IT Security Attacks and Countermeasures

An organization is developing a new web application that will handle sensitive customer data. Which security measure would be MOST important to integrate during the development process?

A company experiences a data breach. Analysis reveals that several employees used weak, easily guessable passwords. Besides password complexity policies, what is another PRIMARY countermeasure to prevent similar incidents in the future?

Which of these options is the BEST example of a technological control that directly supports the security best practice of 'Employing access control'?

After a security incident, it's discovered that the intrusion occurred due to an unpatched vulnerability in a widely used software application. What preventative measure would have been MOST effective in mitigating this risk?

A company wants to improve its network security posture by implementing devices that filter network traffic. Which device would be MOST suitable for interconnecting different network segments while providing basic network filtering?

A network administrator performs a port scan and receives an 'open' state response. What does this indicate about the service running on that port?

Which of the following authentication factors provides the STRONGEST level of security when used in a multi-factor authentication (MFA) system?

In the context of access control, what is the PRIMARY function of 'authorization'?

A company implements an access control system that requires employees to use both a password and a fingerprint scan to access sensitive data. Which security principles does this system employ?

An organization wants to ensure that all actions performed on its systems can be traced back to a specific user. Which access control element is MOST directly related to achieving this goal?

Which of the following scenarios best illustrates the use of a symmetric key cipher?

In a system employing asymmetric key encryption, what is the primary difference between the public key and the private key?

A user encrypts a file using a symmetric key cipher with a strong key. What is the most significant risk to the confidentiality of the file?

Which of the following is a crucial consideration when choosing an encryption method for data at rest, such as files stored on a hard drive?

A company wants to ensure secure communication between its web server and clients. Which approach is most suitable for establishing a secure channel?

Which security function primarily focuses on limiting unauthorized data access and disclosure?

An organization aims to enhance its security infrastructure by implementing tools that actively prevent security breaches. Which security function aligns best with this objective?

A security team notices a series of unusual login attempts from various geographical locations within a short period. Which security function would be MOST helpful in identifying and addressing this issue?

Which of the following scenarios best describes the application of 'Data Security (PR.DS)'?

A company wants to proactively defend against malware infections. Which action exemplifies the application of 'Protective Technology (PR.PT)'?

Which scenario is MOST suitable for utilizing asymmetric encryption?

What is the primary security advantage of asymmetric encryption compared to symmetric encryption?

Which of the following reflects a key difference in the application of symmetric versus asymmetric encryption?

Which of the following is NOT a best practice for information security?

What is the purpose of implementing network monitoring and analytics management tools as a security best practice?

If a company wants to ensure only authorized personnel can access sensitive financial data, which NIST CSF Protect/Detect function should they implement?

An organization decides to strengthen its data protection strategy. Which action would MOST directly support this goal?

A software development team is creating a new web application that will handle sensitive user data. Besides functional testing, what specific security measure should they prioritize to ensure the application's integrity?

Which security measure provides network access to remote workers while ensuring data encryption?

A network administrator notices suspicious traffic attempting to exploit a known vulnerability. Which security system is best suited to automatically block this traffic in real-time?

An organization wants to implement a security solution that uses machine learning to identify deviations from normal network behavior. Which type of detection method should they employ?

A security analyst is investigating a potential malware outbreak on company laptops. Which endpoint security solution would be most effective in preventing file-based malware attacks and providing investigation capabilities?

A network technician is tasked with identifying which services are running on a server. What process should the technician use to gather this information?

What is the primary function of a port number in network communication?

An organization wants to implement a security measure that identifies potential threats based on the historical trustworthiness of IP addresses. Which type of system is most suitable?

Which of the following actions is an IPS most likely to perform upon detecting a malicious network activity?

What is a key difference between an IDS and an IPS?

A company wishes to ensure that sensitive data transmitted between its headquarters and a remote office remains confidential. Besides encryption, which device can provide routing and filtering?

Risk Assessment

Security Governance

Physical Security Measures

Perform and Test Backups

Routers

Port Scan

Access Control

Authentication

Authorization

Accountability (Auditability)

Data Security (PR.DS)

Protective Technology (PR.PT)

Anomalies and Events (DE.AE)

What is EPP?

What is IDS?

Event Logs

Transaction Logs

Encryption

Cipher

Symmetric Key Cipher

Asymmetric Encryption

Symmetric Encryption

Maintain Security Patches and Updates

Encrypt Data

Perform Risk Assessment

Establish Security Governance

Employ Access Control

Access Control (PR.AC)

Firewall

VPN

Intrusion Detection System (IDS)

Intrusion Prevention System (IPS)

Signature-based Detection

Anomaly-based Detection

Reputation-based Detection

Antimalware/Antivirus

Port Number