What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

Oleh penulis Flashcards Open Source App

Tentang dek ini

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Kartu dalam dek ini

Kartu 1
Pertanyaan
What does an information security policy establish?
Jawaban
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kartu 2
Pertanyaan
What is phishing?
Jawaban
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kartu 3
Pertanyaan
What does a public-key certificate bind to an identity?
Jawaban
A public key, together with identifying information and the issuer's signature.
Kartu 4
Pertanyaan
What is data at rest?
Jawaban
Data stored on media such as disks, databases, backups, or mobile devices.
Kartu 5
Pertanyaan
How does policy-driven access control decide a zero-trust access request?
Jawaban
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kartu 6
Pertanyaan
What does establishing a secure baseline produce?
Jawaban
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kartu 7
Pertanyaan
What is hashing used to verify?
Jawaban
Whether data has changed by comparing fixed-length digest values.
Kartu 8
Pertanyaan
What is impersonation in social engineering?
Jawaban
Pretending to be a trusted person or organization to obtain access, data, or action.
Kartu 9
Pertanyaan
What is virtualization?
Jawaban
Abstracting physical compute so multiple isolated guest systems can share a host.
Kartu 10
Pertanyaan
What is chain of custody?
Jawaban
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kartu 11
Pertanyaan
What is quantitative risk analysis?
Jawaban
Estimating risk with numerical values such as money, frequency, or probability.
Kartu 12
Pertanyaan
What is a phishing awareness campaign?
Jawaban
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kartu 13
Pertanyaan
What is high availability?
Jawaban
Designing a service to remain accessible despite expected component failures.
Kartu 14
Pertanyaan
What is a network security zone?
Jawaban
A group of systems with similar trust, function, or control requirements.
Kartu 15
Pertanyaan
What is risk transfer?
Jawaban
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kartu 16
Pertanyaan
What is media sanitization?
Jawaban
Making stored data infeasible to recover for the intended level of protection.
Kartu 17
Pertanyaan
What does CVSS provide?
Jawaban
A standardized way to describe a vulnerability's technical severity characteristics.
Kartu 18
Pertanyaan
What does security alerting do?
Jawaban
It turns matched events or behavior into a notification that the right responder can review.
Kartu 19
Pertanyaan
What does a firewall rule enforce?
Jawaban
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kartu 20
Pertanyaan
What is deprovisioning?
Jawaban
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kartu 21
Pertanyaan
How does inline placement differ from a tap or monitor port?
Jawaban
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kartu 22
Pertanyaan
What is asymmetric encryption?
Jawaban
Encryption that uses a mathematically related public and private key pair.
Kartu 23
Pertanyaan
What does SPF authorize?
Jawaban
Which mail servers may send mail for a domain in the SMTP envelope.
Kartu 24
Pertanyaan
What is a possession factor?
Jawaban
Something the claimant has, such as a cryptographic authenticator.
Kartu 25
Pertanyaan
What does ordinary TLS usually protect and authenticate?
Jawaban
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kartu 26
Pertanyaan
What is single loss expectancy?
Jawaban
The estimated loss from one occurrence of a risk event.
Kartu 27
Pertanyaan
What does a certificate authority do?
Jawaban
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kartu 28
Pertanyaan
What is a detective control meant to do?
Jawaban
Identify that an unwanted event has happened or is happening.
Kartu 29
Pertanyaan
What is the security purpose of change-control approval?
Jawaban
Ensure authorized reviewers assess risk before the production change occurs.
Kartu 30
Pertanyaan
What is shadow IT?
Jawaban
Technology used for organizational work without required approval or oversight.
Kartu 31
Pertanyaan
What is a buffer overflow vulnerability?
Jawaban
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kartu 32
Pertanyaan
What is ransomware?
Jawaban
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kartu 33
Pertanyaan
How does network segmentation limit an incident?
Jawaban
It restricts communication paths and reduces lateral movement between zones.
Kartu 34
Pertanyaan
How do load balancing and clustering support availability differently?
Jawaban
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kartu 35
Pertanyaan
What is vendor due diligence?
Jawaban
Evaluating a provider's security, capability, stability, and fit before commitment.
Kartu 36
Pertanyaan
Who is a data subject?
Jawaban
The person whose personal data is collected or processed.
Kartu 37
Pertanyaan
What is attestation?
Jawaban
A formal assertion or report about a subject matter, often supported by an independent examination.
Kartu 38
Pertanyaan
What is a replay attack?
Jawaban
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kartu 39
Pertanyaan
What does a wireless site survey establish?
Jawaban
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kartu 40
Pertanyaan
What is the time-of-check stage of a race-condition vulnerability?
Jawaban
The application verifies a condition or resource state before acting on it.
Kartu 41
Pertanyaan
What is a penetration test?
Jawaban
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kartu 42
Pertanyaan
What is a cold recovery site?
Jawaban
A facility with basic space and utilities but little preinstalled technology or current data.
Kartu 43
Pertanyaan
What is data in transit?
Jawaban
Data moving between systems or across a network.
Kartu 44
Pertanyaan
What is a vendor security questionnaire?
Jawaban
A structured request for information about a provider's controls and practices.
Kartu 45
Pertanyaan
How does an internal actor's starting position differ from an external actor's?
Jawaban
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kartu 46
Pertanyaan
What can unexpected account lockouts indicate?
Jawaban
Password guessing, credential stuffing, user error, or a broken client.
Kartu 47
Pertanyaan
How do permissions enforce access control?
Jawaban
They specify which actions a subject may perform on a particular resource.
Kartu 48
Pertanyaan
What is log aggregation?
Jawaban
Central collection of logs from multiple sources for search, correlation, and retention.
Kartu 49
Pertanyaan
Why plan a service restart as part of a change?
Jawaban
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kartu 50
Pertanyaan
What is infrastructure as code?
Jawaban
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kartu 51
Pertanyaan
What should security-awareness program development start with?
Jawaban
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kartu 52
Pertanyaan
What is a voice-based social-engineering attack called?
Jawaban
Vishing.
Kartu 53
Pertanyaan
What happens during incident-response preparation?
Jawaban
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kartu 54
Pertanyaan
What does an offensive penetration-testing team do?
Jawaban
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kartu 55
Pertanyaan
What is federation?
Jawaban
One security domain relies on identity assertions from another trusted domain.
Kartu 56
Pertanyaan
What is asset classification?
Jawaban
Grouping an asset by sensitivity, criticality, or required handling.
Kartu 57
Pertanyaan
What is cross-site scripting?
Jawaban
Injection of script-capable content that a browser executes in another site's security context.
Kartu 58
Pertanyaan
What can IDS or IPS trends reveal?
Jawaban
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kartu 59
Pertanyaan
What can unexpected resource inaccessibility indicate?
Jawaban
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kartu 60
Pertanyaan
What is a corrective control meant to do?
Jawaban
Limit damage and restore a secure state after an event.
Kartu 61
Pertanyaan
How do containers differ from virtual machines?
Jawaban
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kartu 62
Pertanyaan
How does an active security device differ from a passive one?
Jawaban
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kartu 63
Pertanyaan
Why is unsupported software a persistent attack surface?
Jawaban
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kartu 64
Pertanyaan
What is annualized rate of occurrence?
Jawaban
The estimated number of times a risk event occurs per year.
Kartu 65
Pertanyaan
What is an inherence factor?
Jawaban
A biometric characteristic of the claimant.
Kartu 66
Pertanyaan
What do a threat actor's sophistication and capability describe?
Jawaban
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kartu 67
Pertanyaan
What is a SIEM?
Jawaban
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kartu 68
Pertanyaan
What is sideloading?
Jawaban
Installing software from outside the platform's approved distribution path.
Kartu 69
Pertanyaan
What does an IDS or IPS signature match?
Jawaban
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kartu 70
Pertanyaan
Why are embedded systems often difficult to patch?
Jawaban
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kartu 71
Pertanyaan
What is a virtual private network?
Jawaban
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kartu 72
Pertanyaan
What should an initial security-awareness report establish?
Jawaban
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kartu 73
Pertanyaan
What is symmetric encryption?
Jawaban
Encryption that uses the same secret key to encrypt and decrypt data.
Kartu 74
Pertanyaan
What happens during incident detection?
Jawaban
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kartu 75
Pertanyaan
What is recovery time objective?
Jawaban
The target maximum time to restore a function after disruption.
Kartu 76
Pertanyaan
Why prioritize password length?
Jawaban
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kartu 77
Pertanyaan
What must sanitization accomplish before an asset leaves organizational control?
Jawaban
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kartu 78
Pertanyaan
What is a real-time operating system designed to provide?
Jawaban
Predictable response timing for tasks with strict deadlines.
Kartu 79
Pertanyaan
What does fail-open behavior do when a control fails?
Jawaban
It permits traffic or access to preserve availability.
Kartu 80
Pertanyaan
What is jailbreaking or rooting a mobile device?
Jawaban
Removing platform restrictions to gain privileged control over the operating system.
Kartu 81
Pertanyaan
What does network access control enforce?
Jawaban
Identity, device posture, and access policy at network connection time and during a session.
Kartu 82
Pertanyaan
What does data loss prevention do?
Jawaban
Detects and may block sensitive data use or transfer that violates policy.
Kartu 83
Pertanyaan
What security property does a blockchain provide?
Jawaban
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kartu 84
Pertanyaan
What is recovery point objective?
Jawaban
The target maximum acceptable data loss measured backward in time.
Kartu 85
Pertanyaan
How do ICS and SCADA relate?
Jawaban
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kartu 86
Pertanyaan
What does fail-closed behavior do when a control fails?
Jawaban
It denies traffic or access to preserve security.
Kartu 87
Pertanyaan
Which keys create and verify a typical digital signature?
Jawaban
The signer creates it with a private key, and others verify it with the corresponding public key.
Kartu 88
Pertanyaan
What is SQL injection?
Jawaban
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kartu 89
Pertanyaan
What does DKIM verify?
Jawaban
That selected message content was signed by a domain and was not altered after signing.
Kartu 90
Pertanyaan
What is post-incident activity?
Jawaban
Learning from the event and improving controls, plans, and recovery based on evidence.
Kartu 91
Pertanyaan
What characterizes an expansionary risk appetite?
Jawaban
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kartu 92
Pertanyaan
How do centralized and decentralized architectures differ?
Jawaban
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kartu 93
Pertanyaan
What does a certificate revocation list publish?
Jawaban
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kartu 94
Pertanyaan
What is a legal hold?
Jawaban
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kartu 95
Pertanyaan
What is exposure factor in quantitative risk analysis?
Jawaban
The estimated percentage of an asset's value lost in one event.
Kartu 96
Pertanyaan
What is decentralized architecture?
Jawaban
Control or service responsibility is distributed across multiple independent components or locations.
Kartu 97
Pertanyaan
What is tokenization?
Jawaban
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kartu 98
Pertanyaan
How can automation act as a workforce multiplier?
Jawaban
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kartu 99
Pertanyaan
What can endpoint process logs reveal?
Jawaban
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kartu 100
Pertanyaan
What does the CIA triad protect?
Jawaban
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kartu 101
Pertanyaan
How does data masking protect information?
Jawaban
It hides selected values or characters while preserving a usable representation.
Kartu 102
Pertanyaan
How can a national requirement affect security governance?
Jawaban
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kartu 103
Pertanyaan
What do integrations and APIs provide to security orchestration?
Jawaban
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kartu 104
Pertanyaan
What makes a compliance report external?
Jawaban
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kartu 105
Pertanyaan
What does a cryptographic algorithm define?
Jawaban
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kartu 106
Pertanyaan
Why compare systems with a secure baseline regularly?
Jawaban
To detect drift, unauthorized changes, and missing hardening.
Kartu 107
Pertanyaan
What does integrity protect?
Jawaban
The accuracy and completeness of data and systems against unauthorized change.
Kartu 108
Pertanyaan
What does vulnerability classification organize?
Jawaban
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kartu 109
Pertanyaan
What does a password standard define?
Jawaban
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kartu 110
Pertanyaan
What technology capacity must a recovery design plan for?
Jawaban
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kartu 111
Pertanyaan
What does a confidential data classification indicate?
Jawaban
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kartu 112
Pertanyaan
What makes a vendor assessment independent?
Jawaban
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kartu 113
Pertanyaan
What lets a worm spread without attaching itself to another file?
Jawaban
It is a standalone program that replicates across reachable systems or services.
Kartu 114
Pertanyaan
What is microsegmentation?
Jawaban
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kartu 115
Pertanyaan
What can application logs reveal?
Jawaban
Transactions, errors, user actions, and application-specific security events.
Kartu 116
Pertanyaan
What does deploying a secure baseline require?
Jawaban
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kartu 117
Pertanyaan
How can resource-provisioning automation improve security?
Jawaban
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kartu 118
Pertanyaan
What does availability protect?
Jawaban
Reliable, timely access to systems and data when authorized users need them.
Kartu 119
Pertanyaan
Why must a change request describe business impact?
Jawaban
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kartu 120
Pertanyaan
What does an authenticated vulnerability scan add?
Jawaban
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kartu 121
Pertanyaan
What does a change-management procedure specify?
Jawaban
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kartu 122
Pertanyaan
What is a sanction for noncompliance?
Jawaban
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kartu 123
Pertanyaan
How can email deliver a security attack?
Jawaban
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kartu 124
Pertanyaan
What is an internal compliance audit?
Jawaban
An organization-led examination of whether selected operations and controls meet defined requirements.
Kartu 125
Pertanyaan
What is a Trojan?
Jawaban
Malware disguised as legitimate or desirable software.
Kartu 126
Pertanyaan
What is clustering?
Jawaban
Multiple systems work together to provide a service and tolerate member failure.
Kartu 127
Pertanyaan
What makes data regulated?
Jawaban
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kartu 128
Pertanyaan
What does a wireless heat map show?
Jawaban
Measured or modeled signal strength and coverage across a physical area.
Kartu 129
Pertanyaan
How should vendor criticality affect due diligence?
Jawaban
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kartu 130
Pertanyaan
How can a digital signature support non-repudiation?
Jawaban
It provides evidence that the holder of a private key signed specific data.
Kartu 131
Pertanyaan
What should vulnerability prioritization consider beyond severity?
Jawaban
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kartu 132
Pertanyaan
What is a security guideline?
Jawaban
Recommended practice that allows judgment unless adopted as a requirement.
Kartu 133
Pertanyaan
What usually distinguishes a nation-state threat actor?
Jawaban
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kartu 134
Pertanyaan
What is spyware?
Jawaban
Software that secretly collects information about a user or system.
Kartu 135
Pertanyaan
Why maintain an allow list for applications?
Jawaban
Only explicitly approved software is permitted to execute.
Kartu 136
Pertanyaan
How can an image become an attack vector?
Jawaban
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kartu 137
Pertanyaan
What makes a security control technical?
Jawaban
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kartu 138
Pertanyaan
What is identity proofing?
Jawaban
Establishing that a person is who they claim to be before issuing an account or credential.
Kartu 139
Pertanyaan
What is an automated security guardrail?
Jawaban
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kartu 140
Pertanyaan
Why assign an owner to a planned change?
Jawaban
To make one party accountable for coordination, execution, and follow-through.
Kartu 141
Pertanyaan
How can national privacy law affect data handling?
Jawaban
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kartu 142
Pertanyaan
What is continuity of operations?
Jawaban
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kartu 143
Pertanyaan
What security tradeoff comes with BYOD?
Jawaban
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kartu 144
Pertanyaan
How should policies and handbooks support security training?
Jawaban
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kartu 145
Pertanyaan
What is a keylogger?
Jawaban
A tool that records keystrokes to capture data such as credentials.
Kartu 146
Pertanyaan
What makes information a trade secret?
Jawaban
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kartu 147
Pertanyaan
What does authentication establish?
Jawaban
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kartu 148
Pertanyaan
What risk comes from an untrusted file attachment?
Jawaban
Opening or parsing it can execute malicious code or expose data.
Kartu 149
Pertanyaan
How does risk tolerance affect vulnerability remediation?
Jawaban
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kartu 150
Pertanyaan
How can a global requirement affect security governance?
Jawaban
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kartu 151
Pertanyaan
Why should questionnaire answers be supported by evidence?
Jawaban
Self-assertions alone may not prove that controls are designed or operating effectively.
Kartu 152
Pertanyaan
What is an independent third-party audit?
Jawaban
An external party with suitable independence examines evidence against defined criteria.
Kartu 153
Pertanyaan
What do account provisioning and deprovisioning do?
Jawaban
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kartu 154
Pertanyaan
What is an unskilled attacker commonly called?
Jawaban
A script kiddie: someone who relies on tools or instructions created by others.
Kartu 155
Pertanyaan
What is a rootkit?
Jawaban
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kartu 156
Pertanyaan
What does an access control list enforce?
Jawaban
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kartu 157
Pertanyaan
What should system security monitoring observe?
Jawaban
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kartu 158
Pertanyaan
What can operating-system security logs reveal?
Jawaban
Authentication, privilege use, policy changes, services, and other host security events.
Kartu 159
Pertanyaan
Why isolate operational technology from general business networks?
Jawaban
To limit attack paths into safety- and availability-critical processes.
Kartu 160
Pertanyaan
What is the COPE mobile deployment model?
Jawaban
The organization owns the device but permits defined personal use while retaining management control.
Kartu 161
Pertanyaan
What security work belongs in asset acquisition and procurement?
Jawaban
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kartu 162
Pertanyaan
How can user-provisioning automation improve security?
Jawaban
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kartu 163
Pertanyaan
What people capacity must a continuity plan account for?
Jawaban
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kartu 164
Pertanyaan
What do authorization models define?
Jawaban
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kartu 165
Pertanyaan
Why are removable devices an attack vector?
Jawaban
They can introduce malware or remove data while bypassing network controls.
Kartu 166
Pertanyaan
What should predeployment change-test results show?
Jawaban
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kartu 167
Pertanyaan
What is the time-of-use stage of a race-condition vulnerability?
Jawaban
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kartu 168
Pertanyaan
What is data in use?
Jawaban
Data actively processed in memory or by an application.
Kartu 169
Pertanyaan
What does open-source vulnerability intelligence contribute?
Jawaban
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kartu 170
Pertanyaan
What can file-integrity monitoring detect?
Jawaban
Unexpected changes to protected files, directories, or configuration.
Kartu 171
Pertanyaan
Why should deprovisioning be prompt?
Jawaban
Former users or roles should not retain usable access.
Kartu 172
Pertanyaan
What is an acceptable use policy?
Jawaban
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kartu 173
Pertanyaan
What makes a compliance report internal?
Jawaban
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kartu 174
Pertanyaan
What is a logic bomb?
Jawaban
Malicious code that activates when a specified condition or time is reached.
Kartu 175
Pertanyaan
What does a right-to-audit clause provide?
Jawaban
Contractual authority to inspect or obtain evidence about agreed controls.
Kartu 176
Pertanyaan
Where should a forward proxy sit in an enterprise traffic path?
Jawaban
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kartu 177
Pertanyaan
Which cues should make a message look suspicious?
Jawaban
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kartu 178
Pertanyaan
What makes a security control managerial?
Jawaban
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kartu 179
Pertanyaan
What is the CYOD mobile deployment model?
Jawaban
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kartu 180
Pertanyaan
How does client-based vulnerable software differ from an agentless exposure?
Jawaban
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kartu 181
Pertanyaan
What makes a risk assessment recurring?
Jawaban
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kartu 182
Pertanyaan
What does a defensive penetration-testing team practice?
Jawaban
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kartu 183
Pertanyaan
In a zero-trust data plane, what can the subject or system represent?
Jawaban
The user, device, workload, or service requesting access to a protected resource.
Kartu 184
Pertanyaan
What primarily motivates a hacktivist?
Jawaban
A political, social, or ideological cause.
Kartu 185
Pertanyaan
What is bloatware?
Jawaban
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kartu 186
Pertanyaan
Why keep endpoint-protection signatures and engines current?
Jawaban
They need current detection logic to recognize newly identified malware and exploit behavior.
Kartu 187
Pertanyaan
What should application security monitoring observe?
Jawaban
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kartu 188
Pertanyaan
What is role-based access control?
Jawaban
Permissions are assigned to roles, and identities receive access through their roles.
Kartu 189
Pertanyaan
What is geographic dispersal?
Jawaban
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kartu 190
Pertanyaan
What is a malicious update?
Jawaban
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kartu 191
Pertanyaan
What does static application analysis inspect?
Jawaban
Source code, bytecode, or compiled code without executing the application.
Kartu 192
Pertanyaan
What does a firewall access list define?
Jawaban
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kartu 193
Pertanyaan
What does a disaster recovery policy establish?
Jawaban
Management expectations for restoring technology and data after a disruptive event.
Kartu 194
Pertanyaan
How does logical segmentation separate workloads that share physical infrastructure?
Jawaban
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kartu 195
Pertanyaan
How should IDS and IPS placement differ?
Jawaban
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kartu 196
Pertanyaan
What should automated ticket creation capture?
Jawaban
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kartu 197
Pertanyaan
What makes information intellectual property?
Jawaban
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kartu 198
Pertanyaan
What is a backout plan?
Jawaban
Predefined steps for safely reversing a failed or harmful change.
Kartu 199
Pertanyaan
Why is an unsecure wireless network an attack vector?
Jawaban
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kartu 200
Pertanyaan
What is physical brute force?
Jawaban
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kartu 201
Pertanyaan
What is application sandboxing?
Jawaban
Running code in a constrained environment with limited access to the host and data.
Kartu 202
Pertanyaan
Why assign an asset owner?
Jawaban
One accountable party must decide its use, protection, and lifecycle.
Kartu 203
Pertanyaan
What happens during risk identification?
Jawaban
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kartu 204
Pertanyaan
What should an SLA state about breach notification?
Jawaban
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kartu 205
Pertanyaan
How do due diligence and due care differ in compliance?
Jawaban
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kartu 206
Pertanyaan
What is attribute-based access control?
Jawaban
Policy evaluates attributes of the subject, resource, action, and environment.
Kartu 207
Pertanyaan
What does a zero-trust policy engine do?
Jawaban
It evaluates policy and signals to decide whether access should be allowed.
Kartu 208
Pertanyaan
How does a cloud responsibility matrix allocate security duties?
Jawaban
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kartu 209
Pertanyaan
Where should a load balancer sit in a service path?
Jawaban
In front of service instances so it can route requests to healthy backends.
Kartu 210
Pertanyaan
What should the security team do with a reported suspicious message?
Jawaban
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kartu 211
Pertanyaan
What makes an operating-system vulnerability high impact?
Jawaban
It can affect every application and security control that relies on the compromised OS.
Kartu 212
Pertanyaan
What does dynamic application analysis inspect?
Jawaban
The behavior and externally visible weaknesses of a running application.
Kartu 213
Pertanyaan
How can false-positive trends affect IDS or IPS tuning?
Jawaban
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kartu 214
Pertanyaan
What does a business continuity policy establish?
Jawaban
Management expectations for sustaining and restoring critical business functions.
Kartu 215
Pertanyaan
What is a hot recovery site?
Jawaban
A ready, synchronized environment intended to take over quickly.
Kartu 216
Pertanyaan
What makes an insider threat distinct?
Jawaban
The actor has legitimate access or organizational knowledge that can be misused.
Kartu 217
Pertanyaan
What is RFID cloning?
Jawaban
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kartu 218
Pertanyaan
Why apply vendor security updates promptly?
Jawaban
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kartu 219
Pertanyaan
What should infrastructure security monitoring observe?
Jawaban
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kartu 220
Pertanyaan
What can firewall logs reveal?
Jawaban
Allowed or denied network connections across controlled boundaries.
Kartu 221
Pertanyaan
Why minimize open service ports?
Jawaban
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kartu 222
Pertanyaan
What is threat hunting?
Jawaban
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kartu 223
Pertanyaan
What triggers an ad hoc risk assessment?
Jawaban
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kartu 224
Pertanyaan
What makes an assessment external?
Jawaban
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kartu 225
Pertanyaan
What is data sovereignty?
Jawaban
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kartu 226
Pertanyaan
What security boundary does a cellular connection create for a mobile device?
Jawaban
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kartu 227
Pertanyaan
What makes a security control operational?
Jawaban
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kartu 228
Pertanyaan
What is discretionary access control?
Jawaban
A resource owner can decide who receives access, within system policy.
Kartu 229
Pertanyaan
How can careful automation support employee retention?
Jawaban
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kartu 230
Pertanyaan
Why does ease of deployment matter in an architecture decision?
Jawaban
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kartu 231
Pertanyaan
What tradeoff comes with placing an NGFW inline?
Jawaban
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kartu 232
Pertanyaan
What does a zero-trust policy administrator do?
Jawaban
It carries out the policy engine's decision, such as creating or ending a session.
Kartu 233
Pertanyaan
What should a master service agreement define for data return and deletion?
Jawaban
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kartu 234
Pertanyaan
What is an environmental physical attack?
Jawaban
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kartu 235
Pertanyaan
When should a maintenance window be chosen?
Jawaban
When disruption and rollback can be managed with the least business impact.
Kartu 236
Pertanyaan
What is memory injection?
Jawaban
Placing malicious code or data into another process's memory so it executes in that process's context.
Kartu 237
Pertanyaan
What does software composition analysis find?
Jawaban
Known risks and license information in third-party dependencies.
Kartu 238
Pertanyaan
What is DNS filtering?
Jawaban
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kartu 239
Pertanyaan
What should an incident response policy establish?
Jawaban
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kartu 240
Pertanyaan
How can noncompliance cause reputational damage?
Jawaban
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kartu 241
Pertanyaan
What does full-disk encryption protect?
Jawaban
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kartu 242
Pertanyaan
Why are default credentials dangerous?
Jawaban
They are widely known or easily discovered and often remain unchanged.
Kartu 243
Pertanyaan
What makes a risk assessment one-time?
Jawaban
It evaluates a defined decision or scope once without an established repeating cadence.
Kartu 244
Pertanyaan
What is a warm recovery site?
Jawaban
A partially equipped environment that needs some data restoration or configuration before use.
Kartu 245
Pertanyaan
What does application input validation do?
Jawaban
It checks that input matches the expected type, length, range, and format before use.
Kartu 246
Pertanyaan
What should an asset inventory record besides a device name?
Jawaban
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kartu 247
Pertanyaan
What is mandatory access control?
Jawaban
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kartu 248
Pertanyaan
What security benefit does infrastructure as code provide?
Jawaban
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kartu 249
Pertanyaan
When should a public service control fail closed?
Jawaban
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kartu 250
Pertanyaan
What should users do with a suspicious message?
Jawaban
Report it through the approved channel without interacting with its links or attachments.
Kartu 251
Pertanyaan
What usually motivates organized cybercrime?
Jawaban
Financial gain through scalable or repeatable criminal activity.
Kartu 252
Pertanyaan
How can malicious code support a network attack?
Jawaban
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kartu 253
Pertanyaan
When is virtual patching useful?
Jawaban
When a network or application control can block exploit traffic before the underlying system can be patched.
Kartu 254
Pertanyaan
What does security-monitoring reporting provide?
Jawaban
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kartu 255
Pertanyaan
What does data geolocation identify?
Jawaban
The physical or legal location where data is stored, processed, or transmitted.
Kartu 256
Pertanyaan
What does a zero-trust policy enforcement point do?
Jawaban
It enables, monitors, and terminates the connection between a subject and a resource.
Kartu 257
Pertanyaan
What is cryptographic key exchange?
Jawaban
A method for parties to establish shared key material over an untrusted channel.
Kartu 258
Pertanyaan
How can a vendor become a supply-chain attack vector?
Jawaban
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kartu 259
Pertanyaan
Why can legacy hardware remain vulnerable?
Jawaban
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kartu 260
Pertanyaan
What can proprietary vulnerability intelligence add beyond open sources?
Jawaban
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kartu 261
Pertanyaan
How does a centralized proxy apply web filtering?
Jawaban
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kartu 262
Pertanyaan
How can continuous integration and testing improve security automation?
Jawaban
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kartu 263
Pertanyaan
What is containment?
Jawaban
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kartu 264
Pertanyaan
What is a software development lifecycle policy meant to ensure?
Jawaban
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kartu 265
Pertanyaan
What makes risk assessment continuous?
Jawaban
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kartu 266
Pertanyaan
What is a memorandum of agreement?
Jawaban
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kartu 267
Pertanyaan
What makes a penetration test integrated?
Jawaban
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kartu 268
Pertanyaan
How does a DNS amplification attack magnify traffic?
Jawaban
It sends small spoofed queries that trigger larger replies toward the victim.
Kartu 269
Pertanyaan
Why does ease of recovery matter in an architecture decision?
Jawaban
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kartu 270
Pertanyaan
What does 802.1X control before a device receives normal network access?
Jawaban
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kartu 271
Pertanyaan
What is rule-based access control?
Jawaban
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kartu 272
Pertanyaan
What is mobile device management?
Jawaban
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kartu 273
Pertanyaan
What tradeoff comes with a cold recovery site?
Jawaban
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kartu 274
Pertanyaan
Why identify stakeholders before approving a security-sensitive change?
Jawaban
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kartu 275
Pertanyaan
How do attestation and acknowledgement differ?
Jawaban
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kartu 276
Pertanyaan
What does zero-trust adaptive identity mean?
Jawaban
Access decisions adjust to current risk signals rather than relying only on a static login.
Kartu 277
Pertanyaan
What makes a security control physical?
Jawaban
It protects facilities or equipment through a tangible barrier or mechanism.
Kartu 278
Pertanyaan
What is geo-fencing for data?
Jawaban
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kartu 279
Pertanyaan
What does a Trusted Platform Module protect?
Jawaban
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kartu 280
Pertanyaan
Why can a managed service provider amplify risk?
Jawaban
Its privileged access and shared tooling can provide a path into many customers.
Kartu 281
Pertanyaan
What does probability express in risk analysis?
Jawaban
A quantified chance that a defined event will occur within stated conditions or time.
Kartu 282
Pertanyaan
Why can shadow IT create a threat?
Jawaban
It bypasses security review, inventory, monitoring, and supported configuration.
Kartu 283
Pertanyaan
What is on-path interception?
Jawaban
An attacker positions between communicating parties to observe or alter traffic.
Kartu 284
Pertanyaan
Why include encryption in a system-hardening baseline?
Jawaban
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kartu 285
Pertanyaan
Why tune security alerts?
Jawaban
To keep useful detections while reducing noise that wastes analyst attention.
Kartu 286
Pertanyaan
What can IPS or IDS logs contribute to an investigation?
Jawaban
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kartu 287
Pertanyaan
What is VM escape?
Jawaban
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kartu 288
Pertanyaan
How can segmentation reduce vulnerability exposure before a patch is available?
Jawaban
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kartu 289
Pertanyaan
Why should firewall policy name the required ports and protocols explicitly?
Jawaban
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kartu 290
Pertanyaan
What is a change management policy meant to control?
Jawaban
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kartu 291
Pertanyaan
What is a hybrid-cloud architecture?
Jawaban
An environment that integrates private or on-premises resources with public cloud services.
Kartu 292
Pertanyaan
How do AH and ESP differ in the security services they can provide?
Jawaban
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kartu 293
Pertanyaan
What makes user behavior risky?
Jawaban
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kartu 294
Pertanyaan
What is least privilege?
Jawaban
Granting only the access needed for the required task and no more.
Kartu 295
Pertanyaan
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Jawaban
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kartu 296
Pertanyaan
Why discover unmanaged assets?
Jawaban
Unknown systems cannot be patched, monitored, or governed reliably.
Kartu 297
Pertanyaan
What is a service-level agreement?
Jawaban
Measurable service commitments and remedies, such as availability or response targets.
Kartu 298
Pertanyaan
What should govern automated security escalation?
Jawaban
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kartu 299
Pertanyaan
What is platform diversity as a resilience strategy?
Jawaban
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kartu 300
Pertanyaan
How can replayed session material affect an application?
Jawaban
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kartu 301
Pertanyaan
What is an implicit trust zone in zero trust?
Jawaban
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kartu 302
Pertanyaan
What does salting a password hash accomplish?
Jawaban
It makes identical passwords hash differently and defeats precomputed hash tables.
Kartu 303
Pertanyaan
What is spear phishing?
Jawaban
Phishing tailored to a specific person, role, or organization.
Kartu 304
Pertanyaan
What is eradication?
Jawaban
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kartu 305
Pertanyaan
Who is a risk owner?
Jawaban
The person accountable for deciding and monitoring how a specific risk is handled.
Kartu 306
Pertanyaan
What does a partially known penetration-test environment provide?
Jawaban
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kartu 307
Pertanyaan
What is a microservices architecture?
Jawaban
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kartu 308
Pertanyaan
What is a jump server?
Jawaban
A hardened intermediary used to reach systems in a restricted management network.
Kartu 309
Pertanyaan
What can happen when a configuration change is made without dependency analysis?
Jawaban
A downstream service can fail even when the changed component works.
Kartu 310
Pertanyaan
What is resource reuse exposure?
Jawaban
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kartu 311
Pertanyaan
Why does financial information require explicit protection?
Jawaban
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kartu 312
Pertanyaan
What does CVE provide?
Jawaban
A common identifier for a publicly disclosed vulnerability.
Kartu 313
Pertanyaan
Where can DLP controls operate?
Jawaban
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kartu 314
Pertanyaan
What does privileged password vaulting protect?
Jawaban
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kartu 315
Pertanyaan
What does an access-control standard define?
Jawaban
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kartu 316
Pertanyaan
How can automation support compliance monitoring?
Jawaban
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kartu 317
Pertanyaan
What does static code analysis examine?
Jawaban
Source or compiled code for weakness patterns without executing the application.
Kartu 318
Pertanyaan
What actor attribute describes funding, time, and personnel?
Jawaban
Resources.
Kartu 319
Pertanyaan
What is DNS poisoning?
Jawaban
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kartu 320
Pertanyaan
Why change default credentials during hardening?
Jawaban
Default secrets are predictable and commonly targeted.
Kartu 321
Pertanyaan
What does quarantine do after a security alert?
Jawaban
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kartu 322
Pertanyaan
What does key stretching do for stored passwords?
Jawaban
It deliberately makes each password guess more computationally expensive.
Kartu 323
Pertanyaan
What is smishing?
Jawaban
Phishing delivered through SMS or another text-messaging service.
Kartu 324
Pertanyaan
What is qualitative risk analysis?
Jawaban
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kartu 325
Pertanyaan
What is a master service agreement?
Jawaban
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kartu 326
Pertanyaan
What is threat scope reduction?
Jawaban
Narrowing the systems, privileges, or paths an attacker can reach.
Kartu 327
Pertanyaan
Why use a third-party cloud service instead of building locally?
Jawaban
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kartu 328
Pertanyaan
What should determine security-device placement?
Jawaban
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kartu 329
Pertanyaan
What does situational awareness mean for a user?
Jawaban
Notice the people, devices, requests, location, and context around a task before acting.
Kartu 330
Pertanyaan
What does a failover test validate?
Jawaban
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kartu 331
Pertanyaan
What is a preventive control meant to do?
Jawaban
Stop an unwanted event before it succeeds.
Kartu 332
Pertanyaan
What is just-in-time privileged access?
Jawaban
Elevated access is granted only when needed and expires after a short approved period.
Kartu 333
Pertanyaan
What safeguard should security-group automation enforce?
Jawaban
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kartu 334
Pertanyaan
How does a reflected DDoS attack hide and multiply sources?
Jawaban
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kartu 335
Pertanyaan
What is a security misconfiguration?
Jawaban
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kartu 336
Pertanyaan
Why can the same vulnerability have different organizational impact?
Jawaban
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kartu 337
Pertanyaan
What does URL scanning evaluate before a user opens a web destination?
Jawaban
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kartu 338
Pertanyaan
What is the board's security governance role?
Jawaban
Provide oversight, set risk direction, and hold executives accountable.
Kartu 339
Pertanyaan
What does code signing establish?
Jawaban
That code came from the holder of the signing key and has not changed since signing.
Kartu 340
Pertanyaan
How should an asset's classification affect security operations?
Jawaban
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kartu 341
Pertanyaan
How does encryption protect data?
Jawaban
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kartu 342
Pertanyaan
What is a secure enclave?
Jawaban
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kartu 343
Pertanyaan
What is business email compromise?
Jawaban
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kartu 344
Pertanyaan
What is recovery in incident response?
Jawaban
Restoring services safely, monitoring them, and returning to normal operations.
Kartu 345
Pertanyaan
How is single loss expectancy commonly estimated?
Jawaban
Asset value multiplied by the exposure factor.
Kartu 346
Pertanyaan
What does an unknown penetration-test environment provide?
Jawaban
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kartu 347
Pertanyaan
What security boundary does a hypervisor provide?
Jawaban
It isolates virtual machines while controlling their access to shared hardware.
Kartu 348
Pertanyaan
Why does a TLS tunnel not protect a compromised endpoint?
Jawaban
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kartu 349
Pertanyaan
Why update diagrams after an infrastructure change?
Jawaban
Operations and incident responders need the documentation to match the deployed environment.
Kartu 350
Pertanyaan
What does privacy ownership assign?
Jawaban
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kartu 351
Pertanyaan
What does a security control gap analysis compare?
Jawaban
The controls required for the target state with the controls currently in place.
Kartu 352
Pertanyaan
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Jawaban
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kartu 353
Pertanyaan
What is application privilege escalation?
Jawaban
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kartu 354
Pertanyaan
What risk remains when unnecessary software is left installed?
Jawaban
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kartu 355
Pertanyaan
What does SCAP standardize?
Jawaban
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kartu 356
Pertanyaan
What can packet capture reveal?
Jawaban
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kartu 357
Pertanyaan
What makes a privileged credential ephemeral?
Jawaban
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kartu 358
Pertanyaan
How do a statement of work and a work order differ?
Jawaban
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kartu 359
Pertanyaan
Why might multi-cloud improve resilience?
Jawaban
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kartu 360
Pertanyaan
How can a service provider introduce a supply-chain vulnerability?
Jawaban
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kartu 361
Pertanyaan
What is a false positive in vulnerability scanning?
Jawaban
A reported weakness that is not actually present or exploitable in the assessed context.
Kartu 362
Pertanyaan
How do EDR and XDR differ?
Jawaban
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kartu 363
Pertanyaan
What should onboarding and offboarding procedures coordinate?
Jawaban
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kartu 364
Pertanyaan
How should an organization harden managed mobile devices?
Jawaban
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kartu 365
Pertanyaan
What is a certificate signing request?
Jawaban
A request containing a public key and subject information for a certificate authority to sign.
Kartu 366
Pertanyaan
What is pretexting?
Jawaban
Using a fabricated role or situation to make a request seem legitimate.
Kartu 367
Pertanyaan
How is annualized loss expectancy commonly estimated?
Jawaban
Single loss expectancy multiplied by annualized rate of occurrence.
Kartu 368
Pertanyaan
What security consequence follows from containers sharing a kernel?
Jawaban
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kartu 369
Pertanyaan
Where does 802.1X enforce a network admission decision?
Jawaban
At the controlled switch port or wireless access point before normal network access is granted.
Kartu 370
Pertanyaan
What should insider-threat awareness teach?
Jawaban
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kartu 371
Pertanyaan
What access action is suitable for careful automation?
Jawaban
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kartu 372
Pertanyaan
What is an evil twin?
Jawaban
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kartu
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Pelajari dek ini gratis
Nibomo akan terbuka agar Anda bisa mulai belajar.
Kartu 373
Pertanyaan
Does non-human-readable data need less protection?
Jawaban
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kartu 374
Pertanyaan
What does authenticating a system establish?
Jawaban
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kartu 375
Pertanyaan
What does LDAP provide in identity systems?
Jawaban
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kartu 376
Pertanyaan
What is a deterrent control meant to do?
Jawaban
Discourage an attacker from attempting an unwanted action.
Kartu 377
Pertanyaan
Why update procedures after changing a security control?
Jawaban
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kartu 378
Pertanyaan
How does OCSP differ from a certificate revocation list?
Jawaban
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kartu 379
Pertanyaan
What is the goal of data exfiltration?
Jawaban
Remove data from its authorized environment without permission.
Kartu 380
Pertanyaan
What is a watering-hole attack?
Jawaban
Compromising a site frequented by the intended targets so their visits expose them.
Kartu 381
Pertanyaan
How can a hardware provider introduce a supply-chain vulnerability?
Jawaban
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kartu 382
Pertanyaan
What is application forgery?
Jawaban
Creating or altering a request, token, or object so the application treats it as authentic.
Kartu 383
Pertanyaan
How does least privilege mitigate compromise?
Jawaban
It limits the actions and resources available to a compromised account or process.
Kartu 384
Pertanyaan
What is serverless computing?
Jawaban
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kartu 385
Pertanyaan
What makes an infrastructure control effective for a specific risk?
Jawaban
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kartu 386
Pertanyaan
What does parallel recovery processing test?
Jawaban
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kartu 387
Pertanyaan
Which password-authentication method does WPA3-Personal use?
Jawaban
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kartu 388
Pertanyaan
How does data retention affect asset disposal?
Jawaban
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kartu 389
Pertanyaan
What is a false negative in vulnerability scanning?
Jawaban
A real weakness that the assessment fails to report.
Kartu 390
Pertanyaan
What does recurring security scanning add to monitoring?
Jawaban
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kartu 391
Pertanyaan
What should guide port selection for a secure protocol?
Jawaban
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kartu 392
Pertanyaan
What does forensic acquisition create?
Jawaban
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kartu 393
Pertanyaan
How do system owners and data owners divide security accountability?
Jawaban
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kartu 394
Pertanyaan
What does likelihood express in risk analysis?
Jawaban
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kartu 395
Pertanyaan
What is a memorandum of understanding?
Jawaban
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kartu 396
Pertanyaan
What does the right to be forgotten generally require?
Jawaban
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kartu 397
Pertanyaan
What does an audit committee oversee?
Jawaban
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kartu 398
Pertanyaan
What does identity interoperability require?
Jawaban
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kartu 399
Pertanyaan
How does a bollard protect a facility?
Jawaban
It blocks or redirects vehicles before they can reach a protected area.
Kartu 400
Pertanyaan
How can hashing protect a downloaded file?
Jawaban
A trusted digest lets the recipient detect whether the file changed.
Kartu 401
Pertanyaan
What is a credential replay attack?
Jawaban
Using captured valid credentials or tokens again without needing to discover the secret.
Kartu 402
Pertanyaan
How can automation complexity create security risk?
Jawaban
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kartu 403
Pertanyaan
What must an architecture provide when a component cannot be patched?
Jawaban
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kartu 404
Pertanyaan
What makes remote access secure?
Jawaban
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kartu 405
Pertanyaan
What should users verify before connecting removable media or a cable?
Jawaban
That the device and connection are approved, expected, and handled under organizational policy.
Kartu 406
Pertanyaan
What is a self-signed certificate?
Jawaban
A certificate signed by its own private key rather than by a separate trusted issuer.
Kartu 407
Pertanyaan
What is brand impersonation?
Jawaban
Using a trusted organization's identity or look to deceive people.
Kartu 408
Pertanyaan
What characterizes a conservative risk appetite?
Jawaban
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kartu 409
Pertanyaan
What should a managed mobile device verify before using Wi-Fi?
Jawaban
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kartu 410
Pertanyaan
What is a zero-day vulnerability?
Jawaban
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kartu 411
Pertanyaan
What does verification confirm after vulnerability remediation?
Jawaban
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kartu 412
Pertanyaan
What is user and entity behavior analytics?
Jawaban
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kartu 413
Pertanyaan
What does a physical security policy establish?
Jawaban
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kartu 414
Pertanyaan
What does a UPS provide?
Jawaban
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kartu 415
Pertanyaan
What is a nondisclosure agreement?
Jawaban
A contract restricting use and disclosure of defined confidential information.
Kartu 416
Pertanyaan
What should be checked before assigning a user permission?
Jawaban
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kartu 417
Pertanyaan
How does espionage differ from ordinary theft?
Jawaban
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kartu 418
Pertanyaan
What is password spraying?
Jawaban
Trying a small set of common passwords across many accounts to avoid lockouts.
Kartu 419
Pertanyaan
What is the purpose of system isolation during an incident?
Jawaban
Stop harmful communication while preserving the system for response and investigation.
Kartu 420
Pertanyaan
What is a security benchmark?
Jawaban
A documented set of recommended configuration checks for a platform or product.
Kartu 421
Pertanyaan
Which metadata fields give a log record investigative context?
Jawaban
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kartu 422
Pertanyaan
What does an access-control vestibule prevent?
Jawaban
It limits tailgating by allowing controlled passage through one door at a time.
Kartu 423
Pertanyaan
What is version control's security value for configuration?
Jawaban
It preserves attributable history and enables review or rollback of changes.
Kartu 424
Pertanyaan
Why use both internal and external compliance monitoring?
Jawaban
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kartu 425
Pertanyaan
What distinguishes on-premises architecture?
Jawaban
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kartu 426
Pertanyaan
What risk can split tunneling add to a VPN?
Jawaban
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kartu 427
Pertanyaan
What is a certificate root of trust?
Jawaban
A trusted root certificate or key from which a client validates a certificate chain.
Kartu 428
Pertanyaan
What is typosquatting?
Jawaban
Registering a look-alike domain based on common typing errors or visual similarity.
Kartu 429
Pertanyaan
What is root-cause analysis?
Jawaban
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kartu 430
Pertanyaan
What is risk tolerance?
Jawaban
The acceptable variation or boundary around a specific objective or risk area.
Kartu 431
Pertanyaan
What is a security self-assessment?
Jawaban
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kartu 432
Pertanyaan
What does data masking change?
Jawaban
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kartu 433
Pertanyaan
How do wireless authentication protocols let clients prove identity securely?
Jawaban
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kartu 434
Pertanyaan
Why reconcile inventory with network discovery?
Jawaban
Differences expose missing records, retired systems, or unauthorized devices.
Kartu 435
Pertanyaan
Why does sideloading raise mobile risk?
Jawaban
It can bypass store review, signing policy, and managed application controls.
Kartu 436
Pertanyaan
What does an information-sharing organization add to vulnerability management?
Jawaban
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kartu 437
Pertanyaan
What does a web-filter block rule specify?
Jawaban
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kartu 438
Pertanyaan
How do data custodians and data stewards differ?
Jawaban
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kartu 439
Pertanyaan
What is a brute-force password attack?
Jawaban
Systematically trying many candidate secrets against an account or protected value.
Kartu 440
Pertanyaan
What is a compensating control?
Jawaban
An alternative safeguard used when the preferred control is impractical or unavailable.
Kartu 441
Pertanyaan
How can location act as an authentication factor?
Jawaban
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kartu 442
Pertanyaan
Why must security automation remain supportable?
Jawaban
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kartu 443
Pertanyaan
What does a standby generator provide?
Jawaban
Longer-duration power during a utility outage, after a startup delay.
Kartu 444
Pertanyaan
What makes an architecture air-gapped?
Jawaban
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kartu 445
Pertanyaan
What is a software-defined WAN?
Jawaban
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kartu 446
Pertanyaan
What password-management behavior should awareness training reinforce?
Jawaban
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kartu 447
Pertanyaan
What security value does fencing provide?
Jawaban
It defines and delays entry across a physical perimeter.
Kartu 448
Pertanyaan
What is a wildcard certificate?
Jawaban
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kartu 449
Pertanyaan
How does misinformation differ from disinformation?
Jawaban
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kartu 450
Pertanyaan
What is a risk threshold?
Jawaban
A defined level that triggers escalation, treatment, or another required response.
Kartu 451
Pertanyaan
What does a vendor penetration test contribute to assessment?
Jawaban
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kartu 452
Pertanyaan
What is the objective of a service-disruption attack?
Jawaban
Make a system or business function unavailable or unreliable.
Kartu 453
Pertanyaan
What is directory traversal?
Jawaban
Manipulating a file path to reach files outside the directory the application intended to expose.
Kartu 454
Pertanyaan
Why decommission an unsupported system?
Jawaban
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kartu 455
Pertanyaan
Why archive security-monitoring data?
Jawaban
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kartu 456
Pertanyaan
What role does RADIUS commonly play in enterprise Wi-Fi?
Jawaban
It centralizes authentication, authorization information, and accounting for network access.
Kartu 457
Pertanyaan
Why separate the requester and approver of a high-risk change?
Jawaban
To reduce error, fraud, and unilateral unauthorized modification.
Kartu 458
Pertanyaan
Why can a jailbroken device violate a security baseline?
Jawaban
It weakens platform isolation and allows unapproved privileged changes.
Kartu 459
Pertanyaan
When is tokenization especially useful?
Jawaban
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kartu 460
Pertanyaan
Why can dark-web intelligence affect vulnerability priority?
Jawaban
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kartu 461
Pertanyaan
What firewall policy should govern traffic from a screened subnet to internal systems?
Jawaban
Deny it by default and allow only explicitly required flows.
Kartu 462
Pertanyaan
What does SAML commonly carry?
Jawaban
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kartu 463
Pertanyaan
What does a security governance committee do?
Jawaban
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kartu 464
Pertanyaan
How can global privacy requirements affect one data process?
Jawaban
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kartu 465
Pertanyaan
What characterizes an IoT device?
Jawaban
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kartu 466
Pertanyaan
What is a unified threat management appliance?
Jawaban
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kartu 467
Pertanyaan
What does a hardware security module provide?
Jawaban
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kartu 468
Pertanyaan
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Jawaban
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kartu 469
Pertanyaan
What is a tabletop exercise?
Jawaban
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kartu 470
Pertanyaan
What does a risk exemption authorize?
Jawaban
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kartu 471
Pertanyaan
What is a regulatory examination?
Jawaban
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kartu 472
Pertanyaan
What does physical video surveillance primarily provide?
Jawaban
Detection and evidence of activity in monitored areas.
Kartu 473
Pertanyaan
What is a birthday attack against a hash?
Jawaban
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kartu 474
Pertanyaan
Why keep backups both onsite and offsite?
Jawaban
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kartu 475
Pertanyaan
How does technical debt affect security automation?
Jawaban
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kartu 476
Pertanyaan
What should switch hardening restrict first?
Jawaban
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kartu 477
Pertanyaan
What should happen when an asset changes owners?
Jawaban
Inventory, access, support responsibility, and data handling should be updated.
Kartu 478
Pertanyaan
What does evidence of a vendor's internal audits contribute?
Jawaban
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kartu 479
Pertanyaan
What is identity attestation?
Jawaban
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kartu 480
Pertanyaan
Why can standard enterprise patching be unsafe for an RTOS device?
Jawaban
A change can disrupt timing guarantees or certified operational behavior.
Kartu 481
Pertanyaan
What is secure access service edge?
Jawaban
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kartu 482
Pertanyaan
What social-engineering habit should awareness training reinforce?
Jawaban
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kartu 483
Pertanyaan
How can a software provider introduce a supply-chain vulnerability?
Jawaban
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kartu 484
Pertanyaan
Why include internet exposure in remediation priority?
Jawaban
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kartu 485
Pertanyaan
What does a mail gateway inspect?
Jawaban
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kartu 486
Pertanyaan
What is a data controller?
Jawaban
The entity that determines why and how personal data is processed.
Kartu 487
Pertanyaan
How does blackmail motivate a cyberattack?
Jawaban
The attacker threatens disclosure or harm unless the victim complies.
Kartu 488
Pertanyaan
What is a downgrade attack?
Jawaban
Forcing parties to use an older or weaker protocol or security mode.
Kartu 489
Pertanyaan
How does encryption mitigate data exposure?
Jawaban
It makes captured data unreadable without the required key.
Kartu 490
Pertanyaan
How do network and web vulnerability scanners differ?
Jawaban
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kartu 491
Pertanyaan
How can vulnerability-scan data support an investigation?
Jawaban
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kartu 492
Pertanyaan
What is key escrow?
Jawaban
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kartu 493
Pertanyaan
Which human vector commonly uses a fake sign-in page to harvest credentials?
Jawaban
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kartu 494
Pertanyaan
What is risk avoidance?
Jawaban
Stopping or not starting the activity that creates the risk.
Kartu 495
Pertanyaan
What is data obfuscation?
Jawaban
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kartu 496
Pertanyaan
What is a directive control?
Jawaban
A safeguard that tells people what behavior or action is required.
Kartu 497
Pertanyaan
What does a security guard add that a camera cannot?
Jawaban
Human judgment and an immediate physical response.
Kartu 498
Pertanyaan
Why define restricted activities in change management?
Jawaban
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kartu 499
Pertanyaan
What contractual impact can noncompliance create?
Jawaban
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kartu 500
Pertanyaan
What should determine backup frequency?
Jawaban
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kartu 501
Pertanyaan
What should router hardening protect?
Jawaban
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kartu 502
Pertanyaan
What problem does OAuth 2.0 address?
Jawaban
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kartu 503
Pertanyaan
What does SCADA do?
Jawaban
It provides supervisory monitoring and control across distributed industrial equipment.
Kartu 504
Pertanyaan
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Jawaban
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kartu 505
Pertanyaan
What distinguishes a computer virus?
Jawaban
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kartu 506
Pertanyaan
What does a key management system coordinate?
Jawaban
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kartu 507
Pertanyaan
How can an unsecure wired network expose traffic?
Jawaban
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kartu 508
Pertanyaan
Why is vulnerable device firmware hard to remediate?
Jawaban
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kartu 509
Pertanyaan
What does patching change in vulnerability remediation?
Jawaban
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kartu 510
Pertanyaan
What does DMARC add to SPF and DKIM?
Jawaban
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kartu 511
Pertanyaan
How does automation improve security efficiency?
Jawaban
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kartu 512
Pertanyaan
What is a simulation exercise?
Jawaban
A more realistic practice in which participants respond to injected events using operational processes.
Kartu 513
Pertanyaan
What is a data processor?
Jawaban
An entity that processes personal data on behalf of a controller.
Kartu 514
Pertanyaan
What is risk mitigation?
Jawaban
Reducing likelihood, impact, or both through controls or process changes.
Kartu 515
Pertanyaan
Why monitor a vendor after onboarding?
Jawaban
Security posture, ownership, services, incidents, and dependencies can change.
Kartu 516
Pertanyaan
What does a physical penetration test assess?
Jawaban
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kartu 517
Pertanyaan
Why use access badges at a facility?
Jawaban
To associate entry attempts with authorized identities and enforce access rules.
Kartu 518
Pertanyaan
How does permission restriction protect data?
Jawaban
Only authorized identities receive the actions and scope their roles require.
Kartu 519
Pertanyaan
What is the usual objective of ransomware extortion?
Jawaban
Force payment by denying access, threatening disclosure, or both.
Kartu 520
Pertanyaan
What does impossible travel indicate?
Jawaban
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kartu 521
Pertanyaan
What is configuration enforcement?
Jawaban
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kartu 522
Pertanyaan
What does a web vulnerability scanner inspect?
Jawaban
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kartu 523
Pertanyaan
How does cost affect an architecture choice?
Jawaban
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kartu 524
Pertanyaan
What does EAP provide with 802.1X?
Jawaban
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kartu 525
Pertanyaan
What should operational-security training help users protect?
Jawaban
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kartu 526
Pertanyaan
What does a time-of-day access rule do?
Jawaban
Allows or denies a requested action according to an approved schedule.
Kartu 527
Pertanyaan
What should cloud infrastructure hardening establish?
Jawaban
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kartu 528
Pertanyaan
What should an asset owner ensure during offboarding?
Jawaban
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kartu 529
Pertanyaan
Why encrypt backups?
Jawaban
Backup media and transfers can expose the same sensitive data as production systems.
Kartu 530
Pertanyaan
What is steganography?
Jawaban
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kartu 531
Pertanyaan
Which human vector uses a fabricated authority role to justify a sensitive request?
Jawaban
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kartu 532
Pertanyaan
Why does risk transfer not remove accountability?
Jawaban
The organization can retain legal, reputational, operational, and oversight consequences.
Kartu 533
Pertanyaan
Why validate a change after deployment?
Jawaban
To confirm the intended result occurred without introducing unacceptable side effects.
Kartu 534
Pertanyaan
What makes end-of-life hardware a security vulnerability?
Jawaban
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kartu 535
Pertanyaan
What does an audit add to remediation validation?
Jawaban
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kartu 536
Pertanyaan
Why can SPF pass while a message still impersonates a brand?
Jawaban
SPF checks the envelope domain, which may differ from the visible From domain.
Kartu 537
Pertanyaan
What role can a government entity have in security governance?
Jawaban
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kartu 538
Pertanyaan
How do data inventory and retention support privacy governance?
Jawaban
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kartu 539
Pertanyaan
What can concurrent sessions from distant regions indicate?
Jawaban
A stolen account or shared credential, subject to VPN and proxy context.
Kartu 540
Pertanyaan
What does supply-chain analysis examine?
Jawaban
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kartu 541
Pertanyaan
What is the purpose of facility lighting as a control?
Jawaban
Deter covert activity and improve observation of people and areas.
Kartu 542
Pertanyaan
What architecture quality keeps a service usable during component failure?
Jawaban
Availability.
Kartu 543
Pertanyaan
When is fail-open behavior preferable to fail-closed behavior?
Jawaban
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kartu 544
Pertanyaan
Which control function does a login-failure alert provide?
Jawaban
Detection; it reveals suspicious authentication activity.
Kartu 545
Pertanyaan
What does a biometric MFA implementation verify?
Jawaban
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kartu 546
Pertanyaan
How can automation enforce a security baseline?
Jawaban
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kartu 547
Pertanyaan
How do wireless cryptographic protocols protect network traffic?
Jawaban
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kartu 548
Pertanyaan
Why segment sensitive data stores?
Jawaban
It limits reachable paths and separates them from lower-trust workloads.
Kartu 549
Pertanyaan
What must remain secret in an asymmetric key pair?
Jawaban
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kartu 550
Pertanyaan
How can a supplier become a supply-chain attack vector?
Jawaban
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kartu 551
Pertanyaan
What is e-discovery?
Jawaban
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kartu 552
Pertanyaan
What characterizes a neutral risk appetite?
Jawaban
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kartu 553
Pertanyaan
What is passive reconnaissance?
Jawaban
Gathering information without directly interacting with the target's systems.
Kartu 554
Pertanyaan
What does a philosophical motive mean for a threat actor?
Jawaban
The actor acts to advance a belief or moral position rather than primarily for money.
Kartu 555
Pertanyaan
What does unexpected resource consumption indicate?
Jawaban
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kartu 556
Pertanyaan
What does a host-based intrusion prevention system do?
Jawaban
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kartu 557
Pertanyaan
How does agent-based monitoring differ from agentless monitoring?
Jawaban
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kartu 558
Pertanyaan
What can network logs contribute to an investigation?
Jawaban
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kartu 559
Pertanyaan
What is the purpose of a backup restore test?
Jawaban
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kartu 560
Pertanyaan
Why can obsolete hardware become a security risk?
Jawaban
It may lack supported firmware, modern protections, or replacement parts.
Kartu 561
Pertanyaan
What does rescanning confirm after remediation?
Jawaban
Whether the scanner can still detect the original finding on the affected asset.
Kartu 562
Pertanyaan
What should a secure transport method provide?
Jawaban
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kartu 563
Pertanyaan
How can law affect security governance?
Jawaban
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kartu 564
Pertanyaan
What does resilience mean for a security architecture?
Jawaban
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kartu 565
Pertanyaan
Why minimize an infrastructure's attack surface?
Jawaban
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kartu 566
Pertanyaan
What does executing a security-awareness program require?
Jawaban
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kartu 567
Pertanyaan
What does an infrared security sensor detect?
Jawaban
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kartu 568
Pertanyaan
What is a knowledge factor?
Jawaban
Something the claimant knows, such as a password.
Kartu 569
Pertanyaan
Why review allow-list and deny-list impact before a change?
Jawaban
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kartu 570
Pertanyaan
What does partition-level encryption protect?
Jawaban
One selected disk partition, leaving other partitions outside that encryption boundary.
Kartu 571
Pertanyaan
How can instant messaging deliver a security attack?
Jawaban
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kartu 572
Pertanyaan
What can repeated blocked-content events indicate?
Jawaban
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kartu 573
Pertanyaan
What should a server-hardening baseline reduce?
Jawaban
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kartu 574
Pertanyaan
When is physical media destruction appropriate?
Jawaban
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kartu 575
Pertanyaan
What is mean time to repair?
Jawaban
The average time required to restore a failed component or service.
Kartu 576
Pertanyaan
Why disclose conflicts of interest during vendor selection?
Jawaban
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kartu 577
Pertanyaan
What is a fine for noncompliance?
Jawaban
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kartu 578
Pertanyaan
What does a public data classification authorize?
Jawaban
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kartu 579
Pertanyaan
What security benefit comes from standard infrastructure configurations?
Jawaban
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kartu 580
Pertanyaan
How does horizontal scaling increase capacity?
Jawaban
It adds more service instances and distributes work among them.
Kartu 581
Pertanyaan
Why can added connectivity weaken segmentation?
Jawaban
Each allowed path can become a route for lateral movement or data escape.
Kartu 582
Pertanyaan
What coding practice is central to preventing SQL injection?
Jawaban
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kartu 583
Pertanyaan
When is a compensating control appropriate for a vulnerability?
Jawaban
When timely removal or patching is infeasible and another control can reduce the risk.
Kartu 584
Pertanyaan
How does agent-based web filtering enforce policy?
Jawaban
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kartu 585
Pertanyaan
How can regulation differ from an internal policy?
Jawaban
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kartu 586
Pertanyaan
What is a storage snapshot?
Jawaban
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kartu 587
Pertanyaan
What does password age measure?
Jawaban
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kartu 588
Pertanyaan
What does an ethical motive mean in vulnerability research?
Jawaban
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kartu 589
Pertanyaan
What can missing security logs indicate?
Jawaban
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kartu 590
Pertanyaan
Why disable unused ports and protocols?
Jawaban
They expose unnecessary communication paths and code that attackers can reach.
Kartu 591
Pertanyaan
What does antivirus contribute to monitoring?
Jawaban
It scans files, memory, or behavior and reports suspected malicious code.
Kartu 592
Pertanyaan
What is a honeypot?
Jawaban
A decoy system or service designed to attract and observe malicious activity.
Kartu 593
Pertanyaan
What does file-level encryption protect?
Jawaban
Selected files independently of whether the rest of the disk or volume is encrypted.
Kartu 594
Pertanyaan
How can SMS deliver a security attack?
Jawaban
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kartu 595
Pertanyaan
What happens during incident analysis?
Jawaban
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kartu 596
Pertanyaan
What is mean time between failures?
Jawaban
The average operating time between repairable failures.
Kartu 597
Pertanyaan
What is active reconnaissance?
Jawaban
Probing or interacting with target systems to discover services and behavior.
Kartu 598
Pertanyaan
What constraint should guide ICS or SCADA hardening?
Jawaban
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kartu 599
Pertanyaan
Which control function does restoring a clean system image provide?
Jawaban
Correction; it returns the system to a known-good state.
Kartu 600
Pertanyaan
What does responsiveness mean in an architecture decision?
Jawaban
How quickly the system and its operators can adapt to demand, failure, or attack.
Kartu 601
Pertanyaan
How does out-of-band access strengthen remote administration?
Jawaban
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kartu 602
Pertanyaan
What makes user behavior unexpected?
Jawaban
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kartu 603
Pertanyaan
What is a work order?
Jawaban
A document authorizing a defined unit of work under an existing agreement.
Kartu 604
Pertanyaan
What can out-of-cycle logging indicate?
Jawaban
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kartu 605
Pertanyaan
Why update a standard operating procedure after a change?
Jawaban
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kartu 606
Pertanyaan
What coding practice limits cross-site scripting?
Jawaban
Context-appropriate output encoding, supported by safe templating and input handling.
Kartu 607
Pertanyaan
What does a restricted data classification indicate?
Jawaban
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kartu 608
Pertanyaan
How does a bug bounty support responsible disclosure?
Jawaban
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kartu 609
Pertanyaan
What does web-filter content categorization provide?
Jawaban
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kartu 610
Pertanyaan
How do hard and soft authentication tokens differ?
Jawaban
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kartu 611
Pertanyaan
How can industry requirements affect security governance?
Jawaban
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kartu 612
Pertanyaan
How can noncompliance cause loss of a license?
Jawaban
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kartu 613
Pertanyaan
What does volume-level encryption protect?
Jawaban
All data within a selected logical storage volume.
Kartu 614
Pertanyaan
How can impersonation exploit familiarity?
Jawaban
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kartu 615
Pertanyaan
How does RTO guide recovery design?
Jawaban
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kartu 616
Pertanyaan
What is a honeynet?
Jawaban
A network of decoy systems used to study or divert attackers.
Kartu 617
Pertanyaan
What does backup replication provide?
Jawaban
Additional synchronized or copied recovery data in another system or location.
Kartu 618
Pertanyaan
What lets automation scale securely?
Jawaban
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kartu 619
Pertanyaan
Why monitor a hardened computing resource continuously?
Jawaban
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kartu 620
Pertanyaan
Why keep a certificate of destruction?
Jawaban
It documents that a disposal provider handled specified media under the agreed process.
Kartu 621
Pertanyaan
Why consider patch availability before selecting a platform?
Jawaban
Unsupported or difficult-to-update components accumulate known exposure.
Kartu 622
Pertanyaan
Why should remote administration use an encrypted, authenticated protocol?
Jawaban
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kartu 623
Pertanyaan
How can revenge motivate an insider incident?
Jawaban
A disgruntled person may damage systems or disclose data to punish the organization.
Kartu 624
Pertanyaan
What is a published or documented indicator of malicious activity?
Jawaban
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kartu 625
Pertanyaan
Why monitor a system more closely when a mitigation exception is accepted?
Jawaban
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kartu 626
Pertanyaan
What is an SNMP trap?
Jawaban
An unsolicited device notification sent to a management system when a configured event occurs.
Kartu 627
Pertanyaan
How can an automated report support an investigation?
Jawaban
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kartu 628
Pertanyaan
What is a security key?
Jawaban
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kartu 629
Pertanyaan
What does database-level encryption protect?
Jawaban
A database or selected database structures through controls managed at the database layer.
Kartu 630
Pertanyaan
How does brand impersonation exploit trust?
Jawaban
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kartu 631
Pertanyaan
What browser-side impact can a cross-site scripting vulnerability create?
Jawaban
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kartu 632
Pertanyaan
How can a system or process audit identify vulnerabilities?
Jawaban
It compares evidence with required configuration and procedure to reveal control gaps.
Kartu 633
Pertanyaan
What security role can Group Policy provide?
Jawaban
Centralized Windows configuration of account, application, audit, and system security settings.
Kartu 634
Pertanyaan
What should incident-response training prepare people to do?
Jawaban
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kartu 635
Pertanyaan
Why must governance track local or regional requirements?
Jawaban
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kartu 636
Pertanyaan
How can a dependency become a useful key risk indicator?
Jawaban
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kartu 637
Pertanyaan
What is a business partners agreement?
Jawaban
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kartu 638
Pertanyaan
What makes an audit regulatory?
Jawaban
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kartu 639
Pertanyaan
What is a honeyfile?
Jawaban
A decoy file whose access can reveal unauthorized activity.
Kartu 640
Pertanyaan
Why does legal information require explicit protection?
Jawaban
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kartu 641
Pertanyaan
Which indicator can mass file renaming and encryption produce?
Jawaban
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kartu 642
Pertanyaan
What remains with an organization after transferring architecture risk?
Jawaban
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kartu 643
Pertanyaan
When does local console placement provide useful administrative access?
Jawaban
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kartu 644
Pertanyaan
What makes a harmful user action unintentional?
Jawaban
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kartu 645
Pertanyaan
How should an organization harden workstations?
Jawaban
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kartu 646
Pertanyaan
What is journaling in recovery?
Jawaban
Recording ordered changes so data can be replayed or restored to a consistent point.
Kartu 647
Pertanyaan
What downtime must a change plan account for?
Jawaban
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kartu 648
Pertanyaan
Why must a privacy program map local or regional law to data flows?
Jawaban
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kartu 649
Pertanyaan
Why combine independent preventive controls at different layers?
Jawaban
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kartu 650
Pertanyaan
What is passwordless authentication?
Jawaban
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kartu 651
Pertanyaan
How can automation improve security reaction time?
Jawaban
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kartu 652
Pertanyaan
What does record-level encryption protect?
Jawaban
Individual records or fields, allowing finer protection than encrypting the entire database.
Kartu 653
Pertanyaan
How can business email compromise misuse urgency?
Jawaban
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kartu 654
Pertanyaan
What does impact measure in risk analysis?
Jawaban
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kartu 655
Pertanyaan
What makes cyber activity part of warfare?
Jawaban
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kartu 656
Pertanyaan
Which indicator can a newly created privileged account produce outside the normal change window?
Jawaban
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kartu 657
Pertanyaan
How can configuration enforcement validate a deployed mitigation?
Jawaban
It compares the realized settings with the approved state and corrects or reports drift.
Kartu 658
Pertanyaan
How does validating an alert improve alert tuning?
Jawaban
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kartu 659
Pertanyaan
What data-layer impact can a SQL injection vulnerability create?
Jawaban
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kartu 660
Pertanyaan
What environmental variables can change vulnerability priority?
Jawaban
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kartu 661
Pertanyaan
What security role does SELinux provide?
Jawaban
Mandatory access controls that confine processes according to centrally defined policy.
Kartu 662
Pertanyaan
Why review governance documents periodically?
Jawaban
Business, technology, threats, and external obligations change.
Kartu 663
Pertanyaan
Why evaluate power requirements for a system design?
Jawaban
Power capacity and redundancy constrain availability and recovery.
Kartu 664
Pertanyaan
When is IPsec a better tunnel choice than TLS?
Jawaban
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kartu 665
Pertanyaan
What is a honeytoken?
Jawaban
A fake credential or data element that generates a high-confidence alert when used.
Kartu 666
Pertanyaan
What should embedded-system hardening prioritize?
Jawaban
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kartu 667
Pertanyaan
Why must sanitization address data remanence?
Jawaban
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kartu 668
Pertanyaan
Why require rules of engagement for vendor testing?
Jawaban
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kartu 669
Pertanyaan
What does a private data classification indicate?
Jawaban
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kartu 670
Pertanyaan
What does a tabletop recovery exercise test?
Jawaban
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kartu 671
Pertanyaan
Why prevent password reuse?
Jawaban
One compromised password should not unlock other accounts or services.
Kartu 672
Pertanyaan
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Jawaban
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kartu 673
Pertanyaan
What does transport encryption protect?
Jawaban
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kartu 674
Pertanyaan
How can a voice call become an attack vector?
Jawaban
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kartu 675
Pertanyaan
What should a digital-forensics report document?
Jawaban
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kartu 676
Pertanyaan
What tradeoff comes with an expansionary risk appetite?
Jawaban
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kartu 677
Pertanyaan
What does a known penetration-test environment provide?
Jawaban
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kartu 678
Pertanyaan
Why evaluate compute requirements before deployment?
Jawaban
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kartu 679
Pertanyaan
Why place sensors at network choke points?
Jawaban
They can observe traffic crossing important trust boundaries.
Kartu 680
Pertanyaan
What should hybrid or remote-work security training emphasize?
Jawaban
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kartu 681
Pertanyaan
Why plan an application restart separately from a service restart?
Jawaban
The application may need its own state handling, user coordination, health checks, and rollback point.
Kartu 682
Pertanyaan
What is a cryptographic vulnerability?
Jawaban
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kartu 683
Pertanyaan
Why report findings by asset owner?
Jawaban
Owners need clear accountability and a prioritized remediation queue.
Kartu 684
Pertanyaan
What should guide selection of a secure protocol?
Jawaban
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kartu 685
Pertanyaan
How do centralized and decentralized governance structures differ?
Jawaban
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kartu 686
Pertanyaan
How does privacy-aware design limit data retention?
Jawaban
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kartu 687
Pertanyaan
What does a pressure security sensor detect?
Jawaban
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kartu 688
Pertanyaan
What automation costs should a security team plan for?
Jawaban
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kartu 689
Pertanyaan
What should RTOS hardening preserve while reducing attack surface?
Jawaban
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kartu 690
Pertanyaan
What is the goal of disruption-for-chaos activity?
Jawaban
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kartu 691
Pertanyaan
Which indicator can repeated password guessing produce?
Jawaban
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kartu 692
Pertanyaan
How does removing unnecessary software harden a system?
Jawaban
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kartu 693
Pertanyaan
What does NetFlow provide?
Jawaban
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kartu 694
Pertanyaan
How can a dashboard support an investigation?
Jawaban
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kartu 695
Pertanyaan
When should a password be expired?
Jawaban
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kartu 696
Pertanyaan
Why does cryptographic key length matter?
Jawaban
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kartu 697
Pertanyaan
How can an unsecure Bluetooth connection become an attack vector?
Jawaban
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kartu 698
Pertanyaan
What is a key risk indicator?
Jawaban
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kartu 699
Pertanyaan
What should vendor monitoring verify when a contract ends?
Jawaban
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kartu 700
Pertanyaan
What does a sensitive data classification indicate?
Jawaban
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kartu 701
Pertanyaan
What does software-defined networking separate?
Jawaban
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kartu 702
Pertanyaan
Where should a web application firewall be placed?
Jawaban
In the path of web requests before they reach the protected application.
Kartu 703
Pertanyaan
What does a simulated recovery exercise test?
Jawaban
Participants perform realistic response actions in a controlled environment without disrupting production.
Kartu 704
Pertanyaan
How can a team verify that a detective control is effective?
Jawaban
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kartu 705
Pertanyaan
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Jawaban
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kartu 706
Pertanyaan
What makes a vulnerability cloud-specific?
Jawaban
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kartu 707
Pertanyaan
How can insurance respond to vulnerability risk?
Jawaban
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kartu 708
Pertanyaan
How does reputation improve web filtering?
Jawaban
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kartu 709
Pertanyaan
What does an encryption policy establish?
Jawaban
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kartu 710
Pertanyaan
How does a microwave security sensor detect movement?
Jawaban
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kartu 711
Pertanyaan
What should IoT-device hardening change before deployment?
Jawaban
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kartu 712
Pertanyaan
Why track software licenses as assets?
Jawaban
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kartu 713
Pertanyaan
What does a password manager improve?
Jawaban
It can generate and store unique long passwords so users do not memorize or reuse them.
Kartu 714
Pertanyaan
What makes a ledger open and public?
Jawaban
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kartu 715
Pertanyaan
What should a payment-change request trigger?
Jawaban
Independent verification through a known channel before any account or payment detail is changed.
Kartu 716
Pertanyaan
What does preserving digital evidence require?
Jawaban
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kartu 717
Pertanyaan
What should a risk report tell decision-makers?
Jawaban
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kartu 718
Pertanyaan
What should an external assessment report provide?
Jawaban
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kartu 719
Pertanyaan
What is a centralized design's main resilience risk?
Jawaban
A central dependency can become a bottleneck or single point of failure.
Kartu 720
Pertanyaan
What does mutual TLS add to a TLS-protected service connection?
Jawaban
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kartu 721
Pertanyaan
What should recurring security-awareness reporting show?
Jawaban
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kartu 722
Pertanyaan
Why do legacy applications require extra change planning?
Jawaban
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kartu 723
Pertanyaan
How do a data controller and a data processor differ?
Jawaban
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kartu 724
Pertanyaan
How can orchestration become a single point of failure?
Jawaban
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kartu 725
Pertanyaan
Why should defenses account for a threat actor's sophistication and capability?
Jawaban
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kartu 726
Pertanyaan
How does an injection attack make an application execute unintended instructions?
Jawaban
It sends crafted input that an interpreter treats as code or commands instead of data.
Kartu 727
Pertanyaan
What does a host-based firewall control?
Jawaban
Inbound and outbound network traffic for one endpoint according to local rules.
Kartu 728
Pertanyaan
Why revise alerting after an incident?
Jawaban
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kartu 729
Pertanyaan
Why include security duties in procurement criteria?
Jawaban
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kartu 730
Pertanyaan
What does a critical data classification indicate?
Jawaban
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kartu 731
Pertanyaan
What infrastructure capacity must support failover?
Jawaban
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kartu 732
Pertanyaan
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Jawaban
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kartu 733
Pertanyaan
How does a remediation exemption differ from an exception?
Jawaban
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kartu 734
Pertanyaan
Why should automated EDR or XDR blocking have an exception and rollback path?
Jawaban
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kartu 735
Pertanyaan
What does a security playbook provide?
Jawaban
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kartu 736
Pertanyaan
How does an ultrasonic security sensor detect movement?
Jawaban
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kartu 737
Pertanyaan
What should a managed mobile device require for Bluetooth connections?
Jawaban
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kartu 738
Pertanyaan
How do password complexity rules differ from password length?
Jawaban
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kartu 739
Pertanyaan
What makes a certificate third-party trusted?
Jawaban
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kartu 740
Pertanyaan
Why is an out-of-band check effective against impersonation?
Jawaban
It verifies the request through a separate, previously trusted communication path.
Kartu 741
Pertanyaan
What does a risk exception authorize?
Jawaban
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kartu 742
Pertanyaan
What security challenge grows in a decentralized design?
Jawaban
Consistent policy, inventory, monitoring, and patching become harder.
Kartu 743
Pertanyaan
How should controls be selected for an unused network path?
Jawaban
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kartu 744
Pertanyaan
How can a buffer-overflow attack affect an application?
Jawaban
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 kartu