Browse all practice questions for the Kenzie Academy Network Defense Essentials (NDE) Practice Test. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Kenzie Academy Network Defense Essentials (NDE) Practice Test course image
More practice questions

These questions are part of the practice quiz. Start practicing

  • RAID Level 1 utilizes which method for data storage?
  • What principle extends the need-to-know principle to system access?
  • Where do internal bastion hosts reside?
  • What is a critical aspect of cloud services within IoT solutions?
  • Storage DLP is specifically designed to protect which of the following?
  • What characterizes denial of service traffic signatures?
  • What aspect does Network Access Controls primarily focus on?
  • In the context of honeypots, what is a characteristic of high-interaction models?
  • What does a shared secret key in shared key authentication aim to achieve?
  • What is an important aspect of managing file-level encryption?
  • What is the role of policies in an organization's network security?
  • What technique does Behavior-Based IDS primarily utilize?
  • What type of monitoring focuses on performance issues and bandwidth usage?
  • Which component of the IAM framework is responsible for managing user identities?
  • Which type of gateway can filter packets at the application layer?
  • What does TKIP stand for in relation to WPA?
  • Which kind of security breach is monitored by security cameras typically found in physical security systems?
  • What is the primary purpose of recovery controls in a security context?
  • What describes the implementation of user permissions in RBAC?
  • What does ISO/IEC 27013 relate to?
  • Which of the following describes a benefit of IaaS?
  • Which of the following describes the role of a Certification Authority (CA)?
  • Which type of security control includes the use of security guards?
  • What does a differential backup copy?
  • What is the main objective of the Sarbanes-Oxley Act (SOX)?
  • What does a reactive approach focus on in network security?
  • What is the purpose of a Demilitarized Zone (DMZ)?
  • What is the role of authentication in information security?
  • What is the purpose of implementing a DMZ in a network according to PCI-DSS?
  • What is the core function of a firewall within network security?
  • Which statement about Software VPNs is true?
  • What security feature allows only one person inside and requests their identity?
  • Which aspect does Discretionary Access Control (DAC) focus on?
  • What does the Digital Signature Algorithm (DSA) provide?
  • What is the main advantage of using digital signatures?
  • What is the data rate handled by ZigBee technology?
  • How does full virtualization function?
  • Which of the following is NOT one of the four areas of the IAM framework?
  • Which of the following is NOT a function of a Certification Authority?
  • What is a key characteristic of hybrid VPNs?
  • What is the purpose of two-factor authentication?
  • What key feature does Advanced and Adaptive Network Technology (ANT) provide for wireless communications?
  • What does the term ‘anything as a service’ imply in cloud computing?
  • What is the role of a Cloud Broker?
  • In an IoT ecosystem, what do the connected devices act as?
  • What is the main characteristic of Software-as-a-Service (SaaS)?
  • Which of the following technologies is referred to as a wireless sensor protocol that enables communication between sensors and controllers?
  • What describes Software VPNs?
  • In which topology is a central hub responsible for managing the network traffic?
  • In an IoT ecosystem, what is referred to as the cloud platform?
  • In the context of Docker, what does CNM support?
  • What do network traffic signatures define?
  • Which standard protects organizations handling cardholder information?
  • What do regulatory frameworks require an organization to document?
  • What do OS containers utilize to ensure isolated user space?
  • What is a key characteristic of a well-documented security policy?
  • What is a key feature of a Star Topology network?
  • Which of the following describes the main focus of physical security controls?
  • What primary role does cache serve in a RAID system?
  • Which of the following is a characteristic of real-time monitoring?
  • What does Synchronized Dynamic Random Access Memory (SDRAM) synchronize with?
  • What distinguishes WPA2 Enterprise from WPA2?
  • What do VPN topologies define?
  • Which process is typically involved in data encryption?
  • Network drivers are essential for:
  • What is a Virtual Private Network (VPN) primarily used for?
  • What action does an Intrusion Prevention System (IPS) perform that an IDS does not?
  • What is a key feature of a single firewall DMZ?
  • In device-to-cloud communication, how do devices communicate?
  • What is a core benefit of implementing user behavior analysis tools in network security?
  • What should be the limitation for inbound Internet traffic in a DMZ?
  • What type of honeypots are research honeypots primarily deployed by?
  • What protocol does WPA primarily utilize for encryption?
  • What is the purpose of push notification services?
  • What function do detective controls serve in a security environment?
  • What type of access control can preventive controls include?
  • What is the main purpose of implementing prevention controls?
  • What do retrospective approaches examine?
  • What type of services do low-interaction honeypots emulate?
  • What is the primary benefit of Platform as a Service (PaaS) for subscribers?
  • What is one of the main goals of implementing server virtualization?
  • What technique is used in storage device virtualization to enhance data reliability?
  • What does an Issue Specific Security Policy (ISSP) aim to secure?
  • What is the focus of physical security?
  • What type of storage does NAND Flash Memory provide?
  • What are hot and cold aisles used for in server environments?
  • What is the primary focus of an Intrusion Detection System (IDS)?
  • What type of information does a real-time-based IDS collect?
  • What is the purpose of a remote wipe?
  • What does the term "zero-day" refer to in cybersecurity?
  • Which protocol is designed to provide authentication, authorization, and accounting for remote-access servers?
  • What is a common use of a Proxy Server in network security?
  • What type of service does Network Attached Storage (NAS) provide?
  • What is the ultimate goal of Network Defense?
  • Which of the following best describes Kubernetes?
  • Which technology is commonly used for short-range data exchange between devices?
  • What is the main characteristic of a single-homed Bastion Host?
  • What does CCMP stand for in network security?
  • What role does a digital signature play in non-repudiation?
  • What does signature recognition in security contexts aim to detect?
  • What is included in an organization's regulatory framework?
  • What is necessary for anomaly-based monitoring to be effective?
  • What role do network security protocols play in data communication?
  • What type of devices would not commonly be considered part of the IoT device layer?
  • What best describes open system authentication?
  • What is the role of an Enterprise Information Security Policy (EISP)?
  • Which encryption standard does WPA3 primarily use?
  • Which of the following best describes a Hybrid Cloud?
  • What are malware honeypots primarily designed to do?
  • What component allows Internet-enabled devices to access a wireless network?
  • File system virtualization primarily deals with which aspect of data handling?
  • What are preventive controls used for in network security?
  • What does onsite data backup involve?
  • Which solution ensures secure management of enterprise applications on mobile devices?
  • What is the primary function of a Network Interface Card (NIC)?
  • What is one of the main goals of using a response system?
  • What is the main purpose of the Protected Extensible Authentication Protocol (PEAP)?
  • What type of network architecture does hub-and-spoke represent?
  • What type of cloud model retains full control over corporate data?
  • For a company with a mobile workforce needing to access LAN resources remotely, which tunneling/VPN solution is most appropriate?
  • In the context of network defense, what does the term 'disposable machine' refer to?
  • At which layer of the OSI model do packet filtering firewalls operate?
  • What is the fundamental purpose of cryptography?
  • What is the primary function of OS virtualization?
  • What is the definition of Access Control?
  • What does interval-based IDS refer to?
  • What is the purpose of file-level encryption?
  • What is the key characteristic of Asymmetric Encryption?
  • What does S/MIME primarily facilitate in digital communication?
  • What is the primary use of Integrated Drive Electronics (IDE)?
  • What is a firewall generally used for?
  • What does a VPN primarily provide to its users?
  • ISO/IEC TR 27008 is associated with what type of auditing?
  • A Cloud Auditor is responsible for what task?
  • What technology does MIMO-OFDM provide an interface for?
  • What defines a hardware firewall?
  • What is the focus of real-time monitoring in IoT networks?
  • What is a Private Cloud Infrastructure primarily used for?
  • What does Mobile Application Management (MAM) primarily enable?
  • Which policy imposes strict restrictions on all company computers regarding network and system usage?
  • What does the Cloud-to-Cloud communication model primarily allow?
  • In wireless networking, what advantage does using a unique SSID provide?
  • What purpose does an extranet serve?
  • What is the main advantage of a dual firewall DMZ?
  • What is the Rivest-Shamir-Adleman (RSA) system used for?
  • How does centralized authorization determine access for users?
  • Why might a company choose to use Identity as a Service (IDaaS)?
  • What does a management console allow users to do within the virtualization environment?
  • What is the main aim of the Freedom of Information Act 2000?
  • What does nvSRAM do when power is interrupted?
  • What is the main goal of the Sarbanes-Oxley Act?
  • Which of the following defines prevention controls in network security?
  • What are Cross-Container Attacks targeted at?
  • Which characteristic best defines the use of a dipole antenna?
  • Which of the following is a feature of Multi-Layer Security?
  • What aspect of the lighting system is crucial for security patrols?
  • What does logical segmentation utilize to isolate networks?
  • What key concept does the USA PATRIOT Act enhance?
  • What does the Internet of Things (IoT) encompass?
  • What type of security feature is often included in a Smart Card?
  • What is a characteristic of a Multi Cloud strategy?
  • What does the Sarbanes-Oxley Act (SOX) aim to improve?
  • What does User Behavior Analytics (UBA) primarily focus on?
  • What does the Freedom of Information Act (FOIA) allow the public to do?
  • What type of signals do Network Interface Cards (NICs) seek to communicate with?
  • Which service model provides virtual machines and hardware through a service API?
  • Which principle is exploited in social engineering attacks based on authority?
  • Which feature is unique to WPA3 compared to its predecessors?
  • What is the purpose of ISO/IEC 27010?
  • What do Spider Honeypots specifically target?
  • What does Platform-as-a-Service (PaaS) primarily offer to its subscribers?
  • What is an IPsec server primarily used for?
  • What is an object in the context of access control?
  • What is a key characteristic of RAID Level 0?
  • What primary benefit does server virtualization provide to organizations?
  • Which authorization type provides access to resources indirectly?
  • What does Advanced and Adaptive Network Technology (ANT) facilitate?
  • Which type of cloud is designed for general public use and offers massive applications?
  • What benefit does a reverse proxy provide in terms of client awareness?
  • What type of network does ZigBee mainly operate on?
  • What is the purpose of the General Data Protection Regulation (GDPR)?
  • RAID Level 10 combines which two RAID levels?
  • How does high-interaction honeypots differ from low-interaction honeypots?
  • What does the Electronic Communications Privacy Act primarily address?
  • Which hashing algorithm family includes SHA-256 and SHA-512?
  • Which process is responsible for authorizing users based on their credentials?
  • Which type of Internet access policy does not impose any restrictions on the usage of system resources?
  • What is the role of a Network Intrusion Detection System (NIDS)?
  • What key aspect defines shared key authentication in wireless networks?
  • What type of communication services does a satellite communication system typically provide?
  • Which ISO/IEC standard deals with storage security?
  • What are technical security controls primarily used for?
  • What element is NOT a variable in the RC5 algorithm?
  • Which aspect of communication is facilitated by a gateway in a device-to-gateway model?
  • What is the primary function of TACACS+, according to its design?
  • Which policy defines a set of rules for storing and maintaining data for operational and regulatory purposes?
  • What does Mobile Device Management (MDM) primarily focus on?
  • What does combining multiple hard drives into a single unit with RAID primarily offer?
  • What is an intranet?
  • Which standard focuses on incident investigation?
  • Who or what is frequently considered the weakest link in a security chain?
  • What describes the functionality of both DSSS and FHSS?
  • What is the primary function of a primary RAID memory cache?
  • What does Software as a Service (SaaS) offer to its subscribers?
  • Which security measure facilitates user accountability and tracking through verified access?
  • What is the primary function of a management console in virtualization?
  • What is Orthogonal Frequency Division Multiplexing (OFDM) primarily used for?
  • Which technology affects the spectral efficiency in modern wireless communication services?
  • ISO/IEC 27039 is essential for developing which aspect of an organization's security framework?
  • Which standard emphasizes the continuous improvement of an information security management system?
  • What does a Stateful Multilayer Inspection Firewall do?
  • What does Data Resilience and Backup involve?
  • For what purpose is Bluetooth technology primarily used?
  • What are normal traffic signatures part of?
  • What do Application Containers encapsulate?
  • What does protocol anomaly detection focus on?
  • What does a Site-to-Site VPN enable for an organization?
  • Which protocol helps to secure web transactions by adding a layer of encryption?
  • What does Function as a Service (FaaS) primarily help avoid?
  • What type of cipher is RC4?
  • What is the main purpose of the SHA-1 hashing algorithm?
  • What is the best mitigation technique to contain the spread of a worm throughout the network?
  • In a cloud system, what does the term shared responsibility refer to?
  • What is the Internet access policy that enables only safe services and disallows nonessential services that cannot be made safe?
  • What role does an Access Point (AP) play in network topology?
  • What characterizes a point-to-point (P2P) connection?
  • What does implicit authorization allow a user to do?
  • What does ISO/IEC 27003 provide guidelines for?
  • What is the function of network sensors?
  • Identity as a Service (IDaaS) is used for what primary function?
  • What is the primary function of Data Access Control?
  • What type of firewall is considered software-based and filters traffic for an individual computer?
  • What distinguishes the characteristics of true positives from false alarms in IDS?
  • What is the purpose of Spam Honeypots?
  • What is the purpose of Multi-Layer Security?
  • What function does a lighting system serve in the context of security?
  • What significant advantage does Docker provide in application development?
  • What defines a False Positive in security monitoring?
  • What aspect of security do PCI-DSS requirements seek to enhance primarily?
  • Network traffic monitoring is characterized by what approach?
  • What is the primary function of backup systems in recovery controls?
  • What is the core basis of Cellular Communication technology?
  • Which of the following is a common term for unauthorized access to organizational resources?
  • Which of the following describes a turnstile?
  • What does the Gramm-Leach-Bliley Act (GLBA) require financial institutions to do?
  • What does the Choose Your Own Device (CYOD) policy allow employees to do?
  • What sets a Next Generation Firewall (NGFW) apart from traditional firewalls?
  • What technology uses electromagnetic waves for automatic identification and tracking of objects?
  • Which of the following is an example of a deterrent control?
  • Which method does retinal scanning use to identify a person?
  • What does PCI DSS stand for?
  • What are ciphers primarily used for?
  • What is the primary purpose of Containers as a Service (CaaS)?
  • What is a dipole antenna characterized by?
  • In a hub-and-spoke VPN topology, who is considered the hub?
  • What does Wireless Fidelity (Wi-Fi) utilize to enable data exchange between devices?
  • What is physical segmentation in networking?
  • How do research honeypots contribute to security?
  • What is commonly referred to as a hotspot?
  • What is the primary focus of ISO/IEC 27002?
  • What does PCI DSS primarily focus on?
  • Which of the following best defines an endpoint in a network?
  • What is a key feature of Small Computer System Interface (SCSI)?
  • Which protocol is used to encrypt web communications over HTTP?
  • What is the purpose of a Storage Area Network (SAN)?
  • What is the main function of the Global Positioning System (GPS)?
  • In a discretionary access control (DAC) model, who is primarily responsible for determining access control?
  • What is network virtualization (NV) designed to achieve?
  • What does Mobile Security Management primarily focus on?
  • What type of device acts as an interface between a local area network and the internet, using one IP address?
  • What does the MIMO in MIMO-OFDM stand for?
  • Which type of malware is designed to replicate itself and spread to other systems?
  • What is the role of user rights in system access controls?
  • What is a digital signature primarily used for?
  • What type of data does Network DLP monitor?
  • What distinguishes the RC6 algorithm?
  • What type of authentication mechanism uses a smart card to provide identity verification?
  • What is a primary advantage of using a Hybrid Cloud?
  • What is Frequency-Hopping Spread Spectrum (FHSS) primarily used for?
  • What does ISO/IEC 27039 primarily focus on?
  • What do authentication and authorization ensure in a security environment?
  • What does a SOCKS proxy not provide compared to a caching HTTP proxy server?
  • What does PCI-DSS requirement 5.1 mandate regarding anti-virus software?
  • Which system actively takes preventative actions against unacceptable activities?
  • Which of the following best describes a VPN?
  • What does the 802.11 standard primarily relate to?
  • What is the purpose of IoT device management?
  • Which type of DLP solution primarily focuses on data at rest?
  • Which of the following best describes the operation of pure honeypots?
  • What does the Extensible Authentication Protocol (EAP) facilitate?
  • What is a key characteristic of an intrusion detection system?
  • What does PCI-DSS requirement 1.2.1 focus on regarding traffic?
  • Why is it important for Anomaly-Based Detection to have a baseline in place?
  • How does cloud computing provide IT infrastructure to subscribers?
  • Which method helps in ensuring data integrity and availability in storage virtualization?
  • Multi Cloud environments typically involve:
  • What kind of communication pattern does MQTT utilize?
  • In terms of decision-making, what does the process layer of IoT typically involve?
  • What do system access controls manage?
  • What is the result of a cyber attack that floods a server with requests?
  • What is the primary purpose of Single Sign-on (SSO) Authentication?
  • What does the Basic Service Set Identifier (BSSID) refer to in a wireless network?
  • What technology does the DMZ typically employ to enhance security?
  • A Community Cloud is best defined as:
  • Network access controls are associated with which of the following?
  • What does Security-as-a-Service (SECaaS) aim to integrate into corporate infrastructure?
  • What does the Data Protection Act 2018 (DPA) regulate?
  • How far does Near-field Communication (NFC) typically allow communication between devices?
  • What does the principle of integrity ensure in information assurance?
  • What protocol types are predominantly used in device-to-device communication?
  • What does TACACS+ provide for network communication?
  • What is the main goal of network segmentation?
  • What defines a guest machine in virtualization?
  • ISO/IEC TR 27008 focuses primarily on which kind of auditing?
  • Which type of authorization is characterized by a core policy that manages user access?
  • Which law provides protections for individually identifiable health information?
  • Which IEEE standard is Wi-Fi part of?
  • What does User Identity Management (IDM) focus on?
  • What does Pretty Good Privacy (PGP) primarily provide for network communication?
  • What is a key characteristic of an omnidirectional antenna?
  • What is a key characteristic of a non-transparent proxy?
  • In cloud computing, what does Infrastructure as a Service (IaaS) provide to subscribers?
  • ISO/IEC 27799 is specifically related to which field?
  • What is the primary function of honeynets?
  • What does Security as a Service (SECaaS) require for implementation?
  • Which firewall operates at the network level and forms a perimeter for internal LAN?
  • What is the function of a Multiport Memory Controller (MPMC)?
  • What is the purpose of a sandbox in network defense?
  • What is the function of Identity Management in an organizational network?
  • What overarching theme do ISO/IEC 27039, 27040, 27041, 27042, and 27043 share?
  • ISO/IEC 27041 ensures integrity during which process?
  • ISO/IEC 27017 provides guidance on which type of security?
  • Which of the following best describes Mobile Content Management (MCM)?
  • How is bandwidth defined in a network context?
  • What is the purpose of electromagnetic interference (EMI) shielding?
  • What does a Cloud Carrier do in a cloud computing environment?
  • What best describes a victim machine?
  • What type of approach is the primary focus of reactive techniques?
  • Access controls that include biometric systems are categorized as what type of controls?
  • What does a System Specific Security Policy (SSSP) provide guidance on?
  • What does an Intrusion Detection System (IDS) do?
  • Which characteristic defines a packet filtering firewall?
  • What is the purpose of a Redundant Array of Independent Disks (RAID)?
  • What type of control would likely use an alarm system?
  • Which action is defined under the Computer Fraud and Abuse Act?
  • What is the role of a RAID Controller?
  • What does the abbreviation IA stand for in cybersecurity?
  • What is the primary function of IoT User Management?
  • Which type of cable is less susceptible to external interference due to shielding?
  • What does Lightweight Extensible Authentication Program (LEAP) pertain to?
  • According to PCI-DSS requirement 1.3.5, what type of traffic should be prevented from the cardholder data environment?
  • What is meant by the term 'host machine'?
  • What is the role of the Extensible Authentication Protocol (EAP)?
  • What is one key topic covered by ISO/IEC 27006?
  • What economic aspect does ISO/IEC TR 27016 focus on?
  • What type of network issue does unauthorized access typically relate to?
  • What is a key characteristic of cloud computing regarding IT capabilities?
  • What distinguishes RAID Level 50 from other levels?
  • In the context of symmetric encryption, what must the key provide?
  • Which networking standard is designed for long-distance wireless networking and high-speed Internet?
  • What does full device encryption accomplish?
  • What type of data does removable media encryption protect?
  • What is the definition of a container in virtualization?
  • What is the significance of a Cloud Auditor in cloud computing?
  • Which concept ensures that parties cannot deny sending messages in a communication?
  • Which aspect of security is addressed by ISO/IEC 27040?
  • What is a key characteristic of a full mesh VPN topology?
  • What role does a wireless gateway play within a wireless network?
  • What is the function of geofencing in mobile marketing?
  • What does Electromagnetic Interference (EMI) disrupt?
  • What is the benefit of offsite data backup?
  • What is a key feature of a parabolic grid antenna?
  • What does the Service Set Identifier (SSID) signify in a wireless local area network?
  • What is the function of Simple Network Management Protocol (SNMP) polling?
  • Detection controls are primarily designed to:
  • What type of proxy is designed to be invisible to the end user, allowing connection to a server without their knowledge?
  • What is the primary function of Client-to-Site (Remote Access) VPNs?
  • Which type of connection allows multiple endpoints to connect from a single location?
  • What benefit does a guest machine provide in a virtualization environment?
  • How does a hot backup operate while the system is in use?
  • Which of the following best describes Application Containers?
  • What is the primary function of Role-based Access Control (RBAC)?
  • What type of access does Network Access Server (NAS) facilitate?
  • What is the purpose of a Service Set Identifier (SSID) in a WLAN?
  • What does the term "adhoc" refer to in device communications?
  • Coaxial cables are primarily used for which of the following?
  • What is the main purpose of ISO/IEC 27043?
  • What defines a Multi Cloud environment?
  • What is the primary feature of the Corporate Owned, Personally Enabled (COPE) policy?
  • What is the purpose of Dtex Systems in user behavior analysis?
  • What is the primary function of the Secure Hashing Algorithm (SHA)?
  • What is the purpose of network virtualization?
  • What does Mobile Email Management (MEM) specifically address?
  • What indicates a true positive in an IDS?
  • What does the device layer of IoT comprise?
  • Which of the following best describes server-less architecture?
  • What does a denial of service (DoS) attack primarily do?
  • ISO/IEC 27042 is primarily concerned with which topic?
  • What defines a private cloud?
  • What is typically included in Business Critical Data?
  • What does a registry contain for an organization?
  • What is the primary function of a VPN concentrator?
  • What is a characteristic of internal bastion hosts in terms of network communication?
  • What is the maximum effective range for infrared (IR) data transmission?
  • Global Systems for Mobile Communications (GSM) is primarily used for what purpose?
  • What does Data Loss Prevention (DLP) software primarily do?
  • What does Secure Sockets Layer (SSL) protocol primarily provide?
  • What is the primary focus of ISO/IEC 27006?
  • What is the main aim of the USA PATRIOT Act?
  • Which of the following is NOT a function of Network Defense?
  • ISO/IEC 27014 focuses on which aspect of information security?
  • What benefit does SCSI provide compared to other connection standards?
  • What is the main purpose of an Access Point (AP) in networking?
  • What is a significant feature of Shielded Twisted Pair (STP) cables?
  • What is SATA primarily used for?
  • Which of the following is a characteristic of a Public Cloud?
  • What does Identity-as-a-Service (IdaaS) provide?
  • What is a full data backup primarily used for?
  • ISO/IEC 27011 is particularly focused on which sector?
  • What does hybrid virtualization primarily involve?
  • What is the primary purpose of data retention?
  • Which of the following best describes the aim of a security policy in an organization?
  • Which of the following best describes the process of using ciphers?
  • Which type of controls are in place to discourage violations of security policies?
  • Which protocol is known for stronger encryption and authentication in WPA2?
  • Which technology is typically used for preventing data leakage on portable devices?
  • What type of frequencies does the ISM band serve?
  • What is a main feature of Smart Card Authentication?
  • Which component is essential for ensuring the integrity of data in transit?
  • What benefits does the Point-to-Point Protocol (PPP) provide in network communication?
  • What do both Spam and Spider Honeypots have in common?
  • What type of attacks does an IDS typically monitor?
  • What does the Company Owned Business Only (COBO) policy ensure?
  • What does Mandatory Access Control (MAC) primarily restrict?
  • What aspect does MIMO-OFDM enhance in wireless communications?
  • What does the Digital Millennium Copyright Act (DMCA) primarily address?
  • What does "web-enabled devices" refer to in IoT?
  • Which statement best describes the function of the Electronic Communications Privacy Act?
  • What is a False Negative in the context of Intrusion Detection Systems (IDS)?
  • What is one feature of a Distributed Intrusion Detection System (DIDS)?
  • Which RAID level requires the least number of drives for implementation?
  • What does Government Access to Keys (GAK) refer to?
  • According to PCI-DSS requirements, what must documentation include regarding services and protocols?
  • Which OSI layer cannot be protected by traditional firewalls?
  • Which element is crucial in an ideal Data Backup Strategy?
  • What do Identity and Access Management (IAM) policies ensure?
  • Which approach focuses on anticipating and preventing future network attacks?
  • What is the role of a Registration Authority (RA) in Public Key Infrastructure (PKI)?
  • What does the term "disk mirroring" refer to in the context of RAID?
  • Which cable type is known for being easy to tap?
  • What is the relationship between HIDS and its host?
  • What is the main function of a centralized intrusion detection system (IDS)?
  • What characterizes pure honeypots?
  • What does HTTPS stand for in web communications?
  • What type of information does ISO/IEC 27004 focus on?
  • Which standard is specifically related to management system auditing?
  • Which of the following is NOT a feature of email honeypots?
  • What is the purpose of a Proxy Server?
  • Which principle does the Zero Trust Security Model emphasize?
  • What is the primary function of a mantrap system in physical security?
  • What is the primary purpose of Information Assurance (IA) principles?
  • What do unauthorized access traffic signatures indicate?
  • What is defined as a unit of data transmitted over a network?
  • Which type of proxy requires explicit configuration in client software?
  • For what environment is the MQTT protocol primarily designed?
  • What is a key feature of the RC5 algorithm?
  • What is essential for executing a use case in IoT?
  • What characterizes a true negative in intrusion detection systems?
  • In the context of SECaaS, what does "cost-effective way" imply?
  • What does server virtualization involve?
  • What is the role of the communication layer in IoT contexts?
  • What does ISO/IEC 27042 help professionals to effectively do?
  • How does Frequency Hopping Spread Spectrum (FHSS) transmit radio signals?
  • What is the main advantage of using public key infrastructure in communications?
  • What do reconnaissance traffic signatures indicate?
  • What does the Payment Card Industry Data Security Standard (PCI-DSS) regulate?
  • Which of the following best defines a low-interaction honeypot?
  • In the device-to-gateway communication model, what does the gateway do?
  • RAID is primarily associated with which concept in network defense?
  • In what scenario would a transparent proxy most likely be used?
  • What is one advantage of using technical security controls?
  • Which RAID level is known for disk striping without fault tolerance?
  • What security feature is described by the Principle of Least Privilege (POLP)?
  • What is the function of an Intrusion Detection and Prevention System (IDS/IPS)?
  • What is the output of the MD5 algorithm?
  • Which standard addresses the protection of information in inter-organizational communication?
  • Which of the following defines the low-level mandatory controls that enforce security policies?
  • What is the primary purpose of Kerberos in computer networks?
  • How does Network Address Translation (NAT) function?
  • Which standard is designed specifically for ISMS and ITIL/service management?
  • Which technology allows marketers to target users based on location?
  • What is a primary function of an application level gateway?
  • What is the purpose of the Health Insurance Portability and Accountability Act (HIPAA)?
  • Which service integrates security services into corporate infrastructure?
  • Which technology allows for the hot swapping of hard drives?
  • What is required by PCI-DSS requirement 5.3 about anti-virus mechanisms?
  • In which scenario is the application of ISO/IEC 27043 most critical?
  • What should be included in network configuration documentation to comply with PCI-DSS?
  • What characterizes informational traffic signatures?
  • What are production honeypots primarily used for?
  • Which organization developed Kubernetes?
  • Which of the following components of a wireless network is used to connect systems to a wireless network and access the Internet directly with the help of an ISP?
  • What defines a Bastion Host?
  • What do proactive approaches in network defense aim to achieve?
  • What is the main benefit of fabric virtualization?
  • Which policy only blocks known dangerous services or behaviors while allowing everything else?
  • Which RAID level provides block interleaved distributed parity?
  • What act allows for the disclosure of information held by public authorities?
  • Which layer of the IoT architecture is responsible for gathering information and processing received data?
  • What is considered the only 100% effective physical control?
  • What defines the characteristics of traffic that may be indicative of malicious activity?
  • What distinguishes logical segmentation from physical segmentation?
  • Which of the following describes the Point-to-Point Protocol (PPP)?
  • Which statement characterizes an extranet?
  • What is Data Masking used for?
  • Which technology is primarily used for developing, packaging, and running applications in containers?
  • What does Orthogonal Frequency-Division Multiplexing (OFDM) achieve?
  • Which of the following is NOT a component of a hybrid VPN?
  • What is the purpose of Biometric Authentication?
  • What does Enterprise Mobility Management (EMM) aim to secure?
  • SHA-2 uses blocks of which sizes?
  • Which of the following describes compensating controls?
  • What is the primary function of digital certificates?
  • What is the primary function of an antenna?
  • What is the primary purpose of an AAA Server?
  • What structure does MD6 utilize to handle long input messages?
  • What operates at the session layer of the OSI model?
  • In symmetric encryption, what is required by both sender and receiver?
  • What does the term "modulation" refer to in context of OFDM?
  • What role does an Application Proxy serve in a network?
  • What is the primary function of a reverse proxy?
  • What is a potential risk when configuring a non-routing dual-homed host?
  • Which device is primarily used to protect computer networks from unwanted traffic?
  • What is a Network Access Server (NAS) commonly known as?
  • What is another term for a hot backup in data systems?
  • Which best describes real-time-based IDS?
  • What is the role of a firewall in relation to public and private networks?
  • What does the term 'cloud computing' fundamentally imply about IT capabilities?
  • How does ISO/IEC 27006 contribute to information security practices?
  • What is a major challenge of full mesh VPN topologies?
  • Retrospective approaches are used to achieve what outcome?
  • What term is used to refer to a user or process that requests access to a resource?
  • What does availability mean in the context of information security?
  • Which of the following represents a benefit of full data backup?
  • What does Host Intrusion Detection Systems (HIDS) primarily monitor?
  • What is the purpose of a dual firewall DMZ?
  • What type of application identifies security issues on a network and suggests prevention methods?
  • What do Network Drivers provide?
  • What is the purpose of Network Access Controls?
  • Which of the following standards is directed towards health-related information security?
  • In OS assisted virtualization, how is the guest OS configured?
  • What is the purpose of the Federal Information Security Management Act (FISMA)?
  • What type of information does the remote wipe technique primarily focus on?
  • In a point-to-point VPN topology, what characterizes the relationship between the two endpoints?
  • What is the purpose of the Data Encryption Standard (DES)?
  • What is a common purpose of using a firewall in network security?
  • How does SHA-3 process message blocks?
  • What technique does Direct Sequence Spread Spectrum (DSSS) use to protect signals?
  • What does a Circuit-Level Gateway primarily monitor?
  • What is the primary function of Anomaly-Based Detection?
  • Which term refers to an infrastructure operated by a single organization?
  • How do wireless repeaters function in a network?
  • What is characteristic of RAID Level 3?
  • Which of the following suspicious traffic signatures exposes malicious attempts such as ping sweep and port scan?
  • What do system access controls limit based on user rights?
  • Which description applies to software firewalls?
  • What do passwords and PINs primarily serve as?
  • What tool can be used to protect complex industrial environments against known and unknown attacks across the Purdue model?
  • What is the primary function of Endpoint DLP?
  • What is the primary function of servers hosted in the cloud regarding sensor data from IoT gateways?
  • What does ISO/IEC 27001 specify?
  • What characteristic defines a circuit-level gateway?
  • What is the key difference between a SOCKS proxy and a standard proxy server?
  • What does Internet Protocol Security (IPsec) primarily ensure during data transmission?
  • Which method describes an incremental data backup?
  • What function does UBA serve in the realm of security?
  • What does a directional antenna do?
  • Which technology allows devices to connect wirelessly over short distances?
  • What does a response system do when an intrusion is detected?
  • What does Public Key Infrastructure (PKI) aim to improve?
  • What is the primary feature of Anything as a Service (XaaS)?
  • What is the main characteristic of medium-interaction honeypots?
  • What is the purpose of auditing in a network?
  • What is the primary function of an IoT Gateway?
  • Which of the following is NOT a use of full device encryption?
  • What are network security controls primarily responsible for?
  • What role does a management server play in virtualization platforms?
  • What does HMAC stand for?
  • What significant characteristic distinguishes SHA from previous hashing algorithms?
  • What is one key feature of Transport Layer Security (TLS)?
  • Which cloud service model allows for the creation of containerized applications?
  • How do electric/electromagnetic locks operate?
  • What does the Reference Monitor do in network security?
  • How does an anonymous proxy enhance user privacy?
  • What does geolocation technology do?
  • Which component is crucial for simplifying administration of virtual machines?
  • What is the role of a hypervisor in a computing environment?
  • What does real-time analytics primarily analyze?
  • In which environment is the hot and cold aisle arrangement primarily used?
  • Which type of communication utilizes protocols like ZigBee or Z-Wave?
  • What is a primary function of the Universal Serial Bus (USB)?
  • What is the primary function of AWS Identity and Access Management (IAM)?
  • What type of security does WPA3 provide for users?
  • In Rule-Based Access Control (RB-RBAC), access permissions are based on what?
  • What underlies Docker Networking architecture?
  • What does WEP stand for in wireless network security?
  • Which of the following describes a potential purpose of an IoT Gateway?
  • What is the purpose of deterrent controls?
  • What is the primary purpose of email honeypots?
  • What is the purpose of preventative controls?
  • What allows OS containers to provide isolation from each other?
  • What is a major drawback of Unshielded Twisted Pair (UTP) cable?
  • What is a critical function of hardware and software network components?
  • Which of the following best describes the Infrastructure Network Topology?
  • What is a non-routing dual-homed host?
  • Which RAID level features requires at least four drives?
  • What defines high-interaction honeypots?
  • What is the purpose of the separation of duties (SoD) in security processes?
  • What is the main purpose of a physical security policy?
  • What does removable media encryption prevent?
  • What component is described as the main physical device in the IoT ecosystem?
  • What is the primary characteristic of explicit authorization in resource requests?
  • What is the main purpose of Mobile Device Management (MDM)?
  • What is the purpose of anomaly detection in network security?
  • Which of the following best describes authentication in network security?
  • What functionality does Security Incident and Event Management (SIEM) provide?
  • What does encryption primarily aim to achieve?
  • In the context of network security, what does the term 'baseline' refer to?
  • What unique construction does SHA-3 use to process message blocks?
  • Which firewall technology can inspect traffic based on packet content?
  • What is the primary function of RFID technology?
  • What characterizes a multi-homed bastion host?
  • What does the term 'pre-approved set of devices' in CYOD refer to?
  • What aspect of information security does ISO/IEC 27005 address?
  • Which of the following describes the purpose of standards within an organization's security framework?
  • What is the purpose of a wireless bridge?
  • What is the purpose of implementing a formal process for approving network connections according to PCI-DSS?
  • What does the auditing process in network management help identify?
  • What is a common result of an organization failing to comply with regulatory frameworks?
  • What is the primary function of reflector antennas?
  • What purpose do malware honeypots serve in network security?
  • What role do proxy servers typically play in networking?
  • What is the main focus of ISO/IEC 27041?
  • What is the purpose of Accounting in network management?
  • What method does the 802.11 standard use for frequency hopping?
  • Which protocol is known for replacing WEP in WPA?
  • What does the Advanced Encryption Standard (AES) serve as for electronic data?
  • Which ISO/IEC standard addresses issues relevant to financial services?
  • What is the main purpose of non-repudiation in digital communications?
  • What does BYOD stand for in a business context?
  • What is the unique feature of fiber-optic cable?
  • What is the function of a wireless router?
  • What is a Yagi antenna primarily used for?
  • RC4 is primarily known for which of the following features?
  • What characteristic defines decentralized authorization systems?
  • How does WPA2 improve upon the original WPA?
  • When does a circuit-level gateway operate during a session?
  • Which protocol provides confidentiality and reliability during client-server communication?
  • Which document provides a code of practice for information security controls?
  • What is the primary function of a proxy server?
  • Which band is designated for use by the industrial, scientific, and medical communities?
Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy