# CompTIA Security\+ SY0\-701 Flashcards: Complete Objective Review ![Abstract network paths and learning nodes converging on a calm central gateway\.]() Study every current SY0\-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance\. 作成者 [Flashcards Open Source App]() [このデッキを無料で学習]() Nibomo が開き、すぐに学習を始められます。 ## デッキの詳細 - カード: 744枚のカード - バージョン: 1 - 公開日: 2026年8月26日 - 最終更新: 2026年9月10日 - ライセンス: Common knowledge · CC0 1\.0 - 対象ユーザーの言語: [en]() - 科目: Cybersecurity - レベル: Security\+ SY0\-701 - タグ: security\-plus\-701, governance\-risk, threats\-mitigations, general\-concepts, security\-architecture, security\-operations ## このデッキについて Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026. ### What this deck covers * **General security concepts:** control functions, core principles, zero trust, change management, cryptography, certificates, and PKI. * **Threats, vulnerabilities, and mitigations:** threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices. * **Security architecture:** cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design. * **Security operations:** hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources. * **Program management and oversight:** governance, risk, third-party security, compliance, privacy, audits, and awareness. Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart. The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application. Scope was reconciled against [CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0](https://comptiacdn.azureedge.net/webcontent/docs/default-source/exam-objectives/comptia-security-sy0-701-exam-objectives-%286-0%29.pdf?sfvrsn=204179cc_6). Current certification requirements and exam-series status are on the [official CompTIA Security+ page](https://www.comptia.org/en-us/certifications/security/). This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied. ## 類似のデッキ - [CompTIA A\+ 220\-1201 & 220\-1202 Flashcards: Core 1 and Core 2]() - [CompTIA Network\+ N10\-009 Flashcards: Concepts, Operations & Troubleshooting]() - [AWS Solutions Architect Associate SAA\-C03 Flashcards: Architecture Decisions & Trade\-Offs]() - [NREMT EMT Flashcards: Assessment, Treatment & Operations]() - [EU AI Act 2026 Flashcards: Timeline, Roles & Risk Rules]() - [CCSP 2026 Flashcards: August Exam Outline Review]() ## このデッキのカード ### カード 1 **質問** What does an information security policy establish? **回答** Management's required direction, responsibilities, and high-level rules for protecting information and systems. ### カード 2 **質問** What is phishing? **回答** A deceptive message intended to make a target reveal information, open malware, or take an unsafe action. ### カード 3 **質問** What does a public-key certificate bind to an identity? **回答** A public key, together with identifying information and the issuer's signature. ### カード 4 **質問** What is data at rest? **回答** Data stored on media such as disks, databases, backups, or mobile devices. ### カード 5 **質問** How does policy-driven access control decide a zero-trust access request? **回答** Explicit policies or rules evaluate the access request and drive the allow-or-deny decision. ### カード 6 **質問** What does establishing a secure baseline produce? **回答** An approved, documented configuration that defines the required secure state for a class of computing resource. ### カード 7 **質問** What is hashing used to verify? **回答** Whether data has changed by comparing fixed-length digest values. ### カード 8 **質問** What is impersonation in social engineering? **回答** Pretending to be a trusted person or organization to obtain access, data, or action. ### カード 9 **質問** What is virtualization? **回答** Abstracting physical compute so multiple isolated guest systems can share a host. ### カード 10 **質問** What is chain of custody? **回答** A documented history of who collected, handled, transferred, stored, and examined evidence. ### カード 11 **質問** What is quantitative risk analysis? **回答** Estimating risk with numerical values such as money, frequency, or probability. ### カード 12 **質問** What is a phishing awareness campaign? **回答** A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior. ### カード 13 **質問** What is high availability? **回答** Designing a service to remain accessible despite expected component failures. ### カード 14 **質問** What is a network security zone? **回答** A group of systems with similar trust, function, or control requirements. ### カード 15 **質問** What is risk transfer? **回答** Shifting some financial or operational consequence to another party, such as through insurance or contract. ### カード 16 **質問** What is media sanitization? **回答** Making stored data infeasible to recover for the intended level of protection. ### カード 17 **質問** What does CVSS provide? **回答** A standardized way to describe a vulnerability's technical severity characteristics. ### カード 18 **質問** What does security alerting do? **回答** It turns matched events or behavior into a notification that the right responder can review. ### カード 19 **質問** What does a firewall rule enforce? **回答** A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions. ### カード 20 **質問** What is deprovisioning? **回答** Disabling or removing accounts, credentials, sessions, and access when they are no longer needed. ### カード 21 **質問** How does inline placement differ from a tap or monitor port? **回答** Inline traffic passes through the control; a tap or monitor receives a copy for observation. ### カード 22 **質問** What is asymmetric encryption? **回答** Encryption that uses a mathematically related public and private key pair. ### カード 23 **質問** What does SPF authorize? **回答** Which mail servers may send mail for a domain in the SMTP envelope. ### カード 24 **質問** What is a possession factor? **回答** Something the claimant has, such as a cryptographic authenticator. ### カード 25 **質問** What does ordinary TLS usually protect and authenticate? **回答** It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured. ### カード 26 **質問** What is single loss expectancy? **回答** The estimated loss from one occurrence of a risk event. ### カード 27 **質問** What does a certificate authority do? **回答** It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key. ### カード 28 **質問** What is a detective control meant to do? **回答** Identify that an unwanted event has happened or is happening. ### カード 29 **質問** What is the security purpose of change-control approval? **回答** Ensure authorized reviewers assess risk before the production change occurs. ### カード 30 **質問** What is shadow IT? **回答** Technology used for organizational work without required approval or oversight. ### カード 31 **質問** What is a buffer overflow vulnerability? **回答** A bounds-checking failure that lets input overwrite memory outside its intended buffer. ### カード 32 **質問** What is ransomware? **回答** Malware or an intrusion outcome that denies access to data or systems to extort the victim. ### カード 33 **質問** How does network segmentation limit an incident? **回答** It restricts communication paths and reduces lateral movement between zones. ### カード 34 **質問** How do load balancing and clustering support availability differently? **回答** Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure. ### カード 35 **質問** What is vendor due diligence? **回答** Evaluating a provider's security, capability, stability, and fit before commitment. ### カード 36 **質問** Who is a data subject? **回答** The person whose personal data is collected or processed. ### カード 37 **質問** What is attestation? **回答** A formal assertion or report about a subject matter, often supported by an independent examination. ### カード 38 **質問** What is a replay attack? **回答** Valid captured data is retransmitted to repeat an authenticated or authorized action. ### カード 39 **質問** What does a wireless site survey establish? **回答** Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment. ### カード 40 **質問** What is the time-of-check stage of a race-condition vulnerability? **回答** The application verifies a condition or resource state before acting on it. ### カード 41 **質問** What is a penetration test? **回答** An authorized attempt to exploit weaknesses and demonstrate practical impact. ### カード 42 **質問** What is a cold recovery site? **回答** A facility with basic space and utilities but little preinstalled technology or current data. ### カード 43 **質問** What is data in transit? **回答** Data moving between systems or across a network. ### カード 44 **質問** What is a vendor security questionnaire? **回答** A structured request for information about a provider's controls and practices. ### カード 45 **質問** How does an internal actor's starting position differ from an external actor's? **回答** An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access. ### カード 46 **質問** What can unexpected account lockouts indicate? **回答** Password guessing, credential stuffing, user error, or a broken client. ### カード 47 **質問** How do permissions enforce access control? **回答** They specify which actions a subject may perform on a particular resource. ### カード 48 **質問** What is log aggregation? **回答** Central collection of logs from multiple sources for search, correlation, and retention. ### カード 49 **質問** Why plan a service restart as part of a change? **回答** The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps. ### カード 50 **質問** What is infrastructure as code? **回答** Managing infrastructure through versioned, machine-readable definitions rather than manual configuration. ### カード 51 **質問** What should security-awareness program development start with? **回答** The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes. ### カード 52 **質問** What is a voice-based social-engineering attack called? **回答** Vishing. ### カード 53 **質問** What happens during incident-response preparation? **回答** Teams establish people, tools, access, communications, training, and procedures before an incident. ### カード 54 **質問** What does an offensive penetration-testing team do? **回答** It emulates authorized attacker behavior to discover and demonstrate exploitable paths. ### カード 55 **質問** What is federation? **回答** One security domain relies on identity assertions from another trusted domain. ### カード 56 **質問** What is asset classification? **回答** Grouping an asset by sensitivity, criticality, or required handling. ### カード 57 **質問** What is cross-site scripting? **回答** Injection of script-capable content that a browser executes in another site's security context. ### カード 58 **質問** What can IDS or IPS trends reveal? **回答** Changes in the frequency, source, target, or type of detected activity that one isolated event may not show. ### カード 59 **質問** What can unexpected resource inaccessibility indicate? **回答** Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage. ### カード 60 **質問** What is a corrective control meant to do? **回答** Limit damage and restore a secure state after an event. ### カード 61 **質問** How do containers differ from virtual machines? **回答** Containers share the host kernel; virtual machines normally run separate guest operating systems. ### カード 62 **質問** How does an active security device differ from a passive one? **回答** An active device can alter or block traffic; a passive device observes and reports without changing the flow. ### カード 63 **質問** Why is unsupported software a persistent attack surface? **回答** Known weaknesses may remain reachable because supported fixes and vendor help are no longer available. ### カード 64 **質問** What is annualized rate of occurrence? **回答** The estimated number of times a risk event occurs per year. ### カード 65 **質問** What is an inherence factor? **回答** A biometric characteristic of the claimant. ### カード 66 **質問** What do a threat actor's sophistication and capability describe? **回答** The technical skill, tools, knowledge, resources, and operational discipline the actor can apply. ### カード 67 **質問** What is a SIEM? **回答** A platform that centralizes security data and supports search, correlation, alerting, and investigation. ### カード 68 **質問** What is sideloading? **回答** Installing software from outside the platform's approved distribution path. ### カード 69 **質問** What does an IDS or IPS signature match? **回答** A known pattern in traffic or behavior associated with a threat, exploit, or policy violation. ### カード 70 **質問** Why are embedded systems often difficult to patch? **回答** They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support. ### カード 71 **質問** What is a virtual private network? **回答** An encrypted logical connection that carries private traffic across an untrusted or shared network. ### カード 72 **質問** What should an initial security-awareness report establish? **回答** The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared. ### カード 73 **質問** What is symmetric encryption? **回答** Encryption that uses the same secret key to encrypt and decrypt data. ### カード 74 **質問** What happens during incident detection? **回答** Monitoring or a report identifies activity that may meet the organization's incident criteria. ### カード 75 **質問** What is recovery time objective? **回答** The target maximum time to restore a function after disruption. ### カード 76 **質問** Why prioritize password length? **回答** Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions. ### カード 77 **質問** What must sanitization accomplish before an asset leaves organizational control? **回答** It must make the retained data infeasible to recover with the method appropriate to the media and risk. ### カード 78 **質問** What is a real-time operating system designed to provide? **回答** Predictable response timing for tasks with strict deadlines. ### カード 79 **質問** What does fail-open behavior do when a control fails? **回答** It permits traffic or access to preserve availability. ### カード 80 **質問** What is jailbreaking or rooting a mobile device? **回答** Removing platform restrictions to gain privileged control over the operating system. ### カード 81 **質問** What does network access control enforce? **回答** Identity, device posture, and access policy at network connection time and during a session. ### カード 82 **質問** What does data loss prevention do? **回答** Detects and may block sensitive data use or transfer that violates policy. ### カード 83 **質問** What security property does a blockchain provide? **回答** A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links. ### カード 84 **質問** What is recovery point objective? **回答** The target maximum acceptable data loss measured backward in time. ### カード 85 **質問** How do ICS and SCADA relate? **回答** An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment. ### カード 86 **質問** What does fail-closed behavior do when a control fails? **回答** It denies traffic or access to preserve security. ### カード 87 **質問** Which keys create and verify a typical digital signature? **回答** The signer creates it with a private key, and others verify it with the corresponding public key. ### カード 88 **質問** What is SQL injection? **回答** Input that alters the structure or meaning of a database query because code and data were not safely separated. ### カード 89 **質問** What does DKIM verify? **回答** That selected message content was signed by a domain and was not altered after signing. ### カード 90 **質問** What is post-incident activity? **回答** Learning from the event and improving controls, plans, and recovery based on evidence. ### カード 91 **質問** What characterizes an expansionary risk appetite? **回答** A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity. ### カード 92 **質問** How do centralized and decentralized architectures differ? **回答** Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations. ### カード 93 **質問** What does a certificate revocation list publish? **回答** Certificate serial numbers that the issuer has invalidated before their scheduled expiration. ### カード 94 **質問** What is a legal hold? **回答** A directive to preserve potentially relevant information by suspending normal deletion or disposal. ### カード 95 **質問** What is exposure factor in quantitative risk analysis? **回答** The estimated percentage of an asset's value lost in one event. ### カード 96 **質問** What is decentralized architecture? **回答** Control or service responsibility is distributed across multiple independent components or locations. ### カード 97 **質問** What is tokenization? **回答** Replacing sensitive data with a non-sensitive token whose mapping is held separately. ### カード 98 **質問** How can automation act as a workforce multiplier? **回答** It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement. ### カード 99 **質問** What can endpoint process logs reveal? **回答** Which programs ran, their parent-child relationships, users, timing, and command details when captured. ### カード 100 **質問** What does the CIA triad protect? **回答** Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access. ### カード 101 **質問** How does data masking protect information? **回答** It hides selected values or characters while preserving a usable representation. ### カード 102 **質問** How can a national requirement affect security governance? **回答** It can impose country-level duties that policies, controls, records, and oversight must satisfy. ### カード 103 **質問** What do integrations and APIs provide to security orchestration? **回答** Defined interfaces for exchanging data and triggering actions across tools without manual handoffs. ### カード 104 **質問** What makes a compliance report external? **回答** It is prepared for a regulator, customer, auditor, partner, or other party outside the organization. ### カード 105 **質問** What does a cryptographic algorithm define? **回答** The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data. ### カード 106 **質問** Why compare systems with a secure baseline regularly? **回答** To detect drift, unauthorized changes, and missing hardening. ### カード 107 **質問** What does integrity protect? **回答** The accuracy and completeness of data and systems against unauthorized change. ### カード 108 **質問** What does vulnerability classification organize? **回答** Findings into meaningful types or categories so teams can route, compare, and remediate them consistently. ### カード 109 **質問** What does a password standard define? **回答** Mandatory, measurable requirements for creating, storing, using, and changing passwords. ### カード 110 **質問** What technology capacity must a recovery design plan for? **回答** The compute, storage, software, licenses, and supporting services needed to meet recovery demand. ### カード 111 **質問** What does a confidential data classification indicate? **回答** Disclosure is limited to authorized people because exposure could harm the organization or affected parties. ### カード 112 **質問** What makes a vendor assessment independent? **回答** The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria. ### カード 113 **質問** What lets a worm spread without attaching itself to another file? **回答** It is a standalone program that replicates across reachable systems or services. ### カード 114 **質問** What is microsegmentation? **回答** Fine-grained isolation of individual workloads or small groups with explicit communication policy. ### カード 115 **質問** What can application logs reveal? **回答** Transactions, errors, user actions, and application-specific security events. ### カード 116 **質問** What does deploying a secure baseline require? **回答** Applying the approved settings consistently to the intended resources and verifying the realized configuration. ### カード 117 **質問** How can resource-provisioning automation improve security? **回答** It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls. ### カード 118 **質問** What does availability protect? **回答** Reliable, timely access to systems and data when authorized users need them. ### カード 119 **質問** Why must a change request describe business impact? **回答** So approvers can weigh the benefit, risk, outage, and affected users before authorizing it. ### カード 120 **質問** What does an authenticated vulnerability scan add? **回答** Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss. ### カード 121 **質問** What does a change-management procedure specify? **回答** The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change. ### カード 122 **質問** What is a sanction for noncompliance? **回答** A formal penalty or restriction imposed by an authority for failing to meet a requirement. ### カード 123 **質問** How can email deliver a security attack? **回答** It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient. ### カード 124 **質問** What is an internal compliance audit? **回答** An organization-led examination of whether selected operations and controls meet defined requirements. ### カード 125 **質問** What is a Trojan? **回答** Malware disguised as legitimate or desirable software. ### カード 126 **質問** What is clustering? **回答** Multiple systems work together to provide a service and tolerate member failure. ### カード 127 **質問** What makes data regulated? **回答** A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties. ### カード 128 **質問** What does a wireless heat map show? **回答** Measured or modeled signal strength and coverage across a physical area. ### カード 129 **質問** How should vendor criticality affect due diligence? **回答** Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval. ### カード 130 **質問** How can a digital signature support non-repudiation? **回答** It provides evidence that the holder of a private key signed specific data. ### カード 131 **質問** What should vulnerability prioritization consider beyond severity? **回答** Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations. ### カード 132 **質問** What is a security guideline? **回答** Recommended practice that allows judgment unless adopted as a requirement. ### カード 133 **質問** What usually distinguishes a nation-state threat actor? **回答** Strategic objectives, substantial resources, patience, and advanced operational capability. ### カード 134 **質問** What is spyware? **回答** Software that secretly collects information about a user or system. ### カード 135 **質問** Why maintain an allow list for applications? **回答** Only explicitly approved software is permitted to execute. ### カード 136 **質問** How can an image become an attack vector? **回答** It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code. ### カード 137 **質問** What makes a security control technical? **回答** It is enforced mainly by technology, such as a firewall rule or endpoint policy. ### カード 138 **質問** What is identity proofing? **回答** Establishing that a person is who they claim to be before issuing an account or credential. ### カード 139 **質問** What is an automated security guardrail? **回答** A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group. ### カード 140 **質問** Why assign an owner to a planned change? **回答** To make one party accountable for coordination, execution, and follow-through. ### カード 141 **質問** How can national privacy law affect data handling? **回答** It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights. ### カード 142 **質問** What is continuity of operations? **回答** Maintaining essential functions during disruption and restoring supporting capabilities in a planned order. ### カード 143 **質問** What security tradeoff comes with BYOD? **回答** The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle. ### カード 144 **質問** How should policies and handbooks support security training? **回答** They provide accessible, current rules and reporting steps that training can apply to real situations. ### カード 145 **質問** What is a keylogger? **回答** A tool that records keystrokes to capture data such as credentials. ### カード 146 **質問** What makes information a trade secret? **回答** It provides business value because it is not generally known and is protected through reasonable secrecy measures. ### カード 147 **質問** What does authentication establish? **回答** It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim. ### カード 148 **質問** What risk comes from an untrusted file attachment? **回答** Opening or parsing it can execute malicious code or expose data. ### カード 149 **質問** How does risk tolerance affect vulnerability remediation? **回答** It sets how much residual exposure the organization will accept and how quickly a finding must be treated. ### カード 150 **質問** How can a global requirement affect security governance? **回答** It can require a common control and oversight approach across multiple countries while local obligations still apply. ### カード 151 **質問** Why should questionnaire answers be supported by evidence? **回答** Self-assertions alone may not prove that controls are designed or operating effectively. ### カード 152 **質問** What is an independent third-party audit? **回答** An external party with suitable independence examines evidence against defined criteria. ### カード 153 **質問** What do account provisioning and deprovisioning do? **回答** Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed. ### カード 154 **質問** What is an unskilled attacker commonly called? **回答** A script kiddie: someone who relies on tools or instructions created by others. ### カード 155 **質問** What is a rootkit? **回答** Software designed to maintain privileged, concealed access by altering or subverting the system. ### カード 156 **質問** What does an access control list enforce? **回答** Explicit permit or deny rules for subjects, traffic, or actions on a protected resource. ### カード 157 **質問** What should system security monitoring observe? **回答** Host state and behavior such as processes, authentication, configuration, resource use, and security events. ### カード 158 **質問** What can operating-system security logs reveal? **回答** Authentication, privilege use, policy changes, services, and other host security events. ### カード 159 **質問** Why isolate operational technology from general business networks? **回答** To limit attack paths into safety- and availability-critical processes. ### カード 160 **質問** What is the COPE mobile deployment model? **回答** The organization owns the device but permits defined personal use while retaining management control. ### カード 161 **質問** What security work belongs in asset acquisition and procurement? **回答** Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment. ### カード 162 **質問** How can user-provisioning automation improve security? **回答** It creates, changes, and removes access from authoritative identity events with consistent approvals and logging. ### カード 163 **質問** What people capacity must a continuity plan account for? **回答** Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services. ### カード 164 **質問** What do authorization models define? **回答** How permissions are assigned to authenticated subjects and evaluated for requested actions. ### カード 165 **質問** Why are removable devices an attack vector? **回答** They can introduce malware or remove data while bypassing network controls. ### カード 166 **質問** What should predeployment change-test results show? **回答** Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects. ### カード 167 **質問** What is the time-of-use stage of a race-condition vulnerability? **回答** The application acts on a resource after the check, creating a gap in which another process may change the resource. ### カード 168 **質問** What is data in use? **回答** Data actively processed in memory or by an application. ### カード 169 **質問** What does open-source vulnerability intelligence contribute? **回答** Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure. ### カード 170 **質問** What can file-integrity monitoring detect? **回答** Unexpected changes to protected files, directories, or configuration. ### カード 171 **質問** Why should deprovisioning be prompt? **回答** Former users or roles should not retain usable access. ### カード 172 **質問** What is an acceptable use policy? **回答** Rules for permitted and prohibited use of organizational systems, accounts, and data. ### カード 173 **質問** What makes a compliance report internal? **回答** It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action. ### カード 174 **質問** What is a logic bomb? **回答** Malicious code that activates when a specified condition or time is reached. ### カード 175 **質問** What does a right-to-audit clause provide? **回答** Contractual authority to inspect or obtain evidence about agreed controls. ### カード 176 **質問** Where should a forward proxy sit in an enterprise traffic path? **回答** Between clients and external services so outbound requests pass through policy and logging before reaching destinations. ### カード 177 **質問** Which cues should make a message look suspicious? **回答** Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment. ### カード 178 **質問** What makes a security control managerial? **回答** It directs risk and governance through decisions such as policies, assessments, and oversight. ### カード 179 **質問** What is the CYOD mobile deployment model? **回答** The user selects from organization-approved device options that remain subject to corporate security requirements. ### カード 180 **質問** How does client-based vulnerable software differ from an agentless exposure? **回答** Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent. ### カード 181 **質問** What makes a risk assessment recurring? **回答** It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated. ### カード 182 **質問** What does a defensive penetration-testing team practice? **回答** Detection, investigation, containment, and improvement while authorized offensive activity tests the environment. ### カード 183 **質問** In a zero-trust data plane, what can the subject or system represent? **回答** The user, device, workload, or service requesting access to a protected resource. ### カード 184 **質問** What primarily motivates a hacktivist? **回答** A political, social, or ideological cause. ### カード 185 **質問** What is bloatware? **回答** Unnecessary preinstalled software that consumes resources and can expand the attack surface. ### カード 186 **質問** Why keep endpoint-protection signatures and engines current? **回答** They need current detection logic to recognize newly identified malware and exploit behavior. ### カード 187 **質問** What should application security monitoring observe? **回答** Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise. ### カード 188 **質問** What is role-based access control? **回答** Permissions are assigned to roles, and identities receive access through their roles. ### カード 189 **質問** What is geographic dispersal? **回答** Placing redundant resources in separate locations so one regional event does not affect all copies. ### カード 190 **質問** What is a malicious update? **回答** An update that has been intentionally altered or distributed to install harmful code through a trusted update path. ### カード 191 **質問** What does static application analysis inspect? **回答** Source code, bytecode, or compiled code without executing the application. ### カード 192 **質問** What does a firewall access list define? **回答** An ordered set of traffic-matching conditions and the action applied when a condition matches. ### カード 193 **質問** What does a disaster recovery policy establish? **回答** Management expectations for restoring technology and data after a disruptive event. ### カード 194 **質問** How does logical segmentation separate workloads that share physical infrastructure? **回答** It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware. ### カード 195 **質問** How should IDS and IPS placement differ? **回答** An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic. ### カード 196 **質問** What should automated ticket creation capture? **回答** The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event. ### カード 197 **質問** What makes information intellectual property? **回答** It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret. ### カード 198 **質問** What is a backout plan? **回答** Predefined steps for safely reversing a failed or harmful change. ### カード 199 **質問** Why is an unsecure wireless network an attack vector? **回答** Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak. ### カード 200 **質問** What is physical brute force? **回答** Using force to defeat a lock, barrier, enclosure, or other physical control. ### カード 201 **質問** What is application sandboxing? **回答** Running code in a constrained environment with limited access to the host and data. ### カード 202 **質問** Why assign an asset owner? **回答** One accountable party must decide its use, protection, and lifecycle. ### カード 203 **質問** What happens during risk identification? **回答** Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm. ### カード 204 **質問** What should an SLA state about breach notification? **回答** The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties. ### カード 205 **質問** How do due diligence and due care differ in compliance? **回答** Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require. ### カード 206 **質問** What is attribute-based access control? **回答** Policy evaluates attributes of the subject, resource, action, and environment. ### カード 207 **質問** What does a zero-trust policy engine do? **回答** It evaluates policy and signals to decide whether access should be allowed. ### カード 208 **質問** How does a cloud responsibility matrix allocate security duties? **回答** It maps each security task to the provider, the customer, or both, according to the service model and agreement. ### カード 209 **質問** Where should a load balancer sit in a service path? **回答** In front of service instances so it can route requests to healthy backends. ### カード 210 **質問** What should the security team do with a reported suspicious message? **回答** Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take. ### カード 211 **質問** What makes an operating-system vulnerability high impact? **回答** It can affect every application and security control that relies on the compromised OS. ### カード 212 **質問** What does dynamic application analysis inspect? **回答** The behavior and externally visible weaknesses of a running application. ### カード 213 **質問** How can false-positive trends affect IDS or IPS tuning? **回答** Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic. ### カード 214 **質問** What does a business continuity policy establish? **回答** Management expectations for sustaining and restoring critical business functions. ### カード 215 **質問** What is a hot recovery site? **回答** A ready, synchronized environment intended to take over quickly. ### カード 216 **質問** What makes an insider threat distinct? **回答** The actor has legitimate access or organizational knowledge that can be misused. ### カード 217 **質問** What is RFID cloning? **回答** Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections. ### カード 218 **質問** Why apply vendor security updates promptly? **回答** They remove known weaknesses before attackers can exploit the unpatched exposure. ### カード 219 **質問** What should infrastructure security monitoring observe? **回答** Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity. ### カード 220 **質問** What can firewall logs reveal? **回答** Allowed or denied network connections across controlled boundaries. ### カード 221 **質問** Why minimize open service ports? **回答** Each reachable service adds code, configuration, and authentication paths an attacker can probe. ### カード 222 **質問** What is threat hunting? **回答** A proactive search for evidence of malicious activity that existing detections have not confirmed. ### カード 223 **質問** What triggers an ad hoc risk assessment? **回答** A specific change, incident, finding, or decision that requires evaluation outside the regular schedule. ### カード 224 **質問** What makes an assessment external? **回答** A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions. ### カード 225 **質問** What is data sovereignty? **回答** The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled. ### カード 226 **質問** What security boundary does a cellular connection create for a mobile device? **回答** It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy. ### カード 227 **質問** What makes a security control operational? **回答** It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures. ### カード 228 **質問** What is discretionary access control? **回答** A resource owner can decide who receives access, within system policy. ### カード 229 **質問** How can careful automation support employee retention? **回答** It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people. ### カード 230 **質問** Why does ease of deployment matter in an architecture decision? **回答** A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden. ### カード 231 **質問** What tradeoff comes with placing an NGFW inline? **回答** It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed. ### カード 232 **質問** What does a zero-trust policy administrator do? **回答** It carries out the policy engine's decision, such as creating or ending a session. ### カード 233 **質問** What should a master service agreement define for data return and deletion? **回答** The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends. ### カード 234 **質問** What is an environmental physical attack? **回答** Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities. ### カード 235 **質問** When should a maintenance window be chosen? **回答** When disruption and rollback can be managed with the least business impact. ### カード 236 **質問** What is memory injection? **回答** Placing malicious code or data into another process's memory so it executes in that process's context. ### カード 237 **質問** What does software composition analysis find? **回答** Known risks and license information in third-party dependencies. ### カード 238 **質問** What is DNS filtering? **回答** Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate. ### カード 239 **質問** What should an incident response policy establish? **回答** Authority, scope, reporting duties, and organizational commitment for incident handling. ### カード 240 **質問** How can noncompliance cause reputational damage? **回答** Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty. ### カード 241 **質問** What does full-disk encryption protect? **回答** All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection. ### カード 242 **質問** Why are default credentials dangerous? **回答** They are widely known or easily discovered and often remain unchanged. ### カード 243 **質問** What makes a risk assessment one-time? **回答** It evaluates a defined decision or scope once without an established repeating cadence. ### カード 244 **質問** What is a warm recovery site? **回答** A partially equipped environment that needs some data restoration or configuration before use. ### カード 245 **質問** What does application input validation do? **回答** It checks that input matches the expected type, length, range, and format before use. ### カード 246 **質問** What should an asset inventory record besides a device name? **回答** Identifiers, owner, location, status, classification, dependencies, and supported version as applicable. ### カード 247 **質問** What is mandatory access control? **回答** A central authority enforces access through labels and rules that ordinary owners cannot override. ### カード 248 **質問** What security benefit does infrastructure as code provide? **回答** Repeatable, reviewable deployments that reduce undocumented configuration drift. ### カード 249 **質問** When should a public service control fail closed? **回答** When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path. ### カード 250 **質問** What should users do with a suspicious message? **回答** Report it through the approved channel without interacting with its links or attachments. ### カード 251 **質問** What usually motivates organized cybercrime? **回答** Financial gain through scalable or repeatable criminal activity. ### カード 252 **質問** How can malicious code support a network attack? **回答** It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution. ### カード 253 **質問** When is virtual patching useful? **回答** When a network or application control can block exploit traffic before the underlying system can be patched. ### カード 254 **質問** What does security-monitoring reporting provide? **回答** A summarized, audience-appropriate view of findings, trends, risk, and response status. ### カード 255 **質問** What does data geolocation identify? **回答** The physical or legal location where data is stored, processed, or transmitted. ### カード 256 **質問** What does a zero-trust policy enforcement point do? **回答** It enables, monitors, and terminates the connection between a subject and a resource. ### カード 257 **質問** What is cryptographic key exchange? **回答** A method for parties to establish shared key material over an untrusted channel. ### カード 258 **質問** How can a vendor become a supply-chain attack vector? **回答** An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers. ### カード 259 **質問** Why can legacy hardware remain vulnerable? **回答** It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls. ### カード 260 **質問** What can proprietary vulnerability intelligence add beyond open sources? **回答** Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship. ### カード 261 **質問** How does a centralized proxy apply web filtering? **回答** It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic. ### カード 262 **質問** How can continuous integration and testing improve security automation? **回答** Changes receive repeatable checks before deployment instead of reaching production unvalidated. ### カード 263 **質問** What is containment? **回答** Limiting an incident's spread or damage while preserving necessary operations and evidence. ### カード 264 **質問** What is a software development lifecycle policy meant to ensure? **回答** Security requirements and checks are integrated throughout design, development, release, and maintenance. ### カード 265 **質問** What makes risk assessment continuous? **回答** Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review. ### カード 266 **質問** What is a memorandum of agreement? **回答** A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction. ### カード 267 **質問** What makes a penetration test integrated? **回答** Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response. ### カード 268 **質問** How does a DNS amplification attack magnify traffic? **回答** It sends small spoofed queries that trigger larger replies toward the victim. ### カード 269 **質問** Why does ease of recovery matter in an architecture decision? **回答** The design should let operators restore service and trusted state without fragile, slow, or undocumented steps. ### カード 270 **質問** What does 802.1X control before a device receives normal network access? **回答** Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed. ### カード 271 **質問** What is rule-based access control? **回答** System-wide rules grant or deny access based on conditions such as network, time, or action. ### カード 272 **質問** What is mobile device management? **回答** Central enrollment, configuration, monitoring, and enforcement for managed mobile devices. ### カード 273 **質問** What tradeoff comes with a cold recovery site? **回答** It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation. ### カード 274 **質問** Why identify stakeholders before approving a security-sensitive change? **回答** They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss. ### カード 275 **質問** How do attestation and acknowledgement differ? **回答** Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement. ### カード 276 **質問** What does zero-trust adaptive identity mean? **回答** Access decisions adjust to current risk signals rather than relying only on a static login. ### カード 277 **質問** What makes a security control physical? **回答** It protects facilities or equipment through a tangible barrier or mechanism. ### カード 278 **質問** What is geo-fencing for data? **回答** Enforcing location-based boundaries on where data or services may be accessed or operated. ### カード 279 **質問** What does a Trusted Platform Module protect? **回答** Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation. ### カード 280 **質問** Why can a managed service provider amplify risk? **回答** Its privileged access and shared tooling can provide a path into many customers. ### カード 281 **質問** What does probability express in risk analysis? **回答** A quantified chance that a defined event will occur within stated conditions or time. ### カード 282 **質問** Why can shadow IT create a threat? **回答** It bypasses security review, inventory, monitoring, and supported configuration. ### カード 283 **質問** What is on-path interception? **回答** An attacker positions between communicating parties to observe or alter traffic. ### カード 284 **質問** Why include encryption in a system-hardening baseline? **回答** It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary. ### カード 285 **質問** Why tune security alerts? **回答** To keep useful detections while reducing noise that wastes analyst attention. ### カード 286 **質問** What can IPS or IDS logs contribute to an investigation? **回答** The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity. ### カード 287 **質問** What is VM escape? **回答** A vulnerability that lets code break out of a virtual machine and affect the host or another guest. ### カード 288 **質問** How can segmentation reduce vulnerability exposure before a patch is available? **回答** It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement. ### カード 289 **質問** Why should firewall policy name the required ports and protocols explicitly? **回答** Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths. ### カード 290 **質問** What is a change management policy meant to control? **回答** How changes are requested, assessed, approved, tested, implemented, and reviewed. ### カード 291 **質問** What is a hybrid-cloud architecture? **回答** An environment that integrates private or on-premises resources with public cloud services. ### カード 292 **質問** How do AH and ESP differ in the security services they can provide? **回答** AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration. ### カード 293 **質問** What makes user behavior risky? **回答** It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths. ### カード 294 **質問** What is least privilege? **回答** Granting only the access needed for the required task and no more. ### カード 295 **質問** What do Secure, HttpOnly, and SameSite cookie attributes restrict? **回答** Transmission to HTTPS, script access, and cross-site sending, respectively. ### カード 296 **質問** Why discover unmanaged assets? **回答** Unknown systems cannot be patched, monitored, or governed reliably. ### カード 297 **質問** What is a service-level agreement? **回答** Measurable service commitments and remedies, such as availability or response targets. ### カード 298 **質問** What should govern automated security escalation? **回答** Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely. ### カード 299 **質問** What is platform diversity as a resilience strategy? **回答** Using different implementations so one common flaw or failure is less likely to affect every copy. ### カード 300 **質問** How can replayed session material affect an application? **回答** It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action. ### カード 301 **質問** What is an implicit trust zone in zero trust? **回答** A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement. ### カード 302 **質問** What does salting a password hash accomplish? **回答** It makes identical passwords hash differently and defeats precomputed hash tables. ### カード 303 **質問** What is spear phishing? **回答** Phishing tailored to a specific person, role, or organization. ### カード 304 **質問** What is eradication? **回答** Removing the attacker's access, malicious artifacts, and exploited conditions. ### カード 305 **質問** Who is a risk owner? **回答** The person accountable for deciding and monitoring how a specific risk is handled. ### カード 306 **質問** What does a partially known penetration-test environment provide? **回答** The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold. ### カード 307 **質問** What is a microservices architecture? **回答** An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries. ### カード 308 **質問** What is a jump server? **回答** A hardened intermediary used to reach systems in a restricted management network. ### カード 309 **質問** What can happen when a configuration change is made without dependency analysis? **回答** A downstream service can fail even when the changed component works. ### カード 310 **質問** What is resource reuse exposure? **回答** Sensitive data from a previous use remains accessible when storage or memory is reassigned. ### カード 311 **質問** Why does financial information require explicit protection? **回答** It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed. ### カード 312 **質問** What does CVE provide? **回答** A common identifier for a publicly disclosed vulnerability. ### カード 313 **質問** Where can DLP controls operate? **回答** On endpoints, networks, email, and cloud services, depending on the product and visibility. ### カード 314 **質問** What does privileged password vaulting protect? **回答** It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password. ### カード 315 **質問** What does an access-control standard define? **回答** Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access. ### カード 316 **質問** How can automation support compliance monitoring? **回答** It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context. ### カード 317 **質問** What does static code analysis examine? **回答** Source or compiled code for weakness patterns without executing the application. ### カード 318 **質問** What actor attribute describes funding, time, and personnel? **回答** Resources. ### カード 319 **質問** What is DNS poisoning? **回答** Introducing false DNS data so names resolve to attacker-chosen destinations. ### カード 320 **質問** Why change default credentials during hardening? **回答** Default secrets are predictable and commonly targeted. ### カード 321 **質問** What does quarantine do after a security alert? **回答** It restricts a suspected asset or object while analysts validate and remediate the risk. ### カード 322 **質問** What does key stretching do for stored passwords? **回答** It deliberately makes each password guess more computationally expensive. ### カード 323 **質問** What is smishing? **回答** Phishing delivered through SMS or another text-messaging service. ### カード 324 **質問** What is qualitative risk analysis? **回答** Using descriptive scales such as low, medium, and high to compare likelihood and impact. ### カード 325 **質問** What is a master service agreement? **回答** An umbrella contract establishing general legal and commercial terms for ongoing work. ### カード 326 **質問** What is threat scope reduction? **回答** Narrowing the systems, privileges, or paths an attacker can reach. ### カード 327 **質問** Why use a third-party cloud service instead of building locally? **回答** It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk. ### カード 328 **質問** What should determine security-device placement? **回答** The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs. ### カード 329 **質問** What does situational awareness mean for a user? **回答** Notice the people, devices, requests, location, and context around a task before acting. ### カード 330 **質問** What does a failover test validate? **回答** That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions. ### カード 331 **質問** What is a preventive control meant to do? **回答** Stop an unwanted event before it succeeds. ### カード 332 **質問** What is just-in-time privileged access? **回答** Elevated access is granted only when needed and expires after a short approved period. ### カード 333 **質問** What safeguard should security-group automation enforce? **回答** Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point. ### カード 334 **質問** How does a reflected DDoS attack hide and multiply sources? **回答** The attacker spoofs the victim's address so many third-party services send their replies to the victim. ### カード 335 **質問** What is a security misconfiguration? **回答** An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource. ### カード 336 **質問** Why can the same vulnerability have different organizational impact? **回答** Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation. ### カード 337 **質問** What does URL scanning evaluate before a user opens a web destination? **回答** The address, redirect chain, reputation, category, and known threat indicators associated with the destination. ### カード 338 **質問** What is the board's security governance role? **回答** Provide oversight, set risk direction, and hold executives accountable. ### カード 339 **質問** What does code signing establish? **回答** That code came from the holder of the signing key and has not changed since signing. ### カード 340 **質問** How should an asset's classification affect security operations? **回答** It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact. ### カード 341 **質問** How does encryption protect data? **回答** It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data. ### カード 342 **質問** What is a secure enclave? **回答** A hardware-isolated execution area intended to protect selected code and data from the rest of the system. ### カード 343 **質問** What is business email compromise? **回答** Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release. ### カード 344 **質問** What is recovery in incident response? **回答** Restoring services safely, monitoring them, and returning to normal operations. ### カード 345 **質問** How is single loss expectancy commonly estimated? **回答** Asset value multiplied by the exposure factor. ### カード 346 **質問** What does an unknown penetration-test environment provide? **回答** The tester begins with little or no internal information, modeling an external attacker's discovery process. ### カード 347 **質問** What security boundary does a hypervisor provide? **回答** It isolates virtual machines while controlling their access to shared hardware. ### カード 348 **質問** Why does a TLS tunnel not protect a compromised endpoint? **回答** TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption. ### カード 349 **質問** Why update diagrams after an infrastructure change? **回答** Operations and incident responders need the documentation to match the deployed environment. ### カード 350 **質問** What does privacy ownership assign? **回答** An accountable role for privacy decisions, obligations, data inventory, and corrective action. ### カード 351 **質問** What does a security control gap analysis compare? **回答** The controls required for the target state with the controls currently in place. ### カード 352 **質問** Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external? **回答** External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization. ### カード 353 **質問** What is application privilege escalation? **回答** Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted. ### カード 354 **質問** What risk remains when unnecessary software is left installed? **回答** Its code, services, dependencies, and privileges add attack surface even when users do not need it. ### カード 355 **質問** What does SCAP standardize? **回答** Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information. ### カード 356 **質問** What can packet capture reveal? **回答** Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized. ### カード 357 **質問** What makes a privileged credential ephemeral? **回答** It is created for a limited task or session and expires or is destroyed automatically after that use. ### カード 358 **質問** How do a statement of work and a work order differ? **回答** A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement. ### カード 359 **質問** Why might multi-cloud improve resilience? **回答** A provider-wide failure need not stop workloads that can run independently elsewhere. ### カード 360 **質問** How can a service provider introduce a supply-chain vulnerability? **回答** Its privileged access, hosted service, or compromised integration can expose customers that depend on it. ### カード 361 **質問** What is a false positive in vulnerability scanning? **回答** A reported weakness that is not actually present or exploitable in the assessed context. ### カード 362 **質問** How do EDR and XDR differ? **回答** EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains. ### カード 363 **質問** What should onboarding and offboarding procedures coordinate? **回答** Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship. ### カード 364 **質問** How should an organization harden managed mobile devices? **回答** Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe. ### カード 365 **質問** What is a certificate signing request? **回答** A request containing a public key and subject information for a certificate authority to sign. ### カード 366 **質問** What is pretexting? **回答** Using a fabricated role or situation to make a request seem legitimate. ### カード 367 **質問** How is annualized loss expectancy commonly estimated? **回答** Single loss expectancy multiplied by annualized rate of occurrence. ### カード 368 **質問** What security consequence follows from containers sharing a kernel? **回答** A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter. ### カード 369 **質問** Where does 802.1X enforce a network admission decision? **回答** At the controlled switch port or wireless access point before normal network access is granted. ### カード 370 **質問** What should insider-threat awareness teach? **回答** Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels. ### カード 371 **質問** What access action is suitable for careful automation? **回答** Enabling or disabling a defined service or account from an approved lifecycle or incident event. ### カード 372 **質問** What is an evil twin? **回答** A rogue wireless network made to resemble a legitimate one so users connect to it. ### カード 373 **質問** Does non-human-readable data need less protection? **回答** No. Encoded or machine-readable data can carry the same sensitive meaning and impact. ### カード 374 **質問** What does authenticating a system establish? **回答** It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents. ### カード 375 **質問** What does LDAP provide in identity systems? **回答** A standard protocol for querying and modifying directory entries such as users, groups, and attributes. ### カード 376 **質問** What is a deterrent control meant to do? **回答** Discourage an attacker from attempting an unwanted action. ### カード 377 **質問** Why update procedures after changing a security control? **回答** Staff need accurate steps for operating, monitoring, and recovering the new control. ### カード 378 **質問** How does OCSP differ from a certificate revocation list? **回答** OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers. ### カード 379 **質問** What is the goal of data exfiltration? **回答** Remove data from its authorized environment without permission. ### カード 380 **質問** What is a watering-hole attack? **回答** Compromising a site frequented by the intended targets so their visits expose them. ### カード 381 **質問** How can a hardware provider introduce a supply-chain vulnerability? **回答** A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment. ### カード 382 **質問** What is application forgery? **回答** Creating or altering a request, token, or object so the application treats it as authentic. ### カード 383 **質問** How does least privilege mitigate compromise? **回答** It limits the actions and resources available to a compromised account or process. ### カード 384 **質問** What is serverless computing? **回答** A model where the provider manages servers and the customer deploys event-driven code or functions. ### カード 385 **質問** What makes an infrastructure control effective for a specific risk? **回答** Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat. ### カード 386 **質問** What does parallel recovery processing test? **回答** Whether primary and alternate environments can run together consistently before a controlled cutover. ### カード 387 **質問** Which password-authentication method does WPA3-Personal use? **回答** Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing. ### カード 388 **質問** How does data retention affect asset disposal? **回答** Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction. ### カード 389 **質問** What is a false negative in vulnerability scanning? **回答** A real weakness that the assessment fails to report. ### カード 390 **質問** What does recurring security scanning add to monitoring? **回答** Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes. ### カード 391 **質問** What should guide port selection for a secure protocol? **回答** Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths. ### カード 392 **質問** What does forensic acquisition create? **回答** A controlled, documented copy or collection of relevant evidence while preserving its integrity and context. ### カード 393 **質問** How do system owners and data owners divide security accountability? **回答** A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements. ### カード 394 **質問** What does likelihood express in risk analysis? **回答** A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable. ### カード 395 **質問** What is a memorandum of understanding? **回答** A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction. ### カード 396 **質問** What does the right to be forgotten generally require? **回答** Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies. ### カード 397 **質問** What does an audit committee oversee? **回答** Audit independence, plans, significant findings, management responses, and corrective-action follow-through. ### カード 398 **質問** What does identity interoperability require? **回答** Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems. ### カード 399 **質問** How does a bollard protect a facility? **回答** It blocks or redirects vehicles before they can reach a protected area. ### カード 400 **質問** How can hashing protect a downloaded file? **回答** A trusted digest lets the recipient detect whether the file changed. ### カード 401 **質問** What is a credential replay attack? **回答** Using captured valid credentials or tokens again without needing to discover the secret. ### カード 402 **質問** How can automation complexity create security risk? **回答** Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse. ### カード 403 **質問** What must an architecture provide when a component cannot be patched? **回答** Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired. ### カード 404 **質問** What makes remote access secure? **回答** Controlled, authenticated, encrypted access to a private resource from outside its local trusted network. ### カード 405 **質問** What should users verify before connecting removable media or a cable? **回答** That the device and connection are approved, expected, and handled under organizational policy. ### カード 406 **質問** What is a self-signed certificate? **回答** A certificate signed by its own private key rather than by a separate trusted issuer. ### カード 407 **質問** What is brand impersonation? **回答** Using a trusted organization's identity or look to deceive people. ### カード 408 **質問** What characterizes a conservative risk appetite? **回答** A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity. ### カード 409 **質問** What should a managed mobile device verify before using Wi-Fi? **回答** The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic. ### カード 410 **質問** What is a zero-day vulnerability? **回答** A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw. ### カード 411 **質問** What does verification confirm after vulnerability remediation? **回答** Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope. ### カード 412 **質問** What is user and entity behavior analytics? **回答** Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services. ### カード 413 **質問** What does a physical security policy establish? **回答** Required protection for facilities, people, equipment, entry, monitoring, and response to physical events. ### カード 414 **質問** What does a UPS provide? **回答** Immediate short-term power and power conditioning while systems shut down or alternate power starts. ### カード 415 **質問** What is a nondisclosure agreement? **回答** A contract restricting use and disclosure of defined confidential information. ### カード 416 **質問** What should be checked before assigning a user permission? **回答** The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused. ### カード 417 **質問** How does espionage differ from ordinary theft? **回答** It seeks confidential intelligence for strategic advantage, often while remaining hidden. ### カード 418 **質問** What is password spraying? **回答** Trying a small set of common passwords across many accounts to avoid lockouts. ### カード 419 **質問** What is the purpose of system isolation during an incident? **回答** Stop harmful communication while preserving the system for response and investigation. ### カード 420 **質問** What is a security benchmark? **回答** A documented set of recommended configuration checks for a platform or product. ### カード 421 **質問** Which metadata fields give a log record investigative context? **回答** Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID. ### カード 422 **質問** What does an access-control vestibule prevent? **回答** It limits tailgating by allowing controlled passage through one door at a time. ### カード 423 **質問** What is version control's security value for configuration? **回答** It preserves attributable history and enables review or rollback of changes. ### カード 424 **質問** Why use both internal and external compliance monitoring? **回答** Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny. ### カード 425 **質問** What distinguishes on-premises architecture? **回答** The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties. ### カード 426 **質問** What risk can split tunneling add to a VPN? **回答** The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection. ### カード 427 **質問** What is a certificate root of trust? **回答** A trusted root certificate or key from which a client validates a certificate chain. ### カード 428 **質問** What is typosquatting? **回答** Registering a look-alike domain based on common typing errors or visual similarity. ### カード 429 **質問** What is root-cause analysis? **回答** Identifying the underlying conditions that allowed an incident, not just its visible symptoms. ### カード 430 **質問** What is risk tolerance? **回答** The acceptable variation or boundary around a specific objective or risk area. ### カード 431 **質問** What is a security self-assessment? **回答** A structured internal evaluation in which the organization measures its own controls against selected criteria. ### カード 432 **質問** What does data masking change? **回答** It replaces sensitive values with altered but usable representations, often preserving format for testing or display. ### カード 433 **質問** How do wireless authentication protocols let clients prove identity securely? **回答** They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange. ### カード 434 **質問** Why reconcile inventory with network discovery? **回答** Differences expose missing records, retired systems, or unauthorized devices. ### カード 435 **質問** Why does sideloading raise mobile risk? **回答** It can bypass store review, signing policy, and managed application controls. ### カード 436 **質問** What does an information-sharing organization add to vulnerability management? **回答** Sector or community intelligence about relevant threats, incidents, and defensive action. ### カード 437 **質問** What does a web-filter block rule specify? **回答** The URL, domain, category, reputation, content, user, or context that should prevent a web request. ### カード 438 **質問** How do data custodians and data stewards differ? **回答** Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction. ### カード 439 **質問** What is a brute-force password attack? **回答** Systematically trying many candidate secrets against an account or protected value. ### カード 440 **質問** What is a compensating control? **回答** An alternative safeguard used when the preferred control is impractical or unavailable. ### カード 441 **質問** How can location act as an authentication factor? **回答** A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone. ### カード 442 **質問** Why must security automation remain supportable? **回答** Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change. ### カード 443 **質問** What does a standby generator provide? **回答** Longer-duration power during a utility outage, after a startup delay. ### カード 444 **質問** What makes an architecture air-gapped? **回答** It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary. ### カード 445 **質問** What is a software-defined WAN? **回答** A centrally managed overlay that selects wide-area paths by policy across underlying network links. ### カード 446 **質問** What password-management behavior should awareness training reinforce? **回答** Use unique long passwords through an approved manager and report suspected compromise promptly. ### カード 447 **質問** What security value does fencing provide? **回答** It defines and delays entry across a physical perimeter. ### カード 448 **質問** What is a wildcard certificate? **回答** A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain. ### カード 449 **質問** How does misinformation differ from disinformation? **回答** Misinformation is false regardless of intent; disinformation is deliberately false or misleading. ### カード 450 **質問** What is a risk threshold? **回答** A defined level that triggers escalation, treatment, or another required response. ### カード 451 **質問** What does a vendor penetration test contribute to assessment? **回答** Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope. ### カード 452 **質問** What is the objective of a service-disruption attack? **回答** Make a system or business function unavailable or unreliable. ### カード 453 **質問** What is directory traversal? **回答** Manipulating a file path to reach files outside the directory the application intended to expose. ### カード 454 **質問** Why decommission an unsupported system? **回答** Removing it eliminates an exposure that can no longer be patched or securely maintained. ### カード 455 **質問** Why archive security-monitoring data? **回答** To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system. ### カード 456 **質問** What role does RADIUS commonly play in enterprise Wi-Fi? **回答** It centralizes authentication, authorization information, and accounting for network access. ### カード 457 **質問** Why separate the requester and approver of a high-risk change? **回答** To reduce error, fraud, and unilateral unauthorized modification. ### カード 458 **質問** Why can a jailbroken device violate a security baseline? **回答** It weakens platform isolation and allows unapproved privileged changes. ### カード 459 **質問** When is tokenization especially useful? **回答** When a system needs a surrogate value without retaining the original sensitive value in that workflow. ### カード 460 **質問** Why can dark-web intelligence affect vulnerability priority? **回答** Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated. ### カード 461 **質問** What firewall policy should govern traffic from a screened subnet to internal systems? **回答** Deny it by default and allow only explicitly required flows. ### カード 462 **質問** What does SAML commonly carry? **回答** XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity. ### カード 463 **質問** What does a security governance committee do? **回答** It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter. ### カード 464 **質問** How can global privacy requirements affect one data process? **回答** A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located. ### カード 465 **質問** What characterizes an IoT device? **回答** It combines sensing or actuation with network connectivity, often under tight resource and update constraints. ### カード 466 **質問** What is a unified threat management appliance? **回答** One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection. ### カード 467 **質問** What does a hardware security module provide? **回答** A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys. ### カード 468 **質問** A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains? **回答** Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client. ### カード 469 **質問** What is a tabletop exercise? **回答** A discussion-based walkthrough of a scenario to test decisions, roles, and procedures. ### カード 470 **質問** What does a risk exemption authorize? **回答** A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration. ### カード 471 **質問** What is a regulatory examination? **回答** An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements. ### カード 472 **質問** What does physical video surveillance primarily provide? **回答** Detection and evidence of activity in monitored areas. ### カード 473 **質問** What is a birthday attack against a hash? **回答** Using collision probability to find any two matching digests much faster than targeting one exact preimage. ### カード 474 **質問** Why keep backups both onsite and offsite? **回答** Onsite copies support fast recovery, while offsite copies survive a site-wide loss. ### カード 475 **質問** How does technical debt affect security automation? **回答** Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely. ### カード 476 **質問** What should switch hardening restrict first? **回答** Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration. ### カード 477 **質問** What should happen when an asset changes owners? **回答** Inventory, access, support responsibility, and data handling should be updated. ### カード 478 **質問** What does evidence of a vendor's internal audits contribute? **回答** It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure. ### カード 479 **質問** What is identity attestation? **回答** Evidence that an identity, device, authenticator, or claim has been verified by a trusted process. ### カード 480 **質問** Why can standard enterprise patching be unsafe for an RTOS device? **回答** A change can disrupt timing guarantees or certified operational behavior. ### カード 481 **質問** What is secure access service edge? **回答** A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources. ### カード 482 **質問** What social-engineering habit should awareness training reinforce? **回答** Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity. ### カード 483 **質問** How can a software provider introduce a supply-chain vulnerability? **回答** A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers. ### カード 484 **質問** Why include internet exposure in remediation priority? **回答** A reachable vulnerable service usually has more attack opportunity than an isolated one. ### カード 485 **質問** What does a mail gateway inspect? **回答** Inbound and outbound email for threats, policy violations, spoofing, and sensitive data. ### カード 486 **質問** What is a data controller? **回答** The entity that determines why and how personal data is processed. ### カード 487 **質問** How does blackmail motivate a cyberattack? **回答** The attacker threatens disclosure or harm unless the victim complies. ### カード 488 **質問** What is a downgrade attack? **回答** Forcing parties to use an older or weaker protocol or security mode. ### カード 489 **質問** How does encryption mitigate data exposure? **回答** It makes captured data unreadable without the required key. ### カード 490 **質問** How do network and web vulnerability scanners differ? **回答** Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses. ### カード 491 **質問** How can vulnerability-scan data support an investigation? **回答** It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline. ### カード 492 **質問** What is key escrow? **回答** Controlled storage of a recoverable copy of a cryptographic key by an authorized party. ### カード 493 **質問** Which human vector commonly uses a fake sign-in page to harvest credentials? **回答** Phishing; the message sends the target to an imitation service that captures the submitted credentials. ### カード 494 **質問** What is risk avoidance? **回答** Stopping or not starting the activity that creates the risk. ### カード 495 **質問** What is data obfuscation? **回答** Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy. ### カード 496 **質問** What is a directive control? **回答** A safeguard that tells people what behavior or action is required. ### カード 497 **質問** What does a security guard add that a camera cannot? **回答** Human judgment and an immediate physical response. ### カード 498 **質問** Why define restricted activities in change management? **回答** High-risk actions can then require extra authorization, separation of duties, or a prohibited window. ### カード 499 **質問** What contractual impact can noncompliance create? **回答** It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach. ### カード 500 **質問** What should determine backup frequency? **回答** The recovery point objective, data-change rate, business impact, and available replication or storage capacity. ### カード 501 **質問** What should router hardening protect? **回答** Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy. ### カード 502 **質問** What problem does OAuth 2.0 address? **回答** Delegated authorization: a client obtains limited access to a resource without receiving the user's password. ### カード 503 **質問** What does SCADA do? **回答** It provides supervisory monitoring and control across distributed industrial equipment. ### カード 504 **質問** How does a Layer 3/4 firewall rule differ from a Layer 7 rule? **回答** Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions. ### カード 505 **質問** What distinguishes a computer virus? **回答** It attaches to a host file or program and spreads when that infected host executes or is shared. ### カード 506 **質問** What does a key management system coordinate? **回答** Secure key creation, storage, access, rotation, revocation, recovery, and destruction. ### カード 507 **質問** How can an unsecure wired network expose traffic? **回答** An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak. ### カード 508 **質問** Why is vulnerable device firmware hard to remediate? **回答** Firmware updates may be rare, vendor-dependent, or impossible after support ends. ### カード 509 **質問** What does patching change in vulnerability remediation? **回答** It installs the vendor's corrected code or configuration to remove the underlying software weakness. ### カード 510 **質問** What does DMARC add to SPF and DKIM? **回答** Domain alignment, receiver policy, and reporting for messages claiming the visible From domain. ### カード 511 **質問** How does automation improve security efficiency? **回答** It performs repeatable actions quickly and consistently while reducing manual handoffs and rework. ### カード 512 **質問** What is a simulation exercise? **回答** A more realistic practice in which participants respond to injected events using operational processes. ### カード 513 **質問** What is a data processor? **回答** An entity that processes personal data on behalf of a controller. ### カード 514 **質問** What is risk mitigation? **回答** Reducing likelihood, impact, or both through controls or process changes. ### カード 515 **質問** Why monitor a vendor after onboarding? **回答** Security posture, ownership, services, incidents, and dependencies can change. ### カード 516 **質問** What does a physical penetration test assess? **回答** Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules. ### カード 517 **質問** Why use access badges at a facility? **回答** To associate entry attempts with authorized identities and enforce access rules. ### カード 518 **質問** How does permission restriction protect data? **回答** Only authorized identities receive the actions and scope their roles require. ### カード 519 **質問** What is the usual objective of ransomware extortion? **回答** Force payment by denying access, threatening disclosure, or both. ### カード 520 **質問** What does impossible travel indicate? **回答** One identity appears to authenticate from distant locations too quickly for legitimate travel. ### カード 521 **質問** What is configuration enforcement? **回答** Continuously applying or restoring approved settings so systems do not remain in an insecure state. ### カード 522 **質問** What does a web vulnerability scanner inspect? **回答** Running web behavior for issues such as unsafe input handling and insecure configuration. ### カード 523 **質問** How does cost affect an architecture choice? **回答** It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life. ### カード 524 **質問** What does EAP provide with 802.1X? **回答** A framework for carrying an authentication method between the supplicant and authentication infrastructure. ### カード 525 **質問** What should operational-security training help users protect? **回答** Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence. ### カード 526 **質問** What does a time-of-day access rule do? **回答** Allows or denies a requested action according to an approved schedule. ### カード 527 **質問** What should cloud infrastructure hardening establish? **回答** Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift. ### カード 528 **質問** What should an asset owner ensure during offboarding? **回答** Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process. ### カード 529 **質問** Why encrypt backups? **回答** Backup media and transfers can expose the same sensitive data as production systems. ### カード 530 **質問** What is steganography? **回答** Hiding the existence of data inside another medium rather than merely encrypting its contents. ### カード 531 **質問** Which human vector uses a fabricated authority role to justify a sensitive request? **回答** Pretexting; the attacker invents a credible role and situation to make the request seem legitimate. ### カード 532 **質問** Why does risk transfer not remove accountability? **回答** The organization can retain legal, reputational, operational, and oversight consequences. ### カード 533 **質問** Why validate a change after deployment? **回答** To confirm the intended result occurred without introducing unacceptable side effects. ### カード 534 **質問** What makes end-of-life hardware a security vulnerability? **回答** The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path. ### カード 535 **質問** What does an audit add to remediation validation? **回答** Independent evidence that the approved fix, process, and documentation were completed and remain effective. ### カード 536 **質問** Why can SPF pass while a message still impersonates a brand? **回答** SPF checks the envelope domain, which may differ from the visible From domain. ### カード 537 **質問** What role can a government entity have in security governance? **回答** It can establish, enforce, or oversee legal and regulatory requirements within its authority. ### カード 538 **質問** How do data inventory and retention support privacy governance? **回答** The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized. ### カード 539 **質問** What can concurrent sessions from distant regions indicate? **回答** A stolen account or shared credential, subject to VPN and proxy context. ### カード 540 **質問** What does supply-chain analysis examine? **回答** Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service. ### カード 541 **質問** What is the purpose of facility lighting as a control? **回答** Deter covert activity and improve observation of people and areas. ### カード 542 **質問** What architecture quality keeps a service usable during component failure? **回答** Availability. ### カード 543 **質問** When is fail-open behavior preferable to fail-closed behavior? **回答** When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision. ### カード 544 **質問** Which control function does a login-failure alert provide? **回答** Detection; it reveals suspicious authentication activity. ### カード 545 **質問** What does a biometric MFA implementation verify? **回答** A measured physical or behavioral characteristic presented by the user, matched against an enrolled template. ### カード 546 **質問** How can automation enforce a security baseline? **回答** It compares realized settings with the approved state and reports or corrects unauthorized drift. ### カード 547 **質問** How do wireless cryptographic protocols protect network traffic? **回答** They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used. ### カード 548 **質問** Why segment sensitive data stores? **回答** It limits reachable paths and separates them from lower-trust workloads. ### カード 549 **質問** What must remain secret in an asymmetric key pair? **回答** The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use. ### カード 550 **質問** How can a supplier become a supply-chain attack vector? **回答** A compromised material, component, credential, or delivery process can weaken products before they reach the organization. ### カード 551 **質問** What is e-discovery? **回答** Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter. ### カード 552 **質問** What characterizes a neutral risk appetite? **回答** A balanced willingness to accept uncertainty when expected value and controls justify the exposure. ### カード 553 **質問** What is passive reconnaissance? **回答** Gathering information without directly interacting with the target's systems. ### カード 554 **質問** What does a philosophical motive mean for a threat actor? **回答** The actor acts to advance a belief or moral position rather than primarily for money. ### カード 555 **質問** What does unexpected resource consumption indicate? **回答** Possible malware, denial of service, cryptomining, or a malfunction that needs investigation. ### カード 556 **質問** What does a host-based intrusion prevention system do? **回答** It monitors activity on one host and can block behavior that matches exploit or attack rules. ### カード 557 **質問** How does agent-based monitoring differ from agentless monitoring? **回答** An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility. ### カード 558 **質問** What can network logs contribute to an investigation? **回答** Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment. ### カード 559 **質問** What is the purpose of a backup restore test? **回答** Demonstrate under tested conditions that required data and systems can be recovered within expectations. ### カード 560 **質問** Why can obsolete hardware become a security risk? **回答** It may lack supported firmware, modern protections, or replacement parts. ### カード 561 **質問** What does rescanning confirm after remediation? **回答** Whether the scanner can still detect the original finding on the affected asset. ### カード 562 **質問** What should a secure transport method provide? **回答** Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic. ### カード 563 **質問** How can law affect security governance? **回答** It can impose mandatory duties based on jurisdiction, data, industry, or activity. ### カード 564 **質問** What does resilience mean for a security architecture? **回答** The ability to withstand disruption, adapt, and recover while preserving essential functions. ### カード 565 **質問** Why minimize an infrastructure's attack surface? **回答** Fewer exposed services and paths leave fewer opportunities for exploitation. ### カード 566 **質問** What does executing a security-awareness program require? **回答** Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes. ### カード 567 **質問** What does an infrared security sensor detect? **回答** A change in infrared energy, often the heat pattern created by a person moving through its field of view. ### カード 568 **質問** What is a knowledge factor? **回答** Something the claimant knows, such as a password. ### カード 569 **質問** Why review allow-list and deny-list impact before a change? **回答** Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies. ### カード 570 **質問** What does partition-level encryption protect? **回答** One selected disk partition, leaving other partitions outside that encryption boundary. ### カード 571 **質問** How can instant messaging deliver a security attack? **回答** It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel. ### カード 572 **質問** What can repeated blocked-content events indicate? **回答** Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources. ### カード 573 **質問** What should a server-hardening baseline reduce? **回答** Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change. ### カード 574 **質問** When is physical media destruction appropriate? **回答** When reuse is unnecessary or sanitization cannot provide adequate assurance. ### カード 575 **質問** What is mean time to repair? **回答** The average time required to restore a failed component or service. ### カード 576 **質問** Why disclose conflicts of interest during vendor selection? **回答** A personal or financial relationship can bias evaluation away from the organization's requirements. ### カード 577 **質問** What is a fine for noncompliance? **回答** A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement. ### カード 578 **質問** What does a public data classification authorize? **回答** Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply. ### カード 579 **質問** What security benefit comes from standard infrastructure configurations? **回答** They reduce variation, make review repeatable, and let the same approved controls be applied across resources. ### カード 580 **質問** How does horizontal scaling increase capacity? **回答** It adds more service instances and distributes work among them. ### カード 581 **質問** Why can added connectivity weaken segmentation? **回答** Each allowed path can become a route for lateral movement or data escape. ### カード 582 **質問** What coding practice is central to preventing SQL injection? **回答** Use parameterized queries so untrusted values remain data rather than executable query syntax. ### カード 583 **質問** When is a compensating control appropriate for a vulnerability? **回答** When timely removal or patching is infeasible and another control can reduce the risk. ### カード 584 **質問** How does agent-based web filtering enforce policy? **回答** Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy. ### カード 585 **質問** How can regulation differ from an internal policy? **回答** Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties. ### カード 586 **質問** What is a storage snapshot? **回答** A point-in-time representation of data or system state, whose independence depends on how it is stored. ### カード 587 **質問** What does password age measure? **回答** How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change. ### カード 588 **質問** What does an ethical motive mean in vulnerability research? **回答** The researcher intends to improve security, typically through authorized testing and responsible disclosure. ### カード 589 **質問** What can missing security logs indicate? **回答** Logging failure, tampering, retention misconfiguration, or an inactive source. ### カード 590 **質問** Why disable unused ports and protocols? **回答** They expose unnecessary communication paths and code that attackers can reach. ### カード 591 **質問** What does antivirus contribute to monitoring? **回答** It scans files, memory, or behavior and reports suspected malicious code. ### カード 592 **質問** What is a honeypot? **回答** A decoy system or service designed to attract and observe malicious activity. ### カード 593 **質問** What does file-level encryption protect? **回答** Selected files independently of whether the rest of the disk or volume is encrypted. ### カード 594 **質問** How can SMS deliver a security attack? **回答** A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel. ### カード 595 **質問** What happens during incident analysis? **回答** Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved. ### カード 596 **質問** What is mean time between failures? **回答** The average operating time between repairable failures. ### カード 597 **質問** What is active reconnaissance? **回答** Probing or interacting with target systems to discover services and behavior. ### カード 598 **質問** What constraint should guide ICS or SCADA hardening? **回答** Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled. ### カード 599 **質問** Which control function does restoring a clean system image provide? **回答** Correction; it returns the system to a known-good state. ### カード 600 **質問** What does responsiveness mean in an architecture decision? **回答** How quickly the system and its operators can adapt to demand, failure, or attack. ### カード 601 **質問** How does out-of-band access strengthen remote administration? **回答** It uses a management path separate from production traffic, preserving controlled access during an outage or compromise. ### カード 602 **質問** What makes user behavior unexpected? **回答** It differs materially from the person's normal role, timing, location, resource use, or established work pattern. ### カード 603 **質問** What is a work order? **回答** A document authorizing a defined unit of work under an existing agreement. ### カード 604 **質問** What can out-of-cycle logging indicate? **回答** Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job. ### カード 605 **質問** Why update a standard operating procedure after a change? **回答** It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution. ### カード 606 **質問** What coding practice limits cross-site scripting? **回答** Context-appropriate output encoding, supported by safe templating and input handling. ### カード 607 **質問** What does a restricted data classification indicate? **回答** Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm. ### カード 608 **質問** How does a bug bounty support responsible disclosure? **回答** It defines eligible systems, rules, reporting, and possible rewards for external researchers. ### カード 609 **質問** What does web-filter content categorization provide? **回答** A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently. ### カード 610 **質問** How do hard and soft authentication tokens differ? **回答** A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device. ### カード 611 **質問** How can industry requirements affect security governance? **回答** Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls. ### カード 612 **質問** How can noncompliance cause loss of a license? **回答** An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work. ### カード 613 **質問** What does volume-level encryption protect? **回答** All data within a selected logical storage volume. ### カード 614 **質問** How can impersonation exploit familiarity? **回答** The attacker imitates a known person or routine communication style so the request receives less scrutiny. ### カード 615 **質問** How does RTO guide recovery design? **回答** It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices. ### カード 616 **質問** What is a honeynet? **回答** A network of decoy systems used to study or divert attackers. ### カード 617 **質問** What does backup replication provide? **回答** Additional synchronized or copied recovery data in another system or location. ### カード 618 **質問** What lets automation scale securely? **回答** Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource. ### カード 619 **質問** Why monitor a hardened computing resource continuously? **回答** New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed. ### カード 620 **質問** Why keep a certificate of destruction? **回答** It documents that a disposal provider handled specified media under the agreed process. ### カード 621 **質問** Why consider patch availability before selecting a platform? **回答** Unsupported or difficult-to-update components accumulate known exposure. ### カード 622 **質問** Why should remote administration use an encrypted, authenticated protocol? **回答** It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint. ### カード 623 **質問** How can revenge motivate an insider incident? **回答** A disgruntled person may damage systems or disclose data to punish the organization. ### カード 624 **質問** What is a published or documented indicator of malicious activity? **回答** A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity. ### カード 625 **質問** Why monitor a system more closely when a mitigation exception is accepted? **回答** Monitoring can reveal exploitation or control failure while the documented exception remains open. ### カード 626 **質問** What is an SNMP trap? **回答** An unsolicited device notification sent to a management system when a configured event occurs. ### カード 627 **質問** How can an automated report support an investigation? **回答** It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline. ### カード 628 **質問** What is a security key? **回答** A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin. ### カード 629 **質問** What does database-level encryption protect? **回答** A database or selected database structures through controls managed at the database layer. ### カード 630 **質問** How does brand impersonation exploit trust? **回答** It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate. ### カード 631 **質問** What browser-side impact can a cross-site scripting vulnerability create? **回答** It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session. ### カード 632 **質問** How can a system or process audit identify vulnerabilities? **回答** It compares evidence with required configuration and procedure to reveal control gaps. ### カード 633 **質問** What security role can Group Policy provide? **回答** Centralized Windows configuration of account, application, audit, and system security settings. ### カード 634 **質問** What should incident-response training prepare people to do? **回答** Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions. ### カード 635 **質問** Why must governance track local or regional requirements? **回答** They may impose location-specific duties that differ from national, global, industry, or contractual rules. ### カード 636 **質問** How can a dependency become a useful key risk indicator? **回答** A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing. ### カード 637 **質問** What is a business partners agreement? **回答** An agreement defining how business partners will work together, including responsibilities and security or data-handling terms. ### カード 638 **質問** What makes an audit regulatory? **回答** It evaluates compliance with requirements established or enforced by a government or delegated authority. ### カード 639 **質問** What is a honeyfile? **回答** A decoy file whose access can reveal unauthorized activity. ### カード 640 **質問** Why does legal information require explicit protection? **回答** It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk. ### カード 641 **質問** Which indicator can mass file renaming and encryption produce? **回答** Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them. ### カード 642 **質問** What remains with an organization after transferring architecture risk? **回答** Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences. ### カード 643 **質問** When does local console placement provide useful administrative access? **回答** When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path. ### カード 644 **質問** What makes a harmful user action unintentional? **回答** The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse. ### カード 645 **質問** How should an organization harden workstations? **回答** Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall. ### カード 646 **質問** What is journaling in recovery? **回答** Recording ordered changes so data can be replayed or restored to a consistent point. ### カード 647 **質問** What downtime must a change plan account for? **回答** The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems. ### カード 648 **質問** Why must a privacy program map local or regional law to data flows? **回答** The applicable duties can change with the location of the person, organization, processing, or stored data. ### カード 649 **質問** Why combine independent preventive controls at different layers? **回答** A failure at one layer does not automatically let the same attack succeed at the next layer. ### カード 650 **質問** What is passwordless authentication? **回答** A flow that does not require the user to enter a memorized password, often using public-key credentials. ### カード 651 **質問** How can automation improve security reaction time? **回答** It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs. ### カード 652 **質問** What does record-level encryption protect? **回答** Individual records or fields, allowing finer protection than encrypting the entire database. ### カード 653 **質問** How can business email compromise misuse urgency? **回答** It pressures an employee to bypass normal verification for a payment, credential, or data request. ### カード 654 **質問** What does impact measure in risk analysis? **回答** The consequence to objectives, such as financial, operational, safety, legal, or reputational harm. ### カード 655 **質問** What makes cyber activity part of warfare? **回答** It supports military or state conflict objectives such as disruption, intelligence, or influence. ### カード 656 **質問** Which indicator can a newly created privileged account produce outside the normal change window? **回答** Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled. ### カード 657 **質問** How can configuration enforcement validate a deployed mitigation? **回答** It compares the realized settings with the approved state and corrects or reports drift. ### カード 658 **質問** How does validating an alert improve alert tuning? **回答** The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence. ### カード 659 **質問** What data-layer impact can a SQL injection vulnerability create? **回答** It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations. ### カード 660 **質問** What environmental variables can change vulnerability priority? **回答** Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment. ### カード 661 **質問** What security role does SELinux provide? **回答** Mandatory access controls that confine processes according to centrally defined policy. ### カード 662 **質問** Why review governance documents periodically? **回答** Business, technology, threats, and external obligations change. ### カード 663 **質問** Why evaluate power requirements for a system design? **回答** Power capacity and redundancy constrain availability and recovery. ### カード 664 **質問** When is IPsec a better tunnel choice than TLS? **回答** Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection. ### カード 665 **質問** What is a honeytoken? **回答** A fake credential or data element that generates a high-confidence alert when used. ### カード 666 **質問** What should embedded-system hardening prioritize? **回答** Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path. ### カード 667 **質問** Why must sanitization address data remanence? **回答** Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk. ### カード 668 **質問** Why require rules of engagement for vendor testing? **回答** Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity. ### カード 669 **質問** What does a private data classification indicate? **回答** The information concerns an individual or limited internal audience and should not be exposed publicly. ### カード 670 **質問** What does a tabletop recovery exercise test? **回答** Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps. ### カード 671 **質問** Why prevent password reuse? **回答** One compromised password should not unlock other accounts or services. ### カード 672 **質問** Which malicious-activity indicator is unexplained sustained CPU or memory use? **回答** Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use. ### カード 673 **質問** What does transport encryption protect? **回答** It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints. ### カード 674 **質問** How can a voice call become an attack vector? **回答** An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions. ### カード 675 **質問** What should a digital-forensics report document? **回答** The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion. ### カード 676 **質問** What tradeoff comes with an expansionary risk appetite? **回答** It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit. ### カード 677 **質問** What does a known penetration-test environment provide? **回答** The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing. ### カード 678 **質問** Why evaluate compute requirements before deployment? **回答** Insufficient resources can cause failure, while excessive resources increase cost and attack surface. ### カード 679 **質問** Why place sensors at network choke points? **回答** They can observe traffic crossing important trust boundaries. ### カード 680 **質問** What should hybrid or remote-work security training emphasize? **回答** Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments. ### カード 681 **質問** Why plan an application restart separately from a service restart? **回答** The application may need its own state handling, user coordination, health checks, and rollback point. ### カード 682 **質問** What is a cryptographic vulnerability? **回答** A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection. ### カード 683 **質問** Why report findings by asset owner? **回答** Owners need clear accountability and a prioritized remediation queue. ### カード 684 **質問** What should guide selection of a secure protocol? **回答** The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints. ### カード 685 **質問** How do centralized and decentralized governance structures differ? **回答** Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency. ### カード 686 **質問** How does privacy-aware design limit data retention? **回答** It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle. ### カード 687 **質問** What does a pressure security sensor detect? **回答** Force or weight applied to a protected surface, such as a floor mat or fence line. ### カード 688 **質問** What automation costs should a security team plan for? **回答** Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow. ### カード 689 **質問** What should RTOS hardening preserve while reducing attack surface? **回答** Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled. ### カード 690 **質問** What is the goal of disruption-for-chaos activity? **回答** Create instability or damage itself rather than pursue a clear financial or intelligence return. ### カード 691 **質問** Which indicator can repeated password guessing produce? **回答** Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy. ### カード 692 **質問** How does removing unnecessary software harden a system? **回答** It eliminates code, services, dependencies, and privileges that an attacker could otherwise target. ### カード 693 **質問** What does NetFlow provide? **回答** Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts. ### カード 694 **質問** How can a dashboard support an investigation? **回答** It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope. ### カード 695 **質問** When should a password be expired? **回答** When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard. ### カード 696 **質問** Why does cryptographic key length matter? **回答** It affects the work required to search the key space, although security also depends on the algorithm and implementation. ### カード 697 **質問** How can an unsecure Bluetooth connection become an attack vector? **回答** Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands. ### カード 698 **質問** What is a key risk indicator? **回答** A metric that signals changing exposure or increasing likelihood of an adverse outcome. ### カード 699 **質問** What should vendor monitoring verify when a contract ends? **回答** Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved. ### カード 700 **質問** What does a sensitive data classification indicate? **回答** The information needs safeguards because unauthorized access, change, or loss could cause harm. ### カード 701 **質問** What does software-defined networking separate? **回答** The control plane that decides traffic behavior from the data plane that forwards traffic. ### カード 702 **質問** Where should a web application firewall be placed? **回答** In the path of web requests before they reach the protected application. ### カード 703 **質問** What does a simulated recovery exercise test? **回答** Participants perform realistic response actions in a controlled environment without disrupting production. ### カード 704 **質問** How can a team verify that a detective control is effective? **回答** Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence. ### カード 705 **質問** How should defenders apply a published or documented indicator to telemetry and validate it before escalating? **回答** Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating. ### カード 706 **質問** What makes a vulnerability cloud-specific? **回答** It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior. ### カード 707 **質問** How can insurance respond to vulnerability risk? **回答** It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties. ### カード 708 **質問** How does reputation improve web filtering? **回答** It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk. ### カード 709 **質問** What does an encryption policy establish? **回答** Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties. ### カード 710 **質問** How does a microwave security sensor detect movement? **回答** It emits microwave energy and detects changes in the reflected signal caused by motion. ### カード 711 **質問** What should IoT-device hardening change before deployment? **回答** Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access. ### カード 712 **質問** Why track software licenses as assets? **回答** License ownership, permitted use, updates, and end-of-support status affect compliance and risk. ### カード 713 **質問** What does a password manager improve? **回答** It can generate and store unique long passwords so users do not memorize or reuse them. ### カード 714 **質問** What makes a ledger open and public? **回答** Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries. ### カード 715 **質問** What should a payment-change request trigger? **回答** Independent verification through a known channel before any account or payment detail is changed. ### カード 716 **質問** What does preserving digital evidence require? **回答** Protecting its integrity, context, access history, and availability from collection through final disposition. ### カード 717 **質問** What should a risk report tell decision-makers? **回答** The risk, uncertainty, business impact, owner, treatment, trend, and decision required. ### カード 718 **質問** What should an external assessment report provide? **回答** Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions. ### カード 719 **質問** What is a centralized design's main resilience risk? **回答** A central dependency can become a bottleneck or single point of failure. ### カード 720 **質問** What does mutual TLS add to a TLS-protected service connection? **回答** It adds client authentication, commonly with a client certificate, so the client and server authenticate each other. ### カード 721 **質問** What should recurring security-awareness reporting show? **回答** Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions. ### カード 722 **質問** Why do legacy applications require extra change planning? **回答** They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely. ### カード 723 **質問** How do a data controller and a data processor differ? **回答** A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf. ### カード 724 **質問** How can orchestration become a single point of failure? **回答** Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them. ### カード 725 **質問** Why should defenses account for a threat actor's sophistication and capability? **回答** Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them. ### カード 726 **質問** How does an injection attack make an application execute unintended instructions? **回答** It sends crafted input that an interpreter treats as code or commands instead of data. ### カード 727 **質問** What does a host-based firewall control? **回答** Inbound and outbound network traffic for one endpoint according to local rules. ### カード 728 **質問** Why revise alerting after an incident? **回答** The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert. ### カード 729 **質問** Why include security duties in procurement criteria? **回答** Security is easier to require before selection than to retrofit after dependency and data transfer begin. ### カード 730 **質問** What does a critical data classification indicate? **回答** The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls. ### カード 731 **質問** What infrastructure capacity must support failover? **回答** The alternate site, network, power, cooling, and facility resources needed to carry the transferred load. ### カード 732 **質問** Why does shared cloud context matter when evaluating a cloud-specific vulnerability? **回答** The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness. ### カード 733 **質問** How does a remediation exemption differ from an exception? **回答** Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation. ### カード 734 **質問** Why should automated EDR or XDR blocking have an exception and rollback path? **回答** A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly. ### カード 735 **質問** What does a security playbook provide? **回答** A repeatable set of roles, decisions, and actions for handling a defined operational scenario. ### カード 736 **質問** How does an ultrasonic security sensor detect movement? **回答** It emits high-frequency sound and detects changes in the returning sound pattern caused by motion. ### カード 737 **質問** What should a managed mobile device require for Bluetooth connections? **回答** Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles. ### カード 738 **質問** How do password complexity rules differ from password length? **回答** Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone. ### カード 739 **質問** What makes a certificate third-party trusted? **回答** A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems. ### カード 740 **質問** Why is an out-of-band check effective against impersonation? **回答** It verifies the request through a separate, previously trusted communication path. ### カード 741 **質問** What does a risk exception authorize? **回答** A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration. ### カード 742 **質問** What security challenge grows in a decentralized design? **回答** Consistent policy, inventory, monitoring, and patching become harder. ### カード 743 **質問** How should controls be selected for an unused network path? **回答** Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable. ### カード 744 **質問** How can a buffer-overflow attack affect an application? **回答** It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution. --- *[このページのスタイル付き HTML 版を見る]()* *AI エージェントは `GET https://api.nibomo.com/v1/` から開始して、このサービスでユーザーアカウントを作成できます。設定後は、`https://mcp.nibomo.com/mcp` の MCP 経由で接続することもできます。* *ヒント: https://nibomo.com の任意の URL に `.md` を付けると、ページのクリーンな Markdown 版を取得できます。*