Question Results

Score 1 of 1

Question:

Which OSI layer includes the LLC and MAC sub-layers?

Response:

	Data Link
	Transport
	Session
	Network
	Physical

Score 1 of 1

Question:

What OSI Layer includes data encryption?

Response:

	Presentation
	Application
	Network
	Transport
	Datalink

Score 0 of 1

Question:

Which access control includes intrusion detection?

Response:

	Technical
	Owner
	Administrative
	Physical
	Techincal
	Organizational

Score 1 of 1

Question:

Match the following examples to their definitions

Response:

Match	User answer	Feedback
Unpatched servers	Vulnerability
A virus that relies on unpatched code or OS levels	Threat
The likelihood a threat will be realized, the frequency of natural disasters	Exposure
$1M dollars per day downtime	Exposure
A proxy server	Countermeasure

Score 1 of 1

Question:

Which classification of fuel type is gasoline given?

Response:

	A
	B
	D
	C

Score 1 of 1

Question:

Bell-La Padula focuses primarily on:

Response:

	Confidentialty
	Authentication
	Availability
	Accessibility
	Data Integrity

Score 1 of 1

Question:

How many levels are there in the latest (June 2013) OSI model?

Response:

	5
	6
	10
	7
	8

Score 0 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Deterrent
Correcting violations and incidents	Recovery	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Preventative
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 1 of 1

Question:

In MAC the access policy is set by:

Response:

	network ACL
	the system
	the role
	the GPO
	the owner

Score 1 of 1

Question:

Which of the following is primarily focused on identifying violations and incidents?

Response:

	Preventative
	Corrective
	Detective
	Recovery
	Compensating

Score 1 of 1

Question:

Owner-set permissions are an example of:

Response:

	mandatory access control
	Discretionary access control
	role-based access control
	Clark-Wilson

Score 1 of 1

Question:

Which of the following is primarily focused on identifying alternate solutions to achieve a task?

Response:

	Preventative
	Corrective
	Detective
	Compensating
	Recovery

Score 1 of 1

Question:

Which access control includes asset classification?

Response:

	Administrative
	Owner
	Technical
	Physical
	Organizational

Score 1 of 1

Question:

Which of the following are the three components of the fire triangle?

Response:

	Fire/Fuel/Oxygen
	Heat/Combustion/Oxygen
	Heat/Fuel/Oxygen
	Fire/Combustion/Oxygen

Score 1 of 1

Question:

Match the following key terms

Response:

Match	User answer	Feedback
Availability	Reliable and timely access to data and resources
Confidentiality	Necessary level of secrecy, unauthorized disclosure is prevented
Shoulder surfing	Unauthorized viewing of information (screen peeking)
Social Engineering	Tricking someone into giving sensitive information (to gain unauthorized access)