Risk, Security, and Compliance

What kind of attack targets a server's OS?

• Keylogger

• Phishing

• Social engineering

• Rootkit

In a DDoS attack, the flood of messages to the target website come from ___________ servers.

• infected

• unifnecte

• spoofed

• the hacker's

Which of the following does NOT provide physical security?

• Access badge

• Firewall

• Video camera

• Tamper detection

Which of these devices does NOT prevent access to a protected area?

• IPS

• Firewall

• Keypad

• IDS

Which of the following is the most secure password?

• p@$$w0rd

• $t@rw@r$

• 07041776

• yellowMonthMagneficant

Which of these encryption techniques does NOT rely on a key?

• Polyalphabetic substitution-based cipher

• Data Encryption Standard

• Monoalphabetic substitution-based cipher

• Transposition-based cipher

Which principle, if adequately followed, ensures a person cannot write their own employee evalution report?

• Shared responsibility model

• Separation of duties

• Defense in depth

• Principle of least priviledge

A digital signature supports which componet of the CIA triad?

• Accountability

• Availability

• Confidentiality

• Integrity

After a digital signature is created, what information is needed to access the hash stored in the digital signature?

• The signer's private key

• The signer's public key

• The document's hash

• The lawyer's private key

Which protocol is used to secure HTTP?

• TLS

• SSH

• RDP

• IPsec