AP CK Cybersecurity Unit 2

Which of the following is a benefit of a defense-in-depth security strategy?

• It ensures that a security breach is detected immediately.

• It eliminates the need for regular security updates and patches.

• It reduces the overall cost of the security measures for an organization.

• It can limit the damage if one security control is bypassed by an adversary.

Which of the following can help prevent against piggybacking?

• Cameras

• Mantraps

• Door locks

• Card readers

Which of the following explains how a deny list impacts access to a resource?

• A deny list ensures that all entities are able to access a resource.

• A deny list ensures that no entities are able to access a resource.

• A deny list allows access to more entities compared to an allow list, as it only restricts specific ones.

• A deny list restricts access to fewer entities than an allow list, as it permits all other by default.

Which of the following can help prevent attacks from moving laterally on a network and impacting other subnets?

• Network segmentation

• Vulnerability scanning

• Network encryption

• Intrusion detection system

Review the following firewall for a server:

A network technician is trying to access the server using port 443 from a machine with an IP address of 192.168.45.37. However, they are unable to access the server.

Which of the following changes could be made to the firewall in order for the network technician to access the server?

• Swap firewall rule 1 with firewall rule 10.

• Swap firewall rule 3 with firewall rule 4.

• Swap firewall rule 3 with firewall rule 7.

• Swap firewall rule 7 with firewall rule 10.

An organization only allows their employees to log into a system if they are located in one of the following time zones:

Eastern standard time,

Central standard time,

Mountain standard time,

Pacific standard time.

Which of the following factors of authentication is being used to verify the identity of the user?

• Location factor

• Biometric factor

• Possession factor

• Knowledge factor

Which of the following is contained within an anti-malware software?

• A virtual private network (VPN)

• A desk defragmenter

• A malware encryption tool

• A malware signature database

If an adversary has already cracked a user’s password, which of the following security requirements could result in the adversary getting locked out?

• Requiring at least one symbol in a password

• Requiring a password history to prevent reuse

• Requiring a maximum password age

• Requiring a maximum password length

A system administrator is attempting to change the permissions of a file named guidelines.txt. They enter the following command in a Linux terminal:

chmod 754 guidelines.txt

What are the resulting permissions on guidelines.txt?

• rwxr-xr--

• rwxrw--w-

• r-xrw---x

• rw-rwx-w-

A network administrator is setting up a file system for an organization and is given the following guidelines for how it should operate.

On a document an individual owns, they can give different types of access to other coworkers.

There are two administrators who can override the access given by the file owners.

Which of the following access control models should this network administrator implement?

• Role-based access control

• Rule-based access control

• Discretionary access control

• Mandatory access control