CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
O ovom špilu
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Kartice u ovom špilu
Kartica 1
Pitanje
What does an information security policy establish?
Odgovor
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kartica 2
Pitanje
What is phishing?
Odgovor
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kartica 3
Pitanje
What does a public-key certificate bind to an identity?
Odgovor
A public key, together with identifying information and the issuer's signature.
Kartica 4
Pitanje
What is data at rest?
Odgovor
Data stored on media such as disks, databases, backups, or mobile devices.
Kartica 5
Pitanje
How does policy-driven access control decide a zero-trust access request?
Odgovor
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kartica 6
Pitanje
What does establishing a secure baseline produce?
Odgovor
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kartica 7
Pitanje
What is hashing used to verify?
Odgovor
Whether data has changed by comparing fixed-length digest values.
Kartica 8
Pitanje
What is impersonation in social engineering?
Odgovor
Pretending to be a trusted person or organization to obtain access, data, or action.
Kartica 9
Pitanje
What is virtualization?
Odgovor
Abstracting physical compute so multiple isolated guest systems can share a host.
Kartica 10
Pitanje
What is chain of custody?
Odgovor
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kartica 11
Pitanje
What is quantitative risk analysis?
Odgovor
Estimating risk with numerical values such as money, frequency, or probability.
Kartica 12
Pitanje
What is a phishing awareness campaign?
Odgovor
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kartica 13
Pitanje
What is high availability?
Odgovor
Designing a service to remain accessible despite expected component failures.
Kartica 14
Pitanje
What is a network security zone?
Odgovor
A group of systems with similar trust, function, or control requirements.
Kartica 15
Pitanje
What is risk transfer?
Odgovor
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kartica 16
Pitanje
What is media sanitization?
Odgovor
Making stored data infeasible to recover for the intended level of protection.
Kartica 17
Pitanje
What does CVSS provide?
Odgovor
A standardized way to describe a vulnerability's technical severity characteristics.
Kartica 18
Pitanje
What does security alerting do?
Odgovor
It turns matched events or behavior into a notification that the right responder can review.
Kartica 19
Pitanje
What does a firewall rule enforce?
Odgovor
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kartica 20
Pitanje
What is deprovisioning?
Odgovor
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kartica 21
Pitanje
How does inline placement differ from a tap or monitor port?
Odgovor
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kartica 22
Pitanje
What is asymmetric encryption?
Odgovor
Encryption that uses a mathematically related public and private key pair.
Kartica 23
Pitanje
What does SPF authorize?
Odgovor
Which mail servers may send mail for a domain in the SMTP envelope.
Kartica 24
Pitanje
What is a possession factor?
Odgovor
Something the claimant has, such as a cryptographic authenticator.
Kartica 25
Pitanje
What does ordinary TLS usually protect and authenticate?
Odgovor
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kartica 26
Pitanje
What is single loss expectancy?
Odgovor
The estimated loss from one occurrence of a risk event.
Kartica 27
Pitanje
What does a certificate authority do?
Odgovor
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kartica 28
Pitanje
What is a detective control meant to do?
Odgovor
Identify that an unwanted event has happened or is happening.
Kartica 29
Pitanje
What is the security purpose of change-control approval?
Odgovor
Ensure authorized reviewers assess risk before the production change occurs.
Kartica 30
Pitanje
What is shadow IT?
Odgovor
Technology used for organizational work without required approval or oversight.
Kartica 31
Pitanje
What is a buffer overflow vulnerability?
Odgovor
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kartica 32
Pitanje
What is ransomware?
Odgovor
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kartica 33
Pitanje
How does network segmentation limit an incident?
Odgovor
It restricts communication paths and reduces lateral movement between zones.
Kartica 34
Pitanje
How do load balancing and clustering support availability differently?
Odgovor
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kartica 35
Pitanje
What is vendor due diligence?
Odgovor
Evaluating a provider's security, capability, stability, and fit before commitment.
Kartica 36
Pitanje
Who is a data subject?
Odgovor
The person whose personal data is collected or processed.
Kartica 37
Pitanje
What is attestation?
Odgovor
A formal assertion or report about a subject matter, often supported by an independent examination.
Kartica 38
Pitanje
What is a replay attack?
Odgovor
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kartica 39
Pitanje
What does a wireless site survey establish?
Odgovor
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kartica 40
Pitanje
What is the time-of-check stage of a race-condition vulnerability?
Odgovor
The application verifies a condition or resource state before acting on it.
Kartica 41
Pitanje
What is a penetration test?
Odgovor
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kartica 42
Pitanje
What is a cold recovery site?
Odgovor
A facility with basic space and utilities but little preinstalled technology or current data.
Kartica 43
Pitanje
What is data in transit?
Odgovor
Data moving between systems or across a network.
Kartica 44
Pitanje
What is a vendor security questionnaire?
Odgovor
A structured request for information about a provider's controls and practices.
Kartica 45
Pitanje
How does an internal actor's starting position differ from an external actor's?
Odgovor
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kartica 46
Pitanje
What can unexpected account lockouts indicate?
Odgovor
Password guessing, credential stuffing, user error, or a broken client.
Kartica 47
Pitanje
How do permissions enforce access control?
Odgovor
They specify which actions a subject may perform on a particular resource.
Kartica 48
Pitanje
What is log aggregation?
Odgovor
Central collection of logs from multiple sources for search, correlation, and retention.
Kartica 49
Pitanje
Why plan a service restart as part of a change?
Odgovor
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kartica 50
Pitanje
What is infrastructure as code?
Odgovor
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kartica 51
Pitanje
What should security-awareness program development start with?
Odgovor
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kartica 52
Pitanje
What is a voice-based social-engineering attack called?
Odgovor
Vishing.
Kartica 53
Pitanje
What happens during incident-response preparation?
Odgovor
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kartica 54
Pitanje
What does an offensive penetration-testing team do?
Odgovor
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kartica 55
Pitanje
What is federation?
Odgovor
One security domain relies on identity assertions from another trusted domain.
Kartica 56
Pitanje
What is asset classification?
Odgovor
Grouping an asset by sensitivity, criticality, or required handling.
Kartica 57
Pitanje
What is cross-site scripting?
Odgovor
Injection of script-capable content that a browser executes in another site's security context.
Kartica 58
Pitanje
What can IDS or IPS trends reveal?
Odgovor
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kartica 59
Pitanje
What can unexpected resource inaccessibility indicate?
Odgovor
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kartica 60
Pitanje
What is a corrective control meant to do?
Odgovor
Limit damage and restore a secure state after an event.
Kartica 61
Pitanje
How do containers differ from virtual machines?
Odgovor
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kartica 62
Pitanje
How does an active security device differ from a passive one?
Odgovor
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kartica 63
Pitanje
Why is unsupported software a persistent attack surface?
Odgovor
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kartica 64
Pitanje
What is annualized rate of occurrence?
Odgovor
The estimated number of times a risk event occurs per year.
Kartica 65
Pitanje
What is an inherence factor?
Odgovor
A biometric characteristic of the claimant.
Kartica 66
Pitanje
What do a threat actor's sophistication and capability describe?
Odgovor
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kartica 67
Pitanje
What is a SIEM?
Odgovor
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kartica 68
Pitanje
What is sideloading?
Odgovor
Installing software from outside the platform's approved distribution path.
Kartica 69
Pitanje
What does an IDS or IPS signature match?
Odgovor
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kartica 70
Pitanje
Why are embedded systems often difficult to patch?
Odgovor
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kartica 71
Pitanje
What is a virtual private network?
Odgovor
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kartica 72
Pitanje
What should an initial security-awareness report establish?
Odgovor
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kartica 73
Pitanje
What is symmetric encryption?
Odgovor
Encryption that uses the same secret key to encrypt and decrypt data.
Kartica 74
Pitanje
What happens during incident detection?
Odgovor
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kartica 75
Pitanje
What is recovery time objective?
Odgovor
The target maximum time to restore a function after disruption.
Kartica 76
Pitanje
Why prioritize password length?
Odgovor
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kartica 77
Pitanje
What must sanitization accomplish before an asset leaves organizational control?
Odgovor
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kartica 78
Pitanje
What is a real-time operating system designed to provide?
Odgovor
Predictable response timing for tasks with strict deadlines.
Kartica 79
Pitanje
What does fail-open behavior do when a control fails?
Odgovor
It permits traffic or access to preserve availability.
Kartica 80
Pitanje
What is jailbreaking or rooting a mobile device?
Odgovor
Removing platform restrictions to gain privileged control over the operating system.
Kartica 81
Pitanje
What does network access control enforce?
Odgovor
Identity, device posture, and access policy at network connection time and during a session.
Kartica 82
Pitanje
What does data loss prevention do?
Odgovor
Detects and may block sensitive data use or transfer that violates policy.
Kartica 83
Pitanje
What security property does a blockchain provide?
Odgovor
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kartica 84
Pitanje
What is recovery point objective?
Odgovor
The target maximum acceptable data loss measured backward in time.
Kartica 85
Pitanje
How do ICS and SCADA relate?
Odgovor
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kartica 86
Pitanje
What does fail-closed behavior do when a control fails?
Odgovor
It denies traffic or access to preserve security.
Kartica 87
Pitanje
Which keys create and verify a typical digital signature?
Odgovor
The signer creates it with a private key, and others verify it with the corresponding public key.
Kartica 88
Pitanje
What is SQL injection?
Odgovor
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kartica 89
Pitanje
What does DKIM verify?
Odgovor
That selected message content was signed by a domain and was not altered after signing.
Kartica 90
Pitanje
What is post-incident activity?
Odgovor
Learning from the event and improving controls, plans, and recovery based on evidence.
Kartica 91
Pitanje
What characterizes an expansionary risk appetite?
Odgovor
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kartica 92
Pitanje
How do centralized and decentralized architectures differ?
Odgovor
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kartica 93
Pitanje
What does a certificate revocation list publish?
Odgovor
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kartica 94
Pitanje
What is a legal hold?
Odgovor
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kartica 95
Pitanje
What is exposure factor in quantitative risk analysis?
Odgovor
The estimated percentage of an asset's value lost in one event.
Kartica 96
Pitanje
What is decentralized architecture?
Odgovor
Control or service responsibility is distributed across multiple independent components or locations.
Kartica 97
Pitanje
What is tokenization?
Odgovor
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kartica 98
Pitanje
How can automation act as a workforce multiplier?
Odgovor
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kartica 99
Pitanje
What can endpoint process logs reveal?
Odgovor
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kartica 100
Pitanje
What does the CIA triad protect?
Odgovor
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kartica 101
Pitanje
How does data masking protect information?
Odgovor
It hides selected values or characters while preserving a usable representation.
Kartica 102
Pitanje
How can a national requirement affect security governance?
Odgovor
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kartica 103
Pitanje
What do integrations and APIs provide to security orchestration?
Odgovor
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kartica 104
Pitanje
What makes a compliance report external?
Odgovor
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kartica 105
Pitanje
What does a cryptographic algorithm define?
Odgovor
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kartica 106
Pitanje
Why compare systems with a secure baseline regularly?
Odgovor
To detect drift, unauthorized changes, and missing hardening.
Kartica 107
Pitanje
What does integrity protect?
Odgovor
The accuracy and completeness of data and systems against unauthorized change.
Kartica 108
Pitanje
What does vulnerability classification organize?
Odgovor
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kartica 109
Pitanje
What does a password standard define?
Odgovor
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kartica 110
Pitanje
What technology capacity must a recovery design plan for?
Odgovor
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kartica 111
Pitanje
What does a confidential data classification indicate?
Odgovor
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kartica 112
Pitanje
What makes a vendor assessment independent?
Odgovor
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kartica 113
Pitanje
What lets a worm spread without attaching itself to another file?
Odgovor
It is a standalone program that replicates across reachable systems or services.
Kartica 114
Pitanje
What is microsegmentation?
Odgovor
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kartica 115
Pitanje
What can application logs reveal?
Odgovor
Transactions, errors, user actions, and application-specific security events.
Kartica 116
Pitanje
What does deploying a secure baseline require?
Odgovor
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kartica 117
Pitanje
How can resource-provisioning automation improve security?
Odgovor
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kartica 118
Pitanje
What does availability protect?
Odgovor
Reliable, timely access to systems and data when authorized users need them.
Kartica 119
Pitanje
Why must a change request describe business impact?
Odgovor
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kartica 120
Pitanje
What does an authenticated vulnerability scan add?
Odgovor
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kartica 121
Pitanje
What does a change-management procedure specify?
Odgovor
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kartica 122
Pitanje
What is a sanction for noncompliance?
Odgovor
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kartica 123
Pitanje
How can email deliver a security attack?
Odgovor
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kartica 124
Pitanje
What is an internal compliance audit?
Odgovor
An organization-led examination of whether selected operations and controls meet defined requirements.
Kartica 125
Pitanje
What is a Trojan?
Odgovor
Malware disguised as legitimate or desirable software.
Kartica 126
Pitanje
What is clustering?
Odgovor
Multiple systems work together to provide a service and tolerate member failure.
Kartica 127
Pitanje
What makes data regulated?
Odgovor
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kartica 128
Pitanje
What does a wireless heat map show?
Odgovor
Measured or modeled signal strength and coverage across a physical area.
Kartica 129
Pitanje
How should vendor criticality affect due diligence?
Odgovor
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kartica 130
Pitanje
How can a digital signature support non-repudiation?
Odgovor
It provides evidence that the holder of a private key signed specific data.
Kartica 131
Pitanje
What should vulnerability prioritization consider beyond severity?
Odgovor
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kartica 132
Pitanje
What is a security guideline?
Odgovor
Recommended practice that allows judgment unless adopted as a requirement.
Kartica 133
Pitanje
What usually distinguishes a nation-state threat actor?
Odgovor
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kartica 134
Pitanje
What is spyware?
Odgovor
Software that secretly collects information about a user or system.
Kartica 135
Pitanje
Why maintain an allow list for applications?
Odgovor
Only explicitly approved software is permitted to execute.
Kartica 136
Pitanje
How can an image become an attack vector?
Odgovor
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kartica 137
Pitanje
What makes a security control technical?
Odgovor
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kartica 138
Pitanje
What is identity proofing?
Odgovor
Establishing that a person is who they claim to be before issuing an account or credential.
Kartica 139
Pitanje
What is an automated security guardrail?
Odgovor
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kartica 140
Pitanje
Why assign an owner to a planned change?
Odgovor
To make one party accountable for coordination, execution, and follow-through.
Kartica 141
Pitanje
How can national privacy law affect data handling?
Odgovor
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kartica 142
Pitanje
What is continuity of operations?
Odgovor
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kartica 143
Pitanje
What security tradeoff comes with BYOD?
Odgovor
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kartica 144
Pitanje
How should policies and handbooks support security training?
Odgovor
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kartica 145
Pitanje
What is a keylogger?
Odgovor
A tool that records keystrokes to capture data such as credentials.
Kartica 146
Pitanje
What makes information a trade secret?
Odgovor
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kartica 147
Pitanje
What does authentication establish?
Odgovor
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kartica 148
Pitanje
What risk comes from an untrusted file attachment?
Odgovor
Opening or parsing it can execute malicious code or expose data.
Kartica 149
Pitanje
How does risk tolerance affect vulnerability remediation?
Odgovor
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kartica 150
Pitanje
How can a global requirement affect security governance?
Odgovor
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kartica 151
Pitanje
Why should questionnaire answers be supported by evidence?
Odgovor
Self-assertions alone may not prove that controls are designed or operating effectively.
Kartica 152
Pitanje
What is an independent third-party audit?
Odgovor
An external party with suitable independence examines evidence against defined criteria.
Kartica 153
Pitanje
What do account provisioning and deprovisioning do?
Odgovor
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kartica 154
Pitanje
What is an unskilled attacker commonly called?
Odgovor
A script kiddie: someone who relies on tools or instructions created by others.
Kartica 155
Pitanje
What is a rootkit?
Odgovor
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kartica 156
Pitanje
What does an access control list enforce?
Odgovor
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kartica 157
Pitanje
What should system security monitoring observe?
Odgovor
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kartica 158
Pitanje
What can operating-system security logs reveal?
Odgovor
Authentication, privilege use, policy changes, services, and other host security events.
Kartica 159
Pitanje
Why isolate operational technology from general business networks?
Odgovor
To limit attack paths into safety- and availability-critical processes.
Kartica 160
Pitanje
What is the COPE mobile deployment model?
Odgovor
The organization owns the device but permits defined personal use while retaining management control.
Kartica 161
Pitanje
What security work belongs in asset acquisition and procurement?
Odgovor
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kartica 162
Pitanje
How can user-provisioning automation improve security?
Odgovor
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kartica 163
Pitanje
What people capacity must a continuity plan account for?
Odgovor
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kartica 164
Pitanje
What do authorization models define?
Odgovor
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kartica 165
Pitanje
Why are removable devices an attack vector?
Odgovor
They can introduce malware or remove data while bypassing network controls.
Kartica 166
Pitanje
What should predeployment change-test results show?
Odgovor
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kartica 167
Pitanje
What is the time-of-use stage of a race-condition vulnerability?
Odgovor
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kartica 168
Pitanje
What is data in use?
Odgovor
Data actively processed in memory or by an application.
Kartica 169
Pitanje
What does open-source vulnerability intelligence contribute?
Odgovor
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kartica 170
Pitanje
What can file-integrity monitoring detect?
Odgovor
Unexpected changes to protected files, directories, or configuration.
Kartica 171
Pitanje
Why should deprovisioning be prompt?
Odgovor
Former users or roles should not retain usable access.
Kartica 172
Pitanje
What is an acceptable use policy?
Odgovor
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kartica 173
Pitanje
What makes a compliance report internal?
Odgovor
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kartica 174
Pitanje
What is a logic bomb?
Odgovor
Malicious code that activates when a specified condition or time is reached.
Kartica 175
Pitanje
What does a right-to-audit clause provide?
Odgovor
Contractual authority to inspect or obtain evidence about agreed controls.
Kartica 176
Pitanje
Where should a forward proxy sit in an enterprise traffic path?
Odgovor
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kartica 177
Pitanje
Which cues should make a message look suspicious?
Odgovor
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kartica 178
Pitanje
What makes a security control managerial?
Odgovor
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kartica 179
Pitanje
What is the CYOD mobile deployment model?
Odgovor
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kartica 180
Pitanje
How does client-based vulnerable software differ from an agentless exposure?
Odgovor
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kartica 181
Pitanje
What makes a risk assessment recurring?
Odgovor
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kartica 182
Pitanje
What does a defensive penetration-testing team practice?
Odgovor
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kartica 183
Pitanje
In a zero-trust data plane, what can the subject or system represent?
Odgovor
The user, device, workload, or service requesting access to a protected resource.
Kartica 184
Pitanje
What primarily motivates a hacktivist?
Odgovor
A political, social, or ideological cause.
Kartica 185
Pitanje
What is bloatware?
Odgovor
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kartica 186
Pitanje
Why keep endpoint-protection signatures and engines current?
Odgovor
They need current detection logic to recognize newly identified malware and exploit behavior.
Kartica 187
Pitanje
What should application security monitoring observe?
Odgovor
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kartica 188
Pitanje
What is role-based access control?
Odgovor
Permissions are assigned to roles, and identities receive access through their roles.
Kartica 189
Pitanje
What is geographic dispersal?
Odgovor
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kartica 190
Pitanje
What is a malicious update?
Odgovor
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kartica 191
Pitanje
What does static application analysis inspect?
Odgovor
Source code, bytecode, or compiled code without executing the application.
Kartica 192
Pitanje
What does a firewall access list define?
Odgovor
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kartica 193
Pitanje
What does a disaster recovery policy establish?
Odgovor
Management expectations for restoring technology and data after a disruptive event.
Kartica 194
Pitanje
How does logical segmentation separate workloads that share physical infrastructure?
Odgovor
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kartica 195
Pitanje
How should IDS and IPS placement differ?
Odgovor
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kartica 196
Pitanje
What should automated ticket creation capture?
Odgovor
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kartica 197
Pitanje
What makes information intellectual property?
Odgovor
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kartica 198
Pitanje
What is a backout plan?
Odgovor
Predefined steps for safely reversing a failed or harmful change.
Kartica 199
Pitanje
Why is an unsecure wireless network an attack vector?
Odgovor
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kartica 200
Pitanje
What is physical brute force?
Odgovor
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kartica 201
Pitanje
What is application sandboxing?
Odgovor
Running code in a constrained environment with limited access to the host and data.
Kartica 202
Pitanje
Why assign an asset owner?
Odgovor
One accountable party must decide its use, protection, and lifecycle.
Kartica 203
Pitanje
What happens during risk identification?
Odgovor
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kartica 204
Pitanje
What should an SLA state about breach notification?
Odgovor
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kartica 205
Pitanje
How do due diligence and due care differ in compliance?
Odgovor
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kartica 206
Pitanje
What is attribute-based access control?
Odgovor
Policy evaluates attributes of the subject, resource, action, and environment.
Kartica 207
Pitanje
What does a zero-trust policy engine do?
Odgovor
It evaluates policy and signals to decide whether access should be allowed.
Kartica 208
Pitanje
How does a cloud responsibility matrix allocate security duties?
Odgovor
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kartica 209
Pitanje
Where should a load balancer sit in a service path?
Odgovor
In front of service instances so it can route requests to healthy backends.
Kartica 210
Pitanje
What should the security team do with a reported suspicious message?
Odgovor
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kartica 211
Pitanje
What makes an operating-system vulnerability high impact?
Odgovor
It can affect every application and security control that relies on the compromised OS.
Kartica 212
Pitanje
What does dynamic application analysis inspect?
Odgovor
The behavior and externally visible weaknesses of a running application.
Kartica 213
Pitanje
How can false-positive trends affect IDS or IPS tuning?
Odgovor
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kartica 214
Pitanje
What does a business continuity policy establish?
Odgovor
Management expectations for sustaining and restoring critical business functions.
Kartica 215
Pitanje
What is a hot recovery site?
Odgovor
A ready, synchronized environment intended to take over quickly.
Kartica 216
Pitanje
What makes an insider threat distinct?
Odgovor
The actor has legitimate access or organizational knowledge that can be misused.
Kartica 217
Pitanje
What is RFID cloning?
Odgovor
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kartica 218
Pitanje
Why apply vendor security updates promptly?
Odgovor
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kartica 219
Pitanje
What should infrastructure security monitoring observe?
Odgovor
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kartica 220
Pitanje
What can firewall logs reveal?
Odgovor
Allowed or denied network connections across controlled boundaries.
Kartica 221
Pitanje
Why minimize open service ports?
Odgovor
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kartica 222
Pitanje
What is threat hunting?
Odgovor
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kartica 223
Pitanje
What triggers an ad hoc risk assessment?
Odgovor
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kartica 224
Pitanje
What makes an assessment external?
Odgovor
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kartica 225
Pitanje
What is data sovereignty?
Odgovor
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kartica 226
Pitanje
What security boundary does a cellular connection create for a mobile device?
Odgovor
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kartica 227
Pitanje
What makes a security control operational?
Odgovor
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kartica 228
Pitanje
What is discretionary access control?
Odgovor
A resource owner can decide who receives access, within system policy.
Kartica 229
Pitanje
How can careful automation support employee retention?
Odgovor
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kartica 230
Pitanje
Why does ease of deployment matter in an architecture decision?
Odgovor
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kartica 231
Pitanje
What tradeoff comes with placing an NGFW inline?
Odgovor
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kartica 232
Pitanje
What does a zero-trust policy administrator do?
Odgovor
It carries out the policy engine's decision, such as creating or ending a session.
Kartica 233
Pitanje
What should a master service agreement define for data return and deletion?
Odgovor
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kartica 234
Pitanje
What is an environmental physical attack?
Odgovor
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kartica 235
Pitanje
When should a maintenance window be chosen?
Odgovor
When disruption and rollback can be managed with the least business impact.
Kartica 236
Pitanje
What is memory injection?
Odgovor
Placing malicious code or data into another process's memory so it executes in that process's context.
Kartica 237
Pitanje
What does software composition analysis find?
Odgovor
Known risks and license information in third-party dependencies.
Kartica 238
Pitanje
What is DNS filtering?
Odgovor
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kartica 239
Pitanje
What should an incident response policy establish?
Odgovor
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kartica 240
Pitanje
How can noncompliance cause reputational damage?
Odgovor
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kartica 241
Pitanje
What does full-disk encryption protect?
Odgovor
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kartica 242
Pitanje
Why are default credentials dangerous?
Odgovor
They are widely known or easily discovered and often remain unchanged.
Kartica 243
Pitanje
What makes a risk assessment one-time?
Odgovor
It evaluates a defined decision or scope once without an established repeating cadence.
Kartica 244
Pitanje
What is a warm recovery site?
Odgovor
A partially equipped environment that needs some data restoration or configuration before use.
Kartica 245
Pitanje
What does application input validation do?
Odgovor
It checks that input matches the expected type, length, range, and format before use.
Kartica 246
Pitanje
What should an asset inventory record besides a device name?
Odgovor
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kartica 247
Pitanje
What is mandatory access control?
Odgovor
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kartica 248
Pitanje
What security benefit does infrastructure as code provide?
Odgovor
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kartica 249
Pitanje
When should a public service control fail closed?
Odgovor
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kartica 250
Pitanje
What should users do with a suspicious message?
Odgovor
Report it through the approved channel without interacting with its links or attachments.
Kartica 251
Pitanje
What usually motivates organized cybercrime?
Odgovor
Financial gain through scalable or repeatable criminal activity.
Kartica 252
Pitanje
How can malicious code support a network attack?
Odgovor
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kartica 253
Pitanje
When is virtual patching useful?
Odgovor
When a network or application control can block exploit traffic before the underlying system can be patched.
Kartica 254
Pitanje
What does security-monitoring reporting provide?
Odgovor
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kartica 255
Pitanje
What does data geolocation identify?
Odgovor
The physical or legal location where data is stored, processed, or transmitted.
Kartica 256
Pitanje
What does a zero-trust policy enforcement point do?
Odgovor
It enables, monitors, and terminates the connection between a subject and a resource.
Kartica 257
Pitanje
What is cryptographic key exchange?
Odgovor
A method for parties to establish shared key material over an untrusted channel.
Kartica 258
Pitanje
How can a vendor become a supply-chain attack vector?
Odgovor
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kartica 259
Pitanje
Why can legacy hardware remain vulnerable?
Odgovor
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kartica 260
Pitanje
What can proprietary vulnerability intelligence add beyond open sources?
Odgovor
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kartica 261
Pitanje
How does a centralized proxy apply web filtering?
Odgovor
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kartica 262
Pitanje
How can continuous integration and testing improve security automation?
Odgovor
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kartica 263
Pitanje
What is containment?
Odgovor
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kartica 264
Pitanje
What is a software development lifecycle policy meant to ensure?
Odgovor
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kartica 265
Pitanje
What makes risk assessment continuous?
Odgovor
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kartica 266
Pitanje
What is a memorandum of agreement?
Odgovor
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kartica 267
Pitanje
What makes a penetration test integrated?
Odgovor
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kartica 268
Pitanje
How does a DNS amplification attack magnify traffic?
Odgovor
It sends small spoofed queries that trigger larger replies toward the victim.
Kartica 269
Pitanje
Why does ease of recovery matter in an architecture decision?
Odgovor
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kartica 270
Pitanje
What does 802.1X control before a device receives normal network access?
Odgovor
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kartica 271
Pitanje
What is rule-based access control?
Odgovor
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kartica 272
Pitanje
What is mobile device management?
Odgovor
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kartica 273
Pitanje
What tradeoff comes with a cold recovery site?
Odgovor
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kartica 274
Pitanje
Why identify stakeholders before approving a security-sensitive change?
Odgovor
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kartica 275
Pitanje
How do attestation and acknowledgement differ?
Odgovor
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kartica 276
Pitanje
What does zero-trust adaptive identity mean?
Odgovor
Access decisions adjust to current risk signals rather than relying only on a static login.
Kartica 277
Pitanje
What makes a security control physical?
Odgovor
It protects facilities or equipment through a tangible barrier or mechanism.
Kartica 278
Pitanje
What is geo-fencing for data?
Odgovor
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kartica 279
Pitanje
What does a Trusted Platform Module protect?
Odgovor
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kartica 280
Pitanje
Why can a managed service provider amplify risk?
Odgovor
Its privileged access and shared tooling can provide a path into many customers.
Kartica 281
Pitanje
What does probability express in risk analysis?
Odgovor
A quantified chance that a defined event will occur within stated conditions or time.
Kartica 282
Pitanje
Why can shadow IT create a threat?
Odgovor
It bypasses security review, inventory, monitoring, and supported configuration.
Kartica 283
Pitanje
What is on-path interception?
Odgovor
An attacker positions between communicating parties to observe or alter traffic.
Kartica 284
Pitanje
Why include encryption in a system-hardening baseline?
Odgovor
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kartica 285
Pitanje
Why tune security alerts?
Odgovor
To keep useful detections while reducing noise that wastes analyst attention.
Kartica 286
Pitanje
What can IPS or IDS logs contribute to an investigation?
Odgovor
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kartica 287
Pitanje
What is VM escape?
Odgovor
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kartica 288
Pitanje
How can segmentation reduce vulnerability exposure before a patch is available?
Odgovor
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kartica 289
Pitanje
Why should firewall policy name the required ports and protocols explicitly?
Odgovor
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kartica 290
Pitanje
What is a change management policy meant to control?
Odgovor
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kartica 291
Pitanje
What is a hybrid-cloud architecture?
Odgovor
An environment that integrates private or on-premises resources with public cloud services.
Kartica 292
Pitanje
How do AH and ESP differ in the security services they can provide?
Odgovor
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kartica 293
Pitanje
What makes user behavior risky?
Odgovor
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kartica 294
Pitanje
What is least privilege?
Odgovor
Granting only the access needed for the required task and no more.
Kartica 295
Pitanje
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Odgovor
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kartica 296
Pitanje
Why discover unmanaged assets?
Odgovor
Unknown systems cannot be patched, monitored, or governed reliably.
Kartica 297
Pitanje
What is a service-level agreement?
Odgovor
Measurable service commitments and remedies, such as availability or response targets.
Kartica 298
Pitanje
What should govern automated security escalation?
Odgovor
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kartica 299
Pitanje
What is platform diversity as a resilience strategy?
Odgovor
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kartica 300
Pitanje
How can replayed session material affect an application?
Odgovor
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kartica 301
Pitanje
What is an implicit trust zone in zero trust?
Odgovor
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kartica 302
Pitanje
What does salting a password hash accomplish?
Odgovor
It makes identical passwords hash differently and defeats precomputed hash tables.
Kartica 303
Pitanje
What is spear phishing?
Odgovor
Phishing tailored to a specific person, role, or organization.
Kartica 304
Pitanje
What is eradication?
Odgovor
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kartica 305
Pitanje
Who is a risk owner?
Odgovor
The person accountable for deciding and monitoring how a specific risk is handled.
Kartica 306
Pitanje
What does a partially known penetration-test environment provide?
Odgovor
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kartica 307
Pitanje
What is a microservices architecture?
Odgovor
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kartica 308
Pitanje
What is a jump server?
Odgovor
A hardened intermediary used to reach systems in a restricted management network.
Kartica 309
Pitanje
What can happen when a configuration change is made without dependency analysis?
Odgovor
A downstream service can fail even when the changed component works.
Kartica 310
Pitanje
What is resource reuse exposure?
Odgovor
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kartica 311
Pitanje
Why does financial information require explicit protection?
Odgovor
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kartica 312
Pitanje
What does CVE provide?
Odgovor
A common identifier for a publicly disclosed vulnerability.
Kartica 313
Pitanje
Where can DLP controls operate?
Odgovor
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kartica 314
Pitanje
What does privileged password vaulting protect?
Odgovor
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kartica 315
Pitanje
What does an access-control standard define?
Odgovor
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kartica 316
Pitanje
How can automation support compliance monitoring?
Odgovor
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kartica 317
Pitanje
What does static code analysis examine?
Odgovor
Source or compiled code for weakness patterns without executing the application.
Kartica 318
Pitanje
What actor attribute describes funding, time, and personnel?
Odgovor
Resources.
Kartica 319
Pitanje
What is DNS poisoning?
Odgovor
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kartica 320
Pitanje
Why change default credentials during hardening?
Odgovor
Default secrets are predictable and commonly targeted.
Kartica 321
Pitanje
What does quarantine do after a security alert?
Odgovor
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kartica 322
Pitanje
What does key stretching do for stored passwords?
Odgovor
It deliberately makes each password guess more computationally expensive.
Kartica 323
Pitanje
What is smishing?
Odgovor
Phishing delivered through SMS or another text-messaging service.
Kartica 324
Pitanje
What is qualitative risk analysis?
Odgovor
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kartica 325
Pitanje
What is a master service agreement?
Odgovor
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kartica 326
Pitanje
What is threat scope reduction?
Odgovor
Narrowing the systems, privileges, or paths an attacker can reach.
Kartica 327
Pitanje
Why use a third-party cloud service instead of building locally?
Odgovor
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kartica 328
Pitanje
What should determine security-device placement?
Odgovor
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kartica 329
Pitanje
What does situational awareness mean for a user?
Odgovor
Notice the people, devices, requests, location, and context around a task before acting.
Kartica 330
Pitanje
What does a failover test validate?
Odgovor
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kartica 331
Pitanje
What is a preventive control meant to do?
Odgovor
Stop an unwanted event before it succeeds.
Kartica 332
Pitanje
What is just-in-time privileged access?
Odgovor
Elevated access is granted only when needed and expires after a short approved period.
Kartica 333
Pitanje
What safeguard should security-group automation enforce?
Odgovor
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kartica 334
Pitanje
How does a reflected DDoS attack hide and multiply sources?
Odgovor
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kartica 335
Pitanje
What is a security misconfiguration?
Odgovor
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kartica 336
Pitanje
Why can the same vulnerability have different organizational impact?
Odgovor
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kartica 337
Pitanje
What does URL scanning evaluate before a user opens a web destination?
Odgovor
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kartica 338
Pitanje
What is the board's security governance role?
Odgovor
Provide oversight, set risk direction, and hold executives accountable.
Kartica 339
Pitanje
What does code signing establish?
Odgovor
That code came from the holder of the signing key and has not changed since signing.
Kartica 340
Pitanje
How should an asset's classification affect security operations?
Odgovor
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kartica 341
Pitanje
How does encryption protect data?
Odgovor
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kartica 342
Pitanje
What is a secure enclave?
Odgovor
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kartica 343
Pitanje
What is business email compromise?
Odgovor
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kartica 344
Pitanje
What is recovery in incident response?
Odgovor
Restoring services safely, monitoring them, and returning to normal operations.
Kartica 345
Pitanje
How is single loss expectancy commonly estimated?
Odgovor
Asset value multiplied by the exposure factor.
Kartica 346
Pitanje
What does an unknown penetration-test environment provide?
Odgovor
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kartica 347
Pitanje
What security boundary does a hypervisor provide?
Odgovor
It isolates virtual machines while controlling their access to shared hardware.
Kartica 348
Pitanje
Why does a TLS tunnel not protect a compromised endpoint?
Odgovor
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kartica 349
Pitanje
Why update diagrams after an infrastructure change?
Odgovor
Operations and incident responders need the documentation to match the deployed environment.
Kartica 350
Pitanje
What does privacy ownership assign?
Odgovor
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kartica 351
Pitanje
What does a security control gap analysis compare?
Odgovor
The controls required for the target state with the controls currently in place.
Kartica 352
Pitanje
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Odgovor
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kartica 353
Pitanje
What is application privilege escalation?
Odgovor
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kartica 354
Pitanje
What risk remains when unnecessary software is left installed?
Odgovor
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kartica 355
Pitanje
What does SCAP standardize?
Odgovor
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kartica 356
Pitanje
What can packet capture reveal?
Odgovor
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kartica 357
Pitanje
What makes a privileged credential ephemeral?
Odgovor
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kartica 358
Pitanje
How do a statement of work and a work order differ?
Odgovor
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kartica 359
Pitanje
Why might multi-cloud improve resilience?
Odgovor
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kartica 360
Pitanje
How can a service provider introduce a supply-chain vulnerability?
Odgovor
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kartica 361
Pitanje
What is a false positive in vulnerability scanning?
Odgovor
A reported weakness that is not actually present or exploitable in the assessed context.
Kartica 362
Pitanje
How do EDR and XDR differ?
Odgovor
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kartica 363
Pitanje
What should onboarding and offboarding procedures coordinate?
Odgovor
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kartica 364
Pitanje
How should an organization harden managed mobile devices?
Odgovor
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kartica 365
Pitanje
What is a certificate signing request?
Odgovor
A request containing a public key and subject information for a certificate authority to sign.
Kartica 366
Pitanje
What is pretexting?
Odgovor
Using a fabricated role or situation to make a request seem legitimate.
Kartica 367
Pitanje
How is annualized loss expectancy commonly estimated?
Odgovor
Single loss expectancy multiplied by annualized rate of occurrence.
Kartica 368
Pitanje
What security consequence follows from containers sharing a kernel?
Odgovor
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kartica 369
Pitanje
Where does 802.1X enforce a network admission decision?
Odgovor
At the controlled switch port or wireless access point before normal network access is granted.
Kartica 370
Pitanje
What should insider-threat awareness teach?
Odgovor
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kartica 371
Pitanje
What access action is suitable for careful automation?
Odgovor
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kartica 372
Pitanje
What is an evil twin?
Odgovor
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kartice
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Učite iz ovog špila besplatnoNibomo se otvara kako biste mogli početi učiti.
Kartica 373
Pitanje
Does non-human-readable data need less protection?
Odgovor
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kartica 374
Pitanje
What does authenticating a system establish?
Odgovor
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kartica 375
Pitanje
What does LDAP provide in identity systems?
Odgovor
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kartica 376
Pitanje
What is a deterrent control meant to do?
Odgovor
Discourage an attacker from attempting an unwanted action.
Kartica 377
Pitanje
Why update procedures after changing a security control?
Odgovor
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kartica 378
Pitanje
How does OCSP differ from a certificate revocation list?
Odgovor
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kartica 379
Pitanje
What is the goal of data exfiltration?
Odgovor
Remove data from its authorized environment without permission.
Kartica 380
Pitanje
What is a watering-hole attack?
Odgovor
Compromising a site frequented by the intended targets so their visits expose them.
Kartica 381
Pitanje
How can a hardware provider introduce a supply-chain vulnerability?
Odgovor
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kartica 382
Pitanje
What is application forgery?
Odgovor
Creating or altering a request, token, or object so the application treats it as authentic.
Kartica 383
Pitanje
How does least privilege mitigate compromise?
Odgovor
It limits the actions and resources available to a compromised account or process.
Kartica 384
Pitanje
What is serverless computing?
Odgovor
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kartica 385
Pitanje
What makes an infrastructure control effective for a specific risk?
Odgovor
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kartica 386
Pitanje
What does parallel recovery processing test?
Odgovor
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kartica 387
Pitanje
Which password-authentication method does WPA3-Personal use?
Odgovor
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kartica 388
Pitanje
How does data retention affect asset disposal?
Odgovor
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kartica 389
Pitanje
What is a false negative in vulnerability scanning?
Odgovor
A real weakness that the assessment fails to report.
Kartica 390
Pitanje
What does recurring security scanning add to monitoring?
Odgovor
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kartica 391
Pitanje
What should guide port selection for a secure protocol?
Odgovor
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kartica 392
Pitanje
What does forensic acquisition create?
Odgovor
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kartica 393
Pitanje
How do system owners and data owners divide security accountability?
Odgovor
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kartica 394
Pitanje
What does likelihood express in risk analysis?
Odgovor
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kartica 395
Pitanje
What is a memorandum of understanding?
Odgovor
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kartica 396
Pitanje
What does the right to be forgotten generally require?
Odgovor
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kartica 397
Pitanje
What does an audit committee oversee?
Odgovor
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kartica 398
Pitanje
What does identity interoperability require?
Odgovor
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kartica 399
Pitanje
How does a bollard protect a facility?
Odgovor
It blocks or redirects vehicles before they can reach a protected area.
Kartica 400
Pitanje
How can hashing protect a downloaded file?
Odgovor
A trusted digest lets the recipient detect whether the file changed.
Kartica 401
Pitanje
What is a credential replay attack?
Odgovor
Using captured valid credentials or tokens again without needing to discover the secret.
Kartica 402
Pitanje
How can automation complexity create security risk?
Odgovor
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kartica 403
Pitanje
What must an architecture provide when a component cannot be patched?
Odgovor
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kartica 404
Pitanje
What makes remote access secure?
Odgovor
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kartica 405
Pitanje
What should users verify before connecting removable media or a cable?
Odgovor
That the device and connection are approved, expected, and handled under organizational policy.
Kartica 406
Pitanje
What is a self-signed certificate?
Odgovor
A certificate signed by its own private key rather than by a separate trusted issuer.
Kartica 407
Pitanje
What is brand impersonation?
Odgovor
Using a trusted organization's identity or look to deceive people.
Kartica 408
Pitanje
What characterizes a conservative risk appetite?
Odgovor
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kartica 409
Pitanje
What should a managed mobile device verify before using Wi-Fi?
Odgovor
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kartica 410
Pitanje
What is a zero-day vulnerability?
Odgovor
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kartica 411
Pitanje
What does verification confirm after vulnerability remediation?
Odgovor
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kartica 412
Pitanje
What is user and entity behavior analytics?
Odgovor
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kartica 413
Pitanje
What does a physical security policy establish?
Odgovor
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kartica 414
Pitanje
What does a UPS provide?
Odgovor
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kartica 415
Pitanje
What is a nondisclosure agreement?
Odgovor
A contract restricting use and disclosure of defined confidential information.
Kartica 416
Pitanje
What should be checked before assigning a user permission?
Odgovor
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kartica 417
Pitanje
How does espionage differ from ordinary theft?
Odgovor
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kartica 418
Pitanje
What is password spraying?
Odgovor
Trying a small set of common passwords across many accounts to avoid lockouts.
Kartica 419
Pitanje
What is the purpose of system isolation during an incident?
Odgovor
Stop harmful communication while preserving the system for response and investigation.
Kartica 420
Pitanje
What is a security benchmark?
Odgovor
A documented set of recommended configuration checks for a platform or product.
Kartica 421
Pitanje
Which metadata fields give a log record investigative context?
Odgovor
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kartica 422
Pitanje
What does an access-control vestibule prevent?
Odgovor
It limits tailgating by allowing controlled passage through one door at a time.
Kartica 423
Pitanje
What is version control's security value for configuration?
Odgovor
It preserves attributable history and enables review or rollback of changes.
Kartica 424
Pitanje
Why use both internal and external compliance monitoring?
Odgovor
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kartica 425
Pitanje
What distinguishes on-premises architecture?
Odgovor
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kartica 426
Pitanje
What risk can split tunneling add to a VPN?
Odgovor
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kartica 427
Pitanje
What is a certificate root of trust?
Odgovor
A trusted root certificate or key from which a client validates a certificate chain.
Kartica 428
Pitanje
What is typosquatting?
Odgovor
Registering a look-alike domain based on common typing errors or visual similarity.
Kartica 429
Pitanje
What is root-cause analysis?
Odgovor
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kartica 430
Pitanje
What is risk tolerance?
Odgovor
The acceptable variation or boundary around a specific objective or risk area.
Kartica 431
Pitanje
What is a security self-assessment?
Odgovor
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kartica 432
Pitanje
What does data masking change?
Odgovor
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kartica 433
Pitanje
How do wireless authentication protocols let clients prove identity securely?
Odgovor
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kartica 434
Pitanje
Why reconcile inventory with network discovery?
Odgovor
Differences expose missing records, retired systems, or unauthorized devices.
Kartica 435
Pitanje
Why does sideloading raise mobile risk?
Odgovor
It can bypass store review, signing policy, and managed application controls.
Kartica 436
Pitanje
What does an information-sharing organization add to vulnerability management?
Odgovor
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kartica 437
Pitanje
What does a web-filter block rule specify?
Odgovor
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kartica 438
Pitanje
How do data custodians and data stewards differ?
Odgovor
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kartica 439
Pitanje
What is a brute-force password attack?
Odgovor
Systematically trying many candidate secrets against an account or protected value.
Kartica 440
Pitanje
What is a compensating control?
Odgovor
An alternative safeguard used when the preferred control is impractical or unavailable.
Kartica 441
Pitanje
How can location act as an authentication factor?
Odgovor
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kartica 442
Pitanje
Why must security automation remain supportable?
Odgovor
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kartica 443
Pitanje
What does a standby generator provide?
Odgovor
Longer-duration power during a utility outage, after a startup delay.
Kartica 444
Pitanje
What makes an architecture air-gapped?
Odgovor
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kartica 445
Pitanje
What is a software-defined WAN?
Odgovor
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kartica 446
Pitanje
What password-management behavior should awareness training reinforce?
Odgovor
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kartica 447
Pitanje
What security value does fencing provide?
Odgovor
It defines and delays entry across a physical perimeter.
Kartica 448
Pitanje
What is a wildcard certificate?
Odgovor
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kartica 449
Pitanje
How does misinformation differ from disinformation?
Odgovor
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kartica 450
Pitanje
What is a risk threshold?
Odgovor
A defined level that triggers escalation, treatment, or another required response.
Kartica 451
Pitanje
What does a vendor penetration test contribute to assessment?
Odgovor
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kartica 452
Pitanje
What is the objective of a service-disruption attack?
Odgovor
Make a system or business function unavailable or unreliable.
Kartica 453
Pitanje
What is directory traversal?
Odgovor
Manipulating a file path to reach files outside the directory the application intended to expose.
Kartica 454
Pitanje
Why decommission an unsupported system?
Odgovor
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kartica 455
Pitanje
Why archive security-monitoring data?
Odgovor
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kartica 456
Pitanje
What role does RADIUS commonly play in enterprise Wi-Fi?
Odgovor
It centralizes authentication, authorization information, and accounting for network access.
Kartica 457
Pitanje
Why separate the requester and approver of a high-risk change?
Odgovor
To reduce error, fraud, and unilateral unauthorized modification.
Kartica 458
Pitanje
Why can a jailbroken device violate a security baseline?
Odgovor
It weakens platform isolation and allows unapproved privileged changes.
Kartica 459
Pitanje
When is tokenization especially useful?
Odgovor
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kartica 460
Pitanje
Why can dark-web intelligence affect vulnerability priority?
Odgovor
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kartica 461
Pitanje
What firewall policy should govern traffic from a screened subnet to internal systems?
Odgovor
Deny it by default and allow only explicitly required flows.
Kartica 462
Pitanje
What does SAML commonly carry?
Odgovor
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kartica 463
Pitanje
What does a security governance committee do?
Odgovor
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kartica 464
Pitanje
How can global privacy requirements affect one data process?
Odgovor
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kartica 465
Pitanje
What characterizes an IoT device?
Odgovor
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kartica 466
Pitanje
What is a unified threat management appliance?
Odgovor
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kartica 467
Pitanje
What does a hardware security module provide?
Odgovor
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kartica 468
Pitanje
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Odgovor
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kartica 469
Pitanje
What is a tabletop exercise?
Odgovor
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kartica 470
Pitanje
What does a risk exemption authorize?
Odgovor
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kartica 471
Pitanje
What is a regulatory examination?
Odgovor
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kartica 472
Pitanje
What does physical video surveillance primarily provide?
Odgovor
Detection and evidence of activity in monitored areas.
Kartica 473
Pitanje
What is a birthday attack against a hash?
Odgovor
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kartica 474
Pitanje
Why keep backups both onsite and offsite?
Odgovor
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kartica 475
Pitanje
How does technical debt affect security automation?
Odgovor
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kartica 476
Pitanje
What should switch hardening restrict first?
Odgovor
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kartica 477
Pitanje
What should happen when an asset changes owners?
Odgovor
Inventory, access, support responsibility, and data handling should be updated.
Kartica 478
Pitanje
What does evidence of a vendor's internal audits contribute?
Odgovor
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kartica 479
Pitanje
What is identity attestation?
Odgovor
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kartica 480
Pitanje
Why can standard enterprise patching be unsafe for an RTOS device?
Odgovor
A change can disrupt timing guarantees or certified operational behavior.
Kartica 481
Pitanje
What is secure access service edge?
Odgovor
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kartica 482
Pitanje
What social-engineering habit should awareness training reinforce?
Odgovor
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kartica 483
Pitanje
How can a software provider introduce a supply-chain vulnerability?
Odgovor
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kartica 484
Pitanje
Why include internet exposure in remediation priority?
Odgovor
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kartica 485
Pitanje
What does a mail gateway inspect?
Odgovor
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kartica 486
Pitanje
What is a data controller?
Odgovor
The entity that determines why and how personal data is processed.
Kartica 487
Pitanje
How does blackmail motivate a cyberattack?
Odgovor
The attacker threatens disclosure or harm unless the victim complies.
Kartica 488
Pitanje
What is a downgrade attack?
Odgovor
Forcing parties to use an older or weaker protocol or security mode.
Kartica 489
Pitanje
How does encryption mitigate data exposure?
Odgovor
It makes captured data unreadable without the required key.
Kartica 490
Pitanje
How do network and web vulnerability scanners differ?
Odgovor
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kartica 491
Pitanje
How can vulnerability-scan data support an investigation?
Odgovor
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kartica 492
Pitanje
What is key escrow?
Odgovor
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kartica 493
Pitanje
Which human vector commonly uses a fake sign-in page to harvest credentials?
Odgovor
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kartica 494
Pitanje
What is risk avoidance?
Odgovor
Stopping or not starting the activity that creates the risk.
Kartica 495
Pitanje
What is data obfuscation?
Odgovor
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kartica 496
Pitanje
What is a directive control?
Odgovor
A safeguard that tells people what behavior or action is required.
Kartica 497
Pitanje
What does a security guard add that a camera cannot?
Odgovor
Human judgment and an immediate physical response.
Kartica 498
Pitanje
Why define restricted activities in change management?
Odgovor
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kartica 499
Pitanje
What contractual impact can noncompliance create?
Odgovor
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kartica 500
Pitanje
What should determine backup frequency?
Odgovor
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kartica 501
Pitanje
What should router hardening protect?
Odgovor
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kartica 502
Pitanje
What problem does OAuth 2.0 address?
Odgovor
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kartica 503
Pitanje
What does SCADA do?
Odgovor
It provides supervisory monitoring and control across distributed industrial equipment.
Kartica 504
Pitanje
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Odgovor
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kartica 505
Pitanje
What distinguishes a computer virus?
Odgovor
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kartica 506
Pitanje
What does a key management system coordinate?
Odgovor
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kartica 507
Pitanje
How can an unsecure wired network expose traffic?
Odgovor
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kartica 508
Pitanje
Why is vulnerable device firmware hard to remediate?
Odgovor
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kartica 509
Pitanje
What does patching change in vulnerability remediation?
Odgovor
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kartica 510
Pitanje
What does DMARC add to SPF and DKIM?
Odgovor
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kartica 511
Pitanje
How does automation improve security efficiency?
Odgovor
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kartica 512
Pitanje
What is a simulation exercise?
Odgovor
A more realistic practice in which participants respond to injected events using operational processes.
Kartica 513
Pitanje
What is a data processor?
Odgovor
An entity that processes personal data on behalf of a controller.
Kartica 514
Pitanje
What is risk mitigation?
Odgovor
Reducing likelihood, impact, or both through controls or process changes.
Kartica 515
Pitanje
Why monitor a vendor after onboarding?
Odgovor
Security posture, ownership, services, incidents, and dependencies can change.
Kartica 516
Pitanje
What does a physical penetration test assess?
Odgovor
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kartica 517
Pitanje
Why use access badges at a facility?
Odgovor
To associate entry attempts with authorized identities and enforce access rules.
Kartica 518
Pitanje
How does permission restriction protect data?
Odgovor
Only authorized identities receive the actions and scope their roles require.
Kartica 519
Pitanje
What is the usual objective of ransomware extortion?
Odgovor
Force payment by denying access, threatening disclosure, or both.
Kartica 520
Pitanje
What does impossible travel indicate?
Odgovor
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kartica 521
Pitanje
What is configuration enforcement?
Odgovor
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kartica 522
Pitanje
What does a web vulnerability scanner inspect?
Odgovor
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kartica 523
Pitanje
How does cost affect an architecture choice?
Odgovor
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kartica 524
Pitanje
What does EAP provide with 802.1X?
Odgovor
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kartica 525
Pitanje
What should operational-security training help users protect?
Odgovor
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kartica 526
Pitanje
What does a time-of-day access rule do?
Odgovor
Allows or denies a requested action according to an approved schedule.
Kartica 527
Pitanje
What should cloud infrastructure hardening establish?
Odgovor
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kartica 528
Pitanje
What should an asset owner ensure during offboarding?
Odgovor
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kartica 529
Pitanje
Why encrypt backups?
Odgovor
Backup media and transfers can expose the same sensitive data as production systems.
Kartica 530
Pitanje
What is steganography?
Odgovor
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kartica 531
Pitanje
Which human vector uses a fabricated authority role to justify a sensitive request?
Odgovor
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kartica 532
Pitanje
Why does risk transfer not remove accountability?
Odgovor
The organization can retain legal, reputational, operational, and oversight consequences.
Kartica 533
Pitanje
Why validate a change after deployment?
Odgovor
To confirm the intended result occurred without introducing unacceptable side effects.
Kartica 534
Pitanje
What makes end-of-life hardware a security vulnerability?
Odgovor
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kartica 535
Pitanje
What does an audit add to remediation validation?
Odgovor
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kartica 536
Pitanje
Why can SPF pass while a message still impersonates a brand?
Odgovor
SPF checks the envelope domain, which may differ from the visible From domain.
Kartica 537
Pitanje
What role can a government entity have in security governance?
Odgovor
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kartica 538
Pitanje
How do data inventory and retention support privacy governance?
Odgovor
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kartica 539
Pitanje
What can concurrent sessions from distant regions indicate?
Odgovor
A stolen account or shared credential, subject to VPN and proxy context.
Kartica 540
Pitanje
What does supply-chain analysis examine?
Odgovor
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kartica 541
Pitanje
What is the purpose of facility lighting as a control?
Odgovor
Deter covert activity and improve observation of people and areas.
Kartica 542
Pitanje
What architecture quality keeps a service usable during component failure?
Odgovor
Availability.
Kartica 543
Pitanje
When is fail-open behavior preferable to fail-closed behavior?
Odgovor
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kartica 544
Pitanje
Which control function does a login-failure alert provide?
Odgovor
Detection; it reveals suspicious authentication activity.
Kartica 545
Pitanje
What does a biometric MFA implementation verify?
Odgovor
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kartica 546
Pitanje
How can automation enforce a security baseline?
Odgovor
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kartica 547
Pitanje
How do wireless cryptographic protocols protect network traffic?
Odgovor
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kartica 548
Pitanje
Why segment sensitive data stores?
Odgovor
It limits reachable paths and separates them from lower-trust workloads.
Kartica 549
Pitanje
What must remain secret in an asymmetric key pair?
Odgovor
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kartica 550
Pitanje
How can a supplier become a supply-chain attack vector?
Odgovor
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kartica 551
Pitanje
What is e-discovery?
Odgovor
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kartica 552
Pitanje
What characterizes a neutral risk appetite?
Odgovor
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kartica 553
Pitanje
What is passive reconnaissance?
Odgovor
Gathering information without directly interacting with the target's systems.
Kartica 554
Pitanje
What does a philosophical motive mean for a threat actor?
Odgovor
The actor acts to advance a belief or moral position rather than primarily for money.
Kartica 555
Pitanje
What does unexpected resource consumption indicate?
Odgovor
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kartica 556
Pitanje
What does a host-based intrusion prevention system do?
Odgovor
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kartica 557
Pitanje
How does agent-based monitoring differ from agentless monitoring?
Odgovor
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kartica 558
Pitanje
What can network logs contribute to an investigation?
Odgovor
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kartica 559
Pitanje
What is the purpose of a backup restore test?
Odgovor
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kartica 560
Pitanje
Why can obsolete hardware become a security risk?
Odgovor
It may lack supported firmware, modern protections, or replacement parts.
Kartica 561
Pitanje
What does rescanning confirm after remediation?
Odgovor
Whether the scanner can still detect the original finding on the affected asset.
Kartica 562
Pitanje
What should a secure transport method provide?
Odgovor
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kartica 563
Pitanje
How can law affect security governance?
Odgovor
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kartica 564
Pitanje
What does resilience mean for a security architecture?
Odgovor
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kartica 565
Pitanje
Why minimize an infrastructure's attack surface?
Odgovor
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kartica 566
Pitanje
What does executing a security-awareness program require?
Odgovor
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kartica 567
Pitanje
What does an infrared security sensor detect?
Odgovor
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kartica 568
Pitanje
What is a knowledge factor?
Odgovor
Something the claimant knows, such as a password.
Kartica 569
Pitanje
Why review allow-list and deny-list impact before a change?
Odgovor
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kartica 570
Pitanje
What does partition-level encryption protect?
Odgovor
One selected disk partition, leaving other partitions outside that encryption boundary.
Kartica 571
Pitanje
How can instant messaging deliver a security attack?
Odgovor
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kartica 572
Pitanje
What can repeated blocked-content events indicate?
Odgovor
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kartica 573
Pitanje
What should a server-hardening baseline reduce?
Odgovor
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kartica 574
Pitanje
When is physical media destruction appropriate?
Odgovor
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kartica 575
Pitanje
What is mean time to repair?
Odgovor
The average time required to restore a failed component or service.
Kartica 576
Pitanje
Why disclose conflicts of interest during vendor selection?
Odgovor
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kartica 577
Pitanje
What is a fine for noncompliance?
Odgovor
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kartica 578
Pitanje
What does a public data classification authorize?
Odgovor
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kartica 579
Pitanje
What security benefit comes from standard infrastructure configurations?
Odgovor
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kartica 580
Pitanje
How does horizontal scaling increase capacity?
Odgovor
It adds more service instances and distributes work among them.
Kartica 581
Pitanje
Why can added connectivity weaken segmentation?
Odgovor
Each allowed path can become a route for lateral movement or data escape.
Kartica 582
Pitanje
What coding practice is central to preventing SQL injection?
Odgovor
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kartica 583
Pitanje
When is a compensating control appropriate for a vulnerability?
Odgovor
When timely removal or patching is infeasible and another control can reduce the risk.
Kartica 584
Pitanje
How does agent-based web filtering enforce policy?
Odgovor
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kartica 585
Pitanje
How can regulation differ from an internal policy?
Odgovor
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kartica 586
Pitanje
What is a storage snapshot?
Odgovor
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kartica 587
Pitanje
What does password age measure?
Odgovor
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kartica 588
Pitanje
What does an ethical motive mean in vulnerability research?
Odgovor
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kartica 589
Pitanje
What can missing security logs indicate?
Odgovor
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kartica 590
Pitanje
Why disable unused ports and protocols?
Odgovor
They expose unnecessary communication paths and code that attackers can reach.
Kartica 591
Pitanje
What does antivirus contribute to monitoring?
Odgovor
It scans files, memory, or behavior and reports suspected malicious code.
Kartica 592
Pitanje
What is a honeypot?
Odgovor
A decoy system or service designed to attract and observe malicious activity.
Kartica 593
Pitanje
What does file-level encryption protect?
Odgovor
Selected files independently of whether the rest of the disk or volume is encrypted.
Kartica 594
Pitanje
How can SMS deliver a security attack?
Odgovor
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kartica 595
Pitanje
What happens during incident analysis?
Odgovor
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kartica 596
Pitanje
What is mean time between failures?
Odgovor
The average operating time between repairable failures.
Kartica 597
Pitanje
What is active reconnaissance?
Odgovor
Probing or interacting with target systems to discover services and behavior.
Kartica 598
Pitanje
What constraint should guide ICS or SCADA hardening?
Odgovor
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kartica 599
Pitanje
Which control function does restoring a clean system image provide?
Odgovor
Correction; it returns the system to a known-good state.
Kartica 600
Pitanje
What does responsiveness mean in an architecture decision?
Odgovor
How quickly the system and its operators can adapt to demand, failure, or attack.
Kartica 601
Pitanje
How does out-of-band access strengthen remote administration?
Odgovor
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kartica 602
Pitanje
What makes user behavior unexpected?
Odgovor
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kartica 603
Pitanje
What is a work order?
Odgovor
A document authorizing a defined unit of work under an existing agreement.
Kartica 604
Pitanje
What can out-of-cycle logging indicate?
Odgovor
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kartica 605
Pitanje
Why update a standard operating procedure after a change?
Odgovor
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kartica 606
Pitanje
What coding practice limits cross-site scripting?
Odgovor
Context-appropriate output encoding, supported by safe templating and input handling.
Kartica 607
Pitanje
What does a restricted data classification indicate?
Odgovor
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kartica 608
Pitanje
How does a bug bounty support responsible disclosure?
Odgovor
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kartica 609
Pitanje
What does web-filter content categorization provide?
Odgovor
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kartica 610
Pitanje
How do hard and soft authentication tokens differ?
Odgovor
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kartica 611
Pitanje
How can industry requirements affect security governance?
Odgovor
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kartica 612
Pitanje
How can noncompliance cause loss of a license?
Odgovor
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kartica 613
Pitanje
What does volume-level encryption protect?
Odgovor
All data within a selected logical storage volume.
Kartica 614
Pitanje
How can impersonation exploit familiarity?
Odgovor
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kartica 615
Pitanje
How does RTO guide recovery design?
Odgovor
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kartica 616
Pitanje
What is a honeynet?
Odgovor
A network of decoy systems used to study or divert attackers.
Kartica 617
Pitanje
What does backup replication provide?
Odgovor
Additional synchronized or copied recovery data in another system or location.
Kartica 618
Pitanje
What lets automation scale securely?
Odgovor
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kartica 619
Pitanje
Why monitor a hardened computing resource continuously?
Odgovor
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kartica 620
Pitanje
Why keep a certificate of destruction?
Odgovor
It documents that a disposal provider handled specified media under the agreed process.
Kartica 621
Pitanje
Why consider patch availability before selecting a platform?
Odgovor
Unsupported or difficult-to-update components accumulate known exposure.
Kartica 622
Pitanje
Why should remote administration use an encrypted, authenticated protocol?
Odgovor
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kartica 623
Pitanje
How can revenge motivate an insider incident?
Odgovor
A disgruntled person may damage systems or disclose data to punish the organization.
Kartica 624
Pitanje
What is a published or documented indicator of malicious activity?
Odgovor
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kartica 625
Pitanje
Why monitor a system more closely when a mitigation exception is accepted?
Odgovor
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kartica 626
Pitanje
What is an SNMP trap?
Odgovor
An unsolicited device notification sent to a management system when a configured event occurs.
Kartica 627
Pitanje
How can an automated report support an investigation?
Odgovor
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kartica 628
Pitanje
What is a security key?
Odgovor
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kartica 629
Pitanje
What does database-level encryption protect?
Odgovor
A database or selected database structures through controls managed at the database layer.
Kartica 630
Pitanje
How does brand impersonation exploit trust?
Odgovor
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kartica 631
Pitanje
What browser-side impact can a cross-site scripting vulnerability create?
Odgovor
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kartica 632
Pitanje
How can a system or process audit identify vulnerabilities?
Odgovor
It compares evidence with required configuration and procedure to reveal control gaps.
Kartica 633
Pitanje
What security role can Group Policy provide?
Odgovor
Centralized Windows configuration of account, application, audit, and system security settings.
Kartica 634
Pitanje
What should incident-response training prepare people to do?
Odgovor
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kartica 635
Pitanje
Why must governance track local or regional requirements?
Odgovor
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kartica 636
Pitanje
How can a dependency become a useful key risk indicator?
Odgovor
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kartica 637
Pitanje
What is a business partners agreement?
Odgovor
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kartica 638
Pitanje
What makes an audit regulatory?
Odgovor
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kartica 639
Pitanje
What is a honeyfile?
Odgovor
A decoy file whose access can reveal unauthorized activity.
Kartica 640
Pitanje
Why does legal information require explicit protection?
Odgovor
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kartica 641
Pitanje
Which indicator can mass file renaming and encryption produce?
Odgovor
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kartica 642
Pitanje
What remains with an organization after transferring architecture risk?
Odgovor
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kartica 643
Pitanje
When does local console placement provide useful administrative access?
Odgovor
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kartica 644
Pitanje
What makes a harmful user action unintentional?
Odgovor
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kartica 645
Pitanje
How should an organization harden workstations?
Odgovor
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kartica 646
Pitanje
What is journaling in recovery?
Odgovor
Recording ordered changes so data can be replayed or restored to a consistent point.
Kartica 647
Pitanje
What downtime must a change plan account for?
Odgovor
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kartica 648
Pitanje
Why must a privacy program map local or regional law to data flows?
Odgovor
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kartica 649
Pitanje
Why combine independent preventive controls at different layers?
Odgovor
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kartica 650
Pitanje
What is passwordless authentication?
Odgovor
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kartica 651
Pitanje
How can automation improve security reaction time?
Odgovor
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kartica 652
Pitanje
What does record-level encryption protect?
Odgovor
Individual records or fields, allowing finer protection than encrypting the entire database.
Kartica 653
Pitanje
How can business email compromise misuse urgency?
Odgovor
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kartica 654
Pitanje
What does impact measure in risk analysis?
Odgovor
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kartica 655
Pitanje
What makes cyber activity part of warfare?
Odgovor
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kartica 656
Pitanje
Which indicator can a newly created privileged account produce outside the normal change window?
Odgovor
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kartica 657
Pitanje
How can configuration enforcement validate a deployed mitigation?
Odgovor
It compares the realized settings with the approved state and corrects or reports drift.
Kartica 658
Pitanje
How does validating an alert improve alert tuning?
Odgovor
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kartica 659
Pitanje
What data-layer impact can a SQL injection vulnerability create?
Odgovor
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kartica 660
Pitanje
What environmental variables can change vulnerability priority?
Odgovor
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kartica 661
Pitanje
What security role does SELinux provide?
Odgovor
Mandatory access controls that confine processes according to centrally defined policy.
Kartica 662
Pitanje
Why review governance documents periodically?
Odgovor
Business, technology, threats, and external obligations change.
Kartica 663
Pitanje
Why evaluate power requirements for a system design?
Odgovor
Power capacity and redundancy constrain availability and recovery.
Kartica 664
Pitanje
When is IPsec a better tunnel choice than TLS?
Odgovor
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kartica 665
Pitanje
What is a honeytoken?
Odgovor
A fake credential or data element that generates a high-confidence alert when used.
Kartica 666
Pitanje
What should embedded-system hardening prioritize?
Odgovor
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kartica 667
Pitanje
Why must sanitization address data remanence?
Odgovor
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kartica 668
Pitanje
Why require rules of engagement for vendor testing?
Odgovor
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kartica 669
Pitanje
What does a private data classification indicate?
Odgovor
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kartica 670
Pitanje
What does a tabletop recovery exercise test?
Odgovor
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kartica 671
Pitanje
Why prevent password reuse?
Odgovor
One compromised password should not unlock other accounts or services.
Kartica 672
Pitanje
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Odgovor
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kartica 673
Pitanje
What does transport encryption protect?
Odgovor
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kartica 674
Pitanje
How can a voice call become an attack vector?
Odgovor
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kartica 675
Pitanje
What should a digital-forensics report document?
Odgovor
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kartica 676
Pitanje
What tradeoff comes with an expansionary risk appetite?
Odgovor
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kartica 677
Pitanje
What does a known penetration-test environment provide?
Odgovor
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kartica 678
Pitanje
Why evaluate compute requirements before deployment?
Odgovor
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kartica 679
Pitanje
Why place sensors at network choke points?
Odgovor
They can observe traffic crossing important trust boundaries.
Kartica 680
Pitanje
What should hybrid or remote-work security training emphasize?
Odgovor
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kartica 681
Pitanje
Why plan an application restart separately from a service restart?
Odgovor
The application may need its own state handling, user coordination, health checks, and rollback point.
Kartica 682
Pitanje
What is a cryptographic vulnerability?
Odgovor
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kartica 683
Pitanje
Why report findings by asset owner?
Odgovor
Owners need clear accountability and a prioritized remediation queue.
Kartica 684
Pitanje
What should guide selection of a secure protocol?
Odgovor
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kartica 685
Pitanje
How do centralized and decentralized governance structures differ?
Odgovor
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kartica 686
Pitanje
How does privacy-aware design limit data retention?
Odgovor
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kartica 687
Pitanje
What does a pressure security sensor detect?
Odgovor
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kartica 688
Pitanje
What automation costs should a security team plan for?
Odgovor
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kartica 689
Pitanje
What should RTOS hardening preserve while reducing attack surface?
Odgovor
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kartica 690
Pitanje
What is the goal of disruption-for-chaos activity?
Odgovor
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kartica 691
Pitanje
Which indicator can repeated password guessing produce?
Odgovor
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kartica 692
Pitanje
How does removing unnecessary software harden a system?
Odgovor
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kartica 693
Pitanje
What does NetFlow provide?
Odgovor
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kartica 694
Pitanje
How can a dashboard support an investigation?
Odgovor
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kartica 695
Pitanje
When should a password be expired?
Odgovor
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kartica 696
Pitanje
Why does cryptographic key length matter?
Odgovor
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kartica 697
Pitanje
How can an unsecure Bluetooth connection become an attack vector?
Odgovor
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kartica 698
Pitanje
What is a key risk indicator?
Odgovor
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kartica 699
Pitanje
What should vendor monitoring verify when a contract ends?
Odgovor
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kartica 700
Pitanje
What does a sensitive data classification indicate?
Odgovor
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kartica 701
Pitanje
What does software-defined networking separate?
Odgovor
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kartica 702
Pitanje
Where should a web application firewall be placed?
Odgovor
In the path of web requests before they reach the protected application.
Kartica 703
Pitanje
What does a simulated recovery exercise test?
Odgovor
Participants perform realistic response actions in a controlled environment without disrupting production.
Kartica 704
Pitanje
How can a team verify that a detective control is effective?
Odgovor
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kartica 705
Pitanje
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Odgovor
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kartica 706
Pitanje
What makes a vulnerability cloud-specific?
Odgovor
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kartica 707
Pitanje
How can insurance respond to vulnerability risk?
Odgovor
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kartica 708
Pitanje
How does reputation improve web filtering?
Odgovor
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kartica 709
Pitanje
What does an encryption policy establish?
Odgovor
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kartica 710
Pitanje
How does a microwave security sensor detect movement?
Odgovor
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kartica 711
Pitanje
What should IoT-device hardening change before deployment?
Odgovor
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kartica 712
Pitanje
Why track software licenses as assets?
Odgovor
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kartica 713
Pitanje
What does a password manager improve?
Odgovor
It can generate and store unique long passwords so users do not memorize or reuse them.
Kartica 714
Pitanje
What makes a ledger open and public?
Odgovor
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kartica 715
Pitanje
What should a payment-change request trigger?
Odgovor
Independent verification through a known channel before any account or payment detail is changed.
Kartica 716
Pitanje
What does preserving digital evidence require?
Odgovor
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kartica 717
Pitanje
What should a risk report tell decision-makers?
Odgovor
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kartica 718
Pitanje
What should an external assessment report provide?
Odgovor
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kartica 719
Pitanje
What is a centralized design's main resilience risk?
Odgovor
A central dependency can become a bottleneck or single point of failure.
Kartica 720
Pitanje
What does mutual TLS add to a TLS-protected service connection?
Odgovor
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kartica 721
Pitanje
What should recurring security-awareness reporting show?
Odgovor
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kartica 722
Pitanje
Why do legacy applications require extra change planning?
Odgovor
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kartica 723
Pitanje
How do a data controller and a data processor differ?
Odgovor
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kartica 724
Pitanje
How can orchestration become a single point of failure?
Odgovor
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kartica 725
Pitanje
Why should defenses account for a threat actor's sophistication and capability?
Odgovor
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kartica 726
Pitanje
How does an injection attack make an application execute unintended instructions?
Odgovor
It sends crafted input that an interpreter treats as code or commands instead of data.
Kartica 727
Pitanje
What does a host-based firewall control?
Odgovor
Inbound and outbound network traffic for one endpoint according to local rules.
Kartica 728
Pitanje
Why revise alerting after an incident?
Odgovor
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kartica 729
Pitanje
Why include security duties in procurement criteria?
Odgovor
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kartica 730
Pitanje
What does a critical data classification indicate?
Odgovor
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kartica 731
Pitanje
What infrastructure capacity must support failover?
Odgovor
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kartica 732
Pitanje
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Odgovor
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kartica 733
Pitanje
How does a remediation exemption differ from an exception?
Odgovor
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kartica 734
Pitanje
Why should automated EDR or XDR blocking have an exception and rollback path?
Odgovor
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kartica 735
Pitanje
What does a security playbook provide?
Odgovor
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kartica 736
Pitanje
How does an ultrasonic security sensor detect movement?
Odgovor
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kartica 737
Pitanje
What should a managed mobile device require for Bluetooth connections?
Odgovor
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kartica 738
Pitanje
How do password complexity rules differ from password length?
Odgovor
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kartica 739
Pitanje
What makes a certificate third-party trusted?
Odgovor
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kartica 740
Pitanje
Why is an out-of-band check effective against impersonation?
Odgovor
It verifies the request through a separate, previously trusted communication path.
Kartica 741
Pitanje
What does a risk exception authorize?
Odgovor
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kartica 742
Pitanje
What security challenge grows in a decentralized design?
Odgovor
Consistent policy, inventory, monitoring, and patching become harder.
Kartica 743
Pitanje
How should controls be selected for an unused network path?
Odgovor
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kartica 744
Pitanje
How can a buffer-overflow attack affect an application?
Odgovor
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 kartice
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo se otvara kako biste mogli početi učiti.