CSX Study Guide Questions Flashcards
__________________ is defined as “a model for enabling convenient, on-demand network access to a shared
pool of configurable resources (e.g., networks, servers, storage, applications and services) that can be rapidly
provisioned and released with minimal management or service provider interaction.”
A. Software as a Service (SaaS)
B. Cloud computing
C. Big data
D. Platform as a Service (PaaS)
B. Cloud computing
Select all that apply. Which of the following statements about advanced persistent threats (APTs) are true?
A. APTs typically originate from sources such as organized crime groups, activists or governments.
B. APTs use obfuscation techniques that help them remain undiscovered for months or even years.
C. APTs are often long-term, multi-phase projects with a focus on reconnaissance.
D. The APT attack cycle begins with target penetration and collection of sensitive information.
E. Although they are often associated with APTs, intelligence agencies are rarely the perpetrators of APT attacks.
A. APTs typically originate from sources such as organized crime groups, activists or governments.
B. APTs use obfuscation techniques that help them remain undiscovered for months or even years.
C. APTs are often long-term, multi-phase projects with a focus on reconnaissance.
Which of the following are benefits to BYOD?
A. Acceptable Use Policy is easier to implement.
B. Costs shift to the user.
C. Worker satisfaction increases.
D. Security risk is known to the user.
B. Costs shift to the user.
C. Worker satisfaction increases.
Choose three. Which types of risk are typically associated with mobile devices? A. Organizational risk B. Compliance risk C. Technical risk D. Physical risk E. Transactional risk
A. Organizational risk
C. Technical risk
D. Physical risk
Which three elements of the current threat landscape have provided increased levels of access and connectivity,
and, therefore, increased opportunities for cybercrime?
A. Text messaging, Bluetooth technology and SIM cards
B. Web applications, botnets and primary malware
C. Financial gains, intellectual property and politics
D. Cloud computing, social media and mobile computing
Cloud computing, social media and mobile computing
1. Arrange the steps of the incident response process into the correct order. A. Mitigation and recovery B. Investigation C. Postincident analysis D. Preparation E. Detection and analysis
D. Preparation E. Detection and analysis B. Investigation A. Mitigation and recovery C. Postincident analysis
Which element of an incident response plan involves obtaining and preserving evidence? A. Preparation B. Identification C. Containment D. Eradication
C. Containment
Select three. The chain of custody contains information regarding:
A. Disaster recovery objectives, resources and personnel.
B. Who had access to the evidence, in chronological order.
C. Labor, union and privacy regulations.
D. Proof that the analysis is based on copies identical to the original evidence.
E. The procedures followed in working with the evidence.
B. Who had access to the evidence, in chronological order.
D. Proof that the analysis is based on copies identical to the original evidence.
E. The procedures followed in working with the evidence.
NIST defines a(n) as a “violation or imminent threat of violation of computer security policies, acceptable use
policies, or standard security practices.”
A. Disaster
B. Event
C. Threat
D. Incident
D. Incident
Select all that apply. A business impact analysis (BIA) should identify:
A. the circumstances under which a disaster should be declared.
B. the estimated probability of the identified threats actually occurring.
C. the efficiency and effectiveness of existing risk mitigation controls.
D. a list of potential vulnerabilities, dangers and/or threats.
E. which types of data backups (full, incremental and differential) will be used.
C. the efficiency and effectiveness of existing risk mitigation controls.
D. a list of potential vulnerabilities, dangers and/or threats.
E. which types of data backups (full, incremental and differential) will be used.
1. Put the steps of the penetration testing phase into the correct order. A. Attack B. Discovery C. Reporting D. Planning
D. Planning
B. Discovery
A. Attack
C. Reporting
- System hardening should implement the principle of ____________or_________ .
A. Governance, compliance
B. Least privilege, access control
C. Stateful inspection, remote access
D. Vulnerability assessment, risk mitigation
B. Least privilege, access control
Select all that apply. Which of the following are considered functional areas of network management as defined by ISO? A. Accounting management B. Fault management C. Firewall management D. Performance management E. Security management
A. Accounting management
B. Fault management
D. Performance management
E. Security management
Virtualization involves:
A. the creation of a layer between physical and logical access controls.
B. multiple guests coexisting on the same server in isolation of one another.
C. simultaneous use of kernel mode and user mode.
D. DNS interrogation, WHOIS queries and network sniffing.
B. multiple guests coexisting on the same server in isolation of one another.
Vulnerability management begins with an understanding of cybersecurity assets and their locations, which can be accomplished by: A. vulnerability scanning. B. penetration testing. C. maintaining an asset inventory. D. using command line tools.
C. maintaining an asset inventory.
