What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

Autor Flashcards Open Source App

O tomto balíčku

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Kartičky v tomto balíčku

Kartička 1
Otázka
What does an information security policy establish?
Odpověď
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kartička 2
Otázka
What is phishing?
Odpověď
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kartička 3
Otázka
What does a public-key certificate bind to an identity?
Odpověď
A public key, together with identifying information and the issuer's signature.
Kartička 4
Otázka
What is data at rest?
Odpověď
Data stored on media such as disks, databases, backups, or mobile devices.
Kartička 5
Otázka
How does policy-driven access control decide a zero-trust access request?
Odpověď
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kartička 6
Otázka
What does establishing a secure baseline produce?
Odpověď
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kartička 7
Otázka
What is hashing used to verify?
Odpověď
Whether data has changed by comparing fixed-length digest values.
Kartička 8
Otázka
What is impersonation in social engineering?
Odpověď
Pretending to be a trusted person or organization to obtain access, data, or action.
Kartička 9
Otázka
What is virtualization?
Odpověď
Abstracting physical compute so multiple isolated guest systems can share a host.
Kartička 10
Otázka
What is chain of custody?
Odpověď
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kartička 11
Otázka
What is quantitative risk analysis?
Odpověď
Estimating risk with numerical values such as money, frequency, or probability.
Kartička 12
Otázka
What is a phishing awareness campaign?
Odpověď
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kartička 13
Otázka
What is high availability?
Odpověď
Designing a service to remain accessible despite expected component failures.
Kartička 14
Otázka
What is a network security zone?
Odpověď
A group of systems with similar trust, function, or control requirements.
Kartička 15
Otázka
What is risk transfer?
Odpověď
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kartička 16
Otázka
What is media sanitization?
Odpověď
Making stored data infeasible to recover for the intended level of protection.
Kartička 17
Otázka
What does CVSS provide?
Odpověď
A standardized way to describe a vulnerability's technical severity characteristics.
Kartička 18
Otázka
What does security alerting do?
Odpověď
It turns matched events or behavior into a notification that the right responder can review.
Kartička 19
Otázka
What does a firewall rule enforce?
Odpověď
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kartička 20
Otázka
What is deprovisioning?
Odpověď
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kartička 21
Otázka
How does inline placement differ from a tap or monitor port?
Odpověď
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kartička 22
Otázka
What is asymmetric encryption?
Odpověď
Encryption that uses a mathematically related public and private key pair.
Kartička 23
Otázka
What does SPF authorize?
Odpověď
Which mail servers may send mail for a domain in the SMTP envelope.
Kartička 24
Otázka
What is a possession factor?
Odpověď
Something the claimant has, such as a cryptographic authenticator.
Kartička 25
Otázka
What does ordinary TLS usually protect and authenticate?
Odpověď
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kartička 26
Otázka
What is single loss expectancy?
Odpověď
The estimated loss from one occurrence of a risk event.
Kartička 27
Otázka
What does a certificate authority do?
Odpověď
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kartička 28
Otázka
What is a detective control meant to do?
Odpověď
Identify that an unwanted event has happened or is happening.
Kartička 29
Otázka
What is the security purpose of change-control approval?
Odpověď
Ensure authorized reviewers assess risk before the production change occurs.
Kartička 30
Otázka
What is shadow IT?
Odpověď
Technology used for organizational work without required approval or oversight.
Kartička 31
Otázka
What is a buffer overflow vulnerability?
Odpověď
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kartička 32
Otázka
What is ransomware?
Odpověď
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kartička 33
Otázka
How does network segmentation limit an incident?
Odpověď
It restricts communication paths and reduces lateral movement between zones.
Kartička 34
Otázka
How do load balancing and clustering support availability differently?
Odpověď
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kartička 35
Otázka
What is vendor due diligence?
Odpověď
Evaluating a provider's security, capability, stability, and fit before commitment.
Kartička 36
Otázka
Who is a data subject?
Odpověď
The person whose personal data is collected or processed.
Kartička 37
Otázka
What is attestation?
Odpověď
A formal assertion or report about a subject matter, often supported by an independent examination.
Kartička 38
Otázka
What is a replay attack?
Odpověď
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kartička 39
Otázka
What does a wireless site survey establish?
Odpověď
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kartička 40
Otázka
What is the time-of-check stage of a race-condition vulnerability?
Odpověď
The application verifies a condition or resource state before acting on it.
Kartička 41
Otázka
What is a penetration test?
Odpověď
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kartička 42
Otázka
What is a cold recovery site?
Odpověď
A facility with basic space and utilities but little preinstalled technology or current data.
Kartička 43
Otázka
What is data in transit?
Odpověď
Data moving between systems or across a network.
Kartička 44
Otázka
What is a vendor security questionnaire?
Odpověď
A structured request for information about a provider's controls and practices.
Kartička 45
Otázka
How does an internal actor's starting position differ from an external actor's?
Odpověď
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kartička 46
Otázka
What can unexpected account lockouts indicate?
Odpověď
Password guessing, credential stuffing, user error, or a broken client.
Kartička 47
Otázka
How do permissions enforce access control?
Odpověď
They specify which actions a subject may perform on a particular resource.
Kartička 48
Otázka
What is log aggregation?
Odpověď
Central collection of logs from multiple sources for search, correlation, and retention.
Kartička 49
Otázka
Why plan a service restart as part of a change?
Odpověď
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kartička 50
Otázka
What is infrastructure as code?
Odpověď
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kartička 51
Otázka
What should security-awareness program development start with?
Odpověď
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kartička 52
Otázka
What is a voice-based social-engineering attack called?
Odpověď
Vishing.
Kartička 53
Otázka
What happens during incident-response preparation?
Odpověď
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kartička 54
Otázka
What does an offensive penetration-testing team do?
Odpověď
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kartička 55
Otázka
What is federation?
Odpověď
One security domain relies on identity assertions from another trusted domain.
Kartička 56
Otázka
What is asset classification?
Odpověď
Grouping an asset by sensitivity, criticality, or required handling.
Kartička 57
Otázka
What is cross-site scripting?
Odpověď
Injection of script-capable content that a browser executes in another site's security context.
Kartička 58
Otázka
What can IDS or IPS trends reveal?
Odpověď
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kartička 59
Otázka
What can unexpected resource inaccessibility indicate?
Odpověď
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kartička 60
Otázka
What is a corrective control meant to do?
Odpověď
Limit damage and restore a secure state after an event.
Kartička 61
Otázka
How do containers differ from virtual machines?
Odpověď
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kartička 62
Otázka
How does an active security device differ from a passive one?
Odpověď
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kartička 63
Otázka
Why is unsupported software a persistent attack surface?
Odpověď
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kartička 64
Otázka
What is annualized rate of occurrence?
Odpověď
The estimated number of times a risk event occurs per year.
Kartička 65
Otázka
What is an inherence factor?
Odpověď
A biometric characteristic of the claimant.
Kartička 66
Otázka
What do a threat actor's sophistication and capability describe?
Odpověď
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kartička 67
Otázka
What is a SIEM?
Odpověď
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kartička 68
Otázka
What is sideloading?
Odpověď
Installing software from outside the platform's approved distribution path.
Kartička 69
Otázka
What does an IDS or IPS signature match?
Odpověď
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kartička 70
Otázka
Why are embedded systems often difficult to patch?
Odpověď
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kartička 71
Otázka
What is a virtual private network?
Odpověď
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kartička 72
Otázka
What should an initial security-awareness report establish?
Odpověď
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kartička 73
Otázka
What is symmetric encryption?
Odpověď
Encryption that uses the same secret key to encrypt and decrypt data.
Kartička 74
Otázka
What happens during incident detection?
Odpověď
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kartička 75
Otázka
What is recovery time objective?
Odpověď
The target maximum time to restore a function after disruption.
Kartička 76
Otázka
Why prioritize password length?
Odpověď
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kartička 77
Otázka
What must sanitization accomplish before an asset leaves organizational control?
Odpověď
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kartička 78
Otázka
What is a real-time operating system designed to provide?
Odpověď
Predictable response timing for tasks with strict deadlines.
Kartička 79
Otázka
What does fail-open behavior do when a control fails?
Odpověď
It permits traffic or access to preserve availability.
Kartička 80
Otázka
What is jailbreaking or rooting a mobile device?
Odpověď
Removing platform restrictions to gain privileged control over the operating system.
Kartička 81
Otázka
What does network access control enforce?
Odpověď
Identity, device posture, and access policy at network connection time and during a session.
Kartička 82
Otázka
What does data loss prevention do?
Odpověď
Detects and may block sensitive data use or transfer that violates policy.
Kartička 83
Otázka
What security property does a blockchain provide?
Odpověď
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kartička 84
Otázka
What is recovery point objective?
Odpověď
The target maximum acceptable data loss measured backward in time.
Kartička 85
Otázka
How do ICS and SCADA relate?
Odpověď
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kartička 86
Otázka
What does fail-closed behavior do when a control fails?
Odpověď
It denies traffic or access to preserve security.
Kartička 87
Otázka
Which keys create and verify a typical digital signature?
Odpověď
The signer creates it with a private key, and others verify it with the corresponding public key.
Kartička 88
Otázka
What is SQL injection?
Odpověď
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kartička 89
Otázka
What does DKIM verify?
Odpověď
That selected message content was signed by a domain and was not altered after signing.
Kartička 90
Otázka
What is post-incident activity?
Odpověď
Learning from the event and improving controls, plans, and recovery based on evidence.
Kartička 91
Otázka
What characterizes an expansionary risk appetite?
Odpověď
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kartička 92
Otázka
How do centralized and decentralized architectures differ?
Odpověď
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kartička 93
Otázka
What does a certificate revocation list publish?
Odpověď
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kartička 94
Otázka
What is a legal hold?
Odpověď
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kartička 95
Otázka
What is exposure factor in quantitative risk analysis?
Odpověď
The estimated percentage of an asset's value lost in one event.
Kartička 96
Otázka
What is decentralized architecture?
Odpověď
Control or service responsibility is distributed across multiple independent components or locations.
Kartička 97
Otázka
What is tokenization?
Odpověď
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kartička 98
Otázka
How can automation act as a workforce multiplier?
Odpověď
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kartička 99
Otázka
What can endpoint process logs reveal?
Odpověď
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kartička 100
Otázka
What does the CIA triad protect?
Odpověď
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kartička 101
Otázka
How does data masking protect information?
Odpověď
It hides selected values or characters while preserving a usable representation.
Kartička 102
Otázka
How can a national requirement affect security governance?
Odpověď
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kartička 103
Otázka
What do integrations and APIs provide to security orchestration?
Odpověď
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kartička 104
Otázka
What makes a compliance report external?
Odpověď
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kartička 105
Otázka
What does a cryptographic algorithm define?
Odpověď
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kartička 106
Otázka
Why compare systems with a secure baseline regularly?
Odpověď
To detect drift, unauthorized changes, and missing hardening.
Kartička 107
Otázka
What does integrity protect?
Odpověď
The accuracy and completeness of data and systems against unauthorized change.
Kartička 108
Otázka
What does vulnerability classification organize?
Odpověď
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kartička 109
Otázka
What does a password standard define?
Odpověď
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kartička 110
Otázka
What technology capacity must a recovery design plan for?
Odpověď
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kartička 111
Otázka
What does a confidential data classification indicate?
Odpověď
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kartička 112
Otázka
What makes a vendor assessment independent?
Odpověď
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kartička 113
Otázka
What lets a worm spread without attaching itself to another file?
Odpověď
It is a standalone program that replicates across reachable systems or services.
Kartička 114
Otázka
What is microsegmentation?
Odpověď
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kartička 115
Otázka
What can application logs reveal?
Odpověď
Transactions, errors, user actions, and application-specific security events.
Kartička 116
Otázka
What does deploying a secure baseline require?
Odpověď
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kartička 117
Otázka
How can resource-provisioning automation improve security?
Odpověď
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kartička 118
Otázka
What does availability protect?
Odpověď
Reliable, timely access to systems and data when authorized users need them.
Kartička 119
Otázka
Why must a change request describe business impact?
Odpověď
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kartička 120
Otázka
What does an authenticated vulnerability scan add?
Odpověď
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kartička 121
Otázka
What does a change-management procedure specify?
Odpověď
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kartička 122
Otázka
What is a sanction for noncompliance?
Odpověď
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kartička 123
Otázka
How can email deliver a security attack?
Odpověď
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kartička 124
Otázka
What is an internal compliance audit?
Odpověď
An organization-led examination of whether selected operations and controls meet defined requirements.
Kartička 125
Otázka
What is a Trojan?
Odpověď
Malware disguised as legitimate or desirable software.
Kartička 126
Otázka
What is clustering?
Odpověď
Multiple systems work together to provide a service and tolerate member failure.
Kartička 127
Otázka
What makes data regulated?
Odpověď
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kartička 128
Otázka
What does a wireless heat map show?
Odpověď
Measured or modeled signal strength and coverage across a physical area.
Kartička 129
Otázka
How should vendor criticality affect due diligence?
Odpověď
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kartička 130
Otázka
How can a digital signature support non-repudiation?
Odpověď
It provides evidence that the holder of a private key signed specific data.
Kartička 131
Otázka
What should vulnerability prioritization consider beyond severity?
Odpověď
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kartička 132
Otázka
What is a security guideline?
Odpověď
Recommended practice that allows judgment unless adopted as a requirement.
Kartička 133
Otázka
What usually distinguishes a nation-state threat actor?
Odpověď
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kartička 134
Otázka
What is spyware?
Odpověď
Software that secretly collects information about a user or system.
Kartička 135
Otázka
Why maintain an allow list for applications?
Odpověď
Only explicitly approved software is permitted to execute.
Kartička 136
Otázka
How can an image become an attack vector?
Odpověď
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kartička 137
Otázka
What makes a security control technical?
Odpověď
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kartička 138
Otázka
What is identity proofing?
Odpověď
Establishing that a person is who they claim to be before issuing an account or credential.
Kartička 139
Otázka
What is an automated security guardrail?
Odpověď
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kartička 140
Otázka
Why assign an owner to a planned change?
Odpověď
To make one party accountable for coordination, execution, and follow-through.
Kartička 141
Otázka
How can national privacy law affect data handling?
Odpověď
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kartička 142
Otázka
What is continuity of operations?
Odpověď
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kartička 143
Otázka
What security tradeoff comes with BYOD?
Odpověď
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kartička 144
Otázka
How should policies and handbooks support security training?
Odpověď
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kartička 145
Otázka
What is a keylogger?
Odpověď
A tool that records keystrokes to capture data such as credentials.
Kartička 146
Otázka
What makes information a trade secret?
Odpověď
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kartička 147
Otázka
What does authentication establish?
Odpověď
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kartička 148
Otázka
What risk comes from an untrusted file attachment?
Odpověď
Opening or parsing it can execute malicious code or expose data.
Kartička 149
Otázka
How does risk tolerance affect vulnerability remediation?
Odpověď
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kartička 150
Otázka
How can a global requirement affect security governance?
Odpověď
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kartička 151
Otázka
Why should questionnaire answers be supported by evidence?
Odpověď
Self-assertions alone may not prove that controls are designed or operating effectively.
Kartička 152
Otázka
What is an independent third-party audit?
Odpověď
An external party with suitable independence examines evidence against defined criteria.
Kartička 153
Otázka
What do account provisioning and deprovisioning do?
Odpověď
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kartička 154
Otázka
What is an unskilled attacker commonly called?
Odpověď
A script kiddie: someone who relies on tools or instructions created by others.
Kartička 155
Otázka
What is a rootkit?
Odpověď
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kartička 156
Otázka
What does an access control list enforce?
Odpověď
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kartička 157
Otázka
What should system security monitoring observe?
Odpověď
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kartička 158
Otázka
What can operating-system security logs reveal?
Odpověď
Authentication, privilege use, policy changes, services, and other host security events.
Kartička 159
Otázka
Why isolate operational technology from general business networks?
Odpověď
To limit attack paths into safety- and availability-critical processes.
Kartička 160
Otázka
What is the COPE mobile deployment model?
Odpověď
The organization owns the device but permits defined personal use while retaining management control.
Kartička 161
Otázka
What security work belongs in asset acquisition and procurement?
Odpověď
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kartička 162
Otázka
How can user-provisioning automation improve security?
Odpověď
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kartička 163
Otázka
What people capacity must a continuity plan account for?
Odpověď
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kartička 164
Otázka
What do authorization models define?
Odpověď
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kartička 165
Otázka
Why are removable devices an attack vector?
Odpověď
They can introduce malware or remove data while bypassing network controls.
Kartička 166
Otázka
What should predeployment change-test results show?
Odpověď
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kartička 167
Otázka
What is the time-of-use stage of a race-condition vulnerability?
Odpověď
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kartička 168
Otázka
What is data in use?
Odpověď
Data actively processed in memory or by an application.
Kartička 169
Otázka
What does open-source vulnerability intelligence contribute?
Odpověď
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kartička 170
Otázka
What can file-integrity monitoring detect?
Odpověď
Unexpected changes to protected files, directories, or configuration.
Kartička 171
Otázka
Why should deprovisioning be prompt?
Odpověď
Former users or roles should not retain usable access.
Kartička 172
Otázka
What is an acceptable use policy?
Odpověď
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kartička 173
Otázka
What makes a compliance report internal?
Odpověď
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kartička 174
Otázka
What is a logic bomb?
Odpověď
Malicious code that activates when a specified condition or time is reached.
Kartička 175
Otázka
What does a right-to-audit clause provide?
Odpověď
Contractual authority to inspect or obtain evidence about agreed controls.
Kartička 176
Otázka
Where should a forward proxy sit in an enterprise traffic path?
Odpověď
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kartička 177
Otázka
Which cues should make a message look suspicious?
Odpověď
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kartička 178
Otázka
What makes a security control managerial?
Odpověď
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kartička 179
Otázka
What is the CYOD mobile deployment model?
Odpověď
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kartička 180
Otázka
How does client-based vulnerable software differ from an agentless exposure?
Odpověď
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kartička 181
Otázka
What makes a risk assessment recurring?
Odpověď
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kartička 182
Otázka
What does a defensive penetration-testing team practice?
Odpověď
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kartička 183
Otázka
In a zero-trust data plane, what can the subject or system represent?
Odpověď
The user, device, workload, or service requesting access to a protected resource.
Kartička 184
Otázka
What primarily motivates a hacktivist?
Odpověď
A political, social, or ideological cause.
Kartička 185
Otázka
What is bloatware?
Odpověď
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kartička 186
Otázka
Why keep endpoint-protection signatures and engines current?
Odpověď
They need current detection logic to recognize newly identified malware and exploit behavior.
Kartička 187
Otázka
What should application security monitoring observe?
Odpověď
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kartička 188
Otázka
What is role-based access control?
Odpověď
Permissions are assigned to roles, and identities receive access through their roles.
Kartička 189
Otázka
What is geographic dispersal?
Odpověď
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kartička 190
Otázka
What is a malicious update?
Odpověď
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kartička 191
Otázka
What does static application analysis inspect?
Odpověď
Source code, bytecode, or compiled code without executing the application.
Kartička 192
Otázka
What does a firewall access list define?
Odpověď
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kartička 193
Otázka
What does a disaster recovery policy establish?
Odpověď
Management expectations for restoring technology and data after a disruptive event.
Kartička 194
Otázka
How does logical segmentation separate workloads that share physical infrastructure?
Odpověď
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kartička 195
Otázka
How should IDS and IPS placement differ?
Odpověď
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kartička 196
Otázka
What should automated ticket creation capture?
Odpověď
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kartička 197
Otázka
What makes information intellectual property?
Odpověď
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kartička 198
Otázka
What is a backout plan?
Odpověď
Predefined steps for safely reversing a failed or harmful change.
Kartička 199
Otázka
Why is an unsecure wireless network an attack vector?
Odpověď
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kartička 200
Otázka
What is physical brute force?
Odpověď
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kartička 201
Otázka
What is application sandboxing?
Odpověď
Running code in a constrained environment with limited access to the host and data.
Kartička 202
Otázka
Why assign an asset owner?
Odpověď
One accountable party must decide its use, protection, and lifecycle.
Kartička 203
Otázka
What happens during risk identification?
Odpověď
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kartička 204
Otázka
What should an SLA state about breach notification?
Odpověď
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kartička 205
Otázka
How do due diligence and due care differ in compliance?
Odpověď
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kartička 206
Otázka
What is attribute-based access control?
Odpověď
Policy evaluates attributes of the subject, resource, action, and environment.
Kartička 207
Otázka
What does a zero-trust policy engine do?
Odpověď
It evaluates policy and signals to decide whether access should be allowed.
Kartička 208
Otázka
How does a cloud responsibility matrix allocate security duties?
Odpověď
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kartička 209
Otázka
Where should a load balancer sit in a service path?
Odpověď
In front of service instances so it can route requests to healthy backends.
Kartička 210
Otázka
What should the security team do with a reported suspicious message?
Odpověď
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kartička 211
Otázka
What makes an operating-system vulnerability high impact?
Odpověď
It can affect every application and security control that relies on the compromised OS.
Kartička 212
Otázka
What does dynamic application analysis inspect?
Odpověď
The behavior and externally visible weaknesses of a running application.
Kartička 213
Otázka
How can false-positive trends affect IDS or IPS tuning?
Odpověď
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kartička 214
Otázka
What does a business continuity policy establish?
Odpověď
Management expectations for sustaining and restoring critical business functions.
Kartička 215
Otázka
What is a hot recovery site?
Odpověď
A ready, synchronized environment intended to take over quickly.
Kartička 216
Otázka
What makes an insider threat distinct?
Odpověď
The actor has legitimate access or organizational knowledge that can be misused.
Kartička 217
Otázka
What is RFID cloning?
Odpověď
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kartička 218
Otázka
Why apply vendor security updates promptly?
Odpověď
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kartička 219
Otázka
What should infrastructure security monitoring observe?
Odpověď
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kartička 220
Otázka
What can firewall logs reveal?
Odpověď
Allowed or denied network connections across controlled boundaries.
Kartička 221
Otázka
Why minimize open service ports?
Odpověď
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kartička 222
Otázka
What is threat hunting?
Odpověď
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kartička 223
Otázka
What triggers an ad hoc risk assessment?
Odpověď
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kartička 224
Otázka
What makes an assessment external?
Odpověď
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kartička 225
Otázka
What is data sovereignty?
Odpověď
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kartička 226
Otázka
What security boundary does a cellular connection create for a mobile device?
Odpověď
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kartička 227
Otázka
What makes a security control operational?
Odpověď
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kartička 228
Otázka
What is discretionary access control?
Odpověď
A resource owner can decide who receives access, within system policy.
Kartička 229
Otázka
How can careful automation support employee retention?
Odpověď
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kartička 230
Otázka
Why does ease of deployment matter in an architecture decision?
Odpověď
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kartička 231
Otázka
What tradeoff comes with placing an NGFW inline?
Odpověď
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kartička 232
Otázka
What does a zero-trust policy administrator do?
Odpověď
It carries out the policy engine's decision, such as creating or ending a session.
Kartička 233
Otázka
What should a master service agreement define for data return and deletion?
Odpověď
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kartička 234
Otázka
What is an environmental physical attack?
Odpověď
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kartička 235
Otázka
When should a maintenance window be chosen?
Odpověď
When disruption and rollback can be managed with the least business impact.
Kartička 236
Otázka
What is memory injection?
Odpověď
Placing malicious code or data into another process's memory so it executes in that process's context.
Kartička 237
Otázka
What does software composition analysis find?
Odpověď
Known risks and license information in third-party dependencies.
Kartička 238
Otázka
What is DNS filtering?
Odpověď
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kartička 239
Otázka
What should an incident response policy establish?
Odpověď
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kartička 240
Otázka
How can noncompliance cause reputational damage?
Odpověď
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kartička 241
Otázka
What does full-disk encryption protect?
Odpověď
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kartička 242
Otázka
Why are default credentials dangerous?
Odpověď
They are widely known or easily discovered and often remain unchanged.
Kartička 243
Otázka
What makes a risk assessment one-time?
Odpověď
It evaluates a defined decision or scope once without an established repeating cadence.
Kartička 244
Otázka
What is a warm recovery site?
Odpověď
A partially equipped environment that needs some data restoration or configuration before use.
Kartička 245
Otázka
What does application input validation do?
Odpověď
It checks that input matches the expected type, length, range, and format before use.
Kartička 246
Otázka
What should an asset inventory record besides a device name?
Odpověď
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kartička 247
Otázka
What is mandatory access control?
Odpověď
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kartička 248
Otázka
What security benefit does infrastructure as code provide?
Odpověď
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kartička 249
Otázka
When should a public service control fail closed?
Odpověď
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kartička 250
Otázka
What should users do with a suspicious message?
Odpověď
Report it through the approved channel without interacting with its links or attachments.
Kartička 251
Otázka
What usually motivates organized cybercrime?
Odpověď
Financial gain through scalable or repeatable criminal activity.
Kartička 252
Otázka
How can malicious code support a network attack?
Odpověď
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kartička 253
Otázka
When is virtual patching useful?
Odpověď
When a network or application control can block exploit traffic before the underlying system can be patched.
Kartička 254
Otázka
What does security-monitoring reporting provide?
Odpověď
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kartička 255
Otázka
What does data geolocation identify?
Odpověď
The physical or legal location where data is stored, processed, or transmitted.
Kartička 256
Otázka
What does a zero-trust policy enforcement point do?
Odpověď
It enables, monitors, and terminates the connection between a subject and a resource.
Kartička 257
Otázka
What is cryptographic key exchange?
Odpověď
A method for parties to establish shared key material over an untrusted channel.
Kartička 258
Otázka
How can a vendor become a supply-chain attack vector?
Odpověď
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kartička 259
Otázka
Why can legacy hardware remain vulnerable?
Odpověď
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kartička 260
Otázka
What can proprietary vulnerability intelligence add beyond open sources?
Odpověď
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kartička 261
Otázka
How does a centralized proxy apply web filtering?
Odpověď
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kartička 262
Otázka
How can continuous integration and testing improve security automation?
Odpověď
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kartička 263
Otázka
What is containment?
Odpověď
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kartička 264
Otázka
What is a software development lifecycle policy meant to ensure?
Odpověď
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kartička 265
Otázka
What makes risk assessment continuous?
Odpověď
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kartička 266
Otázka
What is a memorandum of agreement?
Odpověď
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kartička 267
Otázka
What makes a penetration test integrated?
Odpověď
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kartička 268
Otázka
How does a DNS amplification attack magnify traffic?
Odpověď
It sends small spoofed queries that trigger larger replies toward the victim.
Kartička 269
Otázka
Why does ease of recovery matter in an architecture decision?
Odpověď
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kartička 270
Otázka
What does 802.1X control before a device receives normal network access?
Odpověď
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kartička 271
Otázka
What is rule-based access control?
Odpověď
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kartička 272
Otázka
What is mobile device management?
Odpověď
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kartička 273
Otázka
What tradeoff comes with a cold recovery site?
Odpověď
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kartička 274
Otázka
Why identify stakeholders before approving a security-sensitive change?
Odpověď
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kartička 275
Otázka
How do attestation and acknowledgement differ?
Odpověď
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kartička 276
Otázka
What does zero-trust adaptive identity mean?
Odpověď
Access decisions adjust to current risk signals rather than relying only on a static login.
Kartička 277
Otázka
What makes a security control physical?
Odpověď
It protects facilities or equipment through a tangible barrier or mechanism.
Kartička 278
Otázka
What is geo-fencing for data?
Odpověď
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kartička 279
Otázka
What does a Trusted Platform Module protect?
Odpověď
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kartička 280
Otázka
Why can a managed service provider amplify risk?
Odpověď
Its privileged access and shared tooling can provide a path into many customers.
Kartička 281
Otázka
What does probability express in risk analysis?
Odpověď
A quantified chance that a defined event will occur within stated conditions or time.
Kartička 282
Otázka
Why can shadow IT create a threat?
Odpověď
It bypasses security review, inventory, monitoring, and supported configuration.
Kartička 283
Otázka
What is on-path interception?
Odpověď
An attacker positions between communicating parties to observe or alter traffic.
Kartička 284
Otázka
Why include encryption in a system-hardening baseline?
Odpověď
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kartička 285
Otázka
Why tune security alerts?
Odpověď
To keep useful detections while reducing noise that wastes analyst attention.
Kartička 286
Otázka
What can IPS or IDS logs contribute to an investigation?
Odpověď
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kartička 287
Otázka
What is VM escape?
Odpověď
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kartička 288
Otázka
How can segmentation reduce vulnerability exposure before a patch is available?
Odpověď
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kartička 289
Otázka
Why should firewall policy name the required ports and protocols explicitly?
Odpověď
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kartička 290
Otázka
What is a change management policy meant to control?
Odpověď
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kartička 291
Otázka
What is a hybrid-cloud architecture?
Odpověď
An environment that integrates private or on-premises resources with public cloud services.
Kartička 292
Otázka
How do AH and ESP differ in the security services they can provide?
Odpověď
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kartička 293
Otázka
What makes user behavior risky?
Odpověď
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kartička 294
Otázka
What is least privilege?
Odpověď
Granting only the access needed for the required task and no more.
Kartička 295
Otázka
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Odpověď
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kartička 296
Otázka
Why discover unmanaged assets?
Odpověď
Unknown systems cannot be patched, monitored, or governed reliably.
Kartička 297
Otázka
What is a service-level agreement?
Odpověď
Measurable service commitments and remedies, such as availability or response targets.
Kartička 298
Otázka
What should govern automated security escalation?
Odpověď
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kartička 299
Otázka
What is platform diversity as a resilience strategy?
Odpověď
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kartička 300
Otázka
How can replayed session material affect an application?
Odpověď
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kartička 301
Otázka
What is an implicit trust zone in zero trust?
Odpověď
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kartička 302
Otázka
What does salting a password hash accomplish?
Odpověď
It makes identical passwords hash differently and defeats precomputed hash tables.
Kartička 303
Otázka
What is spear phishing?
Odpověď
Phishing tailored to a specific person, role, or organization.
Kartička 304
Otázka
What is eradication?
Odpověď
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kartička 305
Otázka
Who is a risk owner?
Odpověď
The person accountable for deciding and monitoring how a specific risk is handled.
Kartička 306
Otázka
What does a partially known penetration-test environment provide?
Odpověď
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kartička 307
Otázka
What is a microservices architecture?
Odpověď
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kartička 308
Otázka
What is a jump server?
Odpověď
A hardened intermediary used to reach systems in a restricted management network.
Kartička 309
Otázka
What can happen when a configuration change is made without dependency analysis?
Odpověď
A downstream service can fail even when the changed component works.
Kartička 310
Otázka
What is resource reuse exposure?
Odpověď
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kartička 311
Otázka
Why does financial information require explicit protection?
Odpověď
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kartička 312
Otázka
What does CVE provide?
Odpověď
A common identifier for a publicly disclosed vulnerability.
Kartička 313
Otázka
Where can DLP controls operate?
Odpověď
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kartička 314
Otázka
What does privileged password vaulting protect?
Odpověď
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kartička 315
Otázka
What does an access-control standard define?
Odpověď
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kartička 316
Otázka
How can automation support compliance monitoring?
Odpověď
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kartička 317
Otázka
What does static code analysis examine?
Odpověď
Source or compiled code for weakness patterns without executing the application.
Kartička 318
Otázka
What actor attribute describes funding, time, and personnel?
Odpověď
Resources.
Kartička 319
Otázka
What is DNS poisoning?
Odpověď
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kartička 320
Otázka
Why change default credentials during hardening?
Odpověď
Default secrets are predictable and commonly targeted.
Kartička 321
Otázka
What does quarantine do after a security alert?
Odpověď
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kartička 322
Otázka
What does key stretching do for stored passwords?
Odpověď
It deliberately makes each password guess more computationally expensive.
Kartička 323
Otázka
What is smishing?
Odpověď
Phishing delivered through SMS or another text-messaging service.
Kartička 324
Otázka
What is qualitative risk analysis?
Odpověď
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kartička 325
Otázka
What is a master service agreement?
Odpověď
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kartička 326
Otázka
What is threat scope reduction?
Odpověď
Narrowing the systems, privileges, or paths an attacker can reach.
Kartička 327
Otázka
Why use a third-party cloud service instead of building locally?
Odpověď
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kartička 328
Otázka
What should determine security-device placement?
Odpověď
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kartička 329
Otázka
What does situational awareness mean for a user?
Odpověď
Notice the people, devices, requests, location, and context around a task before acting.
Kartička 330
Otázka
What does a failover test validate?
Odpověď
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kartička 331
Otázka
What is a preventive control meant to do?
Odpověď
Stop an unwanted event before it succeeds.
Kartička 332
Otázka
What is just-in-time privileged access?
Odpověď
Elevated access is granted only when needed and expires after a short approved period.
Kartička 333
Otázka
What safeguard should security-group automation enforce?
Odpověď
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kartička 334
Otázka
How does a reflected DDoS attack hide and multiply sources?
Odpověď
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kartička 335
Otázka
What is a security misconfiguration?
Odpověď
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kartička 336
Otázka
Why can the same vulnerability have different organizational impact?
Odpověď
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kartička 337
Otázka
What does URL scanning evaluate before a user opens a web destination?
Odpověď
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kartička 338
Otázka
What is the board's security governance role?
Odpověď
Provide oversight, set risk direction, and hold executives accountable.
Kartička 339
Otázka
What does code signing establish?
Odpověď
That code came from the holder of the signing key and has not changed since signing.
Kartička 340
Otázka
How should an asset's classification affect security operations?
Odpověď
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kartička 341
Otázka
How does encryption protect data?
Odpověď
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kartička 342
Otázka
What is a secure enclave?
Odpověď
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kartička 343
Otázka
What is business email compromise?
Odpověď
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kartička 344
Otázka
What is recovery in incident response?
Odpověď
Restoring services safely, monitoring them, and returning to normal operations.
Kartička 345
Otázka
How is single loss expectancy commonly estimated?
Odpověď
Asset value multiplied by the exposure factor.
Kartička 346
Otázka
What does an unknown penetration-test environment provide?
Odpověď
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kartička 347
Otázka
What security boundary does a hypervisor provide?
Odpověď
It isolates virtual machines while controlling their access to shared hardware.
Kartička 348
Otázka
Why does a TLS tunnel not protect a compromised endpoint?
Odpověď
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kartička 349
Otázka
Why update diagrams after an infrastructure change?
Odpověď
Operations and incident responders need the documentation to match the deployed environment.
Kartička 350
Otázka
What does privacy ownership assign?
Odpověď
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kartička 351
Otázka
What does a security control gap analysis compare?
Odpověď
The controls required for the target state with the controls currently in place.
Kartička 352
Otázka
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Odpověď
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kartička 353
Otázka
What is application privilege escalation?
Odpověď
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kartička 354
Otázka
What risk remains when unnecessary software is left installed?
Odpověď
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kartička 355
Otázka
What does SCAP standardize?
Odpověď
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kartička 356
Otázka
What can packet capture reveal?
Odpověď
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kartička 357
Otázka
What makes a privileged credential ephemeral?
Odpověď
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kartička 358
Otázka
How do a statement of work and a work order differ?
Odpověď
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kartička 359
Otázka
Why might multi-cloud improve resilience?
Odpověď
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kartička 360
Otázka
How can a service provider introduce a supply-chain vulnerability?
Odpověď
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kartička 361
Otázka
What is a false positive in vulnerability scanning?
Odpověď
A reported weakness that is not actually present or exploitable in the assessed context.
Kartička 362
Otázka
How do EDR and XDR differ?
Odpověď
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kartička 363
Otázka
What should onboarding and offboarding procedures coordinate?
Odpověď
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kartička 364
Otázka
How should an organization harden managed mobile devices?
Odpověď
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kartička 365
Otázka
What is a certificate signing request?
Odpověď
A request containing a public key and subject information for a certificate authority to sign.
Kartička 366
Otázka
What is pretexting?
Odpověď
Using a fabricated role or situation to make a request seem legitimate.
Kartička 367
Otázka
How is annualized loss expectancy commonly estimated?
Odpověď
Single loss expectancy multiplied by annualized rate of occurrence.
Kartička 368
Otázka
What security consequence follows from containers sharing a kernel?
Odpověď
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kartička 369
Otázka
Where does 802.1X enforce a network admission decision?
Odpověď
At the controlled switch port or wireless access point before normal network access is granted.
Kartička 370
Otázka
What should insider-threat awareness teach?
Odpověď
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kartička 371
Otázka
What access action is suitable for careful automation?
Odpověď
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kartička 372
Otázka
What is an evil twin?
Odpověď
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kartiček
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Učit se tento balíček zdarma
Otevře se Nibomo, abyste se mohli začít učit.
Kartička 373
Otázka
Does non-human-readable data need less protection?
Odpověď
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kartička 374
Otázka
What does authenticating a system establish?
Odpověď
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kartička 375
Otázka
What does LDAP provide in identity systems?
Odpověď
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kartička 376
Otázka
What is a deterrent control meant to do?
Odpověď
Discourage an attacker from attempting an unwanted action.
Kartička 377
Otázka
Why update procedures after changing a security control?
Odpověď
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kartička 378
Otázka
How does OCSP differ from a certificate revocation list?
Odpověď
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kartička 379
Otázka
What is the goal of data exfiltration?
Odpověď
Remove data from its authorized environment without permission.
Kartička 380
Otázka
What is a watering-hole attack?
Odpověď
Compromising a site frequented by the intended targets so their visits expose them.
Kartička 381
Otázka
How can a hardware provider introduce a supply-chain vulnerability?
Odpověď
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kartička 382
Otázka
What is application forgery?
Odpověď
Creating or altering a request, token, or object so the application treats it as authentic.
Kartička 383
Otázka
How does least privilege mitigate compromise?
Odpověď
It limits the actions and resources available to a compromised account or process.
Kartička 384
Otázka
What is serverless computing?
Odpověď
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kartička 385
Otázka
What makes an infrastructure control effective for a specific risk?
Odpověď
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kartička 386
Otázka
What does parallel recovery processing test?
Odpověď
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kartička 387
Otázka
Which password-authentication method does WPA3-Personal use?
Odpověď
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kartička 388
Otázka
How does data retention affect asset disposal?
Odpověď
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kartička 389
Otázka
What is a false negative in vulnerability scanning?
Odpověď
A real weakness that the assessment fails to report.
Kartička 390
Otázka
What does recurring security scanning add to monitoring?
Odpověď
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kartička 391
Otázka
What should guide port selection for a secure protocol?
Odpověď
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kartička 392
Otázka
What does forensic acquisition create?
Odpověď
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kartička 393
Otázka
How do system owners and data owners divide security accountability?
Odpověď
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kartička 394
Otázka
What does likelihood express in risk analysis?
Odpověď
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kartička 395
Otázka
What is a memorandum of understanding?
Odpověď
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kartička 396
Otázka
What does the right to be forgotten generally require?
Odpověď
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kartička 397
Otázka
What does an audit committee oversee?
Odpověď
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kartička 398
Otázka
What does identity interoperability require?
Odpověď
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kartička 399
Otázka
How does a bollard protect a facility?
Odpověď
It blocks or redirects vehicles before they can reach a protected area.
Kartička 400
Otázka
How can hashing protect a downloaded file?
Odpověď
A trusted digest lets the recipient detect whether the file changed.
Kartička 401
Otázka
What is a credential replay attack?
Odpověď
Using captured valid credentials or tokens again without needing to discover the secret.
Kartička 402
Otázka
How can automation complexity create security risk?
Odpověď
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kartička 403
Otázka
What must an architecture provide when a component cannot be patched?
Odpověď
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kartička 404
Otázka
What makes remote access secure?
Odpověď
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kartička 405
Otázka
What should users verify before connecting removable media or a cable?
Odpověď
That the device and connection are approved, expected, and handled under organizational policy.
Kartička 406
Otázka
What is a self-signed certificate?
Odpověď
A certificate signed by its own private key rather than by a separate trusted issuer.
Kartička 407
Otázka
What is brand impersonation?
Odpověď
Using a trusted organization's identity or look to deceive people.
Kartička 408
Otázka
What characterizes a conservative risk appetite?
Odpověď
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kartička 409
Otázka
What should a managed mobile device verify before using Wi-Fi?
Odpověď
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kartička 410
Otázka
What is a zero-day vulnerability?
Odpověď
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kartička 411
Otázka
What does verification confirm after vulnerability remediation?
Odpověď
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kartička 412
Otázka
What is user and entity behavior analytics?
Odpověď
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kartička 413
Otázka
What does a physical security policy establish?
Odpověď
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kartička 414
Otázka
What does a UPS provide?
Odpověď
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kartička 415
Otázka
What is a nondisclosure agreement?
Odpověď
A contract restricting use and disclosure of defined confidential information.
Kartička 416
Otázka
What should be checked before assigning a user permission?
Odpověď
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kartička 417
Otázka
How does espionage differ from ordinary theft?
Odpověď
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kartička 418
Otázka
What is password spraying?
Odpověď
Trying a small set of common passwords across many accounts to avoid lockouts.
Kartička 419
Otázka
What is the purpose of system isolation during an incident?
Odpověď
Stop harmful communication while preserving the system for response and investigation.
Kartička 420
Otázka
What is a security benchmark?
Odpověď
A documented set of recommended configuration checks for a platform or product.
Kartička 421
Otázka
Which metadata fields give a log record investigative context?
Odpověď
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kartička 422
Otázka
What does an access-control vestibule prevent?
Odpověď
It limits tailgating by allowing controlled passage through one door at a time.
Kartička 423
Otázka
What is version control's security value for configuration?
Odpověď
It preserves attributable history and enables review or rollback of changes.
Kartička 424
Otázka
Why use both internal and external compliance monitoring?
Odpověď
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kartička 425
Otázka
What distinguishes on-premises architecture?
Odpověď
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kartička 426
Otázka
What risk can split tunneling add to a VPN?
Odpověď
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kartička 427
Otázka
What is a certificate root of trust?
Odpověď
A trusted root certificate or key from which a client validates a certificate chain.
Kartička 428
Otázka
What is typosquatting?
Odpověď
Registering a look-alike domain based on common typing errors or visual similarity.
Kartička 429
Otázka
What is root-cause analysis?
Odpověď
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kartička 430
Otázka
What is risk tolerance?
Odpověď
The acceptable variation or boundary around a specific objective or risk area.
Kartička 431
Otázka
What is a security self-assessment?
Odpověď
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kartička 432
Otázka
What does data masking change?
Odpověď
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kartička 433
Otázka
How do wireless authentication protocols let clients prove identity securely?
Odpověď
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kartička 434
Otázka
Why reconcile inventory with network discovery?
Odpověď
Differences expose missing records, retired systems, or unauthorized devices.
Kartička 435
Otázka
Why does sideloading raise mobile risk?
Odpověď
It can bypass store review, signing policy, and managed application controls.
Kartička 436
Otázka
What does an information-sharing organization add to vulnerability management?
Odpověď
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kartička 437
Otázka
What does a web-filter block rule specify?
Odpověď
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kartička 438
Otázka
How do data custodians and data stewards differ?
Odpověď
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kartička 439
Otázka
What is a brute-force password attack?
Odpověď
Systematically trying many candidate secrets against an account or protected value.
Kartička 440
Otázka
What is a compensating control?
Odpověď
An alternative safeguard used when the preferred control is impractical or unavailable.
Kartička 441
Otázka
How can location act as an authentication factor?
Odpověď
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kartička 442
Otázka
Why must security automation remain supportable?
Odpověď
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kartička 443
Otázka
What does a standby generator provide?
Odpověď
Longer-duration power during a utility outage, after a startup delay.
Kartička 444
Otázka
What makes an architecture air-gapped?
Odpověď
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kartička 445
Otázka
What is a software-defined WAN?
Odpověď
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kartička 446
Otázka
What password-management behavior should awareness training reinforce?
Odpověď
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kartička 447
Otázka
What security value does fencing provide?
Odpověď
It defines and delays entry across a physical perimeter.
Kartička 448
Otázka
What is a wildcard certificate?
Odpověď
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kartička 449
Otázka
How does misinformation differ from disinformation?
Odpověď
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kartička 450
Otázka
What is a risk threshold?
Odpověď
A defined level that triggers escalation, treatment, or another required response.
Kartička 451
Otázka
What does a vendor penetration test contribute to assessment?
Odpověď
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kartička 452
Otázka
What is the objective of a service-disruption attack?
Odpověď
Make a system or business function unavailable or unreliable.
Kartička 453
Otázka
What is directory traversal?
Odpověď
Manipulating a file path to reach files outside the directory the application intended to expose.
Kartička 454
Otázka
Why decommission an unsupported system?
Odpověď
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kartička 455
Otázka
Why archive security-monitoring data?
Odpověď
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kartička 456
Otázka
What role does RADIUS commonly play in enterprise Wi-Fi?
Odpověď
It centralizes authentication, authorization information, and accounting for network access.
Kartička 457
Otázka
Why separate the requester and approver of a high-risk change?
Odpověď
To reduce error, fraud, and unilateral unauthorized modification.
Kartička 458
Otázka
Why can a jailbroken device violate a security baseline?
Odpověď
It weakens platform isolation and allows unapproved privileged changes.
Kartička 459
Otázka
When is tokenization especially useful?
Odpověď
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kartička 460
Otázka
Why can dark-web intelligence affect vulnerability priority?
Odpověď
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kartička 461
Otázka
What firewall policy should govern traffic from a screened subnet to internal systems?
Odpověď
Deny it by default and allow only explicitly required flows.
Kartička 462
Otázka
What does SAML commonly carry?
Odpověď
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kartička 463
Otázka
What does a security governance committee do?
Odpověď
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kartička 464
Otázka
How can global privacy requirements affect one data process?
Odpověď
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kartička 465
Otázka
What characterizes an IoT device?
Odpověď
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kartička 466
Otázka
What is a unified threat management appliance?
Odpověď
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kartička 467
Otázka
What does a hardware security module provide?
Odpověď
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kartička 468
Otázka
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Odpověď
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kartička 469
Otázka
What is a tabletop exercise?
Odpověď
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kartička 470
Otázka
What does a risk exemption authorize?
Odpověď
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kartička 471
Otázka
What is a regulatory examination?
Odpověď
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kartička 472
Otázka
What does physical video surveillance primarily provide?
Odpověď
Detection and evidence of activity in monitored areas.
Kartička 473
Otázka
What is a birthday attack against a hash?
Odpověď
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kartička 474
Otázka
Why keep backups both onsite and offsite?
Odpověď
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kartička 475
Otázka
How does technical debt affect security automation?
Odpověď
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kartička 476
Otázka
What should switch hardening restrict first?
Odpověď
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kartička 477
Otázka
What should happen when an asset changes owners?
Odpověď
Inventory, access, support responsibility, and data handling should be updated.
Kartička 478
Otázka
What does evidence of a vendor's internal audits contribute?
Odpověď
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kartička 479
Otázka
What is identity attestation?
Odpověď
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kartička 480
Otázka
Why can standard enterprise patching be unsafe for an RTOS device?
Odpověď
A change can disrupt timing guarantees or certified operational behavior.
Kartička 481
Otázka
What is secure access service edge?
Odpověď
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kartička 482
Otázka
What social-engineering habit should awareness training reinforce?
Odpověď
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kartička 483
Otázka
How can a software provider introduce a supply-chain vulnerability?
Odpověď
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kartička 484
Otázka
Why include internet exposure in remediation priority?
Odpověď
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kartička 485
Otázka
What does a mail gateway inspect?
Odpověď
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kartička 486
Otázka
What is a data controller?
Odpověď
The entity that determines why and how personal data is processed.
Kartička 487
Otázka
How does blackmail motivate a cyberattack?
Odpověď
The attacker threatens disclosure or harm unless the victim complies.
Kartička 488
Otázka
What is a downgrade attack?
Odpověď
Forcing parties to use an older or weaker protocol or security mode.
Kartička 489
Otázka
How does encryption mitigate data exposure?
Odpověď
It makes captured data unreadable without the required key.
Kartička 490
Otázka
How do network and web vulnerability scanners differ?
Odpověď
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kartička 491
Otázka
How can vulnerability-scan data support an investigation?
Odpověď
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kartička 492
Otázka
What is key escrow?
Odpověď
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kartička 493
Otázka
Which human vector commonly uses a fake sign-in page to harvest credentials?
Odpověď
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kartička 494
Otázka
What is risk avoidance?
Odpověď
Stopping or not starting the activity that creates the risk.
Kartička 495
Otázka
What is data obfuscation?
Odpověď
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kartička 496
Otázka
What is a directive control?
Odpověď
A safeguard that tells people what behavior or action is required.
Kartička 497
Otázka
What does a security guard add that a camera cannot?
Odpověď
Human judgment and an immediate physical response.
Kartička 498
Otázka
Why define restricted activities in change management?
Odpověď
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kartička 499
Otázka
What contractual impact can noncompliance create?
Odpověď
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kartička 500
Otázka
What should determine backup frequency?
Odpověď
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kartička 501
Otázka
What should router hardening protect?
Odpověď
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kartička 502
Otázka
What problem does OAuth 2.0 address?
Odpověď
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kartička 503
Otázka
What does SCADA do?
Odpověď
It provides supervisory monitoring and control across distributed industrial equipment.
Kartička 504
Otázka
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Odpověď
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kartička 505
Otázka
What distinguishes a computer virus?
Odpověď
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kartička 506
Otázka
What does a key management system coordinate?
Odpověď
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kartička 507
Otázka
How can an unsecure wired network expose traffic?
Odpověď
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kartička 508
Otázka
Why is vulnerable device firmware hard to remediate?
Odpověď
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kartička 509
Otázka
What does patching change in vulnerability remediation?
Odpověď
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kartička 510
Otázka
What does DMARC add to SPF and DKIM?
Odpověď
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kartička 511
Otázka
How does automation improve security efficiency?
Odpověď
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kartička 512
Otázka
What is a simulation exercise?
Odpověď
A more realistic practice in which participants respond to injected events using operational processes.
Kartička 513
Otázka
What is a data processor?
Odpověď
An entity that processes personal data on behalf of a controller.
Kartička 514
Otázka
What is risk mitigation?
Odpověď
Reducing likelihood, impact, or both through controls or process changes.
Kartička 515
Otázka
Why monitor a vendor after onboarding?
Odpověď
Security posture, ownership, services, incidents, and dependencies can change.
Kartička 516
Otázka
What does a physical penetration test assess?
Odpověď
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kartička 517
Otázka
Why use access badges at a facility?
Odpověď
To associate entry attempts with authorized identities and enforce access rules.
Kartička 518
Otázka
How does permission restriction protect data?
Odpověď
Only authorized identities receive the actions and scope their roles require.
Kartička 519
Otázka
What is the usual objective of ransomware extortion?
Odpověď
Force payment by denying access, threatening disclosure, or both.
Kartička 520
Otázka
What does impossible travel indicate?
Odpověď
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kartička 521
Otázka
What is configuration enforcement?
Odpověď
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kartička 522
Otázka
What does a web vulnerability scanner inspect?
Odpověď
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kartička 523
Otázka
How does cost affect an architecture choice?
Odpověď
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kartička 524
Otázka
What does EAP provide with 802.1X?
Odpověď
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kartička 525
Otázka
What should operational-security training help users protect?
Odpověď
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kartička 526
Otázka
What does a time-of-day access rule do?
Odpověď
Allows or denies a requested action according to an approved schedule.
Kartička 527
Otázka
What should cloud infrastructure hardening establish?
Odpověď
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kartička 528
Otázka
What should an asset owner ensure during offboarding?
Odpověď
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kartička 529
Otázka
Why encrypt backups?
Odpověď
Backup media and transfers can expose the same sensitive data as production systems.
Kartička 530
Otázka
What is steganography?
Odpověď
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kartička 531
Otázka
Which human vector uses a fabricated authority role to justify a sensitive request?
Odpověď
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kartička 532
Otázka
Why does risk transfer not remove accountability?
Odpověď
The organization can retain legal, reputational, operational, and oversight consequences.
Kartička 533
Otázka
Why validate a change after deployment?
Odpověď
To confirm the intended result occurred without introducing unacceptable side effects.
Kartička 534
Otázka
What makes end-of-life hardware a security vulnerability?
Odpověď
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kartička 535
Otázka
What does an audit add to remediation validation?
Odpověď
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kartička 536
Otázka
Why can SPF pass while a message still impersonates a brand?
Odpověď
SPF checks the envelope domain, which may differ from the visible From domain.
Kartička 537
Otázka
What role can a government entity have in security governance?
Odpověď
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kartička 538
Otázka
How do data inventory and retention support privacy governance?
Odpověď
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kartička 539
Otázka
What can concurrent sessions from distant regions indicate?
Odpověď
A stolen account or shared credential, subject to VPN and proxy context.
Kartička 540
Otázka
What does supply-chain analysis examine?
Odpověď
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kartička 541
Otázka
What is the purpose of facility lighting as a control?
Odpověď
Deter covert activity and improve observation of people and areas.
Kartička 542
Otázka
What architecture quality keeps a service usable during component failure?
Odpověď
Availability.
Kartička 543
Otázka
When is fail-open behavior preferable to fail-closed behavior?
Odpověď
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kartička 544
Otázka
Which control function does a login-failure alert provide?
Odpověď
Detection; it reveals suspicious authentication activity.
Kartička 545
Otázka
What does a biometric MFA implementation verify?
Odpověď
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kartička 546
Otázka
How can automation enforce a security baseline?
Odpověď
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kartička 547
Otázka
How do wireless cryptographic protocols protect network traffic?
Odpověď
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kartička 548
Otázka
Why segment sensitive data stores?
Odpověď
It limits reachable paths and separates them from lower-trust workloads.
Kartička 549
Otázka
What must remain secret in an asymmetric key pair?
Odpověď
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kartička 550
Otázka
How can a supplier become a supply-chain attack vector?
Odpověď
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kartička 551
Otázka
What is e-discovery?
Odpověď
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kartička 552
Otázka
What characterizes a neutral risk appetite?
Odpověď
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kartička 553
Otázka
What is passive reconnaissance?
Odpověď
Gathering information without directly interacting with the target's systems.
Kartička 554
Otázka
What does a philosophical motive mean for a threat actor?
Odpověď
The actor acts to advance a belief or moral position rather than primarily for money.
Kartička 555
Otázka
What does unexpected resource consumption indicate?
Odpověď
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kartička 556
Otázka
What does a host-based intrusion prevention system do?
Odpověď
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kartička 557
Otázka
How does agent-based monitoring differ from agentless monitoring?
Odpověď
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kartička 558
Otázka
What can network logs contribute to an investigation?
Odpověď
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kartička 559
Otázka
What is the purpose of a backup restore test?
Odpověď
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kartička 560
Otázka
Why can obsolete hardware become a security risk?
Odpověď
It may lack supported firmware, modern protections, or replacement parts.
Kartička 561
Otázka
What does rescanning confirm after remediation?
Odpověď
Whether the scanner can still detect the original finding on the affected asset.
Kartička 562
Otázka
What should a secure transport method provide?
Odpověď
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kartička 563
Otázka
How can law affect security governance?
Odpověď
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kartička 564
Otázka
What does resilience mean for a security architecture?
Odpověď
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kartička 565
Otázka
Why minimize an infrastructure's attack surface?
Odpověď
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kartička 566
Otázka
What does executing a security-awareness program require?
Odpověď
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kartička 567
Otázka
What does an infrared security sensor detect?
Odpověď
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kartička 568
Otázka
What is a knowledge factor?
Odpověď
Something the claimant knows, such as a password.
Kartička 569
Otázka
Why review allow-list and deny-list impact before a change?
Odpověď
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kartička 570
Otázka
What does partition-level encryption protect?
Odpověď
One selected disk partition, leaving other partitions outside that encryption boundary.
Kartička 571
Otázka
How can instant messaging deliver a security attack?
Odpověď
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kartička 572
Otázka
What can repeated blocked-content events indicate?
Odpověď
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kartička 573
Otázka
What should a server-hardening baseline reduce?
Odpověď
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kartička 574
Otázka
When is physical media destruction appropriate?
Odpověď
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kartička 575
Otázka
What is mean time to repair?
Odpověď
The average time required to restore a failed component or service.
Kartička 576
Otázka
Why disclose conflicts of interest during vendor selection?
Odpověď
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kartička 577
Otázka
What is a fine for noncompliance?
Odpověď
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kartička 578
Otázka
What does a public data classification authorize?
Odpověď
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kartička 579
Otázka
What security benefit comes from standard infrastructure configurations?
Odpověď
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kartička 580
Otázka
How does horizontal scaling increase capacity?
Odpověď
It adds more service instances and distributes work among them.
Kartička 581
Otázka
Why can added connectivity weaken segmentation?
Odpověď
Each allowed path can become a route for lateral movement or data escape.
Kartička 582
Otázka
What coding practice is central to preventing SQL injection?
Odpověď
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kartička 583
Otázka
When is a compensating control appropriate for a vulnerability?
Odpověď
When timely removal or patching is infeasible and another control can reduce the risk.
Kartička 584
Otázka
How does agent-based web filtering enforce policy?
Odpověď
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kartička 585
Otázka
How can regulation differ from an internal policy?
Odpověď
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kartička 586
Otázka
What is a storage snapshot?
Odpověď
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kartička 587
Otázka
What does password age measure?
Odpověď
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kartička 588
Otázka
What does an ethical motive mean in vulnerability research?
Odpověď
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kartička 589
Otázka
What can missing security logs indicate?
Odpověď
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kartička 590
Otázka
Why disable unused ports and protocols?
Odpověď
They expose unnecessary communication paths and code that attackers can reach.
Kartička 591
Otázka
What does antivirus contribute to monitoring?
Odpověď
It scans files, memory, or behavior and reports suspected malicious code.
Kartička 592
Otázka
What is a honeypot?
Odpověď
A decoy system or service designed to attract and observe malicious activity.
Kartička 593
Otázka
What does file-level encryption protect?
Odpověď
Selected files independently of whether the rest of the disk or volume is encrypted.
Kartička 594
Otázka
How can SMS deliver a security attack?
Odpověď
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kartička 595
Otázka
What happens during incident analysis?
Odpověď
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kartička 596
Otázka
What is mean time between failures?
Odpověď
The average operating time between repairable failures.
Kartička 597
Otázka
What is active reconnaissance?
Odpověď
Probing or interacting with target systems to discover services and behavior.
Kartička 598
Otázka
What constraint should guide ICS or SCADA hardening?
Odpověď
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kartička 599
Otázka
Which control function does restoring a clean system image provide?
Odpověď
Correction; it returns the system to a known-good state.
Kartička 600
Otázka
What does responsiveness mean in an architecture decision?
Odpověď
How quickly the system and its operators can adapt to demand, failure, or attack.
Kartička 601
Otázka
How does out-of-band access strengthen remote administration?
Odpověď
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kartička 602
Otázka
What makes user behavior unexpected?
Odpověď
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kartička 603
Otázka
What is a work order?
Odpověď
A document authorizing a defined unit of work under an existing agreement.
Kartička 604
Otázka
What can out-of-cycle logging indicate?
Odpověď
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kartička 605
Otázka
Why update a standard operating procedure after a change?
Odpověď
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kartička 606
Otázka
What coding practice limits cross-site scripting?
Odpověď
Context-appropriate output encoding, supported by safe templating and input handling.
Kartička 607
Otázka
What does a restricted data classification indicate?
Odpověď
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kartička 608
Otázka
How does a bug bounty support responsible disclosure?
Odpověď
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kartička 609
Otázka
What does web-filter content categorization provide?
Odpověď
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kartička 610
Otázka
How do hard and soft authentication tokens differ?
Odpověď
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kartička 611
Otázka
How can industry requirements affect security governance?
Odpověď
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kartička 612
Otázka
How can noncompliance cause loss of a license?
Odpověď
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kartička 613
Otázka
What does volume-level encryption protect?
Odpověď
All data within a selected logical storage volume.
Kartička 614
Otázka
How can impersonation exploit familiarity?
Odpověď
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kartička 615
Otázka
How does RTO guide recovery design?
Odpověď
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kartička 616
Otázka
What is a honeynet?
Odpověď
A network of decoy systems used to study or divert attackers.
Kartička 617
Otázka
What does backup replication provide?
Odpověď
Additional synchronized or copied recovery data in another system or location.
Kartička 618
Otázka
What lets automation scale securely?
Odpověď
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kartička 619
Otázka
Why monitor a hardened computing resource continuously?
Odpověď
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kartička 620
Otázka
Why keep a certificate of destruction?
Odpověď
It documents that a disposal provider handled specified media under the agreed process.
Kartička 621
Otázka
Why consider patch availability before selecting a platform?
Odpověď
Unsupported or difficult-to-update components accumulate known exposure.
Kartička 622
Otázka
Why should remote administration use an encrypted, authenticated protocol?
Odpověď
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kartička 623
Otázka
How can revenge motivate an insider incident?
Odpověď
A disgruntled person may damage systems or disclose data to punish the organization.
Kartička 624
Otázka
What is a published or documented indicator of malicious activity?
Odpověď
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kartička 625
Otázka
Why monitor a system more closely when a mitigation exception is accepted?
Odpověď
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kartička 626
Otázka
What is an SNMP trap?
Odpověď
An unsolicited device notification sent to a management system when a configured event occurs.
Kartička 627
Otázka
How can an automated report support an investigation?
Odpověď
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kartička 628
Otázka
What is a security key?
Odpověď
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kartička 629
Otázka
What does database-level encryption protect?
Odpověď
A database or selected database structures through controls managed at the database layer.
Kartička 630
Otázka
How does brand impersonation exploit trust?
Odpověď
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kartička 631
Otázka
What browser-side impact can a cross-site scripting vulnerability create?
Odpověď
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kartička 632
Otázka
How can a system or process audit identify vulnerabilities?
Odpověď
It compares evidence with required configuration and procedure to reveal control gaps.
Kartička 633
Otázka
What security role can Group Policy provide?
Odpověď
Centralized Windows configuration of account, application, audit, and system security settings.
Kartička 634
Otázka
What should incident-response training prepare people to do?
Odpověď
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kartička 635
Otázka
Why must governance track local or regional requirements?
Odpověď
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kartička 636
Otázka
How can a dependency become a useful key risk indicator?
Odpověď
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kartička 637
Otázka
What is a business partners agreement?
Odpověď
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kartička 638
Otázka
What makes an audit regulatory?
Odpověď
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kartička 639
Otázka
What is a honeyfile?
Odpověď
A decoy file whose access can reveal unauthorized activity.
Kartička 640
Otázka
Why does legal information require explicit protection?
Odpověď
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kartička 641
Otázka
Which indicator can mass file renaming and encryption produce?
Odpověď
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kartička 642
Otázka
What remains with an organization after transferring architecture risk?
Odpověď
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kartička 643
Otázka
When does local console placement provide useful administrative access?
Odpověď
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kartička 644
Otázka
What makes a harmful user action unintentional?
Odpověď
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kartička 645
Otázka
How should an organization harden workstations?
Odpověď
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kartička 646
Otázka
What is journaling in recovery?
Odpověď
Recording ordered changes so data can be replayed or restored to a consistent point.
Kartička 647
Otázka
What downtime must a change plan account for?
Odpověď
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kartička 648
Otázka
Why must a privacy program map local or regional law to data flows?
Odpověď
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kartička 649
Otázka
Why combine independent preventive controls at different layers?
Odpověď
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kartička 650
Otázka
What is passwordless authentication?
Odpověď
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kartička 651
Otázka
How can automation improve security reaction time?
Odpověď
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kartička 652
Otázka
What does record-level encryption protect?
Odpověď
Individual records or fields, allowing finer protection than encrypting the entire database.
Kartička 653
Otázka
How can business email compromise misuse urgency?
Odpověď
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kartička 654
Otázka
What does impact measure in risk analysis?
Odpověď
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kartička 655
Otázka
What makes cyber activity part of warfare?
Odpověď
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kartička 656
Otázka
Which indicator can a newly created privileged account produce outside the normal change window?
Odpověď
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kartička 657
Otázka
How can configuration enforcement validate a deployed mitigation?
Odpověď
It compares the realized settings with the approved state and corrects or reports drift.
Kartička 658
Otázka
How does validating an alert improve alert tuning?
Odpověď
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kartička 659
Otázka
What data-layer impact can a SQL injection vulnerability create?
Odpověď
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kartička 660
Otázka
What environmental variables can change vulnerability priority?
Odpověď
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kartička 661
Otázka
What security role does SELinux provide?
Odpověď
Mandatory access controls that confine processes according to centrally defined policy.
Kartička 662
Otázka
Why review governance documents periodically?
Odpověď
Business, technology, threats, and external obligations change.
Kartička 663
Otázka
Why evaluate power requirements for a system design?
Odpověď
Power capacity and redundancy constrain availability and recovery.
Kartička 664
Otázka
When is IPsec a better tunnel choice than TLS?
Odpověď
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kartička 665
Otázka
What is a honeytoken?
Odpověď
A fake credential or data element that generates a high-confidence alert when used.
Kartička 666
Otázka
What should embedded-system hardening prioritize?
Odpověď
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kartička 667
Otázka
Why must sanitization address data remanence?
Odpověď
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kartička 668
Otázka
Why require rules of engagement for vendor testing?
Odpověď
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kartička 669
Otázka
What does a private data classification indicate?
Odpověď
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kartička 670
Otázka
What does a tabletop recovery exercise test?
Odpověď
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kartička 671
Otázka
Why prevent password reuse?
Odpověď
One compromised password should not unlock other accounts or services.
Kartička 672
Otázka
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Odpověď
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kartička 673
Otázka
What does transport encryption protect?
Odpověď
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kartička 674
Otázka
How can a voice call become an attack vector?
Odpověď
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kartička 675
Otázka
What should a digital-forensics report document?
Odpověď
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kartička 676
Otázka
What tradeoff comes with an expansionary risk appetite?
Odpověď
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kartička 677
Otázka
What does a known penetration-test environment provide?
Odpověď
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kartička 678
Otázka
Why evaluate compute requirements before deployment?
Odpověď
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kartička 679
Otázka
Why place sensors at network choke points?
Odpověď
They can observe traffic crossing important trust boundaries.
Kartička 680
Otázka
What should hybrid or remote-work security training emphasize?
Odpověď
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kartička 681
Otázka
Why plan an application restart separately from a service restart?
Odpověď
The application may need its own state handling, user coordination, health checks, and rollback point.
Kartička 682
Otázka
What is a cryptographic vulnerability?
Odpověď
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kartička 683
Otázka
Why report findings by asset owner?
Odpověď
Owners need clear accountability and a prioritized remediation queue.
Kartička 684
Otázka
What should guide selection of a secure protocol?
Odpověď
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kartička 685
Otázka
How do centralized and decentralized governance structures differ?
Odpověď
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kartička 686
Otázka
How does privacy-aware design limit data retention?
Odpověď
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kartička 687
Otázka
What does a pressure security sensor detect?
Odpověď
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kartička 688
Otázka
What automation costs should a security team plan for?
Odpověď
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kartička 689
Otázka
What should RTOS hardening preserve while reducing attack surface?
Odpověď
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kartička 690
Otázka
What is the goal of disruption-for-chaos activity?
Odpověď
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kartička 691
Otázka
Which indicator can repeated password guessing produce?
Odpověď
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kartička 692
Otázka
How does removing unnecessary software harden a system?
Odpověď
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kartička 693
Otázka
What does NetFlow provide?
Odpověď
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kartička 694
Otázka
How can a dashboard support an investigation?
Odpověď
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kartička 695
Otázka
When should a password be expired?
Odpověď
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kartička 696
Otázka
Why does cryptographic key length matter?
Odpověď
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kartička 697
Otázka
How can an unsecure Bluetooth connection become an attack vector?
Odpověď
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kartička 698
Otázka
What is a key risk indicator?
Odpověď
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kartička 699
Otázka
What should vendor monitoring verify when a contract ends?
Odpověď
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kartička 700
Otázka
What does a sensitive data classification indicate?
Odpověď
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kartička 701
Otázka
What does software-defined networking separate?
Odpověď
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kartička 702
Otázka
Where should a web application firewall be placed?
Odpověď
In the path of web requests before they reach the protected application.
Kartička 703
Otázka
What does a simulated recovery exercise test?
Odpověď
Participants perform realistic response actions in a controlled environment without disrupting production.
Kartička 704
Otázka
How can a team verify that a detective control is effective?
Odpověď
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kartička 705
Otázka
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Odpověď
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kartička 706
Otázka
What makes a vulnerability cloud-specific?
Odpověď
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kartička 707
Otázka
How can insurance respond to vulnerability risk?
Odpověď
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kartička 708
Otázka
How does reputation improve web filtering?
Odpověď
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kartička 709
Otázka
What does an encryption policy establish?
Odpověď
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kartička 710
Otázka
How does a microwave security sensor detect movement?
Odpověď
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kartička 711
Otázka
What should IoT-device hardening change before deployment?
Odpověď
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kartička 712
Otázka
Why track software licenses as assets?
Odpověď
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kartička 713
Otázka
What does a password manager improve?
Odpověď
It can generate and store unique long passwords so users do not memorize or reuse them.
Kartička 714
Otázka
What makes a ledger open and public?
Odpověď
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kartička 715
Otázka
What should a payment-change request trigger?
Odpověď
Independent verification through a known channel before any account or payment detail is changed.
Kartička 716
Otázka
What does preserving digital evidence require?
Odpověď
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kartička 717
Otázka
What should a risk report tell decision-makers?
Odpověď
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kartička 718
Otázka
What should an external assessment report provide?
Odpověď
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kartička 719
Otázka
What is a centralized design's main resilience risk?
Odpověď
A central dependency can become a bottleneck or single point of failure.
Kartička 720
Otázka
What does mutual TLS add to a TLS-protected service connection?
Odpověď
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kartička 721
Otázka
What should recurring security-awareness reporting show?
Odpověď
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kartička 722
Otázka
Why do legacy applications require extra change planning?
Odpověď
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kartička 723
Otázka
How do a data controller and a data processor differ?
Odpověď
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kartička 724
Otázka
How can orchestration become a single point of failure?
Odpověď
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kartička 725
Otázka
Why should defenses account for a threat actor's sophistication and capability?
Odpověď
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kartička 726
Otázka
How does an injection attack make an application execute unintended instructions?
Odpověď
It sends crafted input that an interpreter treats as code or commands instead of data.
Kartička 727
Otázka
What does a host-based firewall control?
Odpověď
Inbound and outbound network traffic for one endpoint according to local rules.
Kartička 728
Otázka
Why revise alerting after an incident?
Odpověď
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kartička 729
Otázka
Why include security duties in procurement criteria?
Odpověď
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kartička 730
Otázka
What does a critical data classification indicate?
Odpověď
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kartička 731
Otázka
What infrastructure capacity must support failover?
Odpověď
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kartička 732
Otázka
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Odpověď
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kartička 733
Otázka
How does a remediation exemption differ from an exception?
Odpověď
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kartička 734
Otázka
Why should automated EDR or XDR blocking have an exception and rollback path?
Odpověď
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kartička 735
Otázka
What does a security playbook provide?
Odpověď
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kartička 736
Otázka
How does an ultrasonic security sensor detect movement?
Odpověď
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kartička 737
Otázka
What should a managed mobile device require for Bluetooth connections?
Odpověď
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kartička 738
Otázka
How do password complexity rules differ from password length?
Odpověď
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kartička 739
Otázka
What makes a certificate third-party trusted?
Odpověď
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kartička 740
Otázka
Why is an out-of-band check effective against impersonation?
Odpověď
It verifies the request through a separate, previously trusted communication path.
Kartička 741
Otázka
What does a risk exception authorize?
Odpověď
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kartička 742
Otázka
What security challenge grows in a decentralized design?
Odpověď
Consistent policy, inventory, monitoring, and patching become harder.
Kartička 743
Otázka
How should controls be selected for an unused network path?
Odpověď
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kartička 744
Otázka
How can a buffer-overflow attack affect an application?
Odpověď
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 kartiček