Practice Test A

Question 1

RTO

Answer 1

Recovery Time Objective. The target length of downtime in event of an issue

Question 1

RPO

Answer 1

Recovery Point Objective. The maximum amount of time from the last backup or restoration point.

Question 2

SLA

Answer 2

Service Level Agreement. Defines the level of service expected from a supplier by a customer. Provides metrics for measuring the service, and remedies or penalties. Minimum terms for the services provided.

Question 3

SOW

Answer 3

Statement of Work. Outlines the scope, timeline, and cost of a project between two parties. A specific list of items to be completed. Can be referred to when determining if a job was done properly.

Question 4

MOU

Answer 4

Memorandum of Understanding. An informal letter of intent that is a good starting place when entering into a business relationship. Not a contract

Question 5

MOA

Answer 5

Memorandum of Agreement. Describes in more detail agreed upon objectives of a project between two parties. Both parties conditionally agree to the objectives. May have some legally binding information.

Question 6

COPE

Answer 6

Corporate Owned, Personally Enabled. Refers to a mobile device that is purchased by the company that allows for both business and personal use.

Question 7

WPA3

Answer 7

Wifi Protected Access 3. An encryption protocol for 802.11 wireless networking.

Question 8

Discretionary Access Control

Answer 8

Allows the owner of a file or resource to control who has access

Question 9

Playbook

Answer 9

Provides conditional steps to follow when managing an organization’s processes and procedures.

Question 10

Key Escrow

Answer 10

The storage and management of decruption keys by a third party

Question 11

SCAP

Answer 11

Security Content Automation Protocol. A method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization. Standardizes vulnerability management across multiple security tools. This allows different tools to identify and act on the smae security criteria.

Question 12

DNS

Answer 12

Domain Name System. A protocol that translates domain names to IP addresses.

Question 13

SPF Record

Answer 13

Sender Policy Framework. Used to publish a list of all authorized email servers for a specific domain.

Question 14

Federation

Answer 14

Allows members of one organization to authenticate using the credentials of another organization. Ex. Sign in with google, Sign in with facebook.

Question 15

HTTP Port

Answer 15

TCP/80

Question 16

HTTPS Port

Answer 16

TCP/443

Question 17

SSH port

Answer 17

TCP/22

Question 18

DMARC

Answer 18

Domain-based Message Authentication Reporting and Conformance. Specifies the disposition of spam emails.