CompTIA Security+ Certification Exam SY0-701 Practice Test 2 Flashcards
Which of the following terms describes the process of identifying differences between an organization’s current security posture and its desired security posture?
A) Tabletop exercise
B) Gap analysis
C) Security awareness training
D) Risk assessment
B) Gap analysis
The term “Zero Trust security” refers to a cybersecurity model that eliminates implicit trust from networks and requires all users and devices to be continuously verified before being granted access to resources. The implementation of the Zero Trust security involves two distinct components: a Data Plane, responsible for defining and managing security policies, and a Control Plane, responsible for enforcing the security policies established by the Data Plane.
A) True
B) False
B) False
Which of the answers listed below refers to a Zero Trust Control Plane security approach that takes into account user identity, device security, network conditions, and other contextual information to enable dynamic access decisions?
A) Implicit trust
B) Monitoring and logging
C) Adaptive identity
D) Microsegmentation
C) Adaptive identity
What are the key components of the Zero Trust Control Plane’s Policy Decision Point (PDP)? (Select 2 answers)
A) Policy Engine (PE)
B) Monitoring and logging
C) Policy Enforcement Point (PEP)
D) Microsegmentation
E)Policy Administrator (PA)
A) Policy Engine (PE)
E)Policy Administrator (PA)
In the Zero Trust security architecture, the Policy Enforcement Point (PEP) is a Data Plane component that enforces the security policies defined at the Control Plane by the Policy Decision Point (PDP)
A) True
B) False
A) True
An access control vestibule (a.k.a. mantrap) is a physical security access control system used to prevent unauthorized users from gaining access to restricted areas. An example mantrap could be a two-door entrance point connected to a guard station wherein a person entering from the outside remains locked inside until he/she provides authentication token required to unlock the inner door.
A) True
B) False
A) True
Which of the following statements about honeypots are true? (Select 2 answers)
A)Honeypots are always part of a honeynet
B)Honeypots mimic real systems to attract cyber attackers
C)Honeypots are a type of anti-malware solution
D)Honeypots contain apparent vulnerabilities that are closely monitored by a security team
E)Honeypots are used to launch attacks on cyber attackers
B)Honeypots mimic real systems to attract cyber attackers
D)Honeypots contain apparent vulnerabilities that are closely monitored by a security team
What is a honeynet in the context of cybersecurity?
A) A network of IDSs
B) A network of honeypots
C) A network of infected hosts
D) A network of IPSs
B) A network of honeypots
Which of the answers listed below refers to a honeynet example?
A) A network of fake websites
B) A network of fake servers
C) A network of fake databases
D) A network of fake file shares
E) All of the above
A honeyfile can be any type of file (e.g., a document, email message, image, or video file) containing real user data intentionally placed within a network or system to attract potential attackers or unauthorized users.
A) True
B) False
B) False
A honeyfile can be used for
A) Attracting cyber attackers
B) Triggering alerts when accessed
C) Monitoring network activity
D) All of the above
D) All of the above
What is a honeytoken?
A) A decoy file that is designed to attract attackers ( Your answer)
B) A unique identifier assigned to a honeyfile
C) A decoy system that is designed to lure potential attackers
D) A unique identifier that is designed to track attackers
D) A unique identifier that is designed to track attackers
Which of the following should not be used as honeytokens? (Select all that apply)
A) Active user account credentials
B) Database entries mimicking real data
C) Actual URLs to live websites or resources
D) Dummy server logs with enticing information
E) Fake identifiers, including usernames, passwords, email addresses, and IP addresses
A) Active user account credentials
C) Actual URLs to live websites or resources
A process used by organizations to assess and evaluate the potential impact of disruptive incidents or disasters on their critical business functions and operations is referred to as:
A) BPA
B) BIA
C) SLE
D) BCP
B) BIA
A hierarchical system for the creation, management, storage, distribution, and revocation of digital certificates is known as
A) PKI
B) RA
C) PKCS
D) CA
A) PKI
