buttons and checkboxes for options. The shortcut keys to perform
this task are A to H and alt+1 to alt+9.
A
,Physical, detective, and logical (technical)
B
Physical, logical (technical), and administrative
C
Administrative, logical (technical), and digital
D
Administrative, physical, and preventative - Answers Physical, logical (technical), and
administrative
Which of the following is a security program used in many banks to verify the ethics and job
performance of a bank manager?
A
Ethical investigation
B
M of N
C
Mandatory cruise
D
Mandatory vacation - Answers Mandatory vacation
Which term is used to indicate the function of access control or define which subjects can
perform various tasks on specific objects?
A
Accessibility
B
Availability
C
,Authorization
D
Authentication - Answers Authorization
What is one of the more complicated legal concerns related to cloud computing when a legal
investigation needs to obtain evidence, but the evidence may be stored on systems in a
borderless cloud solution spread across multiple countries?
A
Ownership
B
Privacy
C
Jurisdiction
D
eDiscovery - Answers Jurisdiction
Why do employees have to read and sign an Authorized Use Policy (AUP) before they are
granted access to the IT network?
A
To show proof that the company has a business license and is authorized to use computer
equipment in the furtherance of their business processes
B
To indicate which individuals can and cannot access specific network resources
C
To define the laws that can be broken within the network
D
To remind them of their responsibilities and that they will be held accountable for their
, activities - Answers To remind them of their responsibilities and that they will be held
accountable for their activities
Which choice least describes a cloud implementation?
A
Inexpensive
B
On-demand self-service
C
Rapid elasticity
D
Broadly assessable by numerous networking platforms - Answers Inexpensive
Which of the following is not a control category?
A
Technical
B
Preventative
C
Physical
D
Administrative - Answers Preventative
Which term refers to an in-house or third-party provided location where ongoing monitoring of
the logical and physical security mechanisms of an organization is performed to provide a real-
time situational awareness of the state of security?
A