Question Results

Score 1 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Preventative
Correcting violations and incidents	Recovery	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Deterrent
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 0 of 1

Question:

Which access control protects the entire system?

Response:

	Firewalls/IPS
	Operating System Controls/Policies
	System Access Controls
	Access Control Lists
	Data Access Controls

Score 1 of 1

Question:

Which access control includes job rotation?

Response:

	Technical
	Physical
	Administrative
	Organizational

Score 1 of 1

Question:

Match the following terms and definitions

Response:

Match	User answer	Feedback
Intended to discourage a potential attacker	Deterrent
Intended to avoid an incident from happening	Preventive
Fixes component or systems after an incident has occurred	Corrective
Intended to bring the environment back to production levels	Recovery
Identify an incidents activities	Detective
Alternate measures of control	Compensating

Score 0 of 1

Question:

In MAC the access policy is set by:

Response:

	the GPO
	the role
	network ACL
	the owner
	the system

Score 1 of 1

Question:

Which of the following is NOT an example of biometric identification?

Response:

	Voice
	Hand shape/pattern
	Ear shape/pattern
	Retinal imagery

Score 1 of 1

Question:

A LAN is

Response:

	a Local Account Name
	a Linear Applebaum Network diagram
	a Least Access Notification
	a Local Area Network
	a Local Authentication Node

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Badge Scanning
	Finger scanning
	Hand scanning
	Iris Scanning

Score 1 of 1

Question:

Match the following examples to their definitions

Response:

Match	User answer	Feedback
Unpatched servers	Vulnerability
A virus that relies on unpatched code or OS levels	Threat
The likelihood a threat will be realized, the frequency of natural disasters	Risk
$1M dollars per day downtime	Exposure
A proxy server	Countermeasure

Score 1 of 1

Question:

Which classification of fuel type is grease given?

Response:

	D
	A
	B
	C

Score 1 of 1

Question:

John's computer access changed with his reassignment to a new department. This is an example of:

Response:

	Mandatory access control
	Role-based access control
	Owner set access control
	Access List Control
	Need-to-Know control

Score 1 of 1

Question:

Which of the following is immediately above the Transport Layer in the OSI model:

Response:

	Presentation
	Datalink
	Network
	Session

Score 1 of 1

Question:

Clark-Wilson focuses primarily on:

Response:

	Confidentialty
	Address Integrity
	Accessibility
	Availability
	Authentication

Score 1 of 1

Question:

Which classification of fuel type is a computer given?

Response:

	D
	B
	A
	C

Score 0 of 1

Question:

Falsely rejecting an authorized user is:

Response:

	FAR or Type II error
	CER or Type III error
	FRR or Type I error
	FRA or Type IV error