EC-Council Network Defense Essentials (NDE) Practice Test

These questions are part of the practice quiz. Start practicing

• It is a free, self-contained wireless-auditing toolkit.
• Which service is described as a cloud-based service focusing on mobile device management (MDM) and mobile application management (MAM) with policy configuration for applications?
• Collecting network infrastructure information for monitoring is used to improve security posture and performance. Which term describes this process?
• WPA2 uses which combination for wireless data encryption?
• Which access control concept determines the usage and access policies for users, often applied to highly confidential data?
• Which cloud service model provides on-demand infrastructure resources like computing power and storage, with the provider managing the underlying hardware?
• Policies used with the compliance of various standards, certifications, and accreditations are described under which security requirement?
• In IoT architecture, which component is described as the central aggregation and data management point, with access that should be restricted and a command-and-control function?
• Which term refers to the infrastructure where processed data is stored after analysis?
• Disk striping with parity, using a dedicated parity drive, is characteristic of which RAID level?
• Standpipe systems differ according to which two characteristics?
• RC4 is described as a variable key-size symmetric-key stream cipher with byte-oriented operations based on a random permutation. Which statement best describes RC4?
• What capability is described as a security principle on the device layer?
• Which standard is intended to help energy industry interpret and apply ISO/IEC 27002:2005?
• Which cable is described as having each pair of wires shielded with foil, reducing external interference?
• What are potential effects of high electromagnetic interference on equipment?
• Which standard is also known as WiMAX and provides fixed broadband wireless metropolitan access networks using a point-to-multipoint architecture?
• Which menu handles configuration profiles and sets preferences?
• Which window displays the protocol hierarchy statistics?
• THC-Hydra is a network logon cracker that supports many services, including IPv6 and RFC 4013.
• Continuous Lighting is described as:
• Which title consists of nine sections and establishes standards for external auditor independence to limit conflicts of interest, including auditor approval requirements, audit partner rotation, and auditor reporting requirements?
• Which UI element provides colorization, font zoom, and the ability to display a packet in a separate window?
• Which backup type copies only files that have changed or been created since the last backup?
• Which rule requires administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronically protected health information?
• Which platform helps you develop, deploy, and operate industrial apps at the edge and in the cloud?
• Which statement best describes Mobile Device Management Solutions?
• Which service allows configuring policies to control applications and devices across the organization, focusing on mobile device management and mobile application management?
• RAID is an example of which type of virtualization that aggregates multiple storage devices into a single logical unit?
• Which role is described as responsible for screening visitors and employees at the main gates or entrances?
• Which toolbar is explicitly stated as non-customizable?
• Standby Lighting is best described as what type of lighting system?
• Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?
• Which caching proxy for the web supports HTTP, HTTPS, FTP, and more, reducing bandwidth by caching and reusing content?
• Which honeypot-based tool is a host-based IDS that attracts attackers by simulating vulnerable services?
• KFSensor is a host-based IDS that acts as a honeypot to attract and detect hackers by simulating vulnerable system services and Trojans.
• Which layer is primarily responsible for data storage, processing, and dashboards for monitoring and proactive decision-making?
• What is a security practice for the cloud component in IoT architecture?
• Which term is defined as an explicit resource on which an access restriction is imposed?
• Which standard defines quality of service (QoS) and is implemented at the MAC layer to support real-time applications?
• Which function is a cryptographic hash function developed by NIST and included in the Secure Hash Standard?
• Which act concerns the processing of information relating to individuals and is associated with data protection in the United Kingdom?
• Which concept refers to the tracking and examining of the activities of network devices to identify weaknesses in the network?
• Which title is described as consisting of nine sections and establishes standards for external auditor independence to limit conflicts of interest?
• NAND flash memory is typically used for what purpose in storage devices?
• Which act prohibits circumvention of digital protections and the removal of copyright management information?
• Which approach includes post-mortem analysis including risk and legal assessments after an incident?
• Which UPS type is no longer commonly used because it becomes unstable when connected to modern computer power loads?
• Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?
• High-level Security Requirements include which elements?
• Which law provides the public the right to request access to records from any federal agency, with nine exemptions?
• Which model determines the access control taken by any possessor of an object to decide the access control of a subject on that object?
• Which tool identifies a steganographed file and reveals the location of the hidden content and the hiding program?
• Which term represents the data that, after processing, is transmitted to the user for action?
• Which component acts as the first point of contact into the Internet for IoT, connecting smart devices to cloud components and supporting bidirectional authentication and automatic updates?
• Which tool helps web security researchers detect time-based blind SQL injection on HTTP headers?
• Which tool is described as an integrated penetration testing tool for web applications?
• Which virtualization enables the logical partitioning of a server's operating system environment by virtualization of storage devices?
• Which UI element filters the traffic based on filter options?
• Which combination of statistic windows is explicitly listed as available in the menu?
• Which of the following is an example of preventive controls?
• Which act enacted to protect the public and investors by increasing the accuracy and reliability of corporate disclosures?
• Which cipher family includes Beale cipher, autokey cipher, Gronsfeld cipher, and Hill cipher?
• Zigbee is the specification used in which IEEE standard?
• In containerized environments using Docker, which networking construct creates a Linux bridge on the host?
• Which menu contains items to access basic help manual pages for command-line tools, online webpages, and the About Wireshark dialog?
• Which term describes an independent examination of cloud service controls to express an opinion on adherence to standards?
• Which Docker networking construct connects container interfaces to a parent host interface (or sub-interfaces)?
• Permissive Policy is best described as:
• Which intrusion detection approach creates models of possible intrusions and compares incoming events against these models to decide if an intrusion occurred?
• Which analysis focuses on detecting malicious payload strings regardless of past history?
• Which wireless technology interconnects devices around a person within a very short range (about 10 meters)?
• The Proactive Approach uses threat intelligence and risk assessment to inform countering future attacks on the target network. Which term is this?
• In this type of virtualization, the guest OS is not aware that it is running in a virtualized environment. The VMM translates commands to binary instructions and forwards them to the host OS.
• Which technology covers a metropolitan area and connects subscriber stations to a base station over wireless or fiber links?
• Which data classification level is described as allowing any person at any level to access unclassified documents?
• Protocol anomaly detection relies on protocol-specific anomalies and identifies flaws in vendors' deployment of the TCP/IP protocol. Which detection approach is this?
• Which virtualization term refers to data virtualization at the file-system level, enabling sharing and protection within software?
• Which security requirement covers actions to be taken for various components that need to be secured such as computer security, operations security, network security, personnel security, and physical security?
• What term refers to a network that spans a metropolitan area and is used to provide broadband access, often using exterior antennas?
• Which role might a cloud consumer interact with to request cloud services instead of contacting a CSP directly?
• StegSpy identifies a steganographed file and detects steganography, the program used to hide the message, and the location of the hidden content.
• Deterrence Controls are used to discourage policy violations and may include security guards and warning signs.
• Which of the following is an example of Infrastructure-as-a-Service (IaaS) provider?
• Which SIEM capability provides static and dynamic monitoring of enterprise systems and networks and analyzes log data to identify suspected activities related to system compromise?
• Movable Lighting is best described as which of the following?
• Promiscuous Policy is described as:
• Which statement best describes the Device Layer in an IoT architecture?
• What does Extensible Authentication Protocol (EAP) primarily provide?
• Which network type can cover a region or the entire globe and often uses embedded cellular radio technologies for data transmission?
• Which act, commonly cited as DPA 2018, governs the processing of personal data in the United Kingdom?
• The Stand by Ferro UPS uses which type of transformer to filter the output?
• Network/IP CCTV cameras can be wired or wireless and transmit images over the Internet. Which statement is correct?
• Which form of virtualization focuses on partitioning the server's operating system environment?
• Standpipe systems have three classifications: Class I - A, Class II - A, Class III - A. These classifications differ in what aspect?
• Packaged Heating and Air-Conditioning System is best suited for locations with what characteristic?
• Which RAID level stripes data across multiple drives with parity distributed among the drives (not a dedicated parity drive)?
• An attacker broadcasts DHCP requests with spoofed MAC addresses with the help of tools such as Yersinia, Hyenae, and Gobbler. Which tool is commonly used to such a DHCP attack?
• Which tool lets you capture and interactively browse the traffic on a computer network and uses WinPcap to capture packets?
• Which cable is described as having a single copper conductor at its center with a plastic insulation layer and a braided shield?
• Which SIEM capability analyzes log data to identify suspected activities related to system compromise?
• Which policy describes starting with all services blocked and enabling safe and necessary services?
• Which honeypot type emulates a real OS and applications and captures more useful data, responding only to preconfigured commands?
• Which act is designed to protect health information held by covered entities and ensure patient rights to that information?
• It connects multiple LANs at the MAC layer and is used for increasing the coverage area of the wireless network. What device is this?
• If informational signatures are undetected, what risk occurs?
• Who acquires and manages computing infrastructure intended for providing services via network access?
• It allows easy recovery of various types of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks.
• Which layer uses ZigBee, Z-Wave, or Bluetooth for inter-device communication?
• Which device is described as being easier to install and offering different modes for wireless transmission?
• Which tool is a robust network threat detection engine capable of real-time intrusion detection, inline intrusion prevention, network security monitoring, and offline pcap processing?
• Which field helps determine whether a packet is from a valid source?
• Electromagnetic Interference (EMI) shielding is used to address problems caused by what?
• Which layer encompasses the physical devices and networks used for connectivity and edge computing?
• Which backup medium is commonly used for archival storage due to scalable capacity?
• Which statement about C-Mount CCTV cameras is true?
• Network monitoring techniques are necessary for establishing service level agreements (SLAs) and compliance. Which outcome best describes the primary aim of these techniques?
• Which concept monitors the restrictions imposed by access control rules and implements a set of rules on the subject's actions on the object?
• Context-based signature analysis analyzes header information such as IP addresses, ports, etc?
• Burp Suite is an integrated platform for security testing of web applications.
• In remote control via mobile apps, which hardware constitutes the IoT ecosystem endpoints?
• Which statement best describes the radiation pattern of reflector antennas?
• A free password security and password recovery tool that supports many operating systems.
• It is a command-line interface SQL injection exploitation tool, used to exploit both union-based and blind Boolean-based injections?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where traditional split systems cannot be used. Which option matches this description?
• Which authorization approach maintains separate authorization details for each resource request?
• Which caching proxy for the web reduces bandwidth by caching and reusing content?
• Which PCI-DSS control prohibits unauthorized outbound traffic from the cardholder data environment to the Internet?
• Policy Description Based on Requirement is best described as:
• Which term describes the party that acquires and manages the computing infrastructure intended for providing cloud services to interested parties via network access?
• High-level Security Requirements primarily focus on which areas?
• It includes VPN specific protocols used to manage tunnels and encapsulate private data, including PPTP and L2TP along with IPsec.
• The Device-to-Cloud model extends data sharing to authorized third parties. Which option best describes this access?
• Who must use the National Provider Identifier (NPI) in HIPAA administrative and financial transactions?
• A wireless modem is a device that allows PCs to connect to a wireless network and access the Internet through an ISP, commonly including USB sticks. What is this device called?
• Which CNM component lies between a sandbox and the transport network, enabling portability across different network drivers?
• Which model describes a device communicating with an intermediate gateway that connects to the cloud?
• Which algorithm uses a sponge construction and is designed to complement the SHA-2 family?
• Which controls are used to detect unauthorized access attempts, such as CCTV and alarms?
• What is the function of the C2 component within the cloud architecture?
• Which technology uses multiple antennas at the transmitter and receiver to improve data rate and link reliability?
• Which component initiates a secure remote connection to a VPN server?
• Which menu contains items to open and merge, capture files, save, print, import and export capture files in whole or in part, and quit the Wireshark application.
• Which term describes wireless network interface cards that locate and communicate to an access point, providing network access for users?
• Which of the following is an example of recovery controls?
• a powerful, adaptable SIEM that delivers real-time threat detection and native SOAR technology to your SOC.
• Which type is described as a proxy through which a client system connects to a server without its knowledge and is entirely invisible to an end user?
• An anomaly is detected when an event occurs outside the tolerance threshold of normal traffic. Which detection approach does this describe?
• Which 802.11 amendment extends the standard to a maximum bandwidth of 54 Mbps using OFDM in the 2.4 GHz band?
• In the past, Safety Officers were typically described as individuals who came from which background?
• Prudent Policy is described as:
• Which IoT component preprocesses the data generated by sensors before sending it to the cloud, reducing the amount of data forwarded?
• Which option is a primary way to access frequently used items from the menu according to the material?
• What is the primary role of the mobile interface in the IoT architecture?
• A software for establishing and maintaining an on-the-fly-encrypted volume (data storage device).
• Which security method does WPA provide for encryption and authentication?
• Which task is NOT listed as a responsibility of the Wireless CCTV Camera?
• Informational are detected by analyzing the data in the payload and matching a text string to a specific set of characters. If undetected, these signatures can open backdoors in a system, providing administrative controls to an outsider.
• ISO/IEC TR 27016 provides guidance for implementing ISMSs in which sector?
• The policy that drives an organization's scope and provides direction to their security policies, with examples like application policy and server policy, is called what?
• Which data label indicates the highest level mentioned in the material that requires a higher clearance and is not accessible to many?
• Which act defines prohibitions against circumvention of technological protection measures and removal of copyright management information?
• Which concept is described as the use of machine-learning techniques to identify threats on mobile devices?
• RC6 is best described as which type of cipher?
• What is the primary role of a RAID controller?
• An omnidirectional antenna provides what pattern?
• Which software is described as the most secure, efficient, and fast quantum encryption software?
• Which HIPAA rule contains provisions relating to compliance and investigation, as well as the imposition of civil monetary penalties for violations of the HIPAA Administrative Simplification Rules and procedures for hearings?
• Which 802.11 amendment is an extension of the standard, offering up to 54 Mbps using OFDM and operating in the 2.4 GHz band?
• Which policy is described as an extremely restrictive security posture, sometimes labeled 'Paranoid Policy'?
• Which type of honeypot is noted for capturing complete information about an attack vector such as techniques and tools?
• Which proxy hides the user's IP address, enabling private surfing?
• Which component is described as sensors embedded in devices that acquire information from the surroundings such as temperature, gases, location, working of industrial machines, and health data of a patient?
• Which act provides federal protections for health information and grants patients rights to that information?
• Storage Area Network (SAN) is best described as which of the following?
• Which approach includes security monitoring methods such as IDS, SIMS, TRS, and IPS?
• What best describes Network Attached Storage (NAS) in a local area network?
• DSA produces what size digital signature and security level?
• Which term describes a storage solution that provides centralized storage over a network and is accessed as a file-level storage by multiple clients?
• Which access control model is described as permissions provided by the system and cannot be amended by users, governed by administrator-defined rules?
• Which of the following is mentioned as a displayed statistic window in the menu?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where what condition exists?
• Which of the following is an example of detective controls?
• Which PCI-DSS requirement calls for a formal process for approving and testing all network connections and changes to firewall and router configurations?
• Which proxy type is described as requiring client software to be configured and is also known as an explicit proxy?
• MD5 outputs a 128-bit digest.
• Which interface is used to connect internal drives to a server?
• In historical terms, Safety Officers were commonly described as what type of professional?
• Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?
• Which approach is primarily used to inform decision making for countering future attacks?
• Which solution is described as a mobile intrusion prevention app that uses machine learning to identify and prevent network-based and host-based threats on iOS and Android?
• What happens in Kubernetes when a node dies?
• Which Docker networking option allows a container to use the host's network namespace?
• LOIC is described as a network stress testing and DoS attack application. Which option best identifies this tool?
• Policy Description Based on Requirement is best described as:
• Atomic-signature-based analysis detects a signature in a single packet?
• Which proxy type uses sockets and does not have caching abilities typical of HTTP proxies?
• Standpipe systems provide water to hose lines by connecting to the water supply. Which statement is true?
• Which algorithm is described as the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS) and adopted as FIPS 186?
• Which statement best describes the functions of intrusion detection systems and intrusion prevention systems?
• Which hashing algorithm uses a sponge construction and is designed to complement SHA-2?
• What is the primary shape of a common reflector antenna?
• Which DoS tool is described as a network stress testing and DoS attack application commonly used to test the resilience of web services?
• Which service provides authentication services such as Single Sign-On, Multi-Factor Authentication, and Identity Governance, managed by a third-party?
• Which authentication method is typically used with WPA2-Enterprise?
• Which data classification level allows access to secret, confidential, restricted, and unclassified data for authorized users, but not top secret?
• This connects a sandbox to a network and abstracts the actual connection to the network from the application. An endpoint aids in maintaining portability, to enable the service to utilize various types of network drivers
• Which act provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets?
• Which term describes a centralized method of granting access decisions across resources due to the complexity of per-resource authorization?
• Emergency Lighting is described as being made of which material?
• The menu contains options to display various statistic windows. Which of the following is NOT among those windows?
• Which statement about the statistics toolbar is true?
• Which cabling is least susceptible to wiretapping threats?
• Which proxy type is described as not transferring the IP address and enabling private surfing?
• C-Mount CCTV cameras use detachable lenses and can cover distances beyond 40 ft, with the ability to use different lenses as distance requires. Which option reflects this?
• The unidirectional antenna with end-fire characteristics is commonly known as which antenna?
• Which antenna is a straight electrical conductor measuring half a wavelength and is commonly described as the doublet?
• Which capability ensures Kubernetes automatically restarts failed containers and reschedules them on available nodes?
• Which honeypot type is described as a proxy between two networks that is entirely invisible to an end user?
• Which description matches the Cloud Layer's role?
• Which SIEM feature aggregates all similar events into a single summary report?
• Which title consists of four sections and defines practices to restore investor confidence in securities analysts?
• Which ISO/IEC TR is designed to guide financial services in implementing ISMS?
• Which HIPAA rule establishes national standards to protect individuals' electronic PHI created, received, used, or maintained by a covered entity?
• Which policy focuses on directives for configuring or maintaining a system to ensure overall security and includes DMZ policy, encryption policy, acceptable use policy, and intrusion detection and prevention policy?
• Which of the following best describes WPA3 encryption?
• Which statement correctly describes the cloud component's risk profile in IoT architecture?
• Which model describes direct communication from IoT device to cloud without an intermediary gateway?
• What is the method of transmitting radio signals by rapidly switching the carrier among many frequency channels?
• Dome CCTV cameras are dome-shaped and provide wide-angle surveillance. Which option best describes this feature?
• Which CNM concept contains the configuration of a container's network stack such as routing tables, management of interfaces, and DNS settings?
• Which tool can be used to extract hidden data from steganographic content?
• RSA is a public-key cryptosystem used for Internet encryption and authentication. It is primarily used for which purpose?
• In RAID Level 0, data is striped across disks with no redundancy.
• Which term refers to an action performed by a subject on an object, such as deleting a file?
• Which backup strategy is described as a combination of a full backup and an incremental backup?
• Which policy provides high-level direction for an organization's information security program?
• RC4 is notable for having what kind of key usage?
• Which element allows following a stream including TCP, UDP, and SSL?
• Which security requirement directs the usage of technology-based systems with guidelines and includes examples such as remote access, wireless policies, and password policies?
• Which CNM construct represents a collection of endpoints that have connectivity between them and can be used to implement features like Linux bridge or VLAN?
• Which model assigns permissions to a user role dynamically based on administrator-defined rules?
• RADIUS is best described as what?
• Which PCI-DSS requirement 1.3.5 entails documentation and business justification for use of all services, protocols, and ports allowed, including security features for insecure protocols?
• It is an all-in-one burning, authoring, and backup Solution.
• RC5 was designed by Ronald Rivest for which organization?
• Which PCI-DSS requirement mandates antivirus software deployment on systems commonly affected by malicious software?
• Which mechanism does Kubernetes use to distribute high network traffic across containers to balance the load?
• Allocation of Security Enforcement to Architecture Elements describes what approach?
• The Retrospective Approach examines the causes of attacks and includes fault finding mechanisms such as protocol analyzers and traffic monitors, as well as CSIRT and CERT. What is this approach called?
• In Kubernetes networking, how is a container typically identified for addressing, enabling traffic routing?
• Which layer provides dashboards for monitoring and proactive decision-making?
• What key establishment protocol is used by WPA3, also known as Dragonfly Key Exchange?
• Which term describes the active entity that attempts to access resources?
• Which term describes an action performed by a subject on an object?
• Which storage option set is supported by Kubernetes, including local storage, public cloud providers, and network storage?
• Which concept describes the data collected, after traveling through the gateway, arriving at the cloud, where it is stored and subjected to data analysis, and then transmitted to the user who takes actions based on the information received?
• Which type of honeypot emulates the real production network of a target organization, drawing attackers to the critical production system?
• Which statement best describes cameras according to the material?
• Which data classification level indicates documents may be highly confidential or only confidential?
• What is the term for a straight electrical conductor measuring half a wavelength, fed at the center, and used as a basic balanced antenna?
• Which data classification level follows Unclassified and precedes Secret in typical hierarchies?
• Which component includes PPTP and L2TP together with IPsec for VPN tunneling?
• Which category includes examples such as Firewall, NAC, NAP, IPSec, and SSL to prevent threats?
• Which term describes traffic signatures that may appear suspicious but might not be malicious?
• Which Docker networking option enables a container to use the host's networking stack?
• Which term describes the framework that encrypts data and restricts access to authorized apps on mobile devices?
• What is the purpose of hot and cold aisles in data centers?
• Which of the following is an example of deterrent controls?
• The telecom ISMS guide TR 27015 has been published identically as ITU-T X.1051 and which ISO/IEC standard?
• Which cryptographic tool is described as using strong encryption algorithms to hide computer files?
• Which RAID level uses mirroring to provide data availability when a drive fails?
• Which term describes a party that provides access to cloud consumers via a network or other access devices?
• Access policies, accountability, continuity of operations, and documentation are described under which security requirement?
• What is a primary capability of network monitoring described?
• Which term describes traffic containing signatures indicating an attempt to gain unauthorized access?
• Which all-in-one burning, authoring, and backup Solution?
• Which statement about WPA2-Enterprise authentication is correct?
• Which backup type copies only files that have changed since the last backup, with the last backup potentially being of any type?
• Which term best describes a proactive approach to detect unauthorized access attempts based on traffic signatures?
• Which statement best defines HMAC?
• In WPA3, which process results in each wireless station receiving a shared secret key over a secure channel distinct from 802.11 network communications?
• Which type of solution protects organizations from threats on iOS and Android using different security technologies?
• Which term describes traffic signatures that indicate a DoS attempt floods a server?
• Which security policy category includes backup and restore policy as an example?
• Which tool simplifies encoding and decoding of text data, enabling compression, encryption, and conversion to text for clipboard or text file storage?
• Tasklist displays the list of applications and services along with their process IDs (PIDs) for all tasks running on a local or remotely connected computer.
• Which policy type includes policies for servers and system security?
• Which tool is an integrated penetration testing tool for web applications?
• Which term describes restricting access to data based on data sensitivity and user clearance?
• Which component provides nonvolatile storage for the RAID system's primary cache?
• Which title is described as consisting of nine sections and addressing external auditor independence?
• Zigbee is the specification used in which IEEE standard?
• Which feature should the edge gateway support to counter vulnerabilities and maintain secure operation?
• The ITU-T X.1051 document corresponds to which ISO/IEC TR?
• Which standard is an enhanced version of 802.11a and 802.11b and supports regulatory domains?
• Which menu includes options to manipulate, display and apply filters, enable or disable protocol dissection, configure user-specified decodes, and follow a different stream including TCP, UDP, and SSL.
• Which menu controls display options like colorization, font zoom, and windowing of a packet?
• Which term is described as the resource that monitors the restrictions and enforces rules on the subject's actions?
• Which term is used to describe software and services enabling an organization to secure, manage, and distribute enterprise applications on user mobile devices, without interfering with personal apps and data?
• Which firewall component checks the protocol in use to decide whether to allow or deny a packet?
• Security Concept of Operation defines what?
• Which set of concepts is included in security policy requirements per ISO/IEC 27039?
• Which model includes smartphones, wearable devices, autonomous machines, and tags that gather data via embedded sensors?
• Anomaly detection relies on a database of anomalies to identify deviations from normal behavior; which best describes this approach?
• The Preventive Approach consists of methods or techniques that can prevent threats in a target network, with examples like firewall, NAC, NAP, IPSec, and SSL.
• Which task is NOT a responsibility of Plant's Security Officers or Supervisors?
• Which IoT component is responsible for preprocessing the large volume of sensor data before transmission to the cloud?
• Which policy forbids everything and imposes strict restrictions on all company computers and Internet usage?
• Which cloud service model offers development tools and deployment platforms on demand, allowing developers to deploy and configure applications without managing the underlying infrastructure?
• Which statement best describes RAID Level 1?
• Which honeypot type emulates the real production network and aims to draw attackers toward the production system?
• It is also called a media gateway or a remote-access server (RAS) and is responsible for setting up and maintaining each tunnel in a remote-access VPN. Users connect to this to use a VPN.
• Which UI element displays the captured packet bytes in a hex dump format?
• Which analysis detects attack patterns across multiple packets, such as ICMP floods?
• Modern microprocessor architectures have special instructions to aid the virtualization of hardware, enabling the guest OS to execute privileged instructions directly on the processor.
• Standby power supplies for personal computers are most commonly used for which equipment?
• Which Docker networking construct is created with the overlay driver and enables container-to-container communication over the physical network infrastructure?
• Packaged Heating and Air-Conditioning System is most appropriate in which scenario?
• Which statement best describes the Gateway/Control Tier in an IoT architecture?
• Sprinkler systems are mainly used in areas where firefighters are not able to reach with their hose lines. Which option is true?
• With evolving technology, understanding and managing the demand for network resources is important. Which term describes this concept?
• Which menu can start, stop, or restart capture and edit capture filters?
• HOIC is described as a network stress and DoS/DDoS attack application written in BASIC. Which DoS tool is this?
• The layer that aggregates information and informs decision-making across stakeholders is the which layer?
• Which statistic window would help analyze traffic composition by protocol?
• Which UI element allows filtering the traffic being displayed in the capture window?
• Which policy helps in managing devices securely in BYOD environments, reducing support costs, mitigating security risks, and reducing business discontinuity?
• Which RAID level uses disk striping with parity distributed across drives?
• What is Cain & Abel described as?
• Which act is commonly associated with the protection of personal health information and patient rights in the healthcare sector?
• In which virtualization type is the guest operating system aware of the virtual environment and communicates with the host to request resources?
• In the gateway-mediated model, which component acts as an intermediary between a device and the cloud?
• Which term describes virtualization that uses storage area network (SAN) technology to pool storage for multiple virtual machines?
• Which principle applies to the IoT communication layer, focusing on machine-to-machine identification, authentication, and encryption rather than human credentials?
• Which tool is an integrated platform for security testing of web applications?
• Wireless network interface cards (NICs) or adapters locate and communicate to an access point to provide network access. Which term describes these devices?
• Which component is described as acquiring information from sensors such as temperature, gases, location, and health data?
• What does IDaaS stand for in cloud services?
• Which Kubernetes concept is responsible for placing containers on nodes based on the resources and constraints specified by the user?
• Which entity acts as an intermediary that provides connectivity and transport services between CSPs and cloud consumers?
• Standby Lighting is an extension of which type of lighting system?
• What function does the Go menu provide?
• Low-interaction Honeypots are characterized by emulating only a limited number of services and generating an error for unexpected actions.
• Which firewall element checks if the packet has SYN, ACK, or other bits set for establishing a connection?
• Which virtualization describes virtualization of storage devices using data striping and mirroring, with RAID listed as an example?
• The need for this came into existence when it became difficult to implement the authorization process individually for each resource.
• Which act requires financial institutions to explain how they share and protect their customers' private information?
• Sprinkler systems are used primarily to avoid human and asset loss. Which of the following statements reflects this purpose?
• This CNM concept contains the configuration of a container's network stack such as routing table, management of container's interfaces, and DNS settings. CNM sandbox can be implemented for Windows HNS, Linux network namespace, or a FreeBSD jail
• Explicit proxies are commonly referred to as Non-transparent proxies and require client software to be configured. Which statement best describes this requirement?
• What is the primary purpose of Mobile Content Management (MCM) in securing mobile access to corporate data?
• OpenStego provides data hiding and watermarking capabilities and can be used to detect unauthorized file copying.
• Which spreading technique multiplies the data with a pseudo-random noise sequence to spread the spectrum?
• IO Graphs are used to visualize which metric?
• Which authentication uses a null method and allows a device to associate with an AP via cleartext transmission?
• Block Interleaved Distributed Parity describes a RAID level that stripes data across multiple drives with parity shared across all members. Which RAID level uses this parity scheme?
• The telecom ISMS guide TR 27015 has identical text published as ITU-T X.1051 and which ISO/IEC standard?
• Which layer is associated with ZigBee, Z-Wave, or Bluetooth for inter-device communications?
• Which term refers to methods or techniques used to inform decision making for countering future attacks on the target network?
• Which statement best reflects the need to implement both preventive and reactive approaches for network security?
• Flow Graphs are best used to visualize which aspect?
• Which statement best describes Decentralized Authorization?
• Which graph type would best illustrate the relationships between distinct network flows?
• Windows Information Protection provides endpoint DLP capabilities and can be configured to store business data only on approved devices and applications. Which technology is this?
• Which cable reduces crosstalk and interference between pairs of wires?
• What is the primary purpose of intrusion detection systems (IDSs)?
• Which technology covers areas larger than a WLAN and supports cellular technologies such as GSM and CDMA?
• Which backup type copies all files and is commonly scheduled to run regularly?
• Which term describes hardware-level virtualization that makes virtual devices independent of the physical hardware?
• Which of the following is NOT a named access control model described in the material?
• Hybrid Heat Split System uses what as the heat source instead of gas furnace heat?
• Which spread spectrum technique multiplies the original data signal with a pseudo-random noise spreading code to protect against interference?
• What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?
• DES stands for which term?
• Which tool is described as a password recovery tool that recovers passwords by sniffing the network and cracking encrypted passwords?
• What is the main function of intrusion prevention systems (IPSs)?
• Which guideline addresses financial services ISMS adoption within the ISO/IEC 27000 family?
• Which wireless technique reduces interference and increases channel robustness in 4G and 5G networks?
• Which device accepts VPN connections from VPN clients?
• Composite-signature-based analysis uses a series of packets over time; ICMP floods example?
• Which menu contains items to find a packet, time reference, and mark one or more packets. It handles configuration profiles and sets preferences.
• Which software is a free, self-contained wireless-auditing toolkit?
• Which menu contains items to navigate to a specific packet including a previous packet, the next packet, the corresponding packet, the first packet, and the last packet?
• Which hash function outputs a 128-bit digest?
• According to the material, Microsoft Intune is described as a tool used for fingerprinting and exploiting which infrastructure?
• What is the purpose of implementing a DMZ in a network security design?
• WPA3 employs which encryption and authentication scheme?
• Which UPS configuration is most commonly used for server rooms and is connected to the battery during a power failure?
• Which HVAC setup is described as the most traditional and commonly used system, with components located both inside and outside the building?
• Emergency Lighting is described as being made of which material?
• Which standard is mainly used for exchanging data between fixed and mobile devices over short distances?
• Which statistic window provides an overview of the packets that have been captured?
• Which statement is true about WPA2-Personal?
• Which tool is used to create and manage encrypted volumes for data storage?
• RAID 0 characteristics: Which statement is true?
• Which feature helps counter vulnerabilities by keeping IoT devices up to date?
• ISO/IEC 27011 is a Technical Report intended to help which sector interpret ISO/IEC 27002:2005 to secure electronic process control systems?
• Which product is an example of anti-Trojan software?
• What does OFDM stand for in digital communications?
• Which mode is mainly used to deliver password-based authentication?
• In WPA3, which concept used in WPA2-Personal is replaced by Dragonfly Key Exchange?
• A collection of endpoints that have connectivity between them. When a network is created or updated, the corresponding driver is notified. A CNM network can be used to implement a Linux bridge, VLAN, etc.
• In VPN terminology, which device terminates VPN tunnels at the network edge?
• Which mode uses a pre-shared key (PSK) to protect network access?
• AES stands for which of the following?
• Which is the cipher type in which letters are rearranged according to a regular system?
• Which antenna is a unidirectional antenna with a reflector, a dipole, and directors, designed to produce an end-fire radiation pattern?
• Content-based signature analysis detects signatures by analyzing payload?
• What is the recommended authentication approach to ensure trusted communication between edge devices and the cloud?
• Which SIEM capability collects and manages all the object access audit logs at the central repository to track access attempts?
• Which statement characterizes WEP encryption?
• A security-first SaaS technology used to operate IoT products in a reliable, scalable, and secure manner.
• Which virtualization term refers to virtualization of data at the file-system level to enable sharing and protection?
• Which term is described as offering various access control mechanisms for network devices like routers and switches?
• ISO/IEC TR 27015 is the ISMS implementation guide for which industry?
• Which term best describes a framework for managing mobile devices and corporate apps used by employees on personal devices?
• Which standard defines the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS)?
• Which term describes traffic signatures indicating an attempt to gain information?
• Which cloud service model delivers software applications to subscribers over the internet on a pay-as-you-go basis?
• RC5 was designed by which cryptographer?
• A computer that initiates a secure remote connection to a VPN server is known as what?
• Which toolbar provides quick access to frequently used items from the menu and cannot be customized by the user?
• Which standard is used to declare regulatory domains among 802.11 amendments?
• Displays the captured packets?
• Which authentication enables a user to authenticate themselves to multiple servers on a network with a single password without re-entering it every time?
• For a container that fails to respond to health checks, what does Kubernetes do?
• In symmetric-key cryptosystems, what is true about the keys?
• What security consideration is highlighted for the cloud layer in IoT architecture?
• What is the National Provider Identifier (NPI) used for?
• Which title consists of eight sections and mandates that senior executives take individual responsibility for the accuracy and completeness of corporate financial reports?
• Which type is described as emulating the real production network of a target organization?
• What authorization model provides access to resources indirectly after a user is authorized for a primary resource?
• Which backup media is described as portable and suitable for enterprise-level backups?
• Which cable is described as being prone to wiretapping?
• Which controls are used to prevent unauthorized access to resources and may include fences, locks, biometrics, and mantraps?
• Which term describes software and services enabling secure distribution of enterprise apps on mobile devices, without interfering with personal apps and data?
• Wi-Fi security auditing tools ability to detect, analyze, and identify wireless threats?
• Which backup type backs up all changes made since the last full backup?
• Which data classification level is described as only a few people can access the data or object?
• Which data classification level requires no access permissions and allows any person to access unclassified documents?
• The statistics menu option that provides quick access to items is described as which of the following?
• Which standard corresponds to WLANs and historically uses FHSS or DSSS as the frequency hopping spectrum?
• Which document is the telecom ISMS implementation guide?
• Which controls are designed to discourage violations by signaling consequences, such as warning signs and security guards?
• Which cloud service model delivers application software to subscribers on-demand over the internet?
• Dome CCTV cameras are typically used for indoor security and are dome-shaped to prevent damage. Which of the following statements is true?
• DES stands for which of the following?
• Which backup medium is readily available at reasonable prices and can store more data than DVDs?
• Which SIEM function stores logged data in a central repository for long-term compliance and for forensic analysis?
• What shape are most reflector antennas?
• IO Graphs primarily display:
• Which panel shows detailed information about captured packets at a granular level?
• In the IoT architecture, which components are endpoints that acquire data for a use case when remotely controlled by mobile apps?
• Which device is used to connect two or more LANs at the MAC layer to extend wireless coverage?
• RSA is based on which area of mathematics?
• Which term refers to a storage device that is connected to a network and provides centralized storage for a LAN?
• A non-transparent proxy is described as modifying a request or response and the client is made aware of the proxy's existence. Which proxy type matches this description?
• Non-transparent proxies provide added services to the user agent such as group annotation services, media-type transformation, protocol reduction, and anonymity filtering. Which service is listed?
• Which tool is a command-line SQL injection exploitation tool?
• Which DoS tool is described as a network stress and DoS/DDoS attack application?