Item number 87
Chapter 8: Physical Security Control
Section: Site Selection
Item type: Multiple Choice
Question: Which of the following are considerations when selecting a site?
Options:
A. Visibility
B. Locale considerations
C. Natural disasters
D. Transportation
E. A and B
F. B and C
G. All the above
Item number 88
Chapter 8: Physical Security Control
Section:
Item type: Multiple Choice
Question: Which of the following is an example of technical controls that can be used for
physical security?
Options:
A. Audit trails/access logs
B. Fire suppressions systems
C. HVAC
D. Mantraps
Item number 89
Chapter 8: Physical Security Control
Section: Physical Security Controls
Item type: Multiple Choice
Question: Which of the following is an example of physical security controls that can be
used for physical security?
Options:
A. Smart cards
B. Biometric devices
C. HVAC
D. Mantraps
Item number 90
Chapter 8: Physical Security Control
Section: Providing Physical Security
Item type: Multiple Choice
Question: Which of the following is an example of an administrative control that can be
used for physical security?
Options:
A. Intrusion detection systems
B. Work area restrictions
C. Fences
D. Turnstiles
Item number 91
Chapter 9: Operations Security
Section: Introduction
Item type: Multiple Choice
Question: Which of the following operation security controls help mitigate the impact of
a loss?
Options:
A. Preventive controls
B. Detective controls
C. Corrective controls
D. Deterrent controls
Item number 92
Chapter 9: Operations Security
Section: Introduction
Item type: Multiple Choice
Question: Which of the following operation security controls reduce the frequency and
impact of errors?
Options:
A. Preventive controls
B. Detective controls
C. Corrective controls
D. Deterrent controls
Item number 93
Chapter 9: Operations Security
Section: Media Controls
Item type: Multiple Choice
Question: Which of the following media sanitization methods uses a program to write 1s
and 0s on disk?
Options:
A. Formatting
B. Deleting
C. Degaussing
D. Overwriting
Item number 94
Chapter 9: Operations Security
Section: Media Controls
Item type: Multiple Choice
Question: Which of the following media sanitization methods magnetically erases the
data from magnetic drives?
Options:
A. Formatting
B. Destruction
C. Degaussing
D. Overwriting
Item number 95
Chapter 9: Operations Security
Section: Media Controls
Item type: Multiple Choice
Question: Which of the following media sanitization methods removes data by
shredding or burning?
Options:
A. Formatting
B. Destruction
C. Degaussing
D. Overwriting
Item number 96
Chapter 9: Operations Security
Section: Media Controls
Item type: Multiple Choice
Question: Which of the following is the only sure method of media sanitization?
Options:
A. Formatting
B. Destruction
C. Degaussing
D. Overwriting
Item number 97
Chapter 9: Operations Security
Section: Operations Security Process Controls
Item type: Multiple Choice
Question: Which of the following statements best describes fail-secure system controls?
Options:
A. Used to track and approve changes to a system
B. Ensures security is not breached when a computer system crashes
C. Preserves the state of the system before the crash and prevent further damage
D. Used to clearly mark and handle assets
Item number 98
Chapter 9: Operations Security
Section: Operations Security Process Controls
Item type: Multiple Choice
Question: Which of the following statements best describes trusted recovery controls?
Options:
A. Used to track and approve changes to a system
B. Ensures security is not breached when a computer system crashes
C. Preserves the state of the system before the crash and prevent further damage
D. Used to clearly mark and handle assets
Item number 99
Chapter 9: Operations Security
Section: Operations Security Process Controls
Item type: Multiple Choice
Question: Which of the following statements best describes media viability controls?
Options:
A. Used to track and approve changes to a system
B. Ensures security is not breached when a computer system crashes
C. Used to determine how long records should be kept
D. Used to clearly mark and handle assets
Item number 100
Chapter 9: Operations Security
Section: Operations Security Process Controls
Item type: Multiple Choice
Question: Which of the following statements best describes configuration and change
management controls?
Options:
A. Used to track and approve changes to a system
B. Ensures security is not breached when a computer system crashes
C. Used to determine how long records should be kept
D. Used to clearly mark and handle assets
Item number 101
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Passwords are an example of which of the following?
Options:
A. Something you know authentication
B. Something you have authentication
C. Something you are authentication
D. All the above
Item number 102
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Which of the following is not an example of a multifactor authentication?
Options:
A. Passwords and tokens
B. Retina scans and smart cards
C. PINs and tokens
D. Fingerprint recognition and iris scanning
Item number 103
Chapter 10: Access Control Systems and Methodology
Section: Biometrics
Item type: Multiple Choice
Question: Which of the following is an example of a biometric authentication?
Options:
A. Token
B. PIN
C. Smart card
D. Signature dynamics
Item number 104
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Smart cards are an example of which of the following?
Options:
A. Something you know authentication
B. Something you have authentication
C. Something you are authentication
D. All the above
Item number 105
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Which of the following is an example of something you know authentication
mechanism?
Options:
A. PIN
B. Smart card
C. Fingerprint
D. Signature dynamics
Item number 106
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Which of the following is an example of a multifactor authentication?
Options:
A. Password and PIN
B. Smart card and PIN
C. Smart card and USB drive
D. Iris scan and retina scan
Item number 107
Chapter 10: Access Control Systems and Methodology
Section: Multifactor Authentication
Item type: Multiple Choice
Question: Which of the following is an example of a single factor authentication?
Options:
A. Password and PIN
B. Smart card and token
C. USB drive and fingerprint recognition
D. Fingerprint recognition and password
Item number 108
Chapter 10: Access Control Systems and Methodology
Section: Terms and Concepts
Item type: Multiple Choice
Question: Usernames are used for which of the following?
Options:
A. Authorization
B. Verification
C. Identification
D. Authentication
Item number 109
Chapter 10: Access Control Systems and Methodology
Section: Terms and Concepts
Item type: Multiple Choice
Question: Which of the following is the most commonly used authentication method?
Options:
A. Usernames
B. Passwords
C. Smart cards
D. Fingerprints
Item number 110
Chapter 10: Access Control Systems and Methodology
Section: Mandatory Access Control
Item type: Multiple Choice
Question: In a mandatory access control, what are the elements that are protected
called?
Options:
A. Subjects
B. Objects
C. Resources
D. Labels
Item number 111
Chapter 10: Access Control Systems and Methodology
Section: Terms and Concepts
Item type: Multiple Choice
Question: Which of the following best describes discretionary access control?
Options:
A. The information owner decides who has access to resources.
B. Access to resources is determined based on the need to know principle.
C. Access to resources is decided by the system based on the concept of subjects,
objects, and labels.
D. Users are grouped based on a common access need, such as job function.
Item number 112
Chapter 10: Access Control Systems and Methodology
Section: Terms and Concepts
Item type: Multiple Choice
Question: Which of the following best describes role-based access control?
Options:
A. The information owner decides who has access to resources.
B. Access to resources is determined based on the need to know principle.
C. Access to resources is decided by the system based on the concept of subjects,
objects, and labels.
D. Users are grouped based on a common access need, such as job function.
Item number 113
Chapter 10: Access Control Systems and Methodology
Section: Terms and Concepts
Item type: Multiple Choice
Question: Which of the following best describes mandatory access control?
Options:
A. The information owner decides who has access to resources.
B. Access to resources is determined based on the principle of least privilege.
C. Access to resources is decided by the system based on the concept of subjects,
objects, and labels.
D. Users are grouped based on a common access need, such as job function.
Item number 114
Chapter 10: Access Control Systems and Methodology
Section: Role-Based Access Control
Item type: Multiple Choice
Question: Which of the following is not an advantage of a role-based access control?
Options:
A. Automated user provisioning
B. Automated logon
C. Automatic detection of excessive permission
D. Significant time saving
Item number 115
Chapter 10: Access Control Systems and Methodology
Section: Biometrics
Item type: Multiple Choice
Question: Which of the following authentication methods measure unique human
characteristics to confirm identity?
Options:
A. Smart cards
B. Tokens
C. Biometrics
D. PINs
Item number 116
Chapter 10: Access Control Systems and Methodology
Section: Kerberos
Item type: Multiple Choice
Question: Kerberos is an example of which of the following?
Options:
A. Single sign-on
B. Federated identity
C. Multifactor authentication
D. Asymmetric encryption
on.
Item number 117
Chapter 10: Access Control Systems and Methodology
Section: Federated Identities
Item type: Multiple Choice
Question: Which of the following are examples of federated identity providers?
Options:
A. Facebook
B. Google
C. LinkedIn
D. All the above
Item number 118
Chapter 10: Access Control Systems and Methodology
Section: Virtual Private Networks
Item type: Multiple Choice
Question: Virtual private networks use which of the following to allow users to log in to
the corporate network?
Options:
A. Private network
B. Internet
C. Intranet
D. Extranet
Item number 119
Chapter 10: Access Control Systems and Methodology
Section: Remote Access Dial-In User Service
Item type: Multiple Choice
Question: Which of the following allows remote users to communicate with a central
server for authentication and access to requested systems and services?
Options:
A. VPN
B. RADIUS
C. Kerberos
D. Federates identities
Item number 120
Chapter 10: Access Control Systems and Methodology
Section: Kerberos
Item type: Multiple Choice
Question: Kerberos uses which of the following?
Options:
A. Symmetric key cryptography
B. Asymmetric key cryptography
C. Federated identity
D. All the above
Item number 121
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: Symmetric key cryptography uses which of the following?
Options:
A. One secret key
B. Two public keys
C. Two private keys
D. One public and one private key
Item number 122
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: Which of the following is an asymmetric key algorithm?
Options:
A. DES
B. AES
C. RSA
D. 3DES
Item number 123
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: Which of the following is a symmetric key algorithm?
Options:
A. DES
B. RSA
C. DSA
D. All the above
Item number 124
Chapter 11: Cryptography
Section: Block Ciphers
Item type: Multiple Choice
Question: Which of the following is a block cipher?
Options:
A. SSL
B. PRP
C. DES
D. RSA
Item number 125
Chapter 11: Cryptography
Section: Implementations of PPK Cryptography
Item type: Multiple Choice
Question: Which of the following can be used to encrypt email messages?
Options:
A. MD5
B. SHA-1
C. SET
D. S/MIME
Item number 126
Chapter 11: Cryptography
Section: The Roles of Keys in Cryptosystems
Item type: Multiple Choice
Question: Which of the following uses one public and one private key?
Options:
A. Private key cryptography
B. Public key cryptography
C. Secret key cryptography
D. Symmetric key cryptography
Item number 127
Chapter 11: Cryptography
Section: The Pretty Good Privacy Protocol
Item type: Multiple Choice
Question: In which of the following do users sign each other’s certificates?
Options:
A. PKI
B. PGP
C. TSL
D. SSL
Item number 128
Chapter 11: Cryptography
Section: Implementations of PPK Cryptography
Item type: Multiple Choice
Question: Which of the following protocols is used to provide communications privacy
over the Internet?
Options:
A. SHA-1
B. MD5
C. TSL
D. DES
Item number 129
Chapter 11: Cryptography
Section: Symmetric Keys
Item type: Multiple Choice
Question: DES is an example of which of the following?
Options:
A. Hashing protocol
B. Public key encryption key protocol
C. Email encryption protocol
D. Symmetric key encryption protocol
Item number 130
Chapter 11: Cryptography
Section: Digesting Data
Item type: Multiple Choice
Question: Which of the following statement about hashing is true?
Options:
A. It is used to ensure message confidentiality.
B. It is a one-way function.
C. It is used to encrypt messages.
D. It is used to ensure message integrity.
Item number 131
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: RSA is an example of which of the following?
Options: