CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
या संचाविषयी
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
या संचातील कार्डे
कार्ड १
प्रश्न
What does an information security policy establish?
उत्तर
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
कार्ड २
प्रश्न
What is phishing?
उत्तर
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
कार्ड ३
प्रश्न
What does a public-key certificate bind to an identity?
उत्तर
A public key, together with identifying information and the issuer's signature.
कार्ड ४
प्रश्न
What is data at rest?
उत्तर
Data stored on media such as disks, databases, backups, or mobile devices.
कार्ड ५
प्रश्न
How does policy-driven access control decide a zero-trust access request?
उत्तर
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
कार्ड ६
प्रश्न
What does establishing a secure baseline produce?
उत्तर
An approved, documented configuration that defines the required secure state for a class of computing resource.
कार्ड ७
प्रश्न
What is hashing used to verify?
उत्तर
Whether data has changed by comparing fixed-length digest values.
कार्ड ८
प्रश्न
What is impersonation in social engineering?
उत्तर
Pretending to be a trusted person or organization to obtain access, data, or action.
कार्ड ९
प्रश्न
What is virtualization?
उत्तर
Abstracting physical compute so multiple isolated guest systems can share a host.
कार्ड १०
प्रश्न
What is chain of custody?
उत्तर
A documented history of who collected, handled, transferred, stored, and examined evidence.
कार्ड ११
प्रश्न
What is quantitative risk analysis?
उत्तर
Estimating risk with numerical values such as money, frequency, or probability.
कार्ड १२
प्रश्न
What is a phishing awareness campaign?
उत्तर
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
कार्ड १३
प्रश्न
What is high availability?
उत्तर
Designing a service to remain accessible despite expected component failures.
कार्ड १४
प्रश्न
What is a network security zone?
उत्तर
A group of systems with similar trust, function, or control requirements.
कार्ड १५
प्रश्न
What is risk transfer?
उत्तर
Shifting some financial or operational consequence to another party, such as through insurance or contract.
कार्ड १६
प्रश्न
What is media sanitization?
उत्तर
Making stored data infeasible to recover for the intended level of protection.
कार्ड १७
प्रश्न
What does CVSS provide?
उत्तर
A standardized way to describe a vulnerability's technical severity characteristics.
कार्ड १८
प्रश्न
What does security alerting do?
उत्तर
It turns matched events or behavior into a notification that the right responder can review.
कार्ड १९
प्रश्न
What does a firewall rule enforce?
उत्तर
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
कार्ड २०
प्रश्न
What is deprovisioning?
उत्तर
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
कार्ड २१
प्रश्न
How does inline placement differ from a tap or monitor port?
उत्तर
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
कार्ड २२
प्रश्न
What is asymmetric encryption?
उत्तर
Encryption that uses a mathematically related public and private key pair.
कार्ड २३
प्रश्न
What does SPF authorize?
उत्तर
Which mail servers may send mail for a domain in the SMTP envelope.
कार्ड २४
प्रश्न
What is a possession factor?
उत्तर
Something the claimant has, such as a cryptographic authenticator.
कार्ड २५
प्रश्न
What does ordinary TLS usually protect and authenticate?
उत्तर
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
कार्ड २६
प्रश्न
What is single loss expectancy?
उत्तर
The estimated loss from one occurrence of a risk event.
कार्ड २७
प्रश्न
What does a certificate authority do?
उत्तर
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
कार्ड २८
प्रश्न
What is a detective control meant to do?
उत्तर
Identify that an unwanted event has happened or is happening.
कार्ड २९
प्रश्न
What is the security purpose of change-control approval?
उत्तर
Ensure authorized reviewers assess risk before the production change occurs.
कार्ड ३०
प्रश्न
What is shadow IT?
उत्तर
Technology used for organizational work without required approval or oversight.
कार्ड ३१
प्रश्न
What is a buffer overflow vulnerability?
उत्तर
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
कार्ड ३२
प्रश्न
What is ransomware?
उत्तर
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
कार्ड ३३
प्रश्न
How does network segmentation limit an incident?
उत्तर
It restricts communication paths and reduces lateral movement between zones.
कार्ड ३४
प्रश्न
How do load balancing and clustering support availability differently?
उत्तर
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
कार्ड ३५
प्रश्न
What is vendor due diligence?
उत्तर
Evaluating a provider's security, capability, stability, and fit before commitment.
कार्ड ३६
प्रश्न
Who is a data subject?
उत्तर
The person whose personal data is collected or processed.
कार्ड ३७
प्रश्न
What is attestation?
उत्तर
A formal assertion or report about a subject matter, often supported by an independent examination.
कार्ड ३८
प्रश्न
What is a replay attack?
उत्तर
Valid captured data is retransmitted to repeat an authenticated or authorized action.
कार्ड ३९
प्रश्न
What does a wireless site survey establish?
उत्तर
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
कार्ड ४०
प्रश्न
What is the time-of-check stage of a race-condition vulnerability?
उत्तर
The application verifies a condition or resource state before acting on it.
कार्ड ४१
प्रश्न
What is a penetration test?
उत्तर
An authorized attempt to exploit weaknesses and demonstrate practical impact.
कार्ड ४२
प्रश्न
What is a cold recovery site?
उत्तर
A facility with basic space and utilities but little preinstalled technology or current data.
कार्ड ४३
प्रश्न
What is data in transit?
उत्तर
Data moving between systems or across a network.
कार्ड ४४
प्रश्न
What is a vendor security questionnaire?
उत्तर
A structured request for information about a provider's controls and practices.
कार्ड ४५
प्रश्न
How does an internal actor's starting position differ from an external actor's?
उत्तर
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
कार्ड ४६
प्रश्न
What can unexpected account lockouts indicate?
उत्तर
Password guessing, credential stuffing, user error, or a broken client.
कार्ड ४७
प्रश्न
How do permissions enforce access control?
उत्तर
They specify which actions a subject may perform on a particular resource.
कार्ड ४८
प्रश्न
What is log aggregation?
उत्तर
Central collection of logs from multiple sources for search, correlation, and retention.
कार्ड ४९
प्रश्न
Why plan a service restart as part of a change?
उत्तर
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
कार्ड ५०
प्रश्न
What is infrastructure as code?
उत्तर
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
कार्ड ५१
प्रश्न
What should security-awareness program development start with?
उत्तर
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
कार्ड ५२
प्रश्न
What is a voice-based social-engineering attack called?
उत्तर
Vishing.
कार्ड ५३
प्रश्न
What happens during incident-response preparation?
उत्तर
Teams establish people, tools, access, communications, training, and procedures before an incident.
कार्ड ५४
प्रश्न
What does an offensive penetration-testing team do?
उत्तर
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
कार्ड ५५
प्रश्न
What is federation?
उत्तर
One security domain relies on identity assertions from another trusted domain.
कार्ड ५६
प्रश्न
What is asset classification?
उत्तर
Grouping an asset by sensitivity, criticality, or required handling.
कार्ड ५७
प्रश्न
What is cross-site scripting?
उत्तर
Injection of script-capable content that a browser executes in another site's security context.
कार्ड ५८
प्रश्न
What can IDS or IPS trends reveal?
उत्तर
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
कार्ड ५९
प्रश्न
What can unexpected resource inaccessibility indicate?
उत्तर
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
कार्ड ६०
प्रश्न
What is a corrective control meant to do?
उत्तर
Limit damage and restore a secure state after an event.
कार्ड ६१
प्रश्न
How do containers differ from virtual machines?
उत्तर
Containers share the host kernel; virtual machines normally run separate guest operating systems.
कार्ड ६२
प्रश्न
How does an active security device differ from a passive one?
उत्तर
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
कार्ड ६३
प्रश्न
Why is unsupported software a persistent attack surface?
उत्तर
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
कार्ड ६४
प्रश्न
What is annualized rate of occurrence?
उत्तर
The estimated number of times a risk event occurs per year.
कार्ड ६५
प्रश्न
What is an inherence factor?
उत्तर
A biometric characteristic of the claimant.
कार्ड ६६
प्रश्न
What do a threat actor's sophistication and capability describe?
उत्तर
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
कार्ड ६७
प्रश्न
What is a SIEM?
उत्तर
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
कार्ड ६८
प्रश्न
What is sideloading?
उत्तर
Installing software from outside the platform's approved distribution path.
कार्ड ६९
प्रश्न
What does an IDS or IPS signature match?
उत्तर
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
कार्ड ७०
प्रश्न
Why are embedded systems often difficult to patch?
उत्तर
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
कार्ड ७१
प्रश्न
What is a virtual private network?
उत्तर
An encrypted logical connection that carries private traffic across an untrusted or shared network.
कार्ड ७२
प्रश्न
What should an initial security-awareness report establish?
उत्तर
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
कार्ड ७३
प्रश्न
What is symmetric encryption?
उत्तर
Encryption that uses the same secret key to encrypt and decrypt data.
कार्ड ७४
प्रश्न
What happens during incident detection?
उत्तर
Monitoring or a report identifies activity that may meet the organization's incident criteria.
कार्ड ७५
प्रश्न
What is recovery time objective?
उत्तर
The target maximum time to restore a function after disruption.
कार्ड ७६
प्रश्न
Why prioritize password length?
उत्तर
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
कार्ड ७७
प्रश्न
What must sanitization accomplish before an asset leaves organizational control?
उत्तर
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
कार्ड ७८
प्रश्न
What is a real-time operating system designed to provide?
उत्तर
Predictable response timing for tasks with strict deadlines.
कार्ड ७९
प्रश्न
What does fail-open behavior do when a control fails?
उत्तर
It permits traffic or access to preserve availability.
कार्ड ८०
प्रश्न
What is jailbreaking or rooting a mobile device?
उत्तर
Removing platform restrictions to gain privileged control over the operating system.
कार्ड ८१
प्रश्न
What does network access control enforce?
उत्तर
Identity, device posture, and access policy at network connection time and during a session.
कार्ड ८२
प्रश्न
What does data loss prevention do?
उत्तर
Detects and may block sensitive data use or transfer that violates policy.
कार्ड ८३
प्रश्न
What security property does a blockchain provide?
उत्तर
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
कार्ड ८४
प्रश्न
What is recovery point objective?
उत्तर
The target maximum acceptable data loss measured backward in time.
कार्ड ८५
प्रश्न
How do ICS and SCADA relate?
उत्तर
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
कार्ड ८६
प्रश्न
What does fail-closed behavior do when a control fails?
उत्तर
It denies traffic or access to preserve security.
कार्ड ८७
प्रश्न
Which keys create and verify a typical digital signature?
उत्तर
The signer creates it with a private key, and others verify it with the corresponding public key.
कार्ड ८८
प्रश्न
What is SQL injection?
उत्तर
Input that alters the structure or meaning of a database query because code and data were not safely separated.
कार्ड ८९
प्रश्न
What does DKIM verify?
उत्तर
That selected message content was signed by a domain and was not altered after signing.
कार्ड ९०
प्रश्न
What is post-incident activity?
उत्तर
Learning from the event and improving controls, plans, and recovery based on evidence.
कार्ड ९१
प्रश्न
What characterizes an expansionary risk appetite?
उत्तर
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
कार्ड ९२
प्रश्न
How do centralized and decentralized architectures differ?
उत्तर
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
कार्ड ९३
प्रश्न
What does a certificate revocation list publish?
उत्तर
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
कार्ड ९४
प्रश्न
What is a legal hold?
उत्तर
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
कार्ड ९५
प्रश्न
What is exposure factor in quantitative risk analysis?
उत्तर
The estimated percentage of an asset's value lost in one event.
कार्ड ९६
प्रश्न
What is decentralized architecture?
उत्तर
Control or service responsibility is distributed across multiple independent components or locations.
कार्ड ९७
प्रश्न
What is tokenization?
उत्तर
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
कार्ड ९८
प्रश्न
How can automation act as a workforce multiplier?
उत्तर
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
कार्ड ९९
प्रश्न
What can endpoint process logs reveal?
उत्तर
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
कार्ड १००
प्रश्न
What does the CIA triad protect?
उत्तर
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
कार्ड १०१
प्रश्न
How does data masking protect information?
उत्तर
It hides selected values or characters while preserving a usable representation.
कार्ड १०२
प्रश्न
How can a national requirement affect security governance?
उत्तर
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
कार्ड १०३
प्रश्न
What do integrations and APIs provide to security orchestration?
उत्तर
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
कार्ड १०४
प्रश्न
What makes a compliance report external?
उत्तर
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
कार्ड १०५
प्रश्न
What does a cryptographic algorithm define?
उत्तर
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
कार्ड १०६
प्रश्न
Why compare systems with a secure baseline regularly?
उत्तर
To detect drift, unauthorized changes, and missing hardening.
कार्ड १०७
प्रश्न
What does integrity protect?
उत्तर
The accuracy and completeness of data and systems against unauthorized change.
कार्ड १०८
प्रश्न
What does vulnerability classification organize?
उत्तर
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
कार्ड १०९
प्रश्न
What does a password standard define?
उत्तर
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
कार्ड ११०
प्रश्न
What technology capacity must a recovery design plan for?
उत्तर
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
कार्ड १११
प्रश्न
What does a confidential data classification indicate?
उत्तर
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
कार्ड ११२
प्रश्न
What makes a vendor assessment independent?
उत्तर
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
कार्ड ११३
प्रश्न
What lets a worm spread without attaching itself to another file?
उत्तर
It is a standalone program that replicates across reachable systems or services.
कार्ड ११४
प्रश्न
What is microsegmentation?
उत्तर
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
कार्ड ११५
प्रश्न
What can application logs reveal?
उत्तर
Transactions, errors, user actions, and application-specific security events.
कार्ड ११६
प्रश्न
What does deploying a secure baseline require?
उत्तर
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
कार्ड ११७
प्रश्न
How can resource-provisioning automation improve security?
उत्तर
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
कार्ड ११८
प्रश्न
What does availability protect?
उत्तर
Reliable, timely access to systems and data when authorized users need them.
कार्ड ११९
प्रश्न
Why must a change request describe business impact?
उत्तर
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
कार्ड १२०
प्रश्न
What does an authenticated vulnerability scan add?
उत्तर
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
कार्ड १२१
प्रश्न
What does a change-management procedure specify?
उत्तर
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
कार्ड १२२
प्रश्न
What is a sanction for noncompliance?
उत्तर
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
कार्ड १२३
प्रश्न
How can email deliver a security attack?
उत्तर
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
कार्ड १२४
प्रश्न
What is an internal compliance audit?
उत्तर
An organization-led examination of whether selected operations and controls meet defined requirements.
कार्ड १२५
प्रश्न
What is a Trojan?
उत्तर
Malware disguised as legitimate or desirable software.
कार्ड १२६
प्रश्न
What is clustering?
उत्तर
Multiple systems work together to provide a service and tolerate member failure.
कार्ड १२७
प्रश्न
What makes data regulated?
उत्तर
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
कार्ड १२८
प्रश्न
What does a wireless heat map show?
उत्तर
Measured or modeled signal strength and coverage across a physical area.
कार्ड १२९
प्रश्न
How should vendor criticality affect due diligence?
उत्तर
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
कार्ड १३०
प्रश्न
How can a digital signature support non-repudiation?
उत्तर
It provides evidence that the holder of a private key signed specific data.
कार्ड १३१
प्रश्न
What should vulnerability prioritization consider beyond severity?
उत्तर
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
कार्ड १३२
प्रश्न
What is a security guideline?
उत्तर
Recommended practice that allows judgment unless adopted as a requirement.
कार्ड १३३
प्रश्न
What usually distinguishes a nation-state threat actor?
उत्तर
Strategic objectives, substantial resources, patience, and advanced operational capability.
कार्ड १३४
प्रश्न
What is spyware?
उत्तर
Software that secretly collects information about a user or system.
कार्ड १३५
प्रश्न
Why maintain an allow list for applications?
उत्तर
Only explicitly approved software is permitted to execute.
कार्ड १३६
प्रश्न
How can an image become an attack vector?
उत्तर
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
कार्ड १३७
प्रश्न
What makes a security control technical?
उत्तर
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
कार्ड १३८
प्रश्न
What is identity proofing?
उत्तर
Establishing that a person is who they claim to be before issuing an account or credential.
कार्ड १३९
प्रश्न
What is an automated security guardrail?
उत्तर
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
कार्ड १४०
प्रश्न
Why assign an owner to a planned change?
उत्तर
To make one party accountable for coordination, execution, and follow-through.
कार्ड १४१
प्रश्न
How can national privacy law affect data handling?
उत्तर
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
कार्ड १४२
प्रश्न
What is continuity of operations?
उत्तर
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
कार्ड १४३
प्रश्न
What security tradeoff comes with BYOD?
उत्तर
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
कार्ड १४४
प्रश्न
How should policies and handbooks support security training?
उत्तर
They provide accessible, current rules and reporting steps that training can apply to real situations.
कार्ड १४५
प्रश्न
What is a keylogger?
उत्तर
A tool that records keystrokes to capture data such as credentials.
कार्ड १४६
प्रश्न
What makes information a trade secret?
उत्तर
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
कार्ड १४७
प्रश्न
What does authentication establish?
उत्तर
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
कार्ड १४८
प्रश्न
What risk comes from an untrusted file attachment?
उत्तर
Opening or parsing it can execute malicious code or expose data.
कार्ड १४९
प्रश्न
How does risk tolerance affect vulnerability remediation?
उत्तर
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
कार्ड १५०
प्रश्न
How can a global requirement affect security governance?
उत्तर
It can require a common control and oversight approach across multiple countries while local obligations still apply.
कार्ड १५१
प्रश्न
Why should questionnaire answers be supported by evidence?
उत्तर
Self-assertions alone may not prove that controls are designed or operating effectively.
कार्ड १५२
प्रश्न
What is an independent third-party audit?
उत्तर
An external party with suitable independence examines evidence against defined criteria.
कार्ड १५३
प्रश्न
What do account provisioning and deprovisioning do?
उत्तर
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
कार्ड १५४
प्रश्न
What is an unskilled attacker commonly called?
उत्तर
A script kiddie: someone who relies on tools or instructions created by others.
कार्ड १५५
प्रश्न
What is a rootkit?
उत्तर
Software designed to maintain privileged, concealed access by altering or subverting the system.
कार्ड १५६
प्रश्न
What does an access control list enforce?
उत्तर
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
कार्ड १५७
प्रश्न
What should system security monitoring observe?
उत्तर
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
कार्ड १५८
प्रश्न
What can operating-system security logs reveal?
उत्तर
Authentication, privilege use, policy changes, services, and other host security events.
कार्ड १५९
प्रश्न
Why isolate operational technology from general business networks?
उत्तर
To limit attack paths into safety- and availability-critical processes.
कार्ड १६०
प्रश्न
What is the COPE mobile deployment model?
उत्तर
The organization owns the device but permits defined personal use while retaining management control.
कार्ड १६१
प्रश्न
What security work belongs in asset acquisition and procurement?
उत्तर
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
कार्ड १६२
प्रश्न
How can user-provisioning automation improve security?
उत्तर
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
कार्ड १६३
प्रश्न
What people capacity must a continuity plan account for?
उत्तर
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
कार्ड १६४
प्रश्न
What do authorization models define?
उत्तर
How permissions are assigned to authenticated subjects and evaluated for requested actions.
कार्ड १६५
प्रश्न
Why are removable devices an attack vector?
उत्तर
They can introduce malware or remove data while bypassing network controls.
कार्ड १६६
प्रश्न
What should predeployment change-test results show?
उत्तर
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
कार्ड १६७
प्रश्न
What is the time-of-use stage of a race-condition vulnerability?
उत्तर
The application acts on a resource after the check, creating a gap in which another process may change the resource.
कार्ड १६८
प्रश्न
What is data in use?
उत्तर
Data actively processed in memory or by an application.
कार्ड १६९
प्रश्न
What does open-source vulnerability intelligence contribute?
उत्तर
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
कार्ड १७०
प्रश्न
What can file-integrity monitoring detect?
उत्तर
Unexpected changes to protected files, directories, or configuration.
कार्ड १७१
प्रश्न
Why should deprovisioning be prompt?
उत्तर
Former users or roles should not retain usable access.
कार्ड १७२
प्रश्न
What is an acceptable use policy?
उत्तर
Rules for permitted and prohibited use of organizational systems, accounts, and data.
कार्ड १७३
प्रश्न
What makes a compliance report internal?
उत्तर
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
कार्ड १७४
प्रश्न
What is a logic bomb?
उत्तर
Malicious code that activates when a specified condition or time is reached.
कार्ड १७५
प्रश्न
What does a right-to-audit clause provide?
उत्तर
Contractual authority to inspect or obtain evidence about agreed controls.
कार्ड १७६
प्रश्न
Where should a forward proxy sit in an enterprise traffic path?
उत्तर
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
कार्ड १७७
प्रश्न
Which cues should make a message look suspicious?
उत्तर
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
कार्ड १७८
प्रश्न
What makes a security control managerial?
उत्तर
It directs risk and governance through decisions such as policies, assessments, and oversight.
कार्ड १७९
प्रश्न
What is the CYOD mobile deployment model?
उत्तर
The user selects from organization-approved device options that remain subject to corporate security requirements.
कार्ड १८०
प्रश्न
How does client-based vulnerable software differ from an agentless exposure?
उत्तर
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
कार्ड १८१
प्रश्न
What makes a risk assessment recurring?
उत्तर
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
कार्ड १८२
प्रश्न
What does a defensive penetration-testing team practice?
उत्तर
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
कार्ड १८३
प्रश्न
In a zero-trust data plane, what can the subject or system represent?
उत्तर
The user, device, workload, or service requesting access to a protected resource.
कार्ड १८४
प्रश्न
What primarily motivates a hacktivist?
उत्तर
A political, social, or ideological cause.
कार्ड १८५
प्रश्न
What is bloatware?
उत्तर
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
कार्ड १८६
प्रश्न
Why keep endpoint-protection signatures and engines current?
उत्तर
They need current detection logic to recognize newly identified malware and exploit behavior.
कार्ड १८७
प्रश्न
What should application security monitoring observe?
उत्तर
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
कार्ड १८८
प्रश्न
What is role-based access control?
उत्तर
Permissions are assigned to roles, and identities receive access through their roles.
कार्ड १८९
प्रश्न
What is geographic dispersal?
उत्तर
Placing redundant resources in separate locations so one regional event does not affect all copies.
कार्ड १९०
प्रश्न
What is a malicious update?
उत्तर
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
कार्ड १९१
प्रश्न
What does static application analysis inspect?
उत्तर
Source code, bytecode, or compiled code without executing the application.
कार्ड १९२
प्रश्न
What does a firewall access list define?
उत्तर
An ordered set of traffic-matching conditions and the action applied when a condition matches.
कार्ड १९३
प्रश्न
What does a disaster recovery policy establish?
उत्तर
Management expectations for restoring technology and data after a disruptive event.
कार्ड १९४
प्रश्न
How does logical segmentation separate workloads that share physical infrastructure?
उत्तर
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
कार्ड १९५
प्रश्न
How should IDS and IPS placement differ?
उत्तर
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
कार्ड १९६
प्रश्न
What should automated ticket creation capture?
उत्तर
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
कार्ड १९७
प्रश्न
What makes information intellectual property?
उत्तर
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
कार्ड १९८
प्रश्न
What is a backout plan?
उत्तर
Predefined steps for safely reversing a failed or harmful change.
कार्ड १९९
प्रश्न
Why is an unsecure wireless network an attack vector?
उत्तर
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
कार्ड २००
प्रश्न
What is physical brute force?
उत्तर
Using force to defeat a lock, barrier, enclosure, or other physical control.
कार्ड २०१
प्रश्न
What is application sandboxing?
उत्तर
Running code in a constrained environment with limited access to the host and data.
कार्ड २०२
प्रश्न
Why assign an asset owner?
उत्तर
One accountable party must decide its use, protection, and lifecycle.
कार्ड २०३
प्रश्न
What happens during risk identification?
उत्तर
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
कार्ड २०४
प्रश्न
What should an SLA state about breach notification?
उत्तर
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
कार्ड २०५
प्रश्न
How do due diligence and due care differ in compliance?
उत्तर
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
कार्ड २०६
प्रश्न
What is attribute-based access control?
उत्तर
Policy evaluates attributes of the subject, resource, action, and environment.
कार्ड २०७
प्रश्न
What does a zero-trust policy engine do?
उत्तर
It evaluates policy and signals to decide whether access should be allowed.
कार्ड २०८
प्रश्न
How does a cloud responsibility matrix allocate security duties?
उत्तर
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
कार्ड २०९
प्रश्न
Where should a load balancer sit in a service path?
उत्तर
In front of service instances so it can route requests to healthy backends.
कार्ड २१०
प्रश्न
What should the security team do with a reported suspicious message?
उत्तर
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
कार्ड २११
प्रश्न
What makes an operating-system vulnerability high impact?
उत्तर
It can affect every application and security control that relies on the compromised OS.
कार्ड २१२
प्रश्न
What does dynamic application analysis inspect?
उत्तर
The behavior and externally visible weaknesses of a running application.
कार्ड २१३
प्रश्न
How can false-positive trends affect IDS or IPS tuning?
उत्तर
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
कार्ड २१४
प्रश्न
What does a business continuity policy establish?
उत्तर
Management expectations for sustaining and restoring critical business functions.
कार्ड २१५
प्रश्न
What is a hot recovery site?
उत्तर
A ready, synchronized environment intended to take over quickly.
कार्ड २१६
प्रश्न
What makes an insider threat distinct?
उत्तर
The actor has legitimate access or organizational knowledge that can be misused.
कार्ड २१७
प्रश्न
What is RFID cloning?
उत्तर
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
कार्ड २१८
प्रश्न
Why apply vendor security updates promptly?
उत्तर
They remove known weaknesses before attackers can exploit the unpatched exposure.
कार्ड २१९
प्रश्न
What should infrastructure security monitoring observe?
उत्तर
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
कार्ड २२०
प्रश्न
What can firewall logs reveal?
उत्तर
Allowed or denied network connections across controlled boundaries.
कार्ड २२१
प्रश्न
Why minimize open service ports?
उत्तर
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
कार्ड २२२
प्रश्न
What is threat hunting?
उत्तर
A proactive search for evidence of malicious activity that existing detections have not confirmed.
कार्ड २२३
प्रश्न
What triggers an ad hoc risk assessment?
उत्तर
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
कार्ड २२४
प्रश्न
What makes an assessment external?
उत्तर
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
कार्ड २२५
प्रश्न
What is data sovereignty?
उत्तर
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
कार्ड २२६
प्रश्न
What security boundary does a cellular connection create for a mobile device?
उत्तर
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
कार्ड २२७
प्रश्न
What makes a security control operational?
उत्तर
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
कार्ड २२८
प्रश्न
What is discretionary access control?
उत्तर
A resource owner can decide who receives access, within system policy.
कार्ड २२९
प्रश्न
How can careful automation support employee retention?
उत्तर
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
कार्ड २३०
प्रश्न
Why does ease of deployment matter in an architecture decision?
उत्तर
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
कार्ड २३१
प्रश्न
What tradeoff comes with placing an NGFW inline?
उत्तर
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
कार्ड २३२
प्रश्न
What does a zero-trust policy administrator do?
उत्तर
It carries out the policy engine's decision, such as creating or ending a session.
कार्ड २३३
प्रश्न
What should a master service agreement define for data return and deletion?
उत्तर
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
कार्ड २३४
प्रश्न
What is an environmental physical attack?
उत्तर
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
कार्ड २३५
प्रश्न
When should a maintenance window be chosen?
उत्तर
When disruption and rollback can be managed with the least business impact.
कार्ड २३६
प्रश्न
What is memory injection?
उत्तर
Placing malicious code or data into another process's memory so it executes in that process's context.
कार्ड २३७
प्रश्न
What does software composition analysis find?
उत्तर
Known risks and license information in third-party dependencies.
कार्ड २३८
प्रश्न
What is DNS filtering?
उत्तर
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
कार्ड २३९
प्रश्न
What should an incident response policy establish?
उत्तर
Authority, scope, reporting duties, and organizational commitment for incident handling.
कार्ड २४०
प्रश्न
How can noncompliance cause reputational damage?
उत्तर
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
कार्ड २४१
प्रश्न
What does full-disk encryption protect?
उत्तर
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
कार्ड २४२
प्रश्न
Why are default credentials dangerous?
उत्तर
They are widely known or easily discovered and often remain unchanged.
कार्ड २४३
प्रश्न
What makes a risk assessment one-time?
उत्तर
It evaluates a defined decision or scope once without an established repeating cadence.
कार्ड २४४
प्रश्न
What is a warm recovery site?
उत्तर
A partially equipped environment that needs some data restoration or configuration before use.
कार्ड २४५
प्रश्न
What does application input validation do?
उत्तर
It checks that input matches the expected type, length, range, and format before use.
कार्ड २४६
प्रश्न
What should an asset inventory record besides a device name?
उत्तर
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
कार्ड २४७
प्रश्न
What is mandatory access control?
उत्तर
A central authority enforces access through labels and rules that ordinary owners cannot override.
कार्ड २४८
प्रश्न
What security benefit does infrastructure as code provide?
उत्तर
Repeatable, reviewable deployments that reduce undocumented configuration drift.
कार्ड २४९
प्रश्न
When should a public service control fail closed?
उत्तर
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
कार्ड २५०
प्रश्न
What should users do with a suspicious message?
उत्तर
Report it through the approved channel without interacting with its links or attachments.
कार्ड २५१
प्रश्न
What usually motivates organized cybercrime?
उत्तर
Financial gain through scalable or repeatable criminal activity.
कार्ड २५२
प्रश्न
How can malicious code support a network attack?
उत्तर
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
कार्ड २५३
प्रश्न
When is virtual patching useful?
उत्तर
When a network or application control can block exploit traffic before the underlying system can be patched.
कार्ड २५४
प्रश्न
What does security-monitoring reporting provide?
उत्तर
A summarized, audience-appropriate view of findings, trends, risk, and response status.
कार्ड २५५
प्रश्न
What does data geolocation identify?
उत्तर
The physical or legal location where data is stored, processed, or transmitted.
कार्ड २५६
प्रश्न
What does a zero-trust policy enforcement point do?
उत्तर
It enables, monitors, and terminates the connection between a subject and a resource.
कार्ड २५७
प्रश्न
What is cryptographic key exchange?
उत्तर
A method for parties to establish shared key material over an untrusted channel.
कार्ड २५८
प्रश्न
How can a vendor become a supply-chain attack vector?
उत्तर
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
कार्ड २५९
प्रश्न
Why can legacy hardware remain vulnerable?
उत्तर
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
कार्ड २६०
प्रश्न
What can proprietary vulnerability intelligence add beyond open sources?
उत्तर
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
कार्ड २६१
प्रश्न
How does a centralized proxy apply web filtering?
उत्तर
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
कार्ड २६२
प्रश्न
How can continuous integration and testing improve security automation?
उत्तर
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
कार्ड २६३
प्रश्न
What is containment?
उत्तर
Limiting an incident's spread or damage while preserving necessary operations and evidence.
कार्ड २६४
प्रश्न
What is a software development lifecycle policy meant to ensure?
उत्तर
Security requirements and checks are integrated throughout design, development, release, and maintenance.
कार्ड २६५
प्रश्न
What makes risk assessment continuous?
उत्तर
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
कार्ड २६६
प्रश्न
What is a memorandum of agreement?
उत्तर
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
कार्ड २६७
प्रश्न
What makes a penetration test integrated?
उत्तर
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
कार्ड २६८
प्रश्न
How does a DNS amplification attack magnify traffic?
उत्तर
It sends small spoofed queries that trigger larger replies toward the victim.
कार्ड २६९
प्रश्न
Why does ease of recovery matter in an architecture decision?
उत्तर
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
कार्ड २७०
प्रश्न
What does 802.1X control before a device receives normal network access?
उत्तर
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
कार्ड २७१
प्रश्न
What is rule-based access control?
उत्तर
System-wide rules grant or deny access based on conditions such as network, time, or action.
कार्ड २७२
प्रश्न
What is mobile device management?
उत्तर
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
कार्ड २७३
प्रश्न
What tradeoff comes with a cold recovery site?
उत्तर
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
कार्ड २७४
प्रश्न
Why identify stakeholders before approving a security-sensitive change?
उत्तर
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
कार्ड २७५
प्रश्न
How do attestation and acknowledgement differ?
उत्तर
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
कार्ड २७६
प्रश्न
What does zero-trust adaptive identity mean?
उत्तर
Access decisions adjust to current risk signals rather than relying only on a static login.
कार्ड २७७
प्रश्न
What makes a security control physical?
उत्तर
It protects facilities or equipment through a tangible barrier or mechanism.
कार्ड २७८
प्रश्न
What is geo-fencing for data?
उत्तर
Enforcing location-based boundaries on where data or services may be accessed or operated.
कार्ड २७९
प्रश्न
What does a Trusted Platform Module protect?
उत्तर
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
कार्ड २८०
प्रश्न
Why can a managed service provider amplify risk?
उत्तर
Its privileged access and shared tooling can provide a path into many customers.
कार्ड २८१
प्रश्न
What does probability express in risk analysis?
उत्तर
A quantified chance that a defined event will occur within stated conditions or time.
कार्ड २८२
प्रश्न
Why can shadow IT create a threat?
उत्तर
It bypasses security review, inventory, monitoring, and supported configuration.
कार्ड २८३
प्रश्न
What is on-path interception?
उत्तर
An attacker positions between communicating parties to observe or alter traffic.
कार्ड २८४
प्रश्न
Why include encryption in a system-hardening baseline?
उत्तर
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
कार्ड २८५
प्रश्न
Why tune security alerts?
उत्तर
To keep useful detections while reducing noise that wastes analyst attention.
कार्ड २८६
प्रश्न
What can IPS or IDS logs contribute to an investigation?
उत्तर
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
कार्ड २८७
प्रश्न
What is VM escape?
उत्तर
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
कार्ड २८८
प्रश्न
How can segmentation reduce vulnerability exposure before a patch is available?
उत्तर
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
कार्ड २८९
प्रश्न
Why should firewall policy name the required ports and protocols explicitly?
उत्तर
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
कार्ड २९०
प्रश्न
What is a change management policy meant to control?
उत्तर
How changes are requested, assessed, approved, tested, implemented, and reviewed.
कार्ड २९१
प्रश्न
What is a hybrid-cloud architecture?
उत्तर
An environment that integrates private or on-premises resources with public cloud services.
कार्ड २९२
प्रश्न
How do AH and ESP differ in the security services they can provide?
उत्तर
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
कार्ड २९३
प्रश्न
What makes user behavior risky?
उत्तर
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
कार्ड २९४
प्रश्न
What is least privilege?
उत्तर
Granting only the access needed for the required task and no more.
कार्ड २९५
प्रश्न
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
उत्तर
Transmission to HTTPS, script access, and cross-site sending, respectively.
कार्ड २९६
प्रश्न
Why discover unmanaged assets?
उत्तर
Unknown systems cannot be patched, monitored, or governed reliably.
कार्ड २९७
प्रश्न
What is a service-level agreement?
उत्तर
Measurable service commitments and remedies, such as availability or response targets.
कार्ड २९८
प्रश्न
What should govern automated security escalation?
उत्तर
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
कार्ड २९९
प्रश्न
What is platform diversity as a resilience strategy?
उत्तर
Using different implementations so one common flaw or failure is less likely to affect every copy.
कार्ड ३००
प्रश्न
How can replayed session material affect an application?
उत्तर
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
कार्ड ३०१
प्रश्न
What is an implicit trust zone in zero trust?
उत्तर
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
कार्ड ३०२
प्रश्न
What does salting a password hash accomplish?
उत्तर
It makes identical passwords hash differently and defeats precomputed hash tables.
कार्ड ३०३
प्रश्न
What is spear phishing?
उत्तर
Phishing tailored to a specific person, role, or organization.
कार्ड ३०४
प्रश्न
What is eradication?
उत्तर
Removing the attacker's access, malicious artifacts, and exploited conditions.
कार्ड ३०५
प्रश्न
Who is a risk owner?
उत्तर
The person accountable for deciding and monitoring how a specific risk is handled.
कार्ड ३०६
प्रश्न
What does a partially known penetration-test environment provide?
उत्तर
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
कार्ड ३०७
प्रश्न
What is a microservices architecture?
उत्तर
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
कार्ड ३०८
प्रश्न
What is a jump server?
उत्तर
A hardened intermediary used to reach systems in a restricted management network.
कार्ड ३०९
प्रश्न
What can happen when a configuration change is made without dependency analysis?
उत्तर
A downstream service can fail even when the changed component works.
कार्ड ३१०
प्रश्न
What is resource reuse exposure?
उत्तर
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
कार्ड ३११
प्रश्न
Why does financial information require explicit protection?
उत्तर
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
कार्ड ३१२
प्रश्न
What does CVE provide?
उत्तर
A common identifier for a publicly disclosed vulnerability.
कार्ड ३१३
प्रश्न
Where can DLP controls operate?
उत्तर
On endpoints, networks, email, and cloud services, depending on the product and visibility.
कार्ड ३१४
प्रश्न
What does privileged password vaulting protect?
उत्तर
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
कार्ड ३१५
प्रश्न
What does an access-control standard define?
उत्तर
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
कार्ड ३१६
प्रश्न
How can automation support compliance monitoring?
उत्तर
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
कार्ड ३१७
प्रश्न
What does static code analysis examine?
उत्तर
Source or compiled code for weakness patterns without executing the application.
कार्ड ३१८
प्रश्न
What actor attribute describes funding, time, and personnel?
उत्तर
Resources.
कार्ड ३१९
प्रश्न
What is DNS poisoning?
उत्तर
Introducing false DNS data so names resolve to attacker-chosen destinations.
कार्ड ३२०
प्रश्न
Why change default credentials during hardening?
उत्तर
Default secrets are predictable and commonly targeted.
कार्ड ३२१
प्रश्न
What does quarantine do after a security alert?
उत्तर
It restricts a suspected asset or object while analysts validate and remediate the risk.
कार्ड ३२२
प्रश्न
What does key stretching do for stored passwords?
उत्तर
It deliberately makes each password guess more computationally expensive.
कार्ड ३२३
प्रश्न
What is smishing?
उत्तर
Phishing delivered through SMS or another text-messaging service.
कार्ड ३२४
प्रश्न
What is qualitative risk analysis?
उत्तर
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
कार्ड ३२५
प्रश्न
What is a master service agreement?
उत्तर
An umbrella contract establishing general legal and commercial terms for ongoing work.
कार्ड ३२६
प्रश्न
What is threat scope reduction?
उत्तर
Narrowing the systems, privileges, or paths an attacker can reach.
कार्ड ३२७
प्रश्न
Why use a third-party cloud service instead of building locally?
उत्तर
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
कार्ड ३२८
प्रश्न
What should determine security-device placement?
उत्तर
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
कार्ड ३२९
प्रश्न
What does situational awareness mean for a user?
उत्तर
Notice the people, devices, requests, location, and context around a task before acting.
कार्ड ३३०
प्रश्न
What does a failover test validate?
उत्तर
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
कार्ड ३३१
प्रश्न
What is a preventive control meant to do?
उत्तर
Stop an unwanted event before it succeeds.
कार्ड ३३२
प्रश्न
What is just-in-time privileged access?
उत्तर
Elevated access is granted only when needed and expires after a short approved period.
कार्ड ३३३
प्रश्न
What safeguard should security-group automation enforce?
उत्तर
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
कार्ड ३३४
प्रश्न
How does a reflected DDoS attack hide and multiply sources?
उत्तर
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
कार्ड ३३५
प्रश्न
What is a security misconfiguration?
उत्तर
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
कार्ड ३३६
प्रश्न
Why can the same vulnerability have different organizational impact?
उत्तर
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
कार्ड ३३७
प्रश्न
What does URL scanning evaluate before a user opens a web destination?
उत्तर
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
कार्ड ३३८
प्रश्न
What is the board's security governance role?
उत्तर
Provide oversight, set risk direction, and hold executives accountable.
कार्ड ३३९
प्रश्न
What does code signing establish?
उत्तर
That code came from the holder of the signing key and has not changed since signing.
कार्ड ३४०
प्रश्न
How should an asset's classification affect security operations?
उत्तर
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
कार्ड ३४१
प्रश्न
How does encryption protect data?
उत्तर
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
कार्ड ३४२
प्रश्न
What is a secure enclave?
उत्तर
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
कार्ड ३४३
प्रश्न
What is business email compromise?
उत्तर
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
कार्ड ३४४
प्रश्न
What is recovery in incident response?
उत्तर
Restoring services safely, monitoring them, and returning to normal operations.
कार्ड ३४५
प्रश्न
How is single loss expectancy commonly estimated?
उत्तर
Asset value multiplied by the exposure factor.
कार्ड ३४६
प्रश्न
What does an unknown penetration-test environment provide?
उत्तर
The tester begins with little or no internal information, modeling an external attacker's discovery process.
कार्ड ३४७
प्रश्न
What security boundary does a hypervisor provide?
उत्तर
It isolates virtual machines while controlling their access to shared hardware.
कार्ड ३४८
प्रश्न
Why does a TLS tunnel not protect a compromised endpoint?
उत्तर
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
कार्ड ३४९
प्रश्न
Why update diagrams after an infrastructure change?
उत्तर
Operations and incident responders need the documentation to match the deployed environment.
कार्ड ३५०
प्रश्न
What does privacy ownership assign?
उत्तर
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
कार्ड ३५१
प्रश्न
What does a security control gap analysis compare?
उत्तर
The controls required for the target state with the controls currently in place.
कार्ड ३५२
प्रश्न
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
उत्तर
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
कार्ड ३५३
प्रश्न
What is application privilege escalation?
उत्तर
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
कार्ड ३५४
प्रश्न
What risk remains when unnecessary software is left installed?
उत्तर
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
कार्ड ३५५
प्रश्न
What does SCAP standardize?
उत्तर
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
कार्ड ३५६
प्रश्न
What can packet capture reveal?
उत्तर
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
कार्ड ३५७
प्रश्न
What makes a privileged credential ephemeral?
उत्तर
It is created for a limited task or session and expires or is destroyed automatically after that use.
कार्ड ३५८
प्रश्न
How do a statement of work and a work order differ?
उत्तर
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
कार्ड ३५९
प्रश्न
Why might multi-cloud improve resilience?
उत्तर
A provider-wide failure need not stop workloads that can run independently elsewhere.
कार्ड ३६०
प्रश्न
How can a service provider introduce a supply-chain vulnerability?
उत्तर
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
कार्ड ३६१
प्रश्न
What is a false positive in vulnerability scanning?
उत्तर
A reported weakness that is not actually present or exploitable in the assessed context.
कार्ड ३६२
प्रश्न
How do EDR and XDR differ?
उत्तर
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
कार्ड ३६३
प्रश्न
What should onboarding and offboarding procedures coordinate?
उत्तर
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
कार्ड ३६४
प्रश्न
How should an organization harden managed mobile devices?
उत्तर
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
कार्ड ३६५
प्रश्न
What is a certificate signing request?
उत्तर
A request containing a public key and subject information for a certificate authority to sign.
कार्ड ३६६
प्रश्न
What is pretexting?
उत्तर
Using a fabricated role or situation to make a request seem legitimate.
कार्ड ३६७
प्रश्न
How is annualized loss expectancy commonly estimated?
उत्तर
Single loss expectancy multiplied by annualized rate of occurrence.
कार्ड ३६८
प्रश्न
What security consequence follows from containers sharing a kernel?
उत्तर
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
कार्ड ३६९
प्रश्न
Where does 802.1X enforce a network admission decision?
उत्तर
At the controlled switch port or wireless access point before normal network access is granted.
कार्ड ३७०
प्रश्न
What should insider-threat awareness teach?
उत्तर
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
कार्ड ३७१
प्रश्न
What access action is suitable for careful automation?
उत्तर
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
कार्ड ३७२
प्रश्न
What is an evil twin?
उत्तर
A rogue wireless network made to resemble a legitimate one so users connect to it.
७४४ कार्डे
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
हा संच मोफत अभ्यासाअभ्यास सुरू करण्यासाठी Nibomo उघडेल.
कार्ड ३७३
प्रश्न
Does non-human-readable data need less protection?
उत्तर
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
कार्ड ३७४
प्रश्न
What does authenticating a system establish?
उत्तर
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
कार्ड ३७५
प्रश्न
What does LDAP provide in identity systems?
उत्तर
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
कार्ड ३७६
प्रश्न
What is a deterrent control meant to do?
उत्तर
Discourage an attacker from attempting an unwanted action.
कार्ड ३७७
प्रश्न
Why update procedures after changing a security control?
उत्तर
Staff need accurate steps for operating, monitoring, and recovering the new control.
कार्ड ३७८
प्रश्न
How does OCSP differ from a certificate revocation list?
उत्तर
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
कार्ड ३७९
प्रश्न
What is the goal of data exfiltration?
उत्तर
Remove data from its authorized environment without permission.
कार्ड ३८०
प्रश्न
What is a watering-hole attack?
उत्तर
Compromising a site frequented by the intended targets so their visits expose them.
कार्ड ३८१
प्रश्न
How can a hardware provider introduce a supply-chain vulnerability?
उत्तर
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
कार्ड ३८२
प्रश्न
What is application forgery?
उत्तर
Creating or altering a request, token, or object so the application treats it as authentic.
कार्ड ३८३
प्रश्न
How does least privilege mitigate compromise?
उत्तर
It limits the actions and resources available to a compromised account or process.
कार्ड ३८४
प्रश्न
What is serverless computing?
उत्तर
A model where the provider manages servers and the customer deploys event-driven code or functions.
कार्ड ३८५
प्रश्न
What makes an infrastructure control effective for a specific risk?
उत्तर
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
कार्ड ३८६
प्रश्न
What does parallel recovery processing test?
उत्तर
Whether primary and alternate environments can run together consistently before a controlled cutover.
कार्ड ३८७
प्रश्न
Which password-authentication method does WPA3-Personal use?
उत्तर
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
कार्ड ३८८
प्रश्न
How does data retention affect asset disposal?
उत्तर
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
कार्ड ३८९
प्रश्न
What is a false negative in vulnerability scanning?
उत्तर
A real weakness that the assessment fails to report.
कार्ड ३९०
प्रश्न
What does recurring security scanning add to monitoring?
उत्तर
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
कार्ड ३९१
प्रश्न
What should guide port selection for a secure protocol?
उत्तर
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
कार्ड ३९२
प्रश्न
What does forensic acquisition create?
उत्तर
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
कार्ड ३९३
प्रश्न
How do system owners and data owners divide security accountability?
उत्तर
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
कार्ड ३९४
प्रश्न
What does likelihood express in risk analysis?
उत्तर
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
कार्ड ३९५
प्रश्न
What is a memorandum of understanding?
उत्तर
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
कार्ड ३९६
प्रश्न
What does the right to be forgotten generally require?
उत्तर
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
कार्ड ३९७
प्रश्न
What does an audit committee oversee?
उत्तर
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
कार्ड ३९८
प्रश्न
What does identity interoperability require?
उत्तर
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
कार्ड ३९९
प्रश्न
How does a bollard protect a facility?
उत्तर
It blocks or redirects vehicles before they can reach a protected area.
कार्ड ४००
प्रश्न
How can hashing protect a downloaded file?
उत्तर
A trusted digest lets the recipient detect whether the file changed.
कार्ड ४०१
प्रश्न
What is a credential replay attack?
उत्तर
Using captured valid credentials or tokens again without needing to discover the secret.
कार्ड ४०२
प्रश्न
How can automation complexity create security risk?
उत्तर
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
कार्ड ४०३
प्रश्न
What must an architecture provide when a component cannot be patched?
उत्तर
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
कार्ड ४०४
प्रश्न
What makes remote access secure?
उत्तर
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
कार्ड ४०५
प्रश्न
What should users verify before connecting removable media or a cable?
उत्तर
That the device and connection are approved, expected, and handled under organizational policy.
कार्ड ४०६
प्रश्न
What is a self-signed certificate?
उत्तर
A certificate signed by its own private key rather than by a separate trusted issuer.
कार्ड ४०७
प्रश्न
What is brand impersonation?
उत्तर
Using a trusted organization's identity or look to deceive people.
कार्ड ४०८
प्रश्न
What characterizes a conservative risk appetite?
उत्तर
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
कार्ड ४०९
प्रश्न
What should a managed mobile device verify before using Wi-Fi?
उत्तर
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
कार्ड ४१०
प्रश्न
What is a zero-day vulnerability?
उत्तर
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
कार्ड ४११
प्रश्न
What does verification confirm after vulnerability remediation?
उत्तर
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
कार्ड ४१२
प्रश्न
What is user and entity behavior analytics?
उत्तर
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
कार्ड ४१३
प्रश्न
What does a physical security policy establish?
उत्तर
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
कार्ड ४१४
प्रश्न
What does a UPS provide?
उत्तर
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
कार्ड ४१५
प्रश्न
What is a nondisclosure agreement?
उत्तर
A contract restricting use and disclosure of defined confidential information.
कार्ड ४१६
प्रश्न
What should be checked before assigning a user permission?
उत्तर
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
कार्ड ४१७
प्रश्न
How does espionage differ from ordinary theft?
उत्तर
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
कार्ड ४१८
प्रश्न
What is password spraying?
उत्तर
Trying a small set of common passwords across many accounts to avoid lockouts.
कार्ड ४१९
प्रश्न
What is the purpose of system isolation during an incident?
उत्तर
Stop harmful communication while preserving the system for response and investigation.
कार्ड ४२०
प्रश्न
What is a security benchmark?
उत्तर
A documented set of recommended configuration checks for a platform or product.
कार्ड ४२१
प्रश्न
Which metadata fields give a log record investigative context?
उत्तर
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
कार्ड ४२२
प्रश्न
What does an access-control vestibule prevent?
उत्तर
It limits tailgating by allowing controlled passage through one door at a time.
कार्ड ४२३
प्रश्न
What is version control's security value for configuration?
उत्तर
It preserves attributable history and enables review or rollback of changes.
कार्ड ४२४
प्रश्न
Why use both internal and external compliance monitoring?
उत्तर
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
कार्ड ४२५
प्रश्न
What distinguishes on-premises architecture?
उत्तर
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
कार्ड ४२६
प्रश्न
What risk can split tunneling add to a VPN?
उत्तर
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
कार्ड ४२७
प्रश्न
What is a certificate root of trust?
उत्तर
A trusted root certificate or key from which a client validates a certificate chain.
कार्ड ४२८
प्रश्न
What is typosquatting?
उत्तर
Registering a look-alike domain based on common typing errors or visual similarity.
कार्ड ४२९
प्रश्न
What is root-cause analysis?
उत्तर
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
कार्ड ४३०
प्रश्न
What is risk tolerance?
उत्तर
The acceptable variation or boundary around a specific objective or risk area.
कार्ड ४३१
प्रश्न
What is a security self-assessment?
उत्तर
A structured internal evaluation in which the organization measures its own controls against selected criteria.
कार्ड ४३२
प्रश्न
What does data masking change?
उत्तर
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
कार्ड ४३३
प्रश्न
How do wireless authentication protocols let clients prove identity securely?
उत्तर
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
कार्ड ४३४
प्रश्न
Why reconcile inventory with network discovery?
उत्तर
Differences expose missing records, retired systems, or unauthorized devices.
कार्ड ४३५
प्रश्न
Why does sideloading raise mobile risk?
उत्तर
It can bypass store review, signing policy, and managed application controls.
कार्ड ४३६
प्रश्न
What does an information-sharing organization add to vulnerability management?
उत्तर
Sector or community intelligence about relevant threats, incidents, and defensive action.
कार्ड ४३७
प्रश्न
What does a web-filter block rule specify?
उत्तर
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
कार्ड ४३८
प्रश्न
How do data custodians and data stewards differ?
उत्तर
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
कार्ड ४३९
प्रश्न
What is a brute-force password attack?
उत्तर
Systematically trying many candidate secrets against an account or protected value.
कार्ड ४४०
प्रश्न
What is a compensating control?
उत्तर
An alternative safeguard used when the preferred control is impractical or unavailable.
कार्ड ४४१
प्रश्न
How can location act as an authentication factor?
उत्तर
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
कार्ड ४४२
प्रश्न
Why must security automation remain supportable?
उत्तर
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
कार्ड ४४३
प्रश्न
What does a standby generator provide?
उत्तर
Longer-duration power during a utility outage, after a startup delay.
कार्ड ४४४
प्रश्न
What makes an architecture air-gapped?
उत्तर
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
कार्ड ४४५
प्रश्न
What is a software-defined WAN?
उत्तर
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
कार्ड ४४६
प्रश्न
What password-management behavior should awareness training reinforce?
उत्तर
Use unique long passwords through an approved manager and report suspected compromise promptly.
कार्ड ४४७
प्रश्न
What security value does fencing provide?
उत्तर
It defines and delays entry across a physical perimeter.
कार्ड ४४८
प्रश्न
What is a wildcard certificate?
उत्तर
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
कार्ड ४४९
प्रश्न
How does misinformation differ from disinformation?
उत्तर
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
कार्ड ४५०
प्रश्न
What is a risk threshold?
उत्तर
A defined level that triggers escalation, treatment, or another required response.
कार्ड ४५१
प्रश्न
What does a vendor penetration test contribute to assessment?
उत्तर
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
कार्ड ४५२
प्रश्न
What is the objective of a service-disruption attack?
उत्तर
Make a system or business function unavailable or unreliable.
कार्ड ४५३
प्रश्न
What is directory traversal?
उत्तर
Manipulating a file path to reach files outside the directory the application intended to expose.
कार्ड ४५४
प्रश्न
Why decommission an unsupported system?
उत्तर
Removing it eliminates an exposure that can no longer be patched or securely maintained.
कार्ड ४५५
प्रश्न
Why archive security-monitoring data?
उत्तर
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
कार्ड ४५६
प्रश्न
What role does RADIUS commonly play in enterprise Wi-Fi?
उत्तर
It centralizes authentication, authorization information, and accounting for network access.
कार्ड ४५७
प्रश्न
Why separate the requester and approver of a high-risk change?
उत्तर
To reduce error, fraud, and unilateral unauthorized modification.
कार्ड ४५८
प्रश्न
Why can a jailbroken device violate a security baseline?
उत्तर
It weakens platform isolation and allows unapproved privileged changes.
कार्ड ४५९
प्रश्न
When is tokenization especially useful?
उत्तर
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
कार्ड ४६०
प्रश्न
Why can dark-web intelligence affect vulnerability priority?
उत्तर
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
कार्ड ४६१
प्रश्न
What firewall policy should govern traffic from a screened subnet to internal systems?
उत्तर
Deny it by default and allow only explicitly required flows.
कार्ड ४६२
प्रश्न
What does SAML commonly carry?
उत्तर
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
कार्ड ४६३
प्रश्न
What does a security governance committee do?
उत्तर
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
कार्ड ४६४
प्रश्न
How can global privacy requirements affect one data process?
उत्तर
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
कार्ड ४६५
प्रश्न
What characterizes an IoT device?
उत्तर
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
कार्ड ४६६
प्रश्न
What is a unified threat management appliance?
उत्तर
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
कार्ड ४६७
प्रश्न
What does a hardware security module provide?
उत्तर
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
कार्ड ४६८
प्रश्न
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
उत्तर
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
कार्ड ४६९
प्रश्न
What is a tabletop exercise?
उत्तर
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
कार्ड ४७०
प्रश्न
What does a risk exemption authorize?
उत्तर
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
कार्ड ४७१
प्रश्न
What is a regulatory examination?
उत्तर
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
कार्ड ४७२
प्रश्न
What does physical video surveillance primarily provide?
उत्तर
Detection and evidence of activity in monitored areas.
कार्ड ४७३
प्रश्न
What is a birthday attack against a hash?
उत्तर
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
कार्ड ४७४
प्रश्न
Why keep backups both onsite and offsite?
उत्तर
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
कार्ड ४७५
प्रश्न
How does technical debt affect security automation?
उत्तर
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
कार्ड ४७६
प्रश्न
What should switch hardening restrict first?
उत्तर
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
कार्ड ४७७
प्रश्न
What should happen when an asset changes owners?
उत्तर
Inventory, access, support responsibility, and data handling should be updated.
कार्ड ४७८
प्रश्न
What does evidence of a vendor's internal audits contribute?
उत्तर
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
कार्ड ४७९
प्रश्न
What is identity attestation?
उत्तर
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
कार्ड ४८०
प्रश्न
Why can standard enterprise patching be unsafe for an RTOS device?
उत्तर
A change can disrupt timing guarantees or certified operational behavior.
कार्ड ४८१
प्रश्न
What is secure access service edge?
उत्तर
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
कार्ड ४८२
प्रश्न
What social-engineering habit should awareness training reinforce?
उत्तर
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
कार्ड ४८३
प्रश्न
How can a software provider introduce a supply-chain vulnerability?
उत्तर
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
कार्ड ४८४
प्रश्न
Why include internet exposure in remediation priority?
उत्तर
A reachable vulnerable service usually has more attack opportunity than an isolated one.
कार्ड ४८५
प्रश्न
What does a mail gateway inspect?
उत्तर
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
कार्ड ४८६
प्रश्न
What is a data controller?
उत्तर
The entity that determines why and how personal data is processed.
कार्ड ४८७
प्रश्न
How does blackmail motivate a cyberattack?
उत्तर
The attacker threatens disclosure or harm unless the victim complies.
कार्ड ४८८
प्रश्न
What is a downgrade attack?
उत्तर
Forcing parties to use an older or weaker protocol or security mode.
कार्ड ४८९
प्रश्न
How does encryption mitigate data exposure?
उत्तर
It makes captured data unreadable without the required key.
कार्ड ४९०
प्रश्न
How do network and web vulnerability scanners differ?
उत्तर
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
कार्ड ४९१
प्रश्न
How can vulnerability-scan data support an investigation?
उत्तर
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
कार्ड ४९२
प्रश्न
What is key escrow?
उत्तर
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
कार्ड ४९३
प्रश्न
Which human vector commonly uses a fake sign-in page to harvest credentials?
उत्तर
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
कार्ड ४९४
प्रश्न
What is risk avoidance?
उत्तर
Stopping or not starting the activity that creates the risk.
कार्ड ४९५
प्रश्न
What is data obfuscation?
उत्तर
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
कार्ड ४९६
प्रश्न
What is a directive control?
उत्तर
A safeguard that tells people what behavior or action is required.
कार्ड ४९७
प्रश्न
What does a security guard add that a camera cannot?
उत्तर
Human judgment and an immediate physical response.
कार्ड ४९८
प्रश्न
Why define restricted activities in change management?
उत्तर
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
कार्ड ४९९
प्रश्न
What contractual impact can noncompliance create?
उत्तर
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
कार्ड ५००
प्रश्न
What should determine backup frequency?
उत्तर
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
कार्ड ५०१
प्रश्न
What should router hardening protect?
उत्तर
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
कार्ड ५०२
प्रश्न
What problem does OAuth 2.0 address?
उत्तर
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
कार्ड ५०३
प्रश्न
What does SCADA do?
उत्तर
It provides supervisory monitoring and control across distributed industrial equipment.
कार्ड ५०४
प्रश्न
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
उत्तर
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
कार्ड ५०५
प्रश्न
What distinguishes a computer virus?
उत्तर
It attaches to a host file or program and spreads when that infected host executes or is shared.
कार्ड ५०६
प्रश्न
What does a key management system coordinate?
उत्तर
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
कार्ड ५०७
प्रश्न
How can an unsecure wired network expose traffic?
उत्तर
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
कार्ड ५०८
प्रश्न
Why is vulnerable device firmware hard to remediate?
उत्तर
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
कार्ड ५०९
प्रश्न
What does patching change in vulnerability remediation?
उत्तर
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
कार्ड ५१०
प्रश्न
What does DMARC add to SPF and DKIM?
उत्तर
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
कार्ड ५११
प्रश्न
How does automation improve security efficiency?
उत्तर
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
कार्ड ५१२
प्रश्न
What is a simulation exercise?
उत्तर
A more realistic practice in which participants respond to injected events using operational processes.
कार्ड ५१३
प्रश्न
What is a data processor?
उत्तर
An entity that processes personal data on behalf of a controller.
कार्ड ५१४
प्रश्न
What is risk mitigation?
उत्तर
Reducing likelihood, impact, or both through controls or process changes.
कार्ड ५१५
प्रश्न
Why monitor a vendor after onboarding?
उत्तर
Security posture, ownership, services, incidents, and dependencies can change.
कार्ड ५१६
प्रश्न
What does a physical penetration test assess?
उत्तर
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
कार्ड ५१७
प्रश्न
Why use access badges at a facility?
उत्तर
To associate entry attempts with authorized identities and enforce access rules.
कार्ड ५१८
प्रश्न
How does permission restriction protect data?
उत्तर
Only authorized identities receive the actions and scope their roles require.
कार्ड ५१९
प्रश्न
What is the usual objective of ransomware extortion?
उत्तर
Force payment by denying access, threatening disclosure, or both.
कार्ड ५२०
प्रश्न
What does impossible travel indicate?
उत्तर
One identity appears to authenticate from distant locations too quickly for legitimate travel.
कार्ड ५२१
प्रश्न
What is configuration enforcement?
उत्तर
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
कार्ड ५२२
प्रश्न
What does a web vulnerability scanner inspect?
उत्तर
Running web behavior for issues such as unsafe input handling and insecure configuration.
कार्ड ५२३
प्रश्न
How does cost affect an architecture choice?
उत्तर
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
कार्ड ५२४
प्रश्न
What does EAP provide with 802.1X?
उत्तर
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
कार्ड ५२५
प्रश्न
What should operational-security training help users protect?
उत्तर
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
कार्ड ५२६
प्रश्न
What does a time-of-day access rule do?
उत्तर
Allows or denies a requested action according to an approved schedule.
कार्ड ५२७
प्रश्न
What should cloud infrastructure hardening establish?
उत्तर
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
कार्ड ५२८
प्रश्न
What should an asset owner ensure during offboarding?
उत्तर
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
कार्ड ५२९
प्रश्न
Why encrypt backups?
उत्तर
Backup media and transfers can expose the same sensitive data as production systems.
कार्ड ५३०
प्रश्न
What is steganography?
उत्तर
Hiding the existence of data inside another medium rather than merely encrypting its contents.
कार्ड ५३१
प्रश्न
Which human vector uses a fabricated authority role to justify a sensitive request?
उत्तर
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
कार्ड ५३२
प्रश्न
Why does risk transfer not remove accountability?
उत्तर
The organization can retain legal, reputational, operational, and oversight consequences.
कार्ड ५३३
प्रश्न
Why validate a change after deployment?
उत्तर
To confirm the intended result occurred without introducing unacceptable side effects.
कार्ड ५३४
प्रश्न
What makes end-of-life hardware a security vulnerability?
उत्तर
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
कार्ड ५३५
प्रश्न
What does an audit add to remediation validation?
उत्तर
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
कार्ड ५३६
प्रश्न
Why can SPF pass while a message still impersonates a brand?
उत्तर
SPF checks the envelope domain, which may differ from the visible From domain.
कार्ड ५३७
प्रश्न
What role can a government entity have in security governance?
उत्तर
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
कार्ड ५३८
प्रश्न
How do data inventory and retention support privacy governance?
उत्तर
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
कार्ड ५३९
प्रश्न
What can concurrent sessions from distant regions indicate?
उत्तर
A stolen account or shared credential, subject to VPN and proxy context.
कार्ड ५४०
प्रश्न
What does supply-chain analysis examine?
उत्तर
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
कार्ड ५४१
प्रश्न
What is the purpose of facility lighting as a control?
उत्तर
Deter covert activity and improve observation of people and areas.
कार्ड ५४२
प्रश्न
What architecture quality keeps a service usable during component failure?
उत्तर
Availability.
कार्ड ५४३
प्रश्न
When is fail-open behavior preferable to fail-closed behavior?
उत्तर
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
कार्ड ५४४
प्रश्न
Which control function does a login-failure alert provide?
उत्तर
Detection; it reveals suspicious authentication activity.
कार्ड ५४५
प्रश्न
What does a biometric MFA implementation verify?
उत्तर
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
कार्ड ५४६
प्रश्न
How can automation enforce a security baseline?
उत्तर
It compares realized settings with the approved state and reports or corrects unauthorized drift.
कार्ड ५४७
प्रश्न
How do wireless cryptographic protocols protect network traffic?
उत्तर
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
कार्ड ५४८
प्रश्न
Why segment sensitive data stores?
उत्तर
It limits reachable paths and separates them from lower-trust workloads.
कार्ड ५४९
प्रश्न
What must remain secret in an asymmetric key pair?
उत्तर
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
कार्ड ५५०
प्रश्न
How can a supplier become a supply-chain attack vector?
उत्तर
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
कार्ड ५५१
प्रश्न
What is e-discovery?
उत्तर
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
कार्ड ५५२
प्रश्न
What characterizes a neutral risk appetite?
उत्तर
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
कार्ड ५५३
प्रश्न
What is passive reconnaissance?
उत्तर
Gathering information without directly interacting with the target's systems.
कार्ड ५५४
प्रश्न
What does a philosophical motive mean for a threat actor?
उत्तर
The actor acts to advance a belief or moral position rather than primarily for money.
कार्ड ५५५
प्रश्न
What does unexpected resource consumption indicate?
उत्तर
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
कार्ड ५५६
प्रश्न
What does a host-based intrusion prevention system do?
उत्तर
It monitors activity on one host and can block behavior that matches exploit or attack rules.
कार्ड ५५७
प्रश्न
How does agent-based monitoring differ from agentless monitoring?
उत्तर
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
कार्ड ५५८
प्रश्न
What can network logs contribute to an investigation?
उत्तर
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
कार्ड ५५९
प्रश्न
What is the purpose of a backup restore test?
उत्तर
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
कार्ड ५६०
प्रश्न
Why can obsolete hardware become a security risk?
उत्तर
It may lack supported firmware, modern protections, or replacement parts.
कार्ड ५६१
प्रश्न
What does rescanning confirm after remediation?
उत्तर
Whether the scanner can still detect the original finding on the affected asset.
कार्ड ५६२
प्रश्न
What should a secure transport method provide?
उत्तर
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
कार्ड ५६३
प्रश्न
How can law affect security governance?
उत्तर
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
कार्ड ५६४
प्रश्न
What does resilience mean for a security architecture?
उत्तर
The ability to withstand disruption, adapt, and recover while preserving essential functions.
कार्ड ५६५
प्रश्न
Why minimize an infrastructure's attack surface?
उत्तर
Fewer exposed services and paths leave fewer opportunities for exploitation.
कार्ड ५६६
प्रश्न
What does executing a security-awareness program require?
उत्तर
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
कार्ड ५६७
प्रश्न
What does an infrared security sensor detect?
उत्तर
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
कार्ड ५६८
प्रश्न
What is a knowledge factor?
उत्तर
Something the claimant knows, such as a password.
कार्ड ५६९
प्रश्न
Why review allow-list and deny-list impact before a change?
उत्तर
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
कार्ड ५७०
प्रश्न
What does partition-level encryption protect?
उत्तर
One selected disk partition, leaving other partitions outside that encryption boundary.
कार्ड ५७१
प्रश्न
How can instant messaging deliver a security attack?
उत्तर
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
कार्ड ५७२
प्रश्न
What can repeated blocked-content events indicate?
उत्तर
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
कार्ड ५७३
प्रश्न
What should a server-hardening baseline reduce?
उत्तर
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
कार्ड ५७४
प्रश्न
When is physical media destruction appropriate?
उत्तर
When reuse is unnecessary or sanitization cannot provide adequate assurance.
कार्ड ५७५
प्रश्न
What is mean time to repair?
उत्तर
The average time required to restore a failed component or service.
कार्ड ५७६
प्रश्न
Why disclose conflicts of interest during vendor selection?
उत्तर
A personal or financial relationship can bias evaluation away from the organization's requirements.
कार्ड ५७७
प्रश्न
What is a fine for noncompliance?
उत्तर
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
कार्ड ५७८
प्रश्न
What does a public data classification authorize?
उत्तर
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
कार्ड ५७९
प्रश्न
What security benefit comes from standard infrastructure configurations?
उत्तर
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
कार्ड ५८०
प्रश्न
How does horizontal scaling increase capacity?
उत्तर
It adds more service instances and distributes work among them.
कार्ड ५८१
प्रश्न
Why can added connectivity weaken segmentation?
उत्तर
Each allowed path can become a route for lateral movement or data escape.
कार्ड ५८२
प्रश्न
What coding practice is central to preventing SQL injection?
उत्तर
Use parameterized queries so untrusted values remain data rather than executable query syntax.
कार्ड ५८३
प्रश्न
When is a compensating control appropriate for a vulnerability?
उत्तर
When timely removal or patching is infeasible and another control can reduce the risk.
कार्ड ५८४
प्रश्न
How does agent-based web filtering enforce policy?
उत्तर
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
कार्ड ५८५
प्रश्न
How can regulation differ from an internal policy?
उत्तर
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
कार्ड ५८६
प्रश्न
What is a storage snapshot?
उत्तर
A point-in-time representation of data or system state, whose independence depends on how it is stored.
कार्ड ५८७
प्रश्न
What does password age measure?
उत्तर
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
कार्ड ५८८
प्रश्न
What does an ethical motive mean in vulnerability research?
उत्तर
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
कार्ड ५८९
प्रश्न
What can missing security logs indicate?
उत्तर
Logging failure, tampering, retention misconfiguration, or an inactive source.
कार्ड ५९०
प्रश्न
Why disable unused ports and protocols?
उत्तर
They expose unnecessary communication paths and code that attackers can reach.
कार्ड ५९१
प्रश्न
What does antivirus contribute to monitoring?
उत्तर
It scans files, memory, or behavior and reports suspected malicious code.
कार्ड ५९२
प्रश्न
What is a honeypot?
उत्तर
A decoy system or service designed to attract and observe malicious activity.
कार्ड ५९३
प्रश्न
What does file-level encryption protect?
उत्तर
Selected files independently of whether the rest of the disk or volume is encrypted.
कार्ड ५९४
प्रश्न
How can SMS deliver a security attack?
उत्तर
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
कार्ड ५९५
प्रश्न
What happens during incident analysis?
उत्तर
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
कार्ड ५९६
प्रश्न
What is mean time between failures?
उत्तर
The average operating time between repairable failures.
कार्ड ५९७
प्रश्न
What is active reconnaissance?
उत्तर
Probing or interacting with target systems to discover services and behavior.
कार्ड ५९८
प्रश्न
What constraint should guide ICS or SCADA hardening?
उत्तर
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
कार्ड ५९९
प्रश्न
Which control function does restoring a clean system image provide?
उत्तर
Correction; it returns the system to a known-good state.
कार्ड ६००
प्रश्न
What does responsiveness mean in an architecture decision?
उत्तर
How quickly the system and its operators can adapt to demand, failure, or attack.
कार्ड ६०१
प्रश्न
How does out-of-band access strengthen remote administration?
उत्तर
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
कार्ड ६०२
प्रश्न
What makes user behavior unexpected?
उत्तर
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
कार्ड ६०३
प्रश्न
What is a work order?
उत्तर
A document authorizing a defined unit of work under an existing agreement.
कार्ड ६०४
प्रश्न
What can out-of-cycle logging indicate?
उत्तर
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
कार्ड ६०५
प्रश्न
Why update a standard operating procedure after a change?
उत्तर
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
कार्ड ६०६
प्रश्न
What coding practice limits cross-site scripting?
उत्तर
Context-appropriate output encoding, supported by safe templating and input handling.
कार्ड ६०७
प्रश्न
What does a restricted data classification indicate?
उत्तर
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
कार्ड ६०८
प्रश्न
How does a bug bounty support responsible disclosure?
उत्तर
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
कार्ड ६०९
प्रश्न
What does web-filter content categorization provide?
उत्तर
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
कार्ड ६१०
प्रश्न
How do hard and soft authentication tokens differ?
उत्तर
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
कार्ड ६११
प्रश्न
How can industry requirements affect security governance?
उत्तर
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
कार्ड ६१२
प्रश्न
How can noncompliance cause loss of a license?
उत्तर
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
कार्ड ६१३
प्रश्न
What does volume-level encryption protect?
उत्तर
All data within a selected logical storage volume.
कार्ड ६१४
प्रश्न
How can impersonation exploit familiarity?
उत्तर
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
कार्ड ६१५
प्रश्न
How does RTO guide recovery design?
उत्तर
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
कार्ड ६१६
प्रश्न
What is a honeynet?
उत्तर
A network of decoy systems used to study or divert attackers.
कार्ड ६१७
प्रश्न
What does backup replication provide?
उत्तर
Additional synchronized or copied recovery data in another system or location.
कार्ड ६१८
प्रश्न
What lets automation scale securely?
उत्तर
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
कार्ड ६१९
प्रश्न
Why monitor a hardened computing resource continuously?
उत्तर
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
कार्ड ६२०
प्रश्न
Why keep a certificate of destruction?
उत्तर
It documents that a disposal provider handled specified media under the agreed process.
कार्ड ६२१
प्रश्न
Why consider patch availability before selecting a platform?
उत्तर
Unsupported or difficult-to-update components accumulate known exposure.
कार्ड ६२२
प्रश्न
Why should remote administration use an encrypted, authenticated protocol?
उत्तर
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
कार्ड ६२३
प्रश्न
How can revenge motivate an insider incident?
उत्तर
A disgruntled person may damage systems or disclose data to punish the organization.
कार्ड ६२४
प्रश्न
What is a published or documented indicator of malicious activity?
उत्तर
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
कार्ड ६२५
प्रश्न
Why monitor a system more closely when a mitigation exception is accepted?
उत्तर
Monitoring can reveal exploitation or control failure while the documented exception remains open.
कार्ड ६२६
प्रश्न
What is an SNMP trap?
उत्तर
An unsolicited device notification sent to a management system when a configured event occurs.
कार्ड ६२७
प्रश्न
How can an automated report support an investigation?
उत्तर
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
कार्ड ६२८
प्रश्न
What is a security key?
उत्तर
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
कार्ड ६२९
प्रश्न
What does database-level encryption protect?
उत्तर
A database or selected database structures through controls managed at the database layer.
कार्ड ६३०
प्रश्न
How does brand impersonation exploit trust?
उत्तर
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
कार्ड ६३१
प्रश्न
What browser-side impact can a cross-site scripting vulnerability create?
उत्तर
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
कार्ड ६३२
प्रश्न
How can a system or process audit identify vulnerabilities?
उत्तर
It compares evidence with required configuration and procedure to reveal control gaps.
कार्ड ६३३
प्रश्न
What security role can Group Policy provide?
उत्तर
Centralized Windows configuration of account, application, audit, and system security settings.
कार्ड ६३४
प्रश्न
What should incident-response training prepare people to do?
उत्तर
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
कार्ड ६३५
प्रश्न
Why must governance track local or regional requirements?
उत्तर
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
कार्ड ६३६
प्रश्न
How can a dependency become a useful key risk indicator?
उत्तर
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
कार्ड ६३७
प्रश्न
What is a business partners agreement?
उत्तर
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
कार्ड ६३८
प्रश्न
What makes an audit regulatory?
उत्तर
It evaluates compliance with requirements established or enforced by a government or delegated authority.
कार्ड ६३९
प्रश्न
What is a honeyfile?
उत्तर
A decoy file whose access can reveal unauthorized activity.
कार्ड ६४०
प्रश्न
Why does legal information require explicit protection?
उत्तर
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
कार्ड ६४१
प्रश्न
Which indicator can mass file renaming and encryption produce?
उत्तर
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
कार्ड ६४२
प्रश्न
What remains with an organization after transferring architecture risk?
उत्तर
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
कार्ड ६४३
प्रश्न
When does local console placement provide useful administrative access?
उत्तर
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
कार्ड ६४४
प्रश्न
What makes a harmful user action unintentional?
उत्तर
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
कार्ड ६४५
प्रश्न
How should an organization harden workstations?
उत्तर
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
कार्ड ६४६
प्रश्न
What is journaling in recovery?
उत्तर
Recording ordered changes so data can be replayed or restored to a consistent point.
कार्ड ६४७
प्रश्न
What downtime must a change plan account for?
उत्तर
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
कार्ड ६४८
प्रश्न
Why must a privacy program map local or regional law to data flows?
उत्तर
The applicable duties can change with the location of the person, organization, processing, or stored data.
कार्ड ६४९
प्रश्न
Why combine independent preventive controls at different layers?
उत्तर
A failure at one layer does not automatically let the same attack succeed at the next layer.
कार्ड ६५०
प्रश्न
What is passwordless authentication?
उत्तर
A flow that does not require the user to enter a memorized password, often using public-key credentials.
कार्ड ६५१
प्रश्न
How can automation improve security reaction time?
उत्तर
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
कार्ड ६५२
प्रश्न
What does record-level encryption protect?
उत्तर
Individual records or fields, allowing finer protection than encrypting the entire database.
कार्ड ६५३
प्रश्न
How can business email compromise misuse urgency?
उत्तर
It pressures an employee to bypass normal verification for a payment, credential, or data request.
कार्ड ६५४
प्रश्न
What does impact measure in risk analysis?
उत्तर
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
कार्ड ६५५
प्रश्न
What makes cyber activity part of warfare?
उत्तर
It supports military or state conflict objectives such as disruption, intelligence, or influence.
कार्ड ६५६
प्रश्न
Which indicator can a newly created privileged account produce outside the normal change window?
उत्तर
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
कार्ड ६५७
प्रश्न
How can configuration enforcement validate a deployed mitigation?
उत्तर
It compares the realized settings with the approved state and corrects or reports drift.
कार्ड ६५८
प्रश्न
How does validating an alert improve alert tuning?
उत्तर
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
कार्ड ६५९
प्रश्न
What data-layer impact can a SQL injection vulnerability create?
उत्तर
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
कार्ड ६६०
प्रश्न
What environmental variables can change vulnerability priority?
उत्तर
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
कार्ड ६६१
प्रश्न
What security role does SELinux provide?
उत्तर
Mandatory access controls that confine processes according to centrally defined policy.
कार्ड ६६२
प्रश्न
Why review governance documents periodically?
उत्तर
Business, technology, threats, and external obligations change.
कार्ड ६६३
प्रश्न
Why evaluate power requirements for a system design?
उत्तर
Power capacity and redundancy constrain availability and recovery.
कार्ड ६६४
प्रश्न
When is IPsec a better tunnel choice than TLS?
उत्तर
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
कार्ड ६६५
प्रश्न
What is a honeytoken?
उत्तर
A fake credential or data element that generates a high-confidence alert when used.
कार्ड ६६६
प्रश्न
What should embedded-system hardening prioritize?
उत्तर
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
कार्ड ६६७
प्रश्न
Why must sanitization address data remanence?
उत्तर
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
कार्ड ६६८
प्रश्न
Why require rules of engagement for vendor testing?
उत्तर
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
कार्ड ६६९
प्रश्न
What does a private data classification indicate?
उत्तर
The information concerns an individual or limited internal audience and should not be exposed publicly.
कार्ड ६७०
प्रश्न
What does a tabletop recovery exercise test?
उत्तर
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
कार्ड ६७१
प्रश्न
Why prevent password reuse?
उत्तर
One compromised password should not unlock other accounts or services.
कार्ड ६७२
प्रश्न
Which malicious-activity indicator is unexplained sustained CPU or memory use?
उत्तर
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
कार्ड ६७३
प्रश्न
What does transport encryption protect?
उत्तर
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
कार्ड ६७४
प्रश्न
How can a voice call become an attack vector?
उत्तर
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
कार्ड ६७५
प्रश्न
What should a digital-forensics report document?
उत्तर
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
कार्ड ६७६
प्रश्न
What tradeoff comes with an expansionary risk appetite?
उत्तर
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
कार्ड ६७७
प्रश्न
What does a known penetration-test environment provide?
उत्तर
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
कार्ड ६७८
प्रश्न
Why evaluate compute requirements before deployment?
उत्तर
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
कार्ड ६७९
प्रश्न
Why place sensors at network choke points?
उत्तर
They can observe traffic crossing important trust boundaries.
कार्ड ६८०
प्रश्न
What should hybrid or remote-work security training emphasize?
उत्तर
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
कार्ड ६८१
प्रश्न
Why plan an application restart separately from a service restart?
उत्तर
The application may need its own state handling, user coordination, health checks, and rollback point.
कार्ड ६८२
प्रश्न
What is a cryptographic vulnerability?
उत्तर
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
कार्ड ६८३
प्रश्न
Why report findings by asset owner?
उत्तर
Owners need clear accountability and a prioritized remediation queue.
कार्ड ६८४
प्रश्न
What should guide selection of a secure protocol?
उत्तर
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
कार्ड ६८५
प्रश्न
How do centralized and decentralized governance structures differ?
उत्तर
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
कार्ड ६८६
प्रश्न
How does privacy-aware design limit data retention?
उत्तर
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
कार्ड ६८७
प्रश्न
What does a pressure security sensor detect?
उत्तर
Force or weight applied to a protected surface, such as a floor mat or fence line.
कार्ड ६८८
प्रश्न
What automation costs should a security team plan for?
उत्तर
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
कार्ड ६८९
प्रश्न
What should RTOS hardening preserve while reducing attack surface?
उत्तर
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
कार्ड ६९०
प्रश्न
What is the goal of disruption-for-chaos activity?
उत्तर
Create instability or damage itself rather than pursue a clear financial or intelligence return.
कार्ड ६९१
प्रश्न
Which indicator can repeated password guessing produce?
उत्तर
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
कार्ड ६९२
प्रश्न
How does removing unnecessary software harden a system?
उत्तर
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
कार्ड ६९३
प्रश्न
What does NetFlow provide?
उत्तर
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
कार्ड ६९४
प्रश्न
How can a dashboard support an investigation?
उत्तर
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
कार्ड ६९५
प्रश्न
When should a password be expired?
उत्तर
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
कार्ड ६९६
प्रश्न
Why does cryptographic key length matter?
उत्तर
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
कार्ड ६९७
प्रश्न
How can an unsecure Bluetooth connection become an attack vector?
उत्तर
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
कार्ड ६९८
प्रश्न
What is a key risk indicator?
उत्तर
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
कार्ड ६९९
प्रश्न
What should vendor monitoring verify when a contract ends?
उत्तर
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
कार्ड ७००
प्रश्न
What does a sensitive data classification indicate?
उत्तर
The information needs safeguards because unauthorized access, change, or loss could cause harm.
कार्ड ७०१
प्रश्न
What does software-defined networking separate?
उत्तर
The control plane that decides traffic behavior from the data plane that forwards traffic.
कार्ड ७०२
प्रश्न
Where should a web application firewall be placed?
उत्तर
In the path of web requests before they reach the protected application.
कार्ड ७०३
प्रश्न
What does a simulated recovery exercise test?
उत्तर
Participants perform realistic response actions in a controlled environment without disrupting production.
कार्ड ७०४
प्रश्न
How can a team verify that a detective control is effective?
उत्तर
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
कार्ड ७०५
प्रश्न
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
उत्तर
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
कार्ड ७०६
प्रश्न
What makes a vulnerability cloud-specific?
उत्तर
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
कार्ड ७०७
प्रश्न
How can insurance respond to vulnerability risk?
उत्तर
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
कार्ड ७०८
प्रश्न
How does reputation improve web filtering?
उत्तर
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
कार्ड ७०९
प्रश्न
What does an encryption policy establish?
उत्तर
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
कार्ड ७१०
प्रश्न
How does a microwave security sensor detect movement?
उत्तर
It emits microwave energy and detects changes in the reflected signal caused by motion.
कार्ड ७११
प्रश्न
What should IoT-device hardening change before deployment?
उत्तर
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
कार्ड ७१२
प्रश्न
Why track software licenses as assets?
उत्तर
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
कार्ड ७१३
प्रश्न
What does a password manager improve?
उत्तर
It can generate and store unique long passwords so users do not memorize or reuse them.
कार्ड ७१४
प्रश्न
What makes a ledger open and public?
उत्तर
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
कार्ड ७१५
प्रश्न
What should a payment-change request trigger?
उत्तर
Independent verification through a known channel before any account or payment detail is changed.
कार्ड ७१६
प्रश्न
What does preserving digital evidence require?
उत्तर
Protecting its integrity, context, access history, and availability from collection through final disposition.
कार्ड ७१७
प्रश्न
What should a risk report tell decision-makers?
उत्तर
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
कार्ड ७१८
प्रश्न
What should an external assessment report provide?
उत्तर
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
कार्ड ७१९
प्रश्न
What is a centralized design's main resilience risk?
उत्तर
A central dependency can become a bottleneck or single point of failure.
कार्ड ७२०
प्रश्न
What does mutual TLS add to a TLS-protected service connection?
उत्तर
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
कार्ड ७२१
प्रश्न
What should recurring security-awareness reporting show?
उत्तर
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
कार्ड ७२२
प्रश्न
Why do legacy applications require extra change planning?
उत्तर
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
कार्ड ७२३
प्रश्न
How do a data controller and a data processor differ?
उत्तर
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
कार्ड ७२४
प्रश्न
How can orchestration become a single point of failure?
उत्तर
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
कार्ड ७२५
प्रश्न
Why should defenses account for a threat actor's sophistication and capability?
उत्तर
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
कार्ड ७२६
प्रश्न
How does an injection attack make an application execute unintended instructions?
उत्तर
It sends crafted input that an interpreter treats as code or commands instead of data.
कार्ड ७२७
प्रश्न
What does a host-based firewall control?
उत्तर
Inbound and outbound network traffic for one endpoint according to local rules.
कार्ड ७२८
प्रश्न
Why revise alerting after an incident?
उत्तर
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
कार्ड ७२९
प्रश्न
Why include security duties in procurement criteria?
उत्तर
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
कार्ड ७३०
प्रश्न
What does a critical data classification indicate?
उत्तर
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
कार्ड ७३१
प्रश्न
What infrastructure capacity must support failover?
उत्तर
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
कार्ड ७३२
प्रश्न
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
उत्तर
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
कार्ड ७३३
प्रश्न
How does a remediation exemption differ from an exception?
उत्तर
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
कार्ड ७३४
प्रश्न
Why should automated EDR or XDR blocking have an exception and rollback path?
उत्तर
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
कार्ड ७३५
प्रश्न
What does a security playbook provide?
उत्तर
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
कार्ड ७३६
प्रश्न
How does an ultrasonic security sensor detect movement?
उत्तर
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
कार्ड ७३७
प्रश्न
What should a managed mobile device require for Bluetooth connections?
उत्तर
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
कार्ड ७३८
प्रश्न
How do password complexity rules differ from password length?
उत्तर
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
कार्ड ७३९
प्रश्न
What makes a certificate third-party trusted?
उत्तर
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
कार्ड ७४०
प्रश्न
Why is an out-of-band check effective against impersonation?
उत्तर
It verifies the request through a separate, previously trusted communication path.
कार्ड ७४१
प्रश्न
What does a risk exception authorize?
उत्तर
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
कार्ड ७४२
प्रश्न
What security challenge grows in a decentralized design?
उत्तर
Consistent policy, inventory, monitoring, and patching become harder.
कार्ड ७४३
प्रश्न
How should controls be selected for an unused network path?
उत्तर
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
कार्ड ७४४
प्रश्न
How can a buffer-overflow attack affect an application?
उत्तर
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
७४४ कार्डे
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
अभ्यास सुरू करण्यासाठी Nibomo उघडेल.