Kenzie Academy Network Defense Essentials (NDE) Practice Test

These questions are part of the practice quiz. Start practicing

• ISO/IEC 27042 is primarily concerned with which topic?
• What is the function of Simple Network Management Protocol (SNMP) polling?
• What does the Service Set Identifier (SSID) signify in a wireless local area network?
• What does Advanced and Adaptive Network Technology (ANT) facilitate?
• Which type of malware is designed to replicate itself and spread to other systems?
• What does interval-based IDS refer to?
• What does Government Access to Keys (GAK) refer to?
• What is the purpose of the separation of duties (SoD) in security processes?
• What does Public Key Infrastructure (PKI) aim to improve?
• In symmetric encryption, what is required by both sender and receiver?
• What does Mandatory Access Control (MAC) primarily restrict?
• What defines high-interaction honeypots?
• Which of the following best describes a Hybrid Cloud?
• What is the main characteristic of a single-homed Bastion Host?
• Which hashing algorithm family includes SHA-256 and SHA-512?
• Which kind of security breach is monitored by security cameras typically found in physical security systems?
• Which of the following best describes the Infrastructure Network Topology?
• What is a key characteristic of RAID Level 0?
• ISO/IEC TR 27008 focuses primarily on which kind of auditing?
• What is a primary function of the Universal Serial Bus (USB)?
• What is the purpose of Dtex Systems in user behavior analysis?
• What significant advantage does Docker provide in application development?
• What is the main advantage of a dual firewall DMZ?
• What is the function of an Intrusion Detection and Prevention System (IDS/IPS)?
• What is the function of network sensors?
• Which type of DLP solution primarily focuses on data at rest?
• What is a key feature of a single firewall DMZ?
• Which of the following best describes Kubernetes?
• What is the definition of Access Control?
• What type of information does ISO/IEC 27004 focus on?
• What is the main aim of the USA PATRIOT Act?
• Which of the following best describes a VPN?
• What is the function of geofencing in mobile marketing?
• What is the purpose of Network Access Controls?
• What is the primary feature of the Corporate Owned, Personally Enabled (COPE) policy?
• For what environment is the MQTT protocol primarily designed?
• What is a dipole antenna characterized by?
• What role does an Access Point (AP) play in network topology?
• Which of the following is NOT a function of a Certification Authority?
• What does BYOD stand for in a business context?
• Global Systems for Mobile Communications (GSM) is primarily used for what purpose?
• What type of data does removable media encryption protect?
• What does a differential backup copy?
• What is a major drawback of Unshielded Twisted Pair (UTP) cable?
• What is the ultimate goal of Network Defense?
• What is the role of the communication layer in IoT contexts?
• What best describes open system authentication?
• Which of the following describes a benefit of IaaS?
• Which protocol is known for replacing WEP in WPA?
• What technique does Behavior-Based IDS primarily utilize?
• What operates at the session layer of the OSI model?
• What role does a wireless gateway play within a wireless network?
• What is the role of a Network Intrusion Detection System (NIDS)?
• Which of the following is NOT one of the four areas of the IAM framework?
• Which ISO/IEC standard provides guidance on data analysis methods and assurance?
• RAID Level 10 combines which two RAID levels?
• Which type of Internet access policy does not impose any restrictions on the usage of system resources?
• What unique construction does SHA-3 use to process message blocks?
• What does encryption primarily aim to achieve?
• What does the term 'pre-approved set of devices' in CYOD refer to?
• What is the primary function of IoT User Management?
• What does Lightweight Extensible Authentication Program (LEAP) pertain to?
• What is the primary function of TACACS+, according to its design?
• How far does Near-field Communication (NFC) typically allow communication between devices?
• What does the 802.11 standard primarily relate to?
• What is the primary function of OS virtualization?
• What does logical segmentation utilize to isolate networks?
• What distinguishes RAID Level 50 from other levels?
• At which layer of the OSI model do packet filtering firewalls operate?
• What is the output of the MD5 algorithm?
• What is the purpose of deterrent controls?
• What is the focus of physical security?
• Which feature is unique to WPA3 compared to its predecessors?
• When are detective controls most valuable?
• Which IEEE standard is Wi-Fi part of?
• What principle extends the need-to-know principle to system access?
• Which standard is designed specifically for ISMS and ITIL/service management?
• ISO/IEC 27799 is specifically related to which field?
• What is a key characteristic of a well-documented security policy?
• What do OS containers utilize to ensure isolated user space?
• What is a key characteristic of hybrid VPNs?
• Who or what is frequently considered the weakest link in a security chain?
• What is the primary purpose of an AAA Server?
• What is the primary use of Integrated Drive Electronics (IDE)?
• What does a VPN primarily provide to its users?
• Multi Cloud environments typically involve:
• What protocol does WPA primarily utilize for encryption?
• What does the device layer of IoT comprise?
• ISO/IEC 27014 focuses on which aspect of information security?
• What does "web-enabled devices" refer to in IoT?
• What does the Basic Service Set Identifier (BSSID) refer to in a wireless network?
• What is necessary for anomaly-based monitoring to be effective?
• What does the Company Owned Business Only (COBO) policy ensure?
• Which standard protects organizations handling cardholder information?
• Which of the following defines prevention controls in network security?
• Which standard focuses on incident investigation?
• What is a primary function of an application level gateway?
• What does Identity-as-a-Service (IdaaS) provide?
• According to PCI-DSS requirements, what must documentation include regarding services and protocols?
• What key aspect defines shared key authentication in wireless networks?
• How does Frequency Hopping Spread Spectrum (FHSS) transmit radio signals?
• What is the main objective of the Sarbanes-Oxley Act (SOX)?
• Which of the following best describes authentication in network security?
• What is a Yagi antenna primarily used for?
• Which policy imposes strict restrictions on all company computers regarding network and system usage?
• What is a key feature of a Star Topology network?
• What does nvSRAM do when power is interrupted?
• In a cloud system, what does the term shared responsibility refer to?
• What do Identity and Access Management (IAM) policies ensure?
• What is the primary characteristic of explicit authorization in resource requests?
• What is one of the main goals of using a response system?
• Which RAID level requires the least number of drives for implementation?
• In the context of symmetric encryption, what must the key provide?
• What is the role of an Enterprise Information Security Policy (EISP)?
• What benefit does SCSI provide compared to other connection standards?
• What is meant by the term 'host machine'?
• What is a full data backup primarily used for?
• ISO/IEC 27011 is particularly focused on which sector?
• What is the main advantage of using digital signatures?
• What is an object in the context of access control?
• In terms of decision-making, what does the process layer of IoT typically involve?
• What type of devices would not commonly be considered part of the IoT device layer?
• What is the main purpose of Mobile Device Management (MDM)?
• What is the purpose of a sandbox in network defense?
• In which scenario is the application of ISO/IEC 27043 most critical?
• For a company with a mobile workforce needing to access LAN resources remotely, which tunneling/VPN solution is most appropriate?
• How does high-interaction honeypots differ from low-interaction honeypots?
• What is a characteristic of internal bastion hosts in terms of network communication?
• In what scenario would a transparent proxy most likely be used?
• What does a directional antenna do?
• What is the purpose of Accounting in network management?
• What do Spider Honeypots specifically target?
• What does the term 'cloud computing' fundamentally imply about IT capabilities?
• What type of information does the remote wipe technique primarily focus on?
• What is an important aspect of managing file-level encryption?
• Network access controls are associated with which of the following?
• Which aspect of communication is facilitated by a gateway in a device-to-gateway model?
• How do electric/electromagnetic locks operate?
• What primary role does cache serve in a RAID system?
• In a point-to-point VPN topology, what characterizes the relationship between the two endpoints?
• What component is described as the main physical device in the IoT ecosystem?
• What is the primary function of an antenna?
• What does a System Specific Security Policy (SSSP) provide guidance on?
• Which security measure facilitates user accountability and tracking through verified access?
• Which type of cloud is designed for general public use and offers massive applications?
• Which statement best describes the function of the Electronic Communications Privacy Act?
• What does the MIMO in MIMO-OFDM stand for?
• What is an intranet?
• What does Electromagnetic Interference (EMI) disrupt?
• Which of the following best describes the aim of a security policy in an organization?
• What does a SOCKS proxy not provide compared to a caching HTTP proxy server?
• What type of access control can preventive controls include?
• Which standard is specifically related to management system auditing?
• What is a major challenge of full mesh VPN topologies?
• Which ISO/IEC standard addresses issues relevant to financial services?
• What is a significant feature of Shielded Twisted Pair (STP) cables?
• What characterizes pure honeypots?
• What type of storage does NAND Flash Memory provide?
• What does Synchronized Dynamic Random Access Memory (SDRAM) synchronize with?
• What aspect of security do PCI-DSS requirements seek to enhance primarily?
• How do wireless repeaters function in a network?
• What does PCI DSS stand for?
• What is a key characteristic of a full mesh VPN topology?
• RAID is primarily associated with which concept in network defense?
• Which of the following technologies is referred to as a wireless sensor protocol that enables communication between sensors and controllers?
• In device-to-cloud communication, how do devices communicate?
• Which process is responsible for authorizing users based on their credentials?
• Which statement characterizes an extranet?
• How does a hot backup operate while the system is in use?
• What allows OS containers to provide isolation from each other?
• Which method does retinal scanning use to identify a person?
• What is the role of a Registration Authority (RA) in Public Key Infrastructure (PKI)?
• What is the maximum effective range for infrared (IR) data transmission?
• What is typically included in Business Critical Data?
• What does the auditing process in network management help identify?
• What does availability mean in the context of information security?
• What is the Rivest-Shamir-Adleman (RSA) system used for?
• Which solution ensures secure management of enterprise applications on mobile devices?
• What is the purpose of network virtualization?
• What is the purpose of implementing a DMZ in a network according to PCI-DSS?
• Which protocol is known for stronger encryption and authentication in WPA2?
• Which of the following is an example of a deterrent control?
• What aspect does Network Access Controls primarily focus on?
• What is the main purpose of an Access Point (AP) in networking?
• What is the primary function of backup systems in recovery controls?
• What are ciphers primarily used for?
• Which of the following is a feature of Multi-Layer Security?
• What is the purpose of a Service Set Identifier (SSID) in a WLAN?
• What is the function of Identity Management in an organizational network?
• Which of the following best describes Application Containers?
• What distinguishes the RC6 algorithm?
• Which of the following best describes the operation of pure honeypots?
• What is a digital signature primarily used for?
• What does the Advanced Encryption Standard (AES) serve as for electronic data?
• What is a non-routing dual-homed host?
• What is the main purpose of ISO/IEC 27043?
• Why is it important for Anomaly-Based Detection to have a baseline in place?
• What key feature does Advanced and Adaptive Network Technology (ANT) provide for wireless communications?
• What aspect does MIMO-OFDM enhance in wireless communications?
• Which statement about Software VPNs is true?
• What is the primary function of a mantrap system in physical security?
• What type of firewall is considered software-based and filters traffic for an individual computer?
• SHA-2 uses blocks of which sizes?
• What does geolocation technology do?
• What is included in an organization's regulatory framework?
• What aspect of the lighting system is crucial for security patrols?
• Which protocol helps to secure web transactions by adding a layer of encryption?
• What type of information does a real-time-based IDS collect?
• What does Mobile Email Management (MEM) specifically address?
• What does PCI-DSS requirement 5.1 mandate regarding anti-virus software?
• What is the role of a firewall in relation to public and private networks?
• What does Mobile Device Management (MDM) primarily focus on?
• Which technology is commonly used for short-range data exchange between devices?
• What does User Behavior Analytics (UBA) primarily focus on?
• What is the main characteristic of Software-as-a-Service (SaaS)?
• What is the role of a RAID Controller?
• What technique is used in storage device virtualization to enhance data reliability?
• What is a key feature of the RC5 algorithm?
• Which type of connection allows multiple endpoints to connect from a single location?
• What does removable media encryption prevent?
• What does Orthogonal Frequency-Division Multiplexing (OFDM) achieve?
• What do Application Containers encapsulate?
• What is a characteristic of a Multi Cloud strategy?
• What do system access controls manage?
• What do Network Drivers provide?
• Which firewall technology can inspect traffic based on packet content?
• What does a Circuit-Level Gateway primarily monitor?
• What does the Digital Signature Algorithm (DSA) provide?
• What is the primary function of a management console in virtualization?
• What is the primary feature of Anything as a Service (XaaS)?
• What is the main purpose of a physical security policy?
• What is the purpose of file-level encryption?
• Which technology allows devices to connect wirelessly over short distances?
• How does centralized authorization determine access for users?
• Which of the following describes the role of a Certification Authority (CA)?
• What type of monitoring focuses on performance issues and bandwidth usage?
• What is the role of the Extensible Authentication Protocol (EAP)?
• What protocol types are predominantly used in device-to-device communication?
• What should be included in network configuration documentation to comply with PCI-DSS?
• What role do proxy servers typically play in networking?
• Access controls that include biometric systems are categorized as what type of controls?
• What do network traffic signatures define?
• Which type of security control includes the use of security guards?
• Which device is primarily used to protect computer networks from unwanted traffic?
• What is physical segmentation in networking?
• What is one key feature of Transport Layer Security (TLS)?
• What is the key characteristic of Asymmetric Encryption?
• What does Secure Sockets Layer (SSL) protocol primarily provide?
• How does cloud computing provide IT infrastructure to subscribers?
• Which authorization type provides access to resources indirectly?
• What economic aspect does ISO/IEC TR 27016 focus on?
• What is one of the main goals of implementing server virtualization?
• What function does a lighting system serve in the context of security?
• Which of the following components of a wireless network is used to connect systems to a wireless network and access the Internet directly with the help of an ISP?
• Where do internal bastion hosts reside?
• What type of access does Network Access Server (NAS) facilitate?
• What describes the functionality of both DSSS and FHSS?
• What does Software as a Service (SaaS) offer to its subscribers?
• What type of attacks does an IDS typically monitor?
• What is a key characteristic of a non-transparent proxy?
• In which environment is the hot and cold aisle arrangement primarily used?
• What is the core basis of Cellular Communication technology?
• Which process is typically involved in data encryption?
• What does Data Loss Prevention (DLP) software primarily do?
• What do proactive approaches in network defense aim to achieve?
• What underlies Docker Networking architecture?
• What defines a Bastion Host?
• Which of the following is a characteristic of real-time monitoring?
• What defines a Multi Cloud environment?
• What is the purpose of a dual firewall DMZ?
• What benefit does a guest machine provide in a virtualization environment?
• How does SHA-3 process message blocks?
• In cloud computing, what does Infrastructure as a Service (IaaS) provide to subscribers?
• What is a common use of a Proxy Server in network security?
• What type of service does Network Attached Storage (NAS) provide?
• Detection controls are primarily designed to:
• What is Data Masking used for?
• Which RAID level is known for disk striping without fault tolerance?
• What type of device acts as an interface between a local area network and the internet, using one IP address?
• What is the focus of real-time monitoring in IoT networks?
• In a hub-and-spoke VPN topology, who is considered the hub?
• What does the Electronic Communications Privacy Act primarily address?
• What does a reactive approach focus on in network security?
• What do passwords and PINs primarily serve as?
• Which service integrates security services into corporate infrastructure?
• What is the main aim of the Freedom of Information Act 2000?
• What characteristic defines decentralized authorization systems?
• In which topology is a central hub responsible for managing the network traffic?
• What does ISO/IEC 27013 relate to?
• What does the Cloud-to-Cloud communication model primarily allow?
• What is the best mitigation technique to contain the spread of a worm throughout the network?
• What is the primary purpose of email honeypots?
• What does the term "adhoc" refer to in device communications?
• What is a key feature of a parabolic grid antenna?
• What does Pretty Good Privacy (PGP) primarily provide for network communication?
• A Community Cloud is best defined as:
• Which aspect does Discretionary Access Control (DAC) focus on?
• What does a response system do when an intrusion is detected?
• In OS assisted virtualization, how is the guest OS configured?
• What defines a hardware firewall?
• What does the Extensible Authentication Protocol (EAP) facilitate?
• ISO/IEC TR 27008 is associated with what type of auditing?
• What aspect of information security does ISO/IEC 27005 address?
• What does TKIP stand for in relation to WPA?
• What kind of communication pattern does MQTT utilize?
• How do detective controls respond when preventive controls fail?
• What is the purpose of auditing in a network?
• What technology does the DMZ typically employ to enhance security?
• Which of the following best describes the process of using ciphers?
• In the context of Docker, what does CNM support?
• Which of the following is a common term for unauthorized access to organizational resources?
• What is the relationship between HIDS and its host?
• What do system access controls limit based on user rights?
• Which concept ensures that parties cannot deny sending messages in a communication?
• What does the Payment Card Industry Data Security Standard (PCI-DSS) regulate?
• What is the purpose of Multi-Layer Security?
• What is the primary function of Data Access Control?
• What does ISO/IEC 27042 help professionals to effectively do?
• Which term refers to an infrastructure operated by a single organization?
• What are malware honeypots primarily designed to do?
• Which type of authorization is characterized by a core policy that manages user access?
• What is a False Negative in the context of Intrusion Detection Systems (IDS)?
• What role do network security protocols play in data communication?
• What is a Network Access Server (NAS) commonly known as?
• What is SATA primarily used for?
• What characterizes a true negative in intrusion detection systems?
• What is Frequency-Hopping Spread Spectrum (FHSS) primarily used for?
• What is the primary function of Endpoint DLP?
• What distinguishes logical segmentation from physical segmentation?
• What does S/MIME primarily facilitate in digital communication?
• What is the primary focus of an Intrusion Detection System (IDS)?
• Which approach focuses on anticipating and preventing future network attacks?
• What distinguishes the characteristics of true positives from false alarms in IDS?
• What does the Reference Monitor do in network security?
• What does the Sarbanes-Oxley Act (SOX) aim to improve?
• What is the significance of a Cloud Auditor in cloud computing?
• What are hot and cold aisles used for in server environments?
• What is the main goal of the Sarbanes-Oxley Act?
• Which standard emphasizes the continuous improvement of an information security management system?
• In an IoT ecosystem, what do the connected devices act as?
• What element is NOT a variable in the RC5 algorithm?
• What is the main advantage of using public key infrastructure in communications?
• What is a core benefit of implementing user behavior analysis tools in network security?
• What role does an Application Proxy serve in a network?
• What is the main purpose of the SHA-1 hashing algorithm?
• How does full virtualization function?
• What is the role of a hypervisor in a computing environment?
• What type of network architecture does hub-and-spoke represent?
• What does Mobile Application Management (MAM) primarily enable?
• What is the primary benefit of Platform as a Service (PaaS) for subscribers?
• What type of proxy is designed to be invisible to the end user, allowing connection to a server without their knowledge?
• Which standard addresses the protection of information in inter-organizational communication?
• What is the fundamental purpose of cryptography?
• What is the purpose of a Demilitarized Zone (DMZ)?
• What is a primary advantage of using a Hybrid Cloud?
• What does the Choose Your Own Device (CYOD) policy allow employees to do?
• What type of frequencies does the ISM band serve?
• What does the Internet of Things (IoT) encompass?
• What do reconnaissance traffic signatures indicate?
• What type of cloud model retains full control over corporate data?
• What is one key topic covered by ISO/IEC 27006?
• What does Platform-as-a-Service (PaaS) primarily offer to its subscribers?
• Which of the following best defines a low-interaction honeypot?
• What is the purpose of two-factor authentication?
• What characteristic defines a circuit-level gateway?
• What action does an Intrusion Prevention System (IPS) perform that an IDS does not?
• What does the term "disk mirroring" refer to in the context of RAID?
• What is a critical aspect of cloud services within IoT solutions?
• What is the purpose of the Health Insurance Portability and Accountability Act (HIPAA)?
• What technology does MIMO-OFDM provide an interface for?
• What does the Digital Millennium Copyright Act (DMCA) implement?
• What type of application identifies security issues on a network and suggests prevention methods?
• In the context of honeypots, what is a characteristic of high-interaction models?
• Which component is crucial for simplifying administration of virtual machines?
• What do unauthorized access traffic signatures indicate?
• What defines a False Positive in security monitoring?
• What best describes a victim machine?
• In the context of network defense, what does the term 'disposable machine' refer to?
• Which characteristic defines a packet filtering firewall?
• What is a key characteristic of an omnidirectional antenna?
• Which of the following represents a benefit of full data backup?
• Which of the following defines the low-level mandatory controls that enforce security policies?
• What type of security feature is often included in a Smart Card?
• What is the primary function of Client-to-Site (Remote Access) VPNs?
• RAID Level 1 utilizes which method for data storage?
• What is a firewall generally used for?
• What is the primary purpose of recovery controls in a security context?
• What is a key characteristic of cloud computing regarding IT capabilities?
• What does implicit authorization allow a user to do?
• Which principle is exploited in social engineering attacks based on authority?
• For what purpose is Bluetooth technology primarily used?
• What do retrospective approaches examine?
• What type of services do low-interaction honeypots emulate?
• What function does UBA serve in the realm of security?
• Which of the following is NOT a component of a hybrid VPN?
• What do VPN topologies define?
• What type of approach is the primary focus of reactive techniques?
• What is network virtualization (NV) designed to achieve?
• What type of signals do Network Interface Cards (NICs) seek to communicate with?
• What is the function of a wireless router?
• What are preventive controls used for in network security?
• What defines the characteristics of traffic that may be indicative of malicious activity?
• What is the benefit of offsite data backup?
• Which policy only blocks known dangerous services or behaviors while allowing everything else?
• What is the purpose of the Federal Information Security Management Act (FISMA)?
• What is the primary purpose of Containers as a Service (CaaS)?
• Which organization developed Kubernetes?
• What is the Internet access policy that enables only safe services and disallows nonessential services that cannot be made safe?
• What describes the implementation of user permissions in RBAC?
• What function do detective controls serve in a security environment?
• What security feature is described by the Principle of Least Privilege (POLP)?
• ISO/IEC 27017 provides guidance on which type of security?
• What is one feature of a Distributed Intrusion Detection System (DIDS)?
• What type of honeypots are research honeypots primarily deployed by?
• What is the main characteristic of medium-interaction honeypots?
• Which service model provides virtual machines and hardware through a service API?
• What is the purpose of Spam Honeypots?
• ISO/IEC 27039 is essential for developing which aspect of an organization's security framework?
• Storage DLP is specifically designed to protect which of the following?
• What does a shared secret key in shared key authentication aim to achieve?
• Which method helps in ensuring data integrity and availability in storage virtualization?
• What does full device encryption accomplish?
• What type of network does ZigBee mainly operate on?
• What does Function as a Service (FaaS) primarily help avoid?
• In an IoT ecosystem, what is referred to as the cloud platform?
• Which OSI layer cannot be protected by traditional firewalls?
• What benefits does the Point-to-Point Protocol (PPP) provide in network communication?
• What is the main benefit of fabric virtualization?
• What does a management console allow users to do within the virtualization environment?
• What does an Issue Specific Security Policy (ISSP) aim to secure?
• What type of data does Network DLP monitor?
• What is a Virtual Private Network (VPN) primarily used for?
• What does HMAC stand for?
• What is the unique feature of fiber-optic cable?
• Which element is crucial in an ideal Data Backup Strategy?
• Which technology is typically used for preventing data leakage on portable devices?
• What does WEP stand for in wireless network security?
• What is the role of authentication in information security?
• Why might a company choose to use Identity as a Service (IDaaS)?
• Which method describes an incremental data backup?
• In a discretionary access control (DAC) model, who is primarily responsible for determining access control?
• What indicates a true positive in an IDS?
• ISO/IEC 27041 ensures integrity during which process?
• What does the term "modulation" refer to in context of OFDM?
• What key concept does the USA PATRIOT Act enhance?
• What is the primary purpose of Kerberos in computer networks?
• What characterizes a multi-homed bastion host?
• According to PCI-DSS requirement 1.3.5, what type of traffic should be prevented from the cardholder data environment?
• What are Cross-Container Attacks targeted at?
• What is the purpose of a Storage Area Network (SAN)?
• What is the purpose of preventative controls?
• What is the purpose of Biometric Authentication?
• What is the primary function of a Network Interface Card (NIC)?
• What is the primary function of a primary RAID memory cache?
• What is required by PCI-DSS requirement 5.3 about anti-virus mechanisms?
• What does Enterprise Mobility Management (EMM) aim to secure?
• How do research honeypots contribute to security?
• Which component of the IAM framework is responsible for managing user identities?
• What is the role of a Cloud Broker?
• What is the purpose of a Proxy Server?
• What is characteristic of RAID Level 3?
• What is the role of policies in an organization's network security?
• Which system actively takes preventative actions against unacceptable activities?
• What type of security does WPA3 provide for users?
• What is the primary function of RFID technology?
• What is the function of a Multiport Memory Controller (MPMC)?
• Which component is essential for ensuring the integrity of data in transit?
• Which protocol is designed to provide authentication, authorization, and accounting for remote-access servers?
• What is the primary purpose of Information Assurance (IA) principles?
• What characterizes a point-to-point (P2P) connection?
• What is another term for a hot backup in data systems?
• What is the primary function of the Secure Hashing Algorithm (SHA)?
• What does CCMP stand for in network security?
• What is a primary function of the Distributed Intrusion Detection System (DIDS)?
• What technology uses electromagnetic waves for automatic identification and tracking of objects?
• What is the purpose of a wireless bridge?
• What does signature recognition in security contexts aim to detect?
• What defines a guest machine in virtualization?
• In wireless networking, what advantage does using a unique SSID provide?
• Which of the following best defines an endpoint in a network?
• Which aspect of security is addressed by ISO/IEC 27040?
• What type of authentication mechanism uses a smart card to provide identity verification?
• Which of the following describes the main focus of physical security controls?
• What is the data rate handled by ZigBee technology?
• Which type of cable is less susceptible to external interference due to shielding?
• What does PCI-DSS requirement 1.2.1 focus on regarding traffic?
• What distinguishes WPA2 Enterprise from WPA2?
• What act allows for the disclosure of information held by public authorities?
• What does the Digital Millennium Copyright Act (DMCA) primarily address?
• What does a denial of service (DoS) attack primarily do?
• Which ISO/IEC standard deals with storage security?
• Which of the following best describes server-less architecture?
• Which of the following describes a turnstile?
• What is the purpose of push notification services?
• What is the key difference between a SOCKS proxy and a standard proxy server?
• What type of communication services does a satellite communication system typically provide?
• What does TACACS+ provide for network communication?
• What are production honeypots primarily used for?
• What does Mobile Security Management primarily focus on?
• Which of the following is NOT a use of full device encryption?
• What is the primary function of a proxy server?
• What is the core function of a firewall within network security?
• What purpose does an extranet serve?
• Coaxial cables are primarily used for which of the following?
• What is an IPsec server primarily used for?
• A Cloud Auditor is responsible for what task?
• Which firewall operates at the network level and forms a perimeter for internal LAN?
• Retrospective approaches are used to achieve what outcome?
• What is a common result of an organization failing to comply with regulatory frameworks?
• Which protocol is used to encrypt web communications over HTTP?
• What does Internet Protocol Security (IPsec) primarily ensure during data transmission?
• What tool can be used to protect complex industrial environments against known and unknown attacks across the Purdue model?
• What do both Spam and Spider Honeypots have in common?
• What is the primary function of AWS Identity and Access Management (IAM)?
• Which of the following is a benefit of using a fiber-optic cable?
• In Rule-Based Access Control (RB-RBAC), access permissions are based on what?
• What does Wireless Fidelity (Wi-Fi) utilize to enable data exchange between devices?
• What purpose do malware honeypots serve in network security?
• What does the principle of integrity ensure in information assurance?
• Network drivers are essential for:
• What is the primary purpose of Single Sign-on (SSO) Authentication?
• Which encryption standard does WPA3 primarily use?
• What does a registry contain for an organization?
• What defines a private cloud?
• What are technical security controls primarily used for?
• What is the primary function of reflector antennas?
• Which cable type is known for being easy to tap?
• What is the primary focus of ISO/IEC 27002?
• Network traffic monitoring is characterized by what approach?
• Which of the following suspicious traffic signatures exposes malicious attempts such as ping sweep and port scan?
• In the context of network security, what does the term 'baseline' refer to?
• What role does a digital signature play in non-repudiation?
• What is Orthogonal Frequency Division Multiplexing (OFDM) primarily used for?
• Which best describes real-time-based IDS?
• What type of network issue does unauthorized access typically relate to?
• What describes Software VPNs?
• What is the purpose of implementing a formal process for approving network connections according to PCI-DSS?
• What does ISO/IEC 27001 specify?
• Which of the following describes the purpose of standards within an organization's security framework?
• What benefit does a reverse proxy provide in terms of client awareness?
• Which of the following is a characteristic of a Public Cloud?
• When does a circuit-level gateway operate during a session?
• Which type of communication utilizes protocols like ZigBee or Z-Wave?
• Which characteristic best defines the use of a dipole antenna?
• What method does the 802.11 standard use for frequency hopping?
• What is the definition of a container in virtualization?
• What is the purpose of ISO/IEC 27010?
• What does Security-as-a-Service (SECaaS) aim to integrate into corporate infrastructure?
• What does ISO/IEC 27003 provide guidelines for?
• What term is used to refer to a user or process that requests access to a resource?
• What is the primary purpose of data retention?
• Which RAID level provides block interleaved distributed parity?
• What does the Data Protection Act 2018 (DPA) regulate?
• What functionality does Security Incident and Event Management (SIEM) provide?
• Which of the following describes the Point-to-Point Protocol (PPP)?
• What is a key characteristic of an intrusion detection system?
• What is the role of user rights in system access controls?
• RC4 is primarily known for which of the following features?
• Which document provides a code of practice for information security controls?
• What is a potential risk when configuring a non-routing dual-homed host?
• Which band is designated for use by the industrial, scientific, and medical communities?
• How does WPA2 improve upon the original WPA?
• What does the abbreviation IA stand for in cybersecurity?
• What is the primary function of servers hosted in the cloud regarding sensor data from IoT gateways?
• What does the term ‘anything as a service’ imply in cloud computing?
• Which of the following best describes Mobile Content Management (MCM)?
• What does a Site-to-Site VPN enable for an organization?
• What is one advantage of using technical security controls?
• Which type of controls are in place to discourage violations of security policies?
• What security feature allows only one person inside and requests their identity?
• Which of the following is NOT a function of Network Defense?
• What does the Gramm-Leach-Bliley Act (GLBA) require financial institutions to do?
• What overarching theme do ISO/IEC 27039, 27040, 27041, 27042, and 27043 share?
• What is the purpose of anomaly detection in network security?
• Which of the following describes a potential purpose of an IoT Gateway?
• What is the main purpose of non-repudiation in digital communications?
• Which technology allows marketers to target users based on location?
• Which networking standard is designed for long-distance wireless networking and high-speed Internet?
• What is the primary function of a VPN concentrator?
• What does the term "zero-day" refer to in cybersecurity?
• What does the Freedom of Information Act (FOIA) allow the public to do?
• What structure does MD6 utilize to handle long input messages?
• What does a Cloud Carrier do in a cloud computing environment?
• What does an Intrusion Detection System (IDS) do?
• What technique does Direct Sequence Spread Spectrum (DSSS) use to protect signals?
• How does ISO/IEC 27006 contribute to information security practices?
• What is the main function of a centralized intrusion detection system (IDS)?
• Which type of gateway can filter packets at the application layer?
• What is the primary function of a reverse proxy?
• What is essential for executing a use case in IoT?
• What is the purpose of the Data Encryption Standard (DES)?
• What is a main feature of Smart Card Authentication?
• What does a Stateful Multilayer Inspection Firewall do?
• Identity as a Service (IDaaS) is used for what primary function?
• What does onsite data backup involve?
• What role does a management server play in virtualization platforms?
• Which of the following is NOT a feature of email honeypots?
• What characterizes denial of service traffic signatures?
• What are normal traffic signatures part of?
• What significant characteristic distinguishes SHA from previous hashing algorithms?
• What does PCI DSS primarily focus on?
• File system virtualization primarily deals with which aspect of data handling?
• What does Data Resilience and Backup involve?
• What component allows Internet-enabled devices to access a wireless network?
• Which technology is primarily used for developing, packaging, and running applications in containers?
• What sets a Next Generation Firewall (NGFW) apart from traditional firewalls?
• What is considered the only 100% effective physical control?
• What is commonly referred to as a hotspot?
• What does server virtualization involve?
• What is the result of a cyber attack that floods a server with requests?
• Which technology affects the spectral efficiency in modern wireless communication services?
• How does an anonymous proxy enhance user privacy?
• What does HTTPS stand for in web communications?
• How is bandwidth defined in a network context?
• What is the main purpose of implementing prevention controls?
• What is the main purpose of the Protected Extensible Authentication Protocol (PEAP)?
• What is the primary function of Anomaly-Based Detection?
• Which RAID level features requires at least four drives?
• In the device-to-gateway communication model, what does the gateway do?
• How does Network Address Translation (NAT) function?
• What do authentication and authorization ensure in a security environment?
• Which policy defines a set of rules for storing and maintaining data for operational and regulatory purposes?
• Which of the following describes compensating controls?
• What is the purpose of IoT device management?
• What is the primary function of Role-based Access Control (RBAC)?
• What does User Identity Management (IDM) focus on?
• What is the main goal of network segmentation?
• What type of control would likely use an alarm system?
• What should be the limitation for inbound Internet traffic in a DMZ?
• What is a Private Cloud Infrastructure primarily used for?
• Which of the following standards is directed towards health-related information security?
• Which description applies to software firewalls?
• What is a critical function of hardware and software network components?
• What is a common purpose of using a firewall in network security?
• What is the primary function of digital certificates?
• What do regulatory frameworks require an organization to document?
• What is the primary function of an IoT Gateway?
• Which layer of the IoT architecture is responsible for gathering information and processing received data?
• What does hybrid virtualization primarily involve?
• What primary benefit does server virtualization provide to organizations?
• What does combining multiple hard drives into a single unit with RAID primarily offer?
• What is a key feature of Small Computer System Interface (SCSI)?
• What is defined as a unit of data transmitted over a network?
• Which type of proxy requires explicit configuration in client software?
• What is the purpose of a remote wipe?
• What does Host Intrusion Detection Systems (HIDS) primarily monitor?
• What is the purpose of the General Data Protection Regulation (GDPR)?
• What is the main function of the Global Positioning System (GPS)?
• In the context of SECaaS, what does "cost-effective way" imply?
• What is the primary function of honeynets?
• What are network security controls primarily responsible for?
• What is the purpose of a Redundant Array of Independent Disks (RAID)?
• Which cloud service model allows for the creation of containerized applications?
• What is the primary focus of ISO/IEC 27006?
• What is the main focus of ISO/IEC 27041?
• What is the purpose of electromagnetic interference (EMI) shielding?
• What does Kubernetes, also known as K8s, manage?
• What characterizes informational traffic signatures?
• Which principle does the Zero Trust Security Model emphasize?
• What type of cipher is RC4?
• What does protocol anomaly detection focus on?
• Which technology allows for the hot swapping of hard drives?
• Which action is defined under the Computer Fraud and Abuse Act?
• What does Security as a Service (SECaaS) require for implementation?
• Which protocol provides confidentiality and reliability during client-server communication?
• Which law provides protections for individually identifiable health information?
• What does ISO/IEC 27039 primarily focus on?
• What does real-time analytics primarily analyze?