Part 2 pretest

What is the access control step that verifies that a user is who he or she claims to be?
A. Qualification
B. Authentication
C. Identification
D. Authorization

What is the security model that determines whether a user can enter a space and obtain secured objects?
A. Authentication
B. Biometrics
C. Access Control
D. Authorization

A user should be aware of which parts of an organization's security policies?
A. Only the security policies that deal with computers
B. Only the user account and password policies
C. Only physical security policies
D. The security policies applicable to the user and the effects of security breaches.

What is created by a flaw in an application that could be exploited by an external attacker?
A. Loss
B. Threat
C. Vulnerability
D. Risk

What form of security testing attempts to exploit known or identified vulnerabilities?
A. Functional testing
B. Vulnerability testing
C. Penetration testing
D. Gray box testing

To ensure that data at rest, data in motion, and data in use retain their integrity without unauthorized modification, removal, or corruption, what system should be in place as part of a data security policy?
A. Data loss prevention
B. Public key infrastructure
C. Data retention
D. Full disk encryption

An It technician identifies and removes unnecessary services and a few obsolete user accounts running on a desktop computer. Which of the following is the technician most likely performing.
A. Host hardening
B. Server hardening
C. Threat modeling
D. Application software hardening

Which type of authentication system uses a one-time password generated by a mobile device?
A. OOB authentication
B. SMS OTP
C. Mobile system management
D. Device-generated OTP

What term refers to the delivery of applications as a service in which resources, software, and data are available to the application and a host via the internet?
A. Hardware emulation
B. External-host private cloud
C. Cloud computing
D. Cloud bursting

What type of encryption uses only a single encryption key to both encrypt and decrypt data?
A. Hash algorithm
B. Asynchronous stream encryption
C. Asymmetric encryption
D. Symmetric encryption

On which of the following encryption concepts is PKI based?
A. Symmetric encryption
B. Asymmetric encryption
C. Elliptic curve encryption
D. Quantum key encryption

What is the a DoS attack that send a flood of synchronization (SYN) request and never sends the final acknowledgment (ACK)?
A. Back door attack
B. Smurf attack
C. Ping Flood
D. SYN Flood