Unit 6 Exam Review Part 1

1. What are the four main categories of security controls used to mitigate the risk of malicious attacks?

• Technical, operational, directive, and corrective
• Technical, managerial, operational, and physical
• Preventive, deterrent, detective, and corrective
• Firewall, IPS, MFA solutions, and antivirus software

2. Which type of security control aims to keep people out of systems and prevent attacks?

• Deterrent
• Corrective
• Preventative
• Detective

3. What is an example of a deterrent security control?

• Intrusion detection system
• Firewall rule configurations
• Security awareness training
• Warning signs like "No Trespassing"

4. Which security control type is designed to alert you when a particular event occurs, such as an unauthorized user accessing a system?

• Preventative
• Deterrent
• Detective
• Corrective

5. What is an example of corrective security control?

• Security awareness training
• Implementing a business continuity plan
• Patching known vulnerabilities on hardware
• Reviewing access rights and audit logs

6. Which security control type is put in place to satisfy the requirement for a security measure deemed too difficult or impractical to implement now?

• Corrective
• Compensating
• Directive
• Deterrent

7. What is an example of a directive security control?

• Intrusion detection system
• Regularly updating malware scanners
• Defining password security complexity and mandating regular password changes
• Reviewing access rights and audit logs

8. Which category of security control includes mechanisms like policies, procedures, guidelines, standards, laws, and regulations?

• Technical
• Managerial
• Operational
• Physical

9. What does availability refer to in system architecture?

• The financial implications of designing and implementing the architecture
• The system's ability to recover and adapt to failures or disruptions
• The system's ability to be operational and accessible when needed
• The simplicity and efficiency of deploying the system

10. What aspect of system architecture relates to the system's ability to recover and adapt to failures or disruptions?

• Availability
• Resilience
• Cost
• Responsiveness