EC-Council Network Defense Essentials (NDE) Practice Test

These questions are part of the practice quiz. Start practicing

• Which menu controls display options like colorization, font zoom, and windowing of a packet?
• The statistics menu option that provides quick access to items is described as which of the following?
• Which service allows configuring policies to control applications and devices across the organization, focusing on mobile device management and mobile application management?
• Which layer is associated with ZigBee, Z-Wave, or Bluetooth for inter-device communications?
• Which algorithm uses a sponge construction and is designed to complement the SHA-2 family?
• High-level Security Requirements primarily focus on which areas?
• This CNM concept contains the configuration of a container's network stack such as routing table, management of container's interfaces, and DNS settings. CNM sandbox can be implemented for Windows HNS, Linux network namespace, or a FreeBSD jail
• ISO/IEC 27011 is a Technical Report intended to help which sector interpret ISO/IEC 27002:2005 to secure electronic process control systems?
• MD5 outputs a 128-bit digest.
• Which software is a free, self-contained wireless-auditing toolkit?
• Which SIEM function stores logged data in a central repository for long-term compliance and for forensic analysis?
• What is the primary role of a RAID controller?
• Which term refers to an action performed by a subject on an object, such as deleting a file?
• Which term describes a centralized method of granting access decisions across resources due to the complexity of per-resource authorization?
• Which of the following is an example of recovery controls?
• Which term is described as the resource that monitors the restrictions and enforces rules on the subject's actions?
• Which of the following is an example of deterrent controls?
• Which service is described as a cloud-based service focusing on mobile device management (MDM) and mobile application management (MAM) with policy configuration for applications?
• Which standard is an enhanced version of 802.11a and 802.11b and supports regulatory domains?
• ISO/IEC TR 27015 is the ISMS implementation guide for which industry?
• According to the material, Microsoft Intune is described as a tool used for fingerprinting and exploiting which infrastructure?
• A security-first SaaS technology used to operate IoT products in a reliable, scalable, and secure manner.
• Which capability ensures Kubernetes automatically restarts failed containers and reschedules them on available nodes?
• Which analysis detects attack patterns across multiple packets, such as ICMP floods?
• AES stands for which of the following?
• In remote control via mobile apps, which hardware constitutes the IoT ecosystem endpoints?
• Which cryptographic tool is described as using strong encryption algorithms to hide computer files?
• Which component initiates a secure remote connection to a VPN server?
• Which standard corresponds to WLANs and historically uses FHSS or DSSS as the frequency hopping spectrum?
• Policy Description Based on Requirement is best described as:
• Which statistic window provides an overview of the packets that have been captured?
• What does Extensible Authentication Protocol (EAP) primarily provide?
• Which toolbar is explicitly stated as non-customizable?
• Which honeypot-based tool is a host-based IDS that attracts attackers by simulating vulnerable services?
• Which authentication method is typically used with WPA2-Enterprise?
• Context-based signature analysis analyzes header information such as IP addresses, ports, etc?
• Which component includes PPTP and L2TP together with IPsec for VPN tunneling?
• Which policy is described as an extremely restrictive security posture, sometimes labeled 'Paranoid Policy'?
• Standby Lighting is an extension of which type of lighting system?
• Electromagnetic Interference (EMI) shielding is used to address problems caused by what?
• Which cloud service model delivers software applications to subscribers over the internet on a pay-as-you-go basis?
• Which solution is described as a mobile intrusion prevention app that uses machine learning to identify and prevent network-based and host-based threats on iOS and Android?
• The Proactive Approach uses threat intelligence and risk assessment to inform countering future attacks on the target network. Which term is this?
• Which virtualization term refers to virtualization of data at the file-system level to enable sharing and protection?
• Which antenna is a straight electrical conductor measuring half a wavelength and is commonly described as the doublet?
• Which policy describes starting with all services blocked and enabling safe and necessary services?
• Which controls are used to prevent unauthorized access to resources and may include fences, locks, biometrics, and mantraps?
• Which Docker networking construct connects container interfaces to a parent host interface (or sub-interfaces)?
• THC-Hydra is a network logon cracker that supports many services, including IPv6 and RFC 4013.
• What security consideration is highlighted for the cloud layer in IoT architecture?
• Which menu contains items to access basic help manual pages for command-line tools, online webpages, and the About Wireshark dialog?
• Which firewall component checks the protocol in use to decide whether to allow or deny a packet?
• What happens in Kubernetes when a node dies?
• Promiscuous Policy is described as:
• Zigbee is the specification used in which IEEE standard?
• Which RAID level uses mirroring to provide data availability when a drive fails?
• Which virtualization term refers to data virtualization at the file-system level, enabling sharing and protection within software?
• Which term describes hardware-level virtualization that makes virtual devices independent of the physical hardware?
• What is the recommended authentication approach to ensure trusted communication between edge devices and the cloud?
• In WPA3, which concept used in WPA2-Personal is replaced by Dragonfly Key Exchange?
• In the gateway-mediated model, which component acts as an intermediary between a device and the cloud?
• Which Kubernetes concept is responsible for placing containers on nodes based on the resources and constraints specified by the user?
• Anomaly detection relies on a database of anomalies to identify deviations from normal behavior; which best describes this approach?
• Which layer uses ZigBee, Z-Wave, or Bluetooth for inter-device communication?
• In historical terms, Safety Officers were commonly described as what type of professional?
• It is also called a media gateway or a remote-access server (RAS) and is responsible for setting up and maintaining each tunnel in a remote-access VPN. Users connect to this to use a VPN.
• Which proxy type is described as requiring client software to be configured and is also known as an explicit proxy?
• Which spread spectrum technique multiplies the original data signal with a pseudo-random noise spreading code to protect against interference?
• Who acquires and manages computing infrastructure intended for providing services via network access?
• Which virtualization describes virtualization of storage devices using data striping and mirroring, with RAID listed as an example?
• The Preventive Approach consists of methods or techniques that can prevent threats in a target network, with examples like firewall, NAC, NAP, IPSec, and SSL.
• What is the purpose of implementing a DMZ in a network security design?
• Which menu includes options to manipulate, display and apply filters, enable or disable protocol dissection, configure user-specified decodes, and follow a different stream including TCP, UDP, and SSL.
• Which cable is described as having each pair of wires shielded with foil, reducing external interference?
• A free password security and password recovery tool that supports many operating systems.
• Which DoS tool is described as a network stress testing and DoS attack application commonly used to test the resilience of web services?
• RC6 is best described as which type of cipher?
• Which mode is mainly used to deliver password-based authentication?
• Which type of solution protects organizations from threats on iOS and Android using different security technologies?
• Which of the following best describes WPA3 encryption?
• The Retrospective Approach examines the causes of attacks and includes fault finding mechanisms such as protocol analyzers and traffic monitors, as well as CSIRT and CERT. What is this approach called?
• Which SIEM capability provides static and dynamic monitoring of enterprise systems and networks and analyzes log data to identify suspected activities related to system compromise?
• Which access control model is described as permissions provided by the system and cannot be amended by users, governed by administrator-defined rules?
• Non-transparent proxies provide added services to the user agent such as group annotation services, media-type transformation, protocol reduction, and anonymity filtering. Which service is listed?
• An attacker broadcasts DHCP requests with spoofed MAC addresses with the help of tools such as Yersinia, Hyenae, and Gobbler. Which tool is commonly used to such a DHCP attack?
• What is the term for a straight electrical conductor measuring half a wavelength, fed at the center, and used as a basic balanced antenna?
• Which function is a cryptographic hash function developed by NIST and included in the Secure Hash Standard?
• Which caching proxy for the web supports HTTP, HTTPS, FTP, and more, reducing bandwidth by caching and reusing content?
• Which data label indicates the highest level mentioned in the material that requires a higher clearance and is not accessible to many?
• In VPN terminology, which device terminates VPN tunnels at the network edge?
• Which SIEM capability collects and manages all the object access audit logs at the central repository to track access attempts?
• Which concept describes the data collected, after traveling through the gateway, arriving at the cloud, where it is stored and subjected to data analysis, and then transmitted to the user who takes actions based on the information received?
• Which hash function outputs a 128-bit digest?
• It connects multiple LANs at the MAC layer and is used for increasing the coverage area of the wireless network. What device is this?
• Which authorization approach maintains separate authorization details for each resource request?
• Which statement about the statistics toolbar is true?
• Which term refers to the infrastructure where processed data is stored after analysis?
• Which description matches the Cloud Layer's role?
• Which UI element provides colorization, font zoom, and the ability to display a packet in a separate window?
• An anomaly is detected when an event occurs outside the tolerance threshold of normal traffic. Which detection approach does this describe?
• Disk striping with parity, using a dedicated parity drive, is characteristic of which RAID level?
• Which mode uses a pre-shared key (PSK) to protect network access?
• DES stands for which of the following?
• RADIUS is best described as what?
• Which Docker networking construct is created with the overlay driver and enables container-to-container communication over the physical network infrastructure?
• In containerized environments using Docker, which networking construct creates a Linux bridge on the host?
• Which statement correctly describes the cloud component's risk profile in IoT architecture?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where traditional split systems cannot be used. Which option matches this description?
• Which entity acts as an intermediary that provides connectivity and transport services between CSPs and cloud consumers?
• Which statement best describes the Gateway/Control Tier in an IoT architecture?
• C-Mount CCTV cameras use detachable lenses and can cover distances beyond 40 ft, with the ability to use different lenses as distance requires. Which option reflects this?
• Which statement best describes Decentralized Authorization?
• Which document is the telecom ISMS implementation guide?
• What authorization model provides access to resources indirectly after a user is authorized for a primary resource?
• Emergency Lighting is described as being made of which material?
• Which set of concepts is included in security policy requirements per ISO/IEC 27039?
• Displays the captured packets?
• Which CNM concept contains the configuration of a container's network stack such as routing tables, management of interfaces, and DNS settings?
• Which term describes a party that provides access to cloud consumers via a network or other access devices?
• LOIC is described as a network stress testing and DoS attack application. Which option best identifies this tool?
• Which security policy category includes backup and restore policy as an example?
• Which tool identifies a steganographed file and reveals the location of the hidden content and the hiding program?
• Which rule requires administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronically protected health information?
• The policy that drives an organization's scope and provides direction to their security policies, with examples like application policy and server policy, is called what?
• What is the National Provider Identifier (NPI) used for?
• Which term is used to describe software and services enabling an organization to secure, manage, and distribute enterprise applications on user mobile devices, without interfering with personal apps and data?
• Which UPS type is no longer commonly used because it becomes unstable when connected to modern computer power loads?
• Which layer is primarily responsible for data storage, processing, and dashboards for monitoring and proactive decision-making?
• Tasklist displays the list of applications and services along with their process IDs (PIDs) for all tasks running on a local or remotely connected computer.
• Which PCI-DSS requirement 1.3.5 entails documentation and business justification for use of all services, protocols, and ports allowed, including security features for insecure protocols?
• Which term describes an action performed by a subject on an object?
• Which firewall element checks if the packet has SYN, ACK, or other bits set for establishing a connection?
• Which device accepts VPN connections from VPN clients?
• Which PCI-DSS control prohibits unauthorized outbound traffic from the cardholder data environment to the Internet?
• Which technology uses multiple antennas at the transmitter and receiver to improve data rate and link reliability?
• Which policy forbids everything and imposes strict restrictions on all company computers and Internet usage?
• Which of the following is an example of preventive controls?
• Which role might a cloud consumer interact with to request cloud services instead of contacting a CSP directly?
• Which model includes smartphones, wearable devices, autonomous machines, and tags that gather data via embedded sensors?
• Which role is described as responsible for screening visitors and employees at the main gates or entrances?
• Which HVAC setup is described as the most traditional and commonly used system, with components located both inside and outside the building?
• Which technology covers areas larger than a WLAN and supports cellular technologies such as GSM and CDMA?
• What is the primary shape of a common reflector antenna?
• Which cipher family includes Beale cipher, autokey cipher, Gronsfeld cipher, and Hill cipher?
• Which antenna is a unidirectional antenna with a reflector, a dipole, and directors, designed to produce an end-fire radiation pattern?
• Which graph type would best illustrate the relationships between distinct network flows?
• Which menu handles configuration profiles and sets preferences?
• Allocation of Security Enforcement to Architecture Elements describes what approach?
• Standpipe systems have three classifications: Class I - A, Class II - A, Class III - A. These classifications differ in what aspect?
• Which term refers to methods or techniques used to inform decision making for countering future attacks on the target network?
• Which standard is used to declare regulatory domains among 802.11 amendments?
• Which honeypot type emulates a real OS and applications and captures more useful data, responding only to preconfigured commands?
• Which storage option set is supported by Kubernetes, including local storage, public cloud providers, and network storage?
• Which analysis focuses on detecting malicious payload strings regardless of past history?
• Which wireless technique reduces interference and increases channel robustness in 4G and 5G networks?
• Which type is described as emulating the real production network of a target organization?
• Which statement about C-Mount CCTV cameras is true?
• Emergency Lighting is described as being made of which material?
• Which form of virtualization focuses on partitioning the server's operating system environment?
• Which ISO/IEC TR is designed to guide financial services in implementing ISMS?
• DSA produces what size digital signature and security level?
• What key establishment protocol is used by WPA3, also known as Dragonfly Key Exchange?
• Which term represents the data that, after processing, is transmitted to the user for action?
• Policies used with the compliance of various standards, certifications, and accreditations are described under which security requirement?
• The need for this came into existence when it became difficult to implement the authorization process individually for each resource.
• Which device is used to connect two or more LANs at the MAC layer to extend wireless coverage?
• Flow Graphs are best used to visualize which aspect?
• The telecom ISMS guide TR 27015 has identical text published as ITU-T X.1051 and which ISO/IEC standard?
• The layer that aggregates information and informs decision-making across stakeholders is the which layer?
• StegSpy identifies a steganographed file and detects steganography, the program used to hide the message, and the location of the hidden content.
• Which intrusion detection approach creates models of possible intrusions and compares incoming events against these models to decide if an intrusion occurred?
• Standpipe systems provide water to hose lines by connecting to the water supply. Which statement is true?
• Which statistic window would help analyze traffic composition by protocol?
• What capability is described as a security principle on the device layer?
• Which tool is a robust network threat detection engine capable of real-time intrusion detection, inline intrusion prevention, network security monitoring, and offline pcap processing?
• Which statement characterizes WEP encryption?
• Which algorithm is described as the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS) and adopted as FIPS 186?
• Which act, commonly cited as DPA 2018, governs the processing of personal data in the United Kingdom?
• Composite-signature-based analysis uses a series of packets over time; ICMP floods example?
• Which DoS tool is described as a network stress and DoS/DDoS attack application?
• Which guideline addresses financial services ISMS adoption within the ISO/IEC 27000 family?
• Wi-Fi security auditing tools ability to detect, analyze, and identify wireless threats?
• Which statement about WPA2-Enterprise authentication is correct?
• Burp Suite is an integrated platform for security testing of web applications.
• Which statement best describes RAID Level 1?
• Which tool is a command-line SQL injection exploitation tool?
• Which menu contains items to find a packet, time reference, and mark one or more packets. It handles configuration profiles and sets preferences.
• High-level Security Requirements include which elements?
• Which act is commonly associated with the protection of personal health information and patient rights in the healthcare sector?
• Which term is described as offering various access control mechanisms for network devices like routers and switches?
• Wireless network interface cards (NICs) or adapters locate and communicate to an access point to provide network access. Which term describes these devices?
• RC4 is notable for having what kind of key usage?
• Which title consists of nine sections and establishes standards for external auditor independence to limit conflicts of interest, including auditor approval requirements, audit partner rotation, and auditor reporting requirements?
• What shape are most reflector antennas?
• Which approach is primarily used to inform decision making for countering future attacks?
• Which SIEM capability analyzes log data to identify suspected activities related to system compromise?
• Sprinkler systems are mainly used in areas where firefighters are not able to reach with their hose lines. Which option is true?
• Windows Information Protection provides endpoint DLP capabilities and can be configured to store business data only on approved devices and applications. Which technology is this?
• Which tool is an integrated platform for security testing of web applications?
• What is the main function of intrusion prevention systems (IPSs)?
• What is the primary purpose of intrusion detection systems (IDSs)?
• Which term describes the party that acquires and manages the computing infrastructure intended for providing cloud services to interested parties via network access?
• Which field helps determine whether a packet is from a valid source?
• Which of the following is an example of Infrastructure-as-a-Service (IaaS) provider?
• Which mechanism does Kubernetes use to distribute high network traffic across containers to balance the load?
• Which cloud service model offers development tools and deployment platforms on demand, allowing developers to deploy and configure applications without managing the underlying infrastructure?
• Which UI element displays the captured packet bytes in a hex dump format?
• Which type of honeypot emulates the real production network of a target organization, drawing attackers to the critical production system?
• What is the method of transmitting radio signals by rapidly switching the carrier among many frequency channels?
• Which type is described as a proxy through which a client system connects to a server without its knowledge and is entirely invisible to an end user?
• Which caching proxy for the web reduces bandwidth by caching and reusing content?
• Which toolbar provides quick access to frequently used items from the menu and cannot be customized by the user?
• DES stands for which term?
• Which data classification level requires no access permissions and allows any person to access unclassified documents?
• A wireless modem is a device that allows PCs to connect to a wireless network and access the Internet through an ISP, commonly including USB sticks. What is this device called?
• IO Graphs primarily display:
• Which tool simplifies encoding and decoding of text data, enabling compression, encryption, and conversion to text for clipboard or text file storage?
• Which authentication enables a user to authenticate themselves to multiple servers on a network with a single password without re-entering it every time?
• Which tool lets you capture and interactively browse the traffic on a computer network and uses WinPcap to capture packets?
• Movable Lighting is best described as which of the following?
• Which layer provides dashboards for monitoring and proactive decision-making?
• It is an all-in-one burning, authoring, and backup Solution.
• Which menu contains items to open and merge, capture files, save, print, import and export capture files in whole or in part, and quit the Wireshark application.
• Which term best describes a framework for managing mobile devices and corporate apps used by employees on personal devices?
• The menu contains options to display various statistic windows. Which of the following is NOT among those windows?
• Which term describes restricting access to data based on data sensitivity and user clearance?
• Packaged Heating and Air-Conditioning System is best suited for locations with what characteristic?
• Which act enacted to protect the public and investors by increasing the accuracy and reliability of corporate disclosures?
• The unidirectional antenna with end-fire characteristics is commonly known as which antenna?
• Dome CCTV cameras are dome-shaped and provide wide-angle surveillance. Which option best describes this feature?
• Which act requires financial institutions to explain how they share and protect their customers' private information?
• Which backup strategy is described as a combination of a full backup and an incremental backup?
• In RAID Level 0, data is striped across disks with no redundancy.
• Which data classification level is described as only a few people can access the data or object?
• Which term describes wireless network interface cards that locate and communicate to an access point, providing network access for users?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where what condition exists?
• Which UI element filters the traffic based on filter options?
• Which data classification level is described as allowing any person at any level to access unclassified documents?
• The Stand by Ferro UPS uses which type of transformer to filter the output?
• Which term describes the active entity that attempts to access resources?
• What are potential effects of high electromagnetic interference on equipment?
• Storage Area Network (SAN) is best described as which of the following?
• Which data classification level follows Unclassified and precedes Secret in typical hierarchies?
• What is the primary responsibility of Plant's Security Officers or Supervisors?
• Which panel shows detailed information about captured packets at a granular level?
• a powerful, adaptable SIEM that delivers real-time threat detection and native SOAR technology to your SOC.
• Which controls are designed to discourage violations by signaling consequences, such as warning signs and security guards?
• The telecom ISMS guide TR 27015 has been published identically as ITU-T X.1051 and which ISO/IEC standard?
• Which cloud service model provides on-demand infrastructure resources like computing power and storage, with the provider managing the underlying hardware?
• RAID 0 characteristics: Which statement is true?
• Which cloud service model delivers application software to subscribers on-demand over the internet?
• Which title consists of eight sections and mandates that senior executives take individual responsibility for the accuracy and completeness of corporate financial reports?
• Which IoT component is responsible for preprocessing the large volume of sensor data before transmission to the cloud?
• What does IDaaS stand for in cloud services?
• Which RAID level stripes data across multiple drives with parity distributed among the drives (not a dedicated parity drive)?
• Which Docker networking option enables a container to use the host's networking stack?
• Which statement best describes the functions of intrusion detection systems and intrusion prevention systems?
• Which standard is mainly used for exchanging data between fixed and mobile devices over short distances?
• Which access control concept determines the usage and access policies for users, often applied to highly confidential data?
• Which backup medium is commonly used for archival storage due to scalable capacity?
• Which type of honeypot is noted for capturing complete information about an attack vector such as techniques and tools?
• Packaged Heating and Air-Conditioning System is most appropriate in which scenario?
• Which backup media is described as portable and suitable for enterprise-level backups?
• Which law provides the public the right to request access to records from any federal agency, with nine exemptions?
• NAND flash memory is typically used for what purpose in storage devices?
• Policy Description Based on Requirement is best described as:
• In this type of virtualization, the guest OS is not aware that it is running in a virtualized environment. The VMM translates commands to binary instructions and forwards them to the host OS.
• Who must use the National Provider Identifier (NPI) in HIPAA administrative and financial transactions?
• WPA2 uses which combination for wireless data encryption?
• In IoT architecture, which component is described as the central aggregation and data management point, with access that should be restricted and a command-and-control function?
• Which controls are used to detect unauthorized access attempts, such as CCTV and alarms?
• Explicit proxies are commonly referred to as Non-transparent proxies and require client software to be configured. Which statement best describes this requirement?
• RC5 was designed by Ronald Rivest for which organization?
• HOIC is described as a network stress and DoS/DDoS attack application written in BASIC. Which DoS tool is this?
• Which technology covers a metropolitan area and connects subscriber stations to a base station over wireless or fiber links?
• Which title is described as consisting of nine sections and establishes standards for external auditor independence to limit conflicts of interest?
• Which backup type backs up all changes made since the last full backup?
• Which tool is an integrated penetration testing tool for web applications?
• Which proxy type is described as not transferring the IP address and enabling private surfing?
• Which model determines the access control taken by any possessor of an object to decide the access control of a subject on that object?
• Which feature helps counter vulnerabilities by keeping IoT devices up to date?
• Which honeypot type is described as a proxy between two networks that is entirely invisible to an end user?
• Which platform helps you develop, deploy, and operate industrial apps at the edge and in the cloud?
• Which term describes an independent examination of cloud service controls to express an opinion on adherence to standards?
• A collection of endpoints that have connectivity between them. When a network is created or updated, the corresponding driver is notified. A CNM network can be used to implement a Linux bridge, VLAN, etc.
• What term refers to a network that spans a metropolitan area and is used to provide broadband access, often using exterior antennas?
• Which RAID level uses disk striping with parity distributed across drives?
• Which approach includes security monitoring methods such as IDS, SIMS, TRS, and IPS?
• Which task is NOT a responsibility of Plant's Security Officers or Supervisors?
• The Device-to-Cloud model extends data sharing to authorized third parties. Which option best describes this access?
• Which cable is described as having a single copper conductor at its center with a plastic insulation layer and a braided shield?
• Which category includes examples such as Firewall, NAC, NAP, IPSec, and SSL to prevent threats?
• Which proxy hides the user's IP address, enabling private surfing?
• Which policy provides high-level direction for an organization's information security program?
• Which component is described as sensors embedded in devices that acquire information from the surroundings such as temperature, gases, location, working of industrial machines, and health data of a patient?
• Which interface is used to connect internal drives to a server?
• Which standard defines quality of service (QoS) and is implemented at the MAC layer to support real-time applications?
• Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?
• If informational signatures are undetected, what risk occurs?
• Which virtualization enables the logical partitioning of a server's operating system environment by virtualization of storage devices?
• Which statement best describes the Device Layer in an IoT architecture?
• OpenStego provides data hiding and watermarking capabilities and can be used to detect unauthorized file copying.
• Which tool is used to create and manage encrypted volumes for data storage?
• What is the purpose of hot and cold aisles in data centers?
• Sprinkler systems are used primarily to avoid human and asset loss. Which of the following statements reflects this purpose?
• Which honeypot type emulates the real production network and aims to draw attackers toward the production system?
• Which cable reduces crosstalk and interference between pairs of wires?
• Which term best describes a proactive approach to detect unauthorized access attempts based on traffic signatures?
• Block Interleaved Distributed Parity describes a RAID level that stripes data across multiple drives with parity shared across all members. Which RAID level uses this parity scheme?
• What is the function of the C2 component within the cloud architecture?
• Which policy helps in managing devices securely in BYOD environments, reducing support costs, mitigating security risks, and reducing business discontinuity?
• Access policies, accountability, continuity of operations, and documentation are described under which security requirement?
• Which of the following is mentioned as a displayed statistic window in the menu?
• What is a primary capability of network monitoring described?
• Which act prohibits circumvention of digital protections and the removal of copyright management information?
• Which term describes the framework that encrypts data and restricts access to authorized apps on mobile devices?
• Which principle applies to the IoT communication layer, focusing on machine-to-machine identification, authentication, and encryption rather than human credentials?
• Which HIPAA rule contains provisions relating to compliance and investigation, as well as the imposition of civil monetary penalties for violations of the HIPAA Administrative Simplification Rules and procedures for hearings?
• Which element allows following a stream including TCP, UDP, and SSL?
• What does OFDM stand for in digital communications?
• Which term describes virtualization that uses storage area network (SAN) technology to pool storage for multiple virtual machines?
• Which option is a primary way to access frequently used items from the menu according to the material?
• ISO/IEC TR 27016 provides guidance for implementing ISMSs in which sector?
• A non-transparent proxy is described as modifying a request or response and the client is made aware of the proxy's existence. Which proxy type matches this description?
• Which term describes traffic signatures that may appear suspicious but might not be malicious?
• Which term describes traffic signatures indicating an attempt to gain information?
• Which PCI-DSS requirement mandates antivirus software deployment on systems commonly affected by malicious software?
• In the IoT architecture, which components are endpoints that acquire data for a use case when remotely controlled by mobile apps?
• Which product is an example of anti-Trojan software?
• It allows easy recovery of various types of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks.
• Which network type can cover a region or the entire globe and often uses embedded cellular radio technologies for data transmission?
• A computer that initiates a secure remote connection to a VPN server is known as what?
• RC4 is described as a variable key-size symmetric-key stream cipher with byte-oriented operations based on a random permutation. Which statement best describes RC4?
• Which task is NOT listed as a responsibility of the Wireless CCTV Camera?
• Which 802.11 amendment is an extension of the standard, offering up to 54 Mbps using OFDM and operating in the 2.4 GHz band?
• RAID is an example of which type of virtualization that aggregates multiple storage devices into a single logical unit?
• Which standard is intended to help energy industry interpret and apply ISO/IEC 27002:2005?
• Which statement best describes the radiation pattern of reflector antennas?
• Which act concerns the processing of information relating to individuals and is associated with data protection in the United Kingdom?
• Standpipe systems differ according to which two characteristics?
• Which all-in-one burning, authoring, and backup Solution?
• Which backup type copies only files that have changed or been created since the last backup?
• Which backup type copies only files that have changed since the last backup, with the last backup potentially being of any type?
• Which security method does WPA provide for encryption and authentication?
• Which authentication uses a null method and allows a device to associate with an AP via cleartext transmission?
• Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?
• Which statement best describes cameras according to the material?
• Content-based signature analysis detects signatures by analyzing payload?
• Which Docker networking option allows a container to use the host's network namespace?
• Zigbee is the specification used in which IEEE standard?
• Which device is described as being easier to install and offering different modes for wireless transmission?
• Which component is described as acquiring information from sensors such as temperature, gases, location, and health data?
• In Kubernetes networking, how is a container typically identified for addressing, enabling traffic routing?
• Which data classification level allows access to secret, confidential, restricted, and unclassified data for authorized users, but not top secret?
• What is the primary role of the mobile interface in the IoT architecture?
• Which layer encompasses the physical devices and networks used for connectivity and edge computing?
• Which spreading technique multiplies the data with a pseudo-random noise sequence to spread the spectrum?
• Which SIEM feature aggregates all similar events into a single summary report?
• Network monitoring techniques are necessary for establishing service level agreements (SLAs) and compliance. Which outcome best describes the primary aim of these techniques?
• Which act is designed to protect health information held by covered entities and ensure patient rights to that information?
• Prudent Policy is described as:
• Which policy type includes policies for servers and system security?
• Which act provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets?
• Which act defines prohibitions against circumvention of technological protection measures and removal of copyright management information?
• Which model describes direct communication from IoT device to cloud without an intermediary gateway?
• In the past, Safety Officers were typically described as individuals who came from which background?
• Which tool can be used to extract hidden data from steganographic content?
• Which window displays the protocol hierarchy statistics?
• What is a security practice for the cloud component in IoT architecture?
• Which security requirement directs the usage of technology-based systems with guidelines and includes examples such as remote access, wireless policies, and password policies?
• Which concept is described as the use of machine-learning techniques to identify threats on mobile devices?
• Which statement best describes Mobile Device Management Solutions?
• What is the primary purpose of Mobile Content Management (MCM) in securing mobile access to corporate data?
• IO Graphs are used to visualize which metric?
• It includes VPN specific protocols used to manage tunnels and encapsulate private data, including PPTP and L2TP along with IPsec.
• Which policy focuses on directives for configuring or maintaining a system to ensure overall security and includes DMZ policy, encryption policy, acceptable use policy, and intrusion detection and prevention policy?
• Which title consists of four sections and defines practices to restore investor confidence in securities analysts?
• In which virtualization type is the guest operating system aware of the virtual environment and communicates with the host to request resources?
• It is a command-line interface SQL injection exploitation tool, used to exploit both union-based and blind Boolean-based injections?
• Which concept refers to the tracking and examining of the activities of network devices to identify weaknesses in the network?
• Which proxy type uses sockets and does not have caching abilities typical of HTTP proxies?
• Which standard defines the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS)?
• Which IoT component preprocesses the data generated by sensors before sending it to the cloud, reducing the amount of data forwarded?
• Which standard is also known as WiMAX and provides fixed broadband wireless metropolitan access networks using a point-to-multipoint architecture?
• Dome CCTV cameras are typically used for indoor security and are dome-shaped to prevent damage. Which of the following statements is true?
• Which service provides authentication services such as Single Sign-On, Multi-Factor Authentication, and Identity Governance, managed by a third-party?
• Which combination of statistic windows is explicitly listed as available in the menu?
• RSA is based on which area of mathematics?
• Which approach includes post-mortem analysis including risk and legal assessments after an incident?
• Which hashing algorithm uses a sponge construction and is designed to complement SHA-2?
• In WPA3, which process results in each wireless station receiving a shared secret key over a secure channel distinct from 802.11 network communications?
• What best describes Network Attached Storage (NAS) in a local area network?
• Which UI element allows filtering the traffic being displayed in the capture window?
• Which cabling is least susceptible to wiretapping threats?
• For a container that fails to respond to health checks, what does Kubernetes do?
• Which term refers to a storage device that is connected to a network and provides centralized storage for a LAN?
• Which software is described as the most secure, efficient, and fast quantum encryption software?
• Which model assigns permissions to a user role dynamically based on administrator-defined rules?
• Atomic-signature-based analysis detects a signature in a single packet?
• Which CNM component lies between a sandbox and the transport network, enabling portability across different network drivers?
• A software for establishing and maintaining an on-the-fly-encrypted volume (data storage device).
• Which term is defined as an explicit resource on which an access restriction is imposed?
• Which wireless technology interconnects devices around a person within a very short range (about 10 meters)?
• Which of the following is NOT a named access control model described in the material?
• Low-interaction Honeypots are characterized by emulating only a limited number of services and generating an error for unexpected actions.
• Standby Lighting is best described as what type of lighting system?
• Which tool is described as an integrated penetration testing tool for web applications?
• Which 802.11 amendment extends the standard to a maximum bandwidth of 54 Mbps using OFDM in the 2.4 GHz band?
• Which concept monitors the restrictions imposed by access control rules and implements a set of rules on the subject's actions on the object?
• Which term describes traffic signatures that indicate a DoS attempt floods a server?
• Collecting network infrastructure information for monitoring is used to improve security posture and performance. Which term describes this process?
• Which tool helps web security researchers detect time-based blind SQL injection on HTTP headers?
• Which feature should the edge gateway support to counter vulnerabilities and maintain secure operation?
• It is a free, self-contained wireless-auditing toolkit.
• Which title is described as consisting of nine sections and addressing external auditor independence?
• Which cable is described as being prone to wiretapping?
• WPA3 employs which encryption and authentication scheme?
• What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?
• What function does the Go menu provide?
• Which menu contains items to navigate to a specific packet including a previous packet, the next packet, the corresponding packet, the first packet, and the last packet?
• Which act requires financial institutions to explain their information-sharing practices to customers?
• With evolving technology, understanding and managing the demand for network resources is important. Which term describes this concept?
• Hybrid Heat Split System uses what as the heat source instead of gas furnace heat?
• Which component provides nonvolatile storage for the RAID system's primary cache?
• Which backup medium is readily available at reasonable prices and can store more data than DVDs?
• Which backup type copies all files and is commonly scheduled to run regularly?
• Which term describes a storage solution that provides centralized storage over a network and is accessed as a file-level storage by multiple clients?
• Which security requirement covers actions to be taken for various components that need to be secured such as computer security, operations security, network security, personnel security, and physical security?
• What is Cain & Abel described as?
• Which statement best defines HMAC?
• Network/IP CCTV cameras can be wired or wireless and transmit images over the Internet. Which statement is correct?
• RSA is a public-key cryptosystem used for Internet encryption and authentication. It is primarily used for which purpose?
• Which PCI-DSS requirement calls for a formal process for approving and testing all network connections and changes to firewall and router configurations?
• Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?
• Security Concept of Operation defines what?
• In symmetric-key cryptosystems, what is true about the keys?
• Which model describes a device communicating with an intermediate gateway that connects to the cloud?
• An omnidirectional antenna provides what pattern?
• Informational are detected by analyzing the data in the payload and matching a text string to a specific set of characters. If undetected, these signatures can open backdoors in a system, providing administrative controls to an outsider.
• RC5 was designed by which cryptographer?
• This connects a sandbox to a network and abstracts the actual connection to the network from the application. An endpoint aids in maintaining portability, to enable the service to utilize various types of network drivers
• Which statement is true about WPA2-Personal?
• Continuous Lighting is described as:
• Which UPS configuration is most commonly used for server rooms and is connected to the battery during a power failure?
• Protocol anomaly detection relies on protocol-specific anomalies and identifies flaws in vendors' deployment of the TCP/IP protocol. Which detection approach is this?
• Which act provides federal protections for health information and grants patients rights to that information?
• Which term describes software and services enabling secure distribution of enterprise apps on mobile devices, without interfering with personal apps and data?
• Which data classification level indicates documents may be highly confidential or only confidential?
• Which term describes traffic containing signatures indicating an attempt to gain unauthorized access?
• Which CNM construct represents a collection of endpoints that have connectivity between them and can be used to implement features like Linux bridge or VLAN?
• Which tool is described as a password recovery tool that recovers passwords by sniffing the network and cracking encrypted passwords?
• KFSensor is a host-based IDS that acts as a honeypot to attract and detect hackers by simulating vulnerable system services and Trojans.
• Which term describes a local area wireless network that connects wireless users to a wired network and can operate in peer-to-peer or infrastructure modes?
• Which HIPAA rule establishes national standards to protect individuals' electronic PHI created, received, used, or maintained by a covered entity?
• Which of the following is an example of detective controls?
• Permissive Policy is best described as:
• Standby power supplies for personal computers are most commonly used for which equipment?
• The ITU-T X.1051 document corresponds to which ISO/IEC TR?
• Which statement best reflects the need to implement both preventive and reactive approaches for network security?
• Which component acts as the first point of contact into the Internet for IoT, connecting smart devices to cloud components and supporting bidirectional authentication and automatic updates?
• Deterrence Controls are used to discourage policy violations and may include security guards and warning signs.
• Which menu can start, stop, or restart capture and edit capture filters?
• Which is the cipher type in which letters are rearranged according to a regular system?
• Modern microprocessor architectures have special instructions to aid the virtualization of hardware, enabling the guest OS to execute privileged instructions directly on the processor.