EC-Council Network Defense Essentials (NDE) Practice Test

These questions are part of the practice quiz. Start practicing

• Which element allows following a stream including TCP, UDP, and SSL?
• What security consideration is highlighted for the cloud layer in IoT architecture?
• Which UI element filters the traffic based on filter options?
• Which DoS tool is described as a network stress testing and DoS attack application commonly used to test the resilience of web services?
• Which wireless technique reduces interference and increases channel robustness in 4G and 5G networks?
• Standpipe systems provide water to hose lines by connecting to the water supply. Which statement is true?
• It is also called a media gateway or a remote-access server (RAS) and is responsible for setting up and maintaining each tunnel in a remote-access VPN. Users connect to this to use a VPN.
• Which term refers to methods or techniques used to inform decision making for countering future attacks on the target network?
• Sprinkler systems are used primarily to avoid human and asset loss. Which of the following statements reflects this purpose?
• In VPN terminology, which device terminates VPN tunnels at the network edge?
• Block Interleaved Distributed Parity describes a RAID level that stripes data across multiple drives with parity shared across all members. Which RAID level uses this parity scheme?
• Dome CCTV cameras are dome-shaped and provide wide-angle surveillance. Which option best describes this feature?
• Who must use the National Provider Identifier (NPI) in HIPAA administrative and financial transactions?
• Content-based signature analysis detects signatures by analyzing payload?
• Which RAID level stripes data across multiple drives with parity distributed among the drives (not a dedicated parity drive)?
• Which virtualization term refers to data virtualization at the file-system level, enabling sharing and protection within software?
• Which tool helps web security researchers detect time-based blind SQL injection on HTTP headers?
• The Stand by Ferro UPS uses which type of transformer to filter the output?
• Which backup medium is commonly used for archival storage due to scalable capacity?
• Hybrid Heat Split System uses what as the heat source instead of gas furnace heat?
• Network monitoring techniques are necessary for establishing service level agreements (SLAs) and compliance. Which outcome best describes the primary aim of these techniques?
• Which act concerns the processing of information relating to individuals and is associated with data protection in the United Kingdom?
• Which Docker networking construct connects container interfaces to a parent host interface (or sub-interfaces)?
• Which SIEM capability provides static and dynamic monitoring of enterprise systems and networks and analyzes log data to identify suspected activities related to system compromise?
• Which standard is also known as WiMAX and provides fixed broadband wireless metropolitan access networks using a point-to-multipoint architecture?
• Standby power supplies for personal computers are most commonly used for which equipment?
• Standpipe systems have three classifications: Class I - A, Class II - A, Class III - A. These classifications differ in what aspect?
• Which IoT component is responsible for preprocessing the large volume of sensor data before transmission to the cloud?
• Which component acts as the first point of contact into the Internet for IoT, connecting smart devices to cloud components and supporting bidirectional authentication and automatic updates?
• Which hashing algorithm uses a sponge construction and is designed to complement SHA-2?
• Which title is described as consisting of nine sections and addressing external auditor independence?
• What is the main function of intrusion prevention systems (IPSs)?
• Which SIEM feature aggregates all similar events into a single summary report?
• Which term describes an action performed by a subject on an object?
• Which task is NOT a responsibility of Plant's Security Officers or Supervisors?
• C-Mount CCTV cameras use detachable lenses and can cover distances beyond 40 ft, with the ability to use different lenses as distance requires. Which option reflects this?
• Which menu contains items to find a packet, time reference, and mark one or more packets. It handles configuration profiles and sets preferences.
• Which cloud service model offers development tools and deployment platforms on demand, allowing developers to deploy and configure applications without managing the underlying infrastructure?
• Which cable is described as being prone to wiretapping?
• Which entity acts as an intermediary that provides connectivity and transport services between CSPs and cloud consumers?
• Which set of concepts is included in security policy requirements per ISO/IEC 27039?
• Which controls are used to detect unauthorized access attempts, such as CCTV and alarms?
• What is the primary role of the mobile interface in the IoT architecture?
• Which firewall component checks the protocol in use to decide whether to allow or deny a packet?
• It includes VPN specific protocols used to manage tunnels and encapsulate private data, including PPTP and L2TP along with IPsec.
• Which backup medium is readily available at reasonable prices and can store more data than DVDs?
• Which 802.11 amendment is an extension of the standard, offering up to 54 Mbps using OFDM and operating in the 2.4 GHz band?
• Standby Lighting is an extension of which type of lighting system?
• Which PCI-DSS requirement 1.3.5 entails documentation and business justification for use of all services, protocols, and ports allowed, including security features for insecure protocols?
• ISO/IEC TR 27015 is the ISMS implementation guide for which industry?
• Which term describes wireless network interface cards that locate and communicate to an access point, providing network access for users?
• Emergency Lighting is described as being made of which material?
• Wi-Fi security auditing tools ability to detect, analyze, and identify wireless threats?
• Which term describes the party that acquires and manages the computing infrastructure intended for providing cloud services to interested parties via network access?
• Which statement best describes the radiation pattern of reflector antennas?
• Which policy forbids everything and imposes strict restrictions on all company computers and Internet usage?
• Which panel shows detailed information about captured packets at a granular level?
• In Kubernetes networking, how is a container typically identified for addressing, enabling traffic routing?
• It is a command-line interface SQL injection exploitation tool, used to exploit both union-based and blind Boolean-based injections?
• Which act prohibits circumvention of digital protections and the removal of copyright management information?
• Which wireless technology interconnects devices around a person within a very short range (about 10 meters)?
• What is the primary role of a RAID controller?
• Which act provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets?
• Which service allows configuring policies to control applications and devices across the organization, focusing on mobile device management and mobile application management?
• Which antenna is a unidirectional antenna with a reflector, a dipole, and directors, designed to produce an end-fire radiation pattern?
• Which policy provides high-level direction for an organization's information security program?
• The unidirectional antenna with end-fire characteristics is commonly known as which antenna?
• Which term describes a centralized method of granting access decisions across resources due to the complexity of per-resource authorization?
• Which spreading technique multiplies the data with a pseudo-random noise sequence to spread the spectrum?
• In which virtualization type is the guest operating system aware of the virtual environment and communicates with the host to request resources?
• Which statement best describes Decentralized Authorization?
• The statistics menu option that provides quick access to items is described as which of the following?
• According to the material, Microsoft Intune is described as a tool used for fingerprinting and exploiting which infrastructure?
• In the IoT architecture, which components are endpoints that acquire data for a use case when remotely controlled by mobile apps?
• Which PCI-DSS control prohibits unauthorized outbound traffic from the cardholder data environment to the Internet?
• HOIC is described as a network stress and DoS/DDoS attack application written in BASIC. Which DoS tool is this?
• RADIUS is best described as what?
• What function does the Go menu provide?
• RSA is based on which area of mathematics?
• Which component is described as acquiring information from sensors such as temperature, gases, location, and health data?
• Which controls are designed to discourage violations by signaling consequences, such as warning signs and security guards?
• Which mode uses a pre-shared key (PSK) to protect network access?
• Which option is a primary way to access frequently used items from the menu according to the material?
• Which statistic window would help analyze traffic composition by protocol?
• Which statement best reflects the need to implement both preventive and reactive approaches for network security?
• Which UI element provides colorization, font zoom, and the ability to display a packet in a separate window?
• Which data classification level is described as allowing any person at any level to access unclassified documents?
• Which model describes a device communicating with an intermediate gateway that connects to the cloud?
• Policy Description Based on Requirement is best described as:
• A computer that initiates a secure remote connection to a VPN server is known as what?
• A non-transparent proxy is described as modifying a request or response and the client is made aware of the proxy's existence. Which proxy type matches this description?
• In the past, Safety Officers were typically described as individuals who came from which background?
• A software for establishing and maintaining an on-the-fly-encrypted volume (data storage device).
• Which 802.11 amendment extends the standard to a maximum bandwidth of 54 Mbps using OFDM in the 2.4 GHz band?
• Which title consists of nine sections and establishes standards for external auditor independence to limit conflicts of interest, including auditor approval requirements, audit partner rotation, and auditor reporting requirements?
• Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?
• Which component provides nonvolatile storage for the RAID system's primary cache?
• Which act defines prohibitions against circumvention of technological protection measures and removal of copyright management information?
• Which device is used to connect two or more LANs at the MAC layer to extend wireless coverage?
• Which proxy hides the user's IP address, enabling private surfing?
• It connects multiple LANs at the MAC layer and is used for increasing the coverage area of the wireless network. What device is this?
• Which tool is a robust network threat detection engine capable of real-time intrusion detection, inline intrusion prevention, network security monitoring, and offline pcap processing?
• RC4 is notable for having what kind of key usage?
• In RAID Level 0, data is striped across disks with no redundancy.
• Which menu includes options to manipulate, display and apply filters, enable or disable protocol dissection, configure user-specified decodes, and follow a different stream including TCP, UDP, and SSL.
• A collection of endpoints that have connectivity between them. When a network is created or updated, the corresponding driver is notified. A CNM network can be used to implement a Linux bridge, VLAN, etc.
• Which algorithm is described as the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS) and adopted as FIPS 186?
• The layer that aggregates information and informs decision-making across stakeholders is the which layer?
• Which term describes a storage solution that provides centralized storage over a network and is accessed as a file-level storage by multiple clients?
• Which layer encompasses the physical devices and networks used for connectivity and edge computing?
• Which toolbar is explicitly stated as non-customizable?
• Tasklist displays the list of applications and services along with their process IDs (PIDs) for all tasks running on a local or remotely connected computer.
• Which standard is intended to help energy industry interpret and apply ISO/IEC 27002:2005?
• The Preventive Approach consists of methods or techniques that can prevent threats in a target network, with examples like firewall, NAC, NAP, IPSec, and SSL.
• Which act is commonly associated with the protection of personal health information and patient rights in the healthcare sector?
• AES stands for which of the following?
• What is the primary purpose of intrusion detection systems (IDSs)?
• Which term is described as the resource that monitors the restrictions and enforces rules on the subject's actions?
• A security-first SaaS technology used to operate IoT products in a reliable, scalable, and secure manner.
• Which term is used to describe software and services enabling an organization to secure, manage, and distribute enterprise applications on user mobile devices, without interfering with personal apps and data?
• Which standard is mainly used for exchanging data between fixed and mobile devices over short distances?
• Which hash function outputs a 128-bit digest?
• Which law provides the public the right to request access to records from any federal agency, with nine exemptions?
• Which cable is described as having a single copper conductor at its center with a plastic insulation layer and a braided shield?
• Zigbee is the specification used in which IEEE standard?
• Which component is described as sensors embedded in devices that acquire information from the surroundings such as temperature, gases, location, working of industrial machines, and health data of a patient?
• Which platform helps you develop, deploy, and operate industrial apps at the edge and in the cloud?
• What is the primary purpose of Mobile Content Management (MCM) in securing mobile access to corporate data?
• Which analysis detects attack patterns across multiple packets, such as ICMP floods?
• Which statement about WPA2-Enterprise authentication is correct?
• What is the function of the C2 component within the cloud architecture?
• Anomaly detection relies on a database of anomalies to identify deviations from normal behavior; which best describes this approach?
• In WPA3, which concept used in WPA2-Personal is replaced by Dragonfly Key Exchange?
• What is a security practice for the cloud component in IoT architecture?
• Which spread spectrum technique multiplies the original data signal with a pseudo-random noise spreading code to protect against interference?
• Which layer is associated with ZigBee, Z-Wave, or Bluetooth for inter-device communications?
• Which term is described as offering various access control mechanisms for network devices like routers and switches?
• Which backup media is described as portable and suitable for enterprise-level backups?
• StegSpy identifies a steganographed file and detects steganography, the program used to hide the message, and the location of the hidden content.
• Standby Lighting is best described as what type of lighting system?
• Which concept refers to the tracking and examining of the activities of network devices to identify weaknesses in the network?
• Which menu contains items to access basic help manual pages for command-line tools, online webpages, and the About Wireshark dialog?
• Which act provides federal protections for health information and grants patients rights to that information?
• Which software is a free, self-contained wireless-auditing toolkit?
• Which service is described as a cloud-based service focusing on mobile device management (MDM) and mobile application management (MAM) with policy configuration for applications?
• Which standard defines the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS)?
• Which virtualization describes virtualization of storage devices using data striping and mirroring, with RAID listed as an example?
• What is the recommended authentication approach to ensure trusted communication between edge devices and the cloud?
• What are potential effects of high electromagnetic interference on equipment?
• Which menu controls display options like colorization, font zoom, and windowing of a packet?
• Deterrence Controls are used to discourage policy violations and may include security guards and warning signs.
• Who acquires and manages computing infrastructure intended for providing services via network access?
• Which CNM construct represents a collection of endpoints that have connectivity between them and can be used to implement features like Linux bridge or VLAN?
• Which policy is described as an extremely restrictive security posture, sometimes labeled 'Paranoid Policy'?
• Which IoT component preprocesses the data generated by sensors before sending it to the cloud, reducing the amount of data forwarded?
• Which type of honeypot emulates the real production network of a target organization, drawing attackers to the critical production system?
• KFSensor is a host-based IDS that acts as a honeypot to attract and detect hackers by simulating vulnerable system services and Trojans.
• Which product is an example of anti-Trojan software?
• Which category includes examples such as Firewall, NAC, NAP, IPSec, and SSL to prevent threats?
• Which SIEM capability collects and manages all the object access audit logs at the central repository to track access attempts?
• Which tool simplifies encoding and decoding of text data, enabling compression, encryption, and conversion to text for clipboard or text file storage?
• Which policy type includes policies for servers and system security?
• Which PCI-DSS requirement mandates antivirus software deployment on systems commonly affected by malicious software?
• Sprinkler systems are mainly used in areas where firefighters are not able to reach with their hose lines. Which option is true?
• Which caching proxy for the web supports HTTP, HTTPS, FTP, and more, reducing bandwidth by caching and reusing content?
• Which term describes traffic signatures that may appear suspicious but might not be malicious?
• Which form of virtualization focuses on partitioning the server's operating system environment?
• Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?
• Which security policy category includes backup and restore policy as an example?
• In the gateway-mediated model, which component acts as an intermediary between a device and the cloud?
• Which term best describes a proactive approach to detect unauthorized access attempts based on traffic signatures?
• Which mode is mainly used to deliver password-based authentication?
• Storage Area Network (SAN) is best described as which of the following?
• Which honeypot type emulates the real production network and aims to draw attackers toward the production system?
• THC-Hydra is a network logon cracker that supports many services, including IPv6 and RFC 4013.
• Which term describes traffic containing signatures indicating an attempt to gain unauthorized access?
• Which of the following is an example of recovery controls?
• Which act is designed to protect health information held by covered entities and ensure patient rights to that information?
• Which backup type copies only files that have changed or been created since the last backup?
• MD5 outputs a 128-bit digest.
• Which storage option set is supported by Kubernetes, including local storage, public cloud providers, and network storage?
• Which term represents the data that, after processing, is transmitted to the user for action?
• Low-interaction Honeypots are characterized by emulating only a limited number of services and generating an error for unexpected actions.
• Continuous Lighting is described as:
• Which CNM component lies between a sandbox and the transport network, enabling portability across different network drivers?
• Which term describes traffic signatures indicating an attempt to gain information?
• Which authorization approach maintains separate authorization details for each resource request?
• What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?
• RAID 0 characteristics: Which statement is true?
• Standpipe systems differ according to which two characteristics?
• Which function is a cryptographic hash function developed by NIST and included in the Secure Hash Standard?
• Which interface is used to connect internal drives to a server?
• Which window displays the protocol hierarchy statistics?
• Which cable is described as having each pair of wires shielded with foil, reducing external interference?
• If informational signatures are undetected, what risk occurs?
• Which RAID level uses disk striping with parity distributed across drives?
• Which UI element displays the captured packet bytes in a hex dump format?
• Which guideline addresses financial services ISMS adoption within the ISO/IEC 27000 family?
• What shape are most reflector antennas?
• Which antenna is a straight electrical conductor measuring half a wavelength and is commonly described as the doublet?
• Which act, commonly cited as DPA 2018, governs the processing of personal data in the United Kingdom?
• Which Docker networking construct is created with the overlay driver and enables container-to-container communication over the physical network infrastructure?
• Which role might a cloud consumer interact with to request cloud services instead of contacting a CSP directly?
• Which field helps determine whether a packet is from a valid source?
• RAID is an example of which type of virtualization that aggregates multiple storage devices into a single logical unit?
• Which standard is an enhanced version of 802.11a and 802.11b and supports regulatory domains?
• Zigbee is the specification used in which IEEE standard?
• Protocol anomaly detection relies on protocol-specific anomalies and identifies flaws in vendors' deployment of the TCP/IP protocol. Which detection approach is this?
• What happens in Kubernetes when a node dies?
• Which data classification level requires no access permissions and allows any person to access unclassified documents?
• Which role is described as responsible for screening visitors and employees at the main gates or entrances?
• Which model describes direct communication from IoT device to cloud without an intermediary gateway?
• Which tool is an integrated platform for security testing of web applications?
• Which policy describes starting with all services blocked and enabling safe and necessary services?
• Which type of solution protects organizations from threats on iOS and Android using different security technologies?
• Which layer uses ZigBee, Z-Wave, or Bluetooth for inter-device communication?
• Which Docker networking option enables a container to use the host's networking stack?
• Which layer provides dashboards for monitoring and proactive decision-making?
• Which toolbar provides quick access to frequently used items from the menu and cannot be customized by the user?
• Which data classification level follows Unclassified and precedes Secret in typical hierarchies?
• What term refers to a network that spans a metropolitan area and is used to provide broadband access, often using exterior antennas?
• This CNM concept contains the configuration of a container's network stack such as routing table, management of container's interfaces, and DNS settings. CNM sandbox can be implemented for Windows HNS, Linux network namespace, or a FreeBSD jail
• Which is the cipher type in which letters are rearranged according to a regular system?
• Which menu contains items to navigate to a specific packet including a previous packet, the next packet, the corresponding packet, the first packet, and the last packet?
• Which data classification level indicates documents may be highly confidential or only confidential?
• Which analysis focuses on detecting malicious payload strings regardless of past history?
• What is the purpose of hot and cold aisles in data centers?
• Which statement best describes Mobile Device Management Solutions?
• Which term describes an independent examination of cloud service controls to express an opinion on adherence to standards?
• Which term describes virtualization that uses storage area network (SAN) technology to pool storage for multiple virtual machines?
• Policies used with the compliance of various standards, certifications, and accreditations are described under which security requirement?
• Which authentication uses a null method and allows a device to associate with an AP via cleartext transmission?
• Which service provides authentication services such as Single Sign-On, Multi-Factor Authentication, and Identity Governance, managed by a third-party?
• The policy that drives an organization's scope and provides direction to their security policies, with examples like application policy and server policy, is called what?
• Which access control model is described as permissions provided by the system and cannot be amended by users, governed by administrator-defined rules?
• Which tool can be used to extract hidden data from steganographic content?
• What authorization model provides access to resources indirectly after a user is authorized for a primary resource?
• RC5 was designed by which cryptographer?
• Permissive Policy is best described as:
• What is the primary responsibility of Plant's Security Officers or Supervisors?
• RC6 is best described as which type of cipher?
• What is the term for a straight electrical conductor measuring half a wavelength, fed at the center, and used as a basic balanced antenna?
• Packaged Heating and Air-Conditioning System is best suited for locations with what characteristic?
• It allows easy recovery of various types of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks.
• Which statement best describes cameras according to the material?
• Which RAID level uses mirroring to provide data availability when a drive fails?
• Which UPS configuration is most commonly used for server rooms and is connected to the battery during a power failure?
• With evolving technology, understanding and managing the demand for network resources is important. Which term describes this concept?
• Which task is NOT listed as a responsibility of the Wireless CCTV Camera?
• The ITU-T X.1051 document corresponds to which ISO/IEC TR?
• Which term describes software and services enabling secure distribution of enterprise apps on mobile devices, without interfering with personal apps and data?
• Which authentication enables a user to authenticate themselves to multiple servers on a network with a single password without re-entering it every time?
• IO Graphs primarily display:
• Which backup type backs up all changes made since the last full backup?
• Which statement about the statistics toolbar is true?
• Which cloud service model provides on-demand infrastructure resources like computing power and storage, with the provider managing the underlying hardware?
• Which of the following is an example of deterrent controls?
• Which type is described as a proxy through which a client system connects to a server without its knowledge and is entirely invisible to an end user?
• Which statement best defines HMAC?
• Which DoS tool is described as a network stress and DoS/DDoS attack application?
• Which description matches the Cloud Layer's role?
• Which statement best describes the Device Layer in an IoT architecture?
• Which backup strategy is described as a combination of a full backup and an incremental backup?
• Which PCI-DSS requirement calls for a formal process for approving and testing all network connections and changes to firewall and router configurations?
• Which title consists of eight sections and mandates that senior executives take individual responsibility for the accuracy and completeness of corporate financial reports?
• Which data classification level is described as only a few people can access the data or object?
• An anomaly is detected when an event occurs outside the tolerance threshold of normal traffic. Which detection approach does this describe?
• Which technology covers a metropolitan area and connects subscriber stations to a base station over wireless or fiber links?
• Which virtualization enables the logical partitioning of a server's operating system environment by virtualization of storage devices?
• Which statement is true about WPA2-Personal?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where what condition exists?
• DES stands for which term?
• Which Kubernetes concept is responsible for placing containers on nodes based on the resources and constraints specified by the user?
• Which menu contains items to open and merge, capture files, save, print, import and export capture files in whole or in part, and quit the Wireshark application.
• Which tool is a command-line SQL injection exploitation tool?
• A free password security and password recovery tool that supports many operating systems.
• It is a free, self-contained wireless-auditing toolkit.
• Which term refers to an action performed by a subject on an object, such as deleting a file?
• Emergency Lighting is described as being made of which material?
• Which combination of statistic windows is explicitly listed as available in the menu?
• Which feature should the edge gateway support to counter vulnerabilities and maintain secure operation?
• Dome CCTV cameras are typically used for indoor security and are dome-shaped to prevent damage. Which of the following statements is true?
• Which controls are used to prevent unauthorized access to resources and may include fences, locks, biometrics, and mantraps?
• What is Cain & Abel described as?
• Which virtualization term refers to virtualization of data at the file-system level to enable sharing and protection?
• Which proxy type uses sockets and does not have caching abilities typical of HTTP proxies?
• Informational are detected by analyzing the data in the payload and matching a text string to a specific set of characters. If undetected, these signatures can open backdoors in a system, providing administrative controls to an outsider.
• Which tool is used to create and manage encrypted volumes for data storage?
• What best describes Network Attached Storage (NAS) in a local area network?
• Atomic-signature-based analysis detects a signature in a single packet?
• Which honeypot type is described as a proxy between two networks that is entirely invisible to an end user?
• For a container that fails to respond to health checks, what does Kubernetes do?
• Which device is described as being easier to install and offering different modes for wireless transmission?
• Which intrusion detection approach creates models of possible intrusions and compares incoming events against these models to decide if an intrusion occurred?
• Which rule requires administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronically protected health information?
• RSA is a public-key cryptosystem used for Internet encryption and authentication. It is primarily used for which purpose?
• IO Graphs are used to visualize which metric?
• The telecom ISMS guide TR 27015 has been published identically as ITU-T X.1051 and which ISO/IEC standard?
• Which statement best describes the functions of intrusion detection systems and intrusion prevention systems?
• A wireless modem is a device that allows PCs to connect to a wireless network and access the Internet through an ISP, commonly including USB sticks. What is this device called?
• Which of the following is an example of detective controls?
• Prudent Policy is described as:
• Which of the following is an example of Infrastructure-as-a-Service (IaaS) provider?
• Context-based signature analysis analyzes header information such as IP addresses, ports, etc?
• DES stands for which of the following?
• The telecom ISMS guide TR 27015 has identical text published as ITU-T X.1051 and which ISO/IEC standard?
• What is the purpose of implementing a DMZ in a network security design?
• Policy Description Based on Requirement is best described as:
• Which standard is used to declare regulatory domains among 802.11 amendments?
• An omnidirectional antenna provides what pattern?
• Which algorithm uses a sponge construction and is designed to complement the SHA-2 family?
• Which SIEM capability analyzes log data to identify suspected activities related to system compromise?
• Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?
• What capability is described as a security principle on the device layer?
• Which caching proxy for the web reduces bandwidth by caching and reusing content?
• Which proxy type is described as not transferring the IP address and enabling private surfing?
• Displays the captured packets?
• Which statement characterizes WEP encryption?
• OpenStego provides data hiding and watermarking capabilities and can be used to detect unauthorized file copying.
• Which SIEM function stores logged data in a central repository for long-term compliance and for forensic analysis?
• Which security requirement covers actions to be taken for various components that need to be secured such as computer security, operations security, network security, personnel security, and physical security?
• Which standard defines quality of service (QoS) and is implemented at the MAC layer to support real-time applications?
• Which access control concept determines the usage and access policies for users, often applied to highly confidential data?
• Which technology covers areas larger than a WLAN and supports cellular technologies such as GSM and CDMA?
• Which security method does WPA provide for encryption and authentication?
• Which act requires financial institutions to explain how they share and protect their customers' private information?
• a powerful, adaptable SIEM that delivers real-time threat detection and native SOAR technology to your SOC.
• An attacker broadcasts DHCP requests with spoofed MAC addresses with the help of tools such as Yersinia, Hyenae, and Gobbler. Which tool is commonly used to such a DHCP attack?
• It is an all-in-one burning, authoring, and backup Solution.
• Which policy helps in managing devices securely in BYOD environments, reducing support costs, mitigating security risks, and reducing business discontinuity?
• Which approach includes post-mortem analysis including risk and legal assessments after an incident?
• Which all-in-one burning, authoring, and backup Solution?
• Which cabling is least susceptible to wiretapping threats?
• The Device-to-Cloud model extends data sharing to authorized third parties. Which option best describes this access?
• Which network type can cover a region or the entire globe and often uses embedded cellular radio technologies for data transmission?
• High-level Security Requirements primarily focus on which areas?
• Which menu can start, stop, or restart capture and edit capture filters?
• Which concept monitors the restrictions imposed by access control rules and implements a set of rules on the subject's actions on the object?
• Which solution is described as a mobile intrusion prevention app that uses machine learning to identify and prevent network-based and host-based threats on iOS and Android?
• Which type of honeypot is noted for capturing complete information about an attack vector such as techniques and tools?
• Which menu handles configuration profiles and sets preferences?
• What is the method of transmitting radio signals by rapidly switching the carrier among many frequency channels?
• LOIC is described as a network stress testing and DoS attack application. Which option best identifies this tool?
• Which firewall element checks if the packet has SYN, ACK, or other bits set for establishing a connection?
• In containerized environments using Docker, which networking construct creates a Linux bridge on the host?
• The Retrospective Approach examines the causes of attacks and includes fault finding mechanisms such as protocol analyzers and traffic monitors, as well as CSIRT and CERT. What is this approach called?
• Which cipher family includes Beale cipher, autokey cipher, Gronsfeld cipher, and Hill cipher?
• Which term describes a local area wireless network that connects wireless users to a wired network and can operate in peer-to-peer or infrastructure modes?
• Which act requires financial institutions to explain their information-sharing practices to customers?
• Which term describes the framework that encrypts data and restricts access to authorized apps on mobile devices?
• Which term is defined as an explicit resource on which an access restriction is imposed?
• Which of the following is NOT a named access control model described in the material?
• Which approach is primarily used to inform decision making for countering future attacks?
• Which layer is primarily responsible for data storage, processing, and dashboards for monitoring and proactive decision-making?
• Non-transparent proxies provide added services to the user agent such as group annotation services, media-type transformation, protocol reduction, and anonymity filtering. Which service is listed?
• Which Docker networking option allows a container to use the host's network namespace?
• Which component includes PPTP and L2TP together with IPsec for VPN tunneling?
• Which tool is an integrated penetration testing tool for web applications?
• Which data label indicates the highest level mentioned in the material that requires a higher clearance and is not accessible to many?
• WPA2 uses which combination for wireless data encryption?
• In WPA3, which process results in each wireless station receiving a shared secret key over a secure channel distinct from 802.11 network communications?
• Movable Lighting is best described as which of the following?
• Which backup type copies only files that have changed since the last backup, with the last backup potentially being of any type?
• Disk striping with parity, using a dedicated parity drive, is characteristic of which RAID level?
• Which security requirement directs the usage of technology-based systems with guidelines and includes examples such as remote access, wireless policies, and password policies?
• Which tool is described as a password recovery tool that recovers passwords by sniffing the network and cracking encrypted passwords?
• What does OFDM stand for in digital communications?
• In remote control via mobile apps, which hardware constitutes the IoT ecosystem endpoints?
• Which graph type would best illustrate the relationships between distinct network flows?
• Which term describes restricting access to data based on data sensitivity and user clearance?
• Which model determines the access control taken by any possessor of an object to decide the access control of a subject on that object?
• Which honeypot type emulates a real OS and applications and captures more useful data, responding only to preconfigured commands?
• Which data classification level allows access to secret, confidential, restricted, and unclassified data for authorized users, but not top secret?
• Which cable reduces crosstalk and interference between pairs of wires?
• Which cloud service model delivers software applications to subscribers over the internet on a pay-as-you-go basis?
• Which concept describes the data collected, after traveling through the gateway, arriving at the cloud, where it is stored and subjected to data analysis, and then transmitted to the user who takes actions based on the information received?
• Allocation of Security Enforcement to Architecture Elements describes what approach?
• NAND flash memory is typically used for what purpose in storage devices?
• Which statement about C-Mount CCTV cameras is true?
• Which of the following is mentioned as a displayed statistic window in the menu?
• Which statement best describes RAID Level 1?
• DSA produces what size digital signature and security level?
• Which authentication method is typically used with WPA2-Enterprise?
• Which technology uses multiple antennas at the transmitter and receiver to improve data rate and link reliability?
• ISO/IEC 27011 is a Technical Report intended to help which sector interpret ISO/IEC 27002:2005 to secure electronic process control systems?
• High-level Security Requirements include which elements?
• Collecting network infrastructure information for monitoring is used to improve security posture and performance. Which term describes this process?
• Which HIPAA rule contains provisions relating to compliance and investigation, as well as the imposition of civil monetary penalties for violations of the HIPAA Administrative Simplification Rules and procedures for hearings?
• Which proxy type is described as requiring client software to be configured and is also known as an explicit proxy?
• RC4 is described as a variable key-size symmetric-key stream cipher with byte-oriented operations based on a random permutation. Which statement best describes RC4?
• Which term describes traffic signatures that indicate a DoS attempt floods a server?
• Which of the following is an example of preventive controls?
• Which standard corresponds to WLANs and historically uses FHSS or DSSS as the frequency hopping spectrum?
• Promiscuous Policy is described as:
• Which ISO/IEC TR is designed to guide financial services in implementing ISMS?
• Which term describes a party that provides access to cloud consumers via a network or other access devices?
• Which tool lets you capture and interactively browse the traffic on a computer network and uses WinPcap to capture packets?
• What is the National Provider Identifier (NPI) used for?
• WPA3 employs which encryption and authentication scheme?
• In this type of virtualization, the guest OS is not aware that it is running in a virtualized environment. The VMM translates commands to binary instructions and forwards them to the host OS.
• What does IDaaS stand for in cloud services?
• Which term refers to the infrastructure where processed data is stored after analysis?
• Which cloud service model delivers application software to subscribers on-demand over the internet?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where traditional split systems cannot be used. Which option matches this description?
• Network/IP CCTV cameras can be wired or wireless and transmit images over the Internet. Which statement is correct?
• What is the primary shape of a common reflector antenna?
• The menu contains options to display various statistic windows. Which of the following is NOT among those windows?
• Which UI element allows filtering the traffic being displayed in the capture window?
• Which model assigns permissions to a user role dynamically based on administrator-defined rules?
• Which cryptographic tool is described as using strong encryption algorithms to hide computer files?
• Which component initiates a secure remote connection to a VPN server?
• Packaged Heating and Air-Conditioning System is most appropriate in which scenario?
• Which title consists of four sections and defines practices to restore investor confidence in securities analysts?
• What does Extensible Authentication Protocol (EAP) primarily provide?
• Which tool identifies a steganographed file and reveals the location of the hidden content and the hiding program?
• In symmetric-key cryptosystems, what is true about the keys?
• Windows Information Protection provides endpoint DLP capabilities and can be configured to store business data only on approved devices and applications. Which technology is this?
• Which act enacted to protect the public and investors by increasing the accuracy and reliability of corporate disclosures?
• Modern microprocessor architectures have special instructions to aid the virtualization of hardware, enabling the guest OS to execute privileged instructions directly on the processor.
• Which statement correctly describes the cloud component's risk profile in IoT architecture?
• Which tool is described as an integrated penetration testing tool for web applications?
• Which honeypot-based tool is a host-based IDS that attracts attackers by simulating vulnerable services?
• Explicit proxies are commonly referred to as Non-transparent proxies and require client software to be configured. Which statement best describes this requirement?
• Which term describes the active entity that attempts to access resources?
• The need for this came into existence when it became difficult to implement the authorization process individually for each resource.
• Which term best describes a framework for managing mobile devices and corporate apps used by employees on personal devices?
• ISO/IEC TR 27016 provides guidance for implementing ISMSs in which sector?
• Which approach includes security monitoring methods such as IDS, SIMS, TRS, and IPS?
• Which title is described as consisting of nine sections and establishes standards for external auditor independence to limit conflicts of interest?
• Which document is the telecom ISMS implementation guide?
• The Proactive Approach uses threat intelligence and risk assessment to inform countering future attacks on the target network. Which term is this?
• What is a primary capability of network monitoring described?
• Which statistic window provides an overview of the packets that have been captured?
• Composite-signature-based analysis uses a series of packets over time; ICMP floods example?
• Which CNM concept contains the configuration of a container's network stack such as routing tables, management of interfaces, and DNS settings?
• What key establishment protocol is used by WPA3, also known as Dragonfly Key Exchange?
• Which HIPAA rule establishes national standards to protect individuals' electronic PHI created, received, used, or maintained by a covered entity?
• Which term describes hardware-level virtualization that makes virtual devices independent of the physical hardware?
• Wireless network interface cards (NICs) or adapters locate and communicate to an access point to provide network access. Which term describes these devices?
• Electromagnetic Interference (EMI) shielding is used to address problems caused by what?
• Which device accepts VPN connections from VPN clients?
• Which policy focuses on directives for configuring or maintaining a system to ensure overall security and includes DMZ policy, encryption policy, acceptable use policy, and intrusion detection and prevention policy?
• Burp Suite is an integrated platform for security testing of web applications.
• In historical terms, Safety Officers were commonly described as what type of professional?
• Security Concept of Operation defines what?
• Which term refers to a storage device that is connected to a network and provides centralized storage for a LAN?
• Which software is described as the most secure, efficient, and fast quantum encryption software?
• Which UPS type is no longer commonly used because it becomes unstable when connected to modern computer power loads?
• Which type is described as emulating the real production network of a target organization?
• This connects a sandbox to a network and abstracts the actual connection to the network from the application. An endpoint aids in maintaining portability, to enable the service to utilize various types of network drivers
• Which capability ensures Kubernetes automatically restarts failed containers and reschedules them on available nodes?
• In IoT architecture, which component is described as the central aggregation and data management point, with access that should be restricted and a command-and-control function?
• Access policies, accountability, continuity of operations, and documentation are described under which security requirement?
• Which of the following best describes WPA3 encryption?
• Which model includes smartphones, wearable devices, autonomous machines, and tags that gather data via embedded sensors?
• Which concept is described as the use of machine-learning techniques to identify threats on mobile devices?
• Which feature helps counter vulnerabilities by keeping IoT devices up to date?
• Which statement best describes the Gateway/Control Tier in an IoT architecture?
• Which principle applies to the IoT communication layer, focusing on machine-to-machine identification, authentication, and encryption rather than human credentials?
• Which mechanism does Kubernetes use to distribute high network traffic across containers to balance the load?
• Which backup type copies all files and is commonly scheduled to run regularly?
• Which HVAC setup is described as the most traditional and commonly used system, with components located both inside and outside the building?
• Flow Graphs are best used to visualize which aspect?
• RC5 was designed by Ronald Rivest for which organization?