Exam C - review

Question 1

A system administrator would like to prove an email message was sent by
a specific person. Which of the following describes the verification of this message source?

Answer 1

Non-repudiation
Non-repudiation is used to verify the source of data or a message. Digital
signatures are commonly used for non-repudiation.

Question 2

Which of the following would be the MOST significant security concern
when protecting against organized crime?

Answer 2

Maintain reliable backup data
A common objective for organized crime is an organization’s data, and
attacks from organized crime can sometimes encrypt or delete data. A
good set of backups can often resolve these issues quickly and without any
ransomware payments to an organized crime syndicate.

Question 3

During an initial network connection, a supplicant communicates to an
authenticator, which then sends an authentication request to an Active
Directory database. Which of the following would BEST describe this
authentication technology?

Answer 3

802.1X
IEEE 802.1X is a standard for port-based network access control (NAC).
When 802.1X is enabled, devices connecting to the network do not
gain access until they provide the correct authentication credentials.
This 802.1X standard refers to the client as the supplicant, the switch
is commonly configured as the authenticator, and the back-end
authentication server is often a centralized user database.

Question 4

A company’s employees are required to authenticate each time a file share,
printer, or SAN imaging system is accessed. Which of the following
should be used to minimize the number of employee authentication
requests?

Answer 4

SSO
SSO (Single Sign-On) accepts valid authentication requests and allows
users to access multiple resources without requiring additional user
authentications.

Question 5

A company has recently moved from one accounting system to another,
and the new system includes integration with many other divisions of the organization. Which of the following would ensure that the correct access
has been provided to the proper employees in each division?

Answer 5

Internal self-assessment
An internal self-assessment with audit can verify users have the correct
permissions and all users meet the practice of least privilege