Section 1 part 2

What is the term for an entryway in a secure facility where only one door can be open at a time to stop unauthorized individuals from following someone through?

• Bollard

• Fence

• Access control vestibule

• Honeypot

After system modifications, a specialist examines reports from a security information system for any irregularities. What part of the change process is this?

• Maintenance window

• Documentation

• Testing

• Backout plan

If a company rule dictates that development servers should create their own security certificates, except when official ones are required, what kind of instruction is this?

• Preventive

• Detective

• Directive

• Corrective

Programmers place a decoy, non-functional access key within pre-production software. If this key is ever used, it sets off an alarm. What is this deceptive tool called?

• Honeyfile

• Honeypot

• Honeynet

• Honeytoken

During a regular security compliance check, evidence of formal authorization for software updates is required. What operational procedure is being verified?

• Version control

• Stakeholder management

• Approval process

• Backout plan

What is the term for the type of encryption that scrambles specific pieces of data within a database, rather than the entire database or file?

• File

• Partition

• Record

• Full-disk

When a system that manages encryption keys automatically changes the keys used by automated services every three months, what is this operational routine called?

• SOP

• Version control

• Maintenance window

• Key management

If a Wi-Fi access point uses a strong security protocol and a centralized server for user verification, what part of the access control framework does the centralized server handle?

• Accounting

• Authorization

• Authentication

• Identification

If a system scans outgoing email files and stops any that include Social Security Numbers, what kind of security measure is this?

• Preventive

• Detective

• Compensating

• Directive

When a business utilizes a secure chip in laptops along with a service that stores backup keys to regain access to scrambled hard drives, what is this recovery strategy called?

• Compensating control

• Corrective control

• Key escrow

• KMS