What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

Autor Flashcards Open Source App

O tej talii

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Karty w tej talii

Karta 1
Pytanie
What does an information security policy establish?
Odpowiedź
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Karta 2
Pytanie
What is phishing?
Odpowiedź
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Karta 3
Pytanie
What does a public-key certificate bind to an identity?
Odpowiedź
A public key, together with identifying information and the issuer's signature.
Karta 4
Pytanie
What is data at rest?
Odpowiedź
Data stored on media such as disks, databases, backups, or mobile devices.
Karta 5
Pytanie
How does policy-driven access control decide a zero-trust access request?
Odpowiedź
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Karta 6
Pytanie
What does establishing a secure baseline produce?
Odpowiedź
An approved, documented configuration that defines the required secure state for a class of computing resource.
Karta 7
Pytanie
What is hashing used to verify?
Odpowiedź
Whether data has changed by comparing fixed-length digest values.
Karta 8
Pytanie
What is impersonation in social engineering?
Odpowiedź
Pretending to be a trusted person or organization to obtain access, data, or action.
Karta 9
Pytanie
What is virtualization?
Odpowiedź
Abstracting physical compute so multiple isolated guest systems can share a host.
Karta 10
Pytanie
What is chain of custody?
Odpowiedź
A documented history of who collected, handled, transferred, stored, and examined evidence.
Karta 11
Pytanie
What is quantitative risk analysis?
Odpowiedź
Estimating risk with numerical values such as money, frequency, or probability.
Karta 12
Pytanie
What is a phishing awareness campaign?
Odpowiedź
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Karta 13
Pytanie
What is high availability?
Odpowiedź
Designing a service to remain accessible despite expected component failures.
Karta 14
Pytanie
What is a network security zone?
Odpowiedź
A group of systems with similar trust, function, or control requirements.
Karta 15
Pytanie
What is risk transfer?
Odpowiedź
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Karta 16
Pytanie
What is media sanitization?
Odpowiedź
Making stored data infeasible to recover for the intended level of protection.
Karta 17
Pytanie
What does CVSS provide?
Odpowiedź
A standardized way to describe a vulnerability's technical severity characteristics.
Karta 18
Pytanie
What does security alerting do?
Odpowiedź
It turns matched events or behavior into a notification that the right responder can review.
Karta 19
Pytanie
What does a firewall rule enforce?
Odpowiedź
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Karta 20
Pytanie
What is deprovisioning?
Odpowiedź
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Karta 21
Pytanie
How does inline placement differ from a tap or monitor port?
Odpowiedź
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Karta 22
Pytanie
What is asymmetric encryption?
Odpowiedź
Encryption that uses a mathematically related public and private key pair.
Karta 23
Pytanie
What does SPF authorize?
Odpowiedź
Which mail servers may send mail for a domain in the SMTP envelope.
Karta 24
Pytanie
What is a possession factor?
Odpowiedź
Something the claimant has, such as a cryptographic authenticator.
Karta 25
Pytanie
What does ordinary TLS usually protect and authenticate?
Odpowiedź
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Karta 26
Pytanie
What is single loss expectancy?
Odpowiedź
The estimated loss from one occurrence of a risk event.
Karta 27
Pytanie
What does a certificate authority do?
Odpowiedź
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Karta 28
Pytanie
What is a detective control meant to do?
Odpowiedź
Identify that an unwanted event has happened or is happening.
Karta 29
Pytanie
What is the security purpose of change-control approval?
Odpowiedź
Ensure authorized reviewers assess risk before the production change occurs.
Karta 30
Pytanie
What is shadow IT?
Odpowiedź
Technology used for organizational work without required approval or oversight.
Karta 31
Pytanie
What is a buffer overflow vulnerability?
Odpowiedź
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Karta 32
Pytanie
What is ransomware?
Odpowiedź
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Karta 33
Pytanie
How does network segmentation limit an incident?
Odpowiedź
It restricts communication paths and reduces lateral movement between zones.
Karta 34
Pytanie
How do load balancing and clustering support availability differently?
Odpowiedź
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Karta 35
Pytanie
What is vendor due diligence?
Odpowiedź
Evaluating a provider's security, capability, stability, and fit before commitment.
Karta 36
Pytanie
Who is a data subject?
Odpowiedź
The person whose personal data is collected or processed.
Karta 37
Pytanie
What is attestation?
Odpowiedź
A formal assertion or report about a subject matter, often supported by an independent examination.
Karta 38
Pytanie
What is a replay attack?
Odpowiedź
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Karta 39
Pytanie
What does a wireless site survey establish?
Odpowiedź
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Karta 40
Pytanie
What is the time-of-check stage of a race-condition vulnerability?
Odpowiedź
The application verifies a condition or resource state before acting on it.
Karta 41
Pytanie
What is a penetration test?
Odpowiedź
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Karta 42
Pytanie
What is a cold recovery site?
Odpowiedź
A facility with basic space and utilities but little preinstalled technology or current data.
Karta 43
Pytanie
What is data in transit?
Odpowiedź
Data moving between systems or across a network.
Karta 44
Pytanie
What is a vendor security questionnaire?
Odpowiedź
A structured request for information about a provider's controls and practices.
Karta 45
Pytanie
How does an internal actor's starting position differ from an external actor's?
Odpowiedź
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Karta 46
Pytanie
What can unexpected account lockouts indicate?
Odpowiedź
Password guessing, credential stuffing, user error, or a broken client.
Karta 47
Pytanie
How do permissions enforce access control?
Odpowiedź
They specify which actions a subject may perform on a particular resource.
Karta 48
Pytanie
What is log aggregation?
Odpowiedź
Central collection of logs from multiple sources for search, correlation, and retention.
Karta 49
Pytanie
Why plan a service restart as part of a change?
Odpowiedź
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Karta 50
Pytanie
What is infrastructure as code?
Odpowiedź
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Karta 51
Pytanie
What should security-awareness program development start with?
Odpowiedź
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Karta 52
Pytanie
What is a voice-based social-engineering attack called?
Odpowiedź
Vishing.
Karta 53
Pytanie
What happens during incident-response preparation?
Odpowiedź
Teams establish people, tools, access, communications, training, and procedures before an incident.
Karta 54
Pytanie
What does an offensive penetration-testing team do?
Odpowiedź
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Karta 55
Pytanie
What is federation?
Odpowiedź
One security domain relies on identity assertions from another trusted domain.
Karta 56
Pytanie
What is asset classification?
Odpowiedź
Grouping an asset by sensitivity, criticality, or required handling.
Karta 57
Pytanie
What is cross-site scripting?
Odpowiedź
Injection of script-capable content that a browser executes in another site's security context.
Karta 58
Pytanie
What can IDS or IPS trends reveal?
Odpowiedź
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Karta 59
Pytanie
What can unexpected resource inaccessibility indicate?
Odpowiedź
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Karta 60
Pytanie
What is a corrective control meant to do?
Odpowiedź
Limit damage and restore a secure state after an event.
Karta 61
Pytanie
How do containers differ from virtual machines?
Odpowiedź
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Karta 62
Pytanie
How does an active security device differ from a passive one?
Odpowiedź
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Karta 63
Pytanie
Why is unsupported software a persistent attack surface?
Odpowiedź
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Karta 64
Pytanie
What is annualized rate of occurrence?
Odpowiedź
The estimated number of times a risk event occurs per year.
Karta 65
Pytanie
What is an inherence factor?
Odpowiedź
A biometric characteristic of the claimant.
Karta 66
Pytanie
What do a threat actor's sophistication and capability describe?
Odpowiedź
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Karta 67
Pytanie
What is a SIEM?
Odpowiedź
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Karta 68
Pytanie
What is sideloading?
Odpowiedź
Installing software from outside the platform's approved distribution path.
Karta 69
Pytanie
What does an IDS or IPS signature match?
Odpowiedź
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Karta 70
Pytanie
Why are embedded systems often difficult to patch?
Odpowiedź
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Karta 71
Pytanie
What is a virtual private network?
Odpowiedź
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Karta 72
Pytanie
What should an initial security-awareness report establish?
Odpowiedź
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Karta 73
Pytanie
What is symmetric encryption?
Odpowiedź
Encryption that uses the same secret key to encrypt and decrypt data.
Karta 74
Pytanie
What happens during incident detection?
Odpowiedź
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Karta 75
Pytanie
What is recovery time objective?
Odpowiedź
The target maximum time to restore a function after disruption.
Karta 76
Pytanie
Why prioritize password length?
Odpowiedź
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Karta 77
Pytanie
What must sanitization accomplish before an asset leaves organizational control?
Odpowiedź
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Karta 78
Pytanie
What is a real-time operating system designed to provide?
Odpowiedź
Predictable response timing for tasks with strict deadlines.
Karta 79
Pytanie
What does fail-open behavior do when a control fails?
Odpowiedź
It permits traffic or access to preserve availability.
Karta 80
Pytanie
What is jailbreaking or rooting a mobile device?
Odpowiedź
Removing platform restrictions to gain privileged control over the operating system.
Karta 81
Pytanie
What does network access control enforce?
Odpowiedź
Identity, device posture, and access policy at network connection time and during a session.
Karta 82
Pytanie
What does data loss prevention do?
Odpowiedź
Detects and may block sensitive data use or transfer that violates policy.
Karta 83
Pytanie
What security property does a blockchain provide?
Odpowiedź
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Karta 84
Pytanie
What is recovery point objective?
Odpowiedź
The target maximum acceptable data loss measured backward in time.
Karta 85
Pytanie
How do ICS and SCADA relate?
Odpowiedź
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Karta 86
Pytanie
What does fail-closed behavior do when a control fails?
Odpowiedź
It denies traffic or access to preserve security.
Karta 87
Pytanie
Which keys create and verify a typical digital signature?
Odpowiedź
The signer creates it with a private key, and others verify it with the corresponding public key.
Karta 88
Pytanie
What is SQL injection?
Odpowiedź
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Karta 89
Pytanie
What does DKIM verify?
Odpowiedź
That selected message content was signed by a domain and was not altered after signing.
Karta 90
Pytanie
What is post-incident activity?
Odpowiedź
Learning from the event and improving controls, plans, and recovery based on evidence.
Karta 91
Pytanie
What characterizes an expansionary risk appetite?
Odpowiedź
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Karta 92
Pytanie
How do centralized and decentralized architectures differ?
Odpowiedź
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Karta 93
Pytanie
What does a certificate revocation list publish?
Odpowiedź
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Karta 94
Pytanie
What is a legal hold?
Odpowiedź
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Karta 95
Pytanie
What is exposure factor in quantitative risk analysis?
Odpowiedź
The estimated percentage of an asset's value lost in one event.
Karta 96
Pytanie
What is decentralized architecture?
Odpowiedź
Control or service responsibility is distributed across multiple independent components or locations.
Karta 97
Pytanie
What is tokenization?
Odpowiedź
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Karta 98
Pytanie
How can automation act as a workforce multiplier?
Odpowiedź
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Karta 99
Pytanie
What can endpoint process logs reveal?
Odpowiedź
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Karta 100
Pytanie
What does the CIA triad protect?
Odpowiedź
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Karta 101
Pytanie
How does data masking protect information?
Odpowiedź
It hides selected values or characters while preserving a usable representation.
Karta 102
Pytanie
How can a national requirement affect security governance?
Odpowiedź
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Karta 103
Pytanie
What do integrations and APIs provide to security orchestration?
Odpowiedź
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Karta 104
Pytanie
What makes a compliance report external?
Odpowiedź
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Karta 105
Pytanie
What does a cryptographic algorithm define?
Odpowiedź
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Karta 106
Pytanie
Why compare systems with a secure baseline regularly?
Odpowiedź
To detect drift, unauthorized changes, and missing hardening.
Karta 107
Pytanie
What does integrity protect?
Odpowiedź
The accuracy and completeness of data and systems against unauthorized change.
Karta 108
Pytanie
What does vulnerability classification organize?
Odpowiedź
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Karta 109
Pytanie
What does a password standard define?
Odpowiedź
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Karta 110
Pytanie
What technology capacity must a recovery design plan for?
Odpowiedź
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Karta 111
Pytanie
What does a confidential data classification indicate?
Odpowiedź
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Karta 112
Pytanie
What makes a vendor assessment independent?
Odpowiedź
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Karta 113
Pytanie
What lets a worm spread without attaching itself to another file?
Odpowiedź
It is a standalone program that replicates across reachable systems or services.
Karta 114
Pytanie
What is microsegmentation?
Odpowiedź
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Karta 115
Pytanie
What can application logs reveal?
Odpowiedź
Transactions, errors, user actions, and application-specific security events.
Karta 116
Pytanie
What does deploying a secure baseline require?
Odpowiedź
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Karta 117
Pytanie
How can resource-provisioning automation improve security?
Odpowiedź
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Karta 118
Pytanie
What does availability protect?
Odpowiedź
Reliable, timely access to systems and data when authorized users need them.
Karta 119
Pytanie
Why must a change request describe business impact?
Odpowiedź
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Karta 120
Pytanie
What does an authenticated vulnerability scan add?
Odpowiedź
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Karta 121
Pytanie
What does a change-management procedure specify?
Odpowiedź
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Karta 122
Pytanie
What is a sanction for noncompliance?
Odpowiedź
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Karta 123
Pytanie
How can email deliver a security attack?
Odpowiedź
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Karta 124
Pytanie
What is an internal compliance audit?
Odpowiedź
An organization-led examination of whether selected operations and controls meet defined requirements.
Karta 125
Pytanie
What is a Trojan?
Odpowiedź
Malware disguised as legitimate or desirable software.
Karta 126
Pytanie
What is clustering?
Odpowiedź
Multiple systems work together to provide a service and tolerate member failure.
Karta 127
Pytanie
What makes data regulated?
Odpowiedź
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Karta 128
Pytanie
What does a wireless heat map show?
Odpowiedź
Measured or modeled signal strength and coverage across a physical area.
Karta 129
Pytanie
How should vendor criticality affect due diligence?
Odpowiedź
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Karta 130
Pytanie
How can a digital signature support non-repudiation?
Odpowiedź
It provides evidence that the holder of a private key signed specific data.
Karta 131
Pytanie
What should vulnerability prioritization consider beyond severity?
Odpowiedź
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Karta 132
Pytanie
What is a security guideline?
Odpowiedź
Recommended practice that allows judgment unless adopted as a requirement.
Karta 133
Pytanie
What usually distinguishes a nation-state threat actor?
Odpowiedź
Strategic objectives, substantial resources, patience, and advanced operational capability.
Karta 134
Pytanie
What is spyware?
Odpowiedź
Software that secretly collects information about a user or system.
Karta 135
Pytanie
Why maintain an allow list for applications?
Odpowiedź
Only explicitly approved software is permitted to execute.
Karta 136
Pytanie
How can an image become an attack vector?
Odpowiedź
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Karta 137
Pytanie
What makes a security control technical?
Odpowiedź
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Karta 138
Pytanie
What is identity proofing?
Odpowiedź
Establishing that a person is who they claim to be before issuing an account or credential.
Karta 139
Pytanie
What is an automated security guardrail?
Odpowiedź
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Karta 140
Pytanie
Why assign an owner to a planned change?
Odpowiedź
To make one party accountable for coordination, execution, and follow-through.
Karta 141
Pytanie
How can national privacy law affect data handling?
Odpowiedź
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Karta 142
Pytanie
What is continuity of operations?
Odpowiedź
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Karta 143
Pytanie
What security tradeoff comes with BYOD?
Odpowiedź
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Karta 144
Pytanie
How should policies and handbooks support security training?
Odpowiedź
They provide accessible, current rules and reporting steps that training can apply to real situations.
Karta 145
Pytanie
What is a keylogger?
Odpowiedź
A tool that records keystrokes to capture data such as credentials.
Karta 146
Pytanie
What makes information a trade secret?
Odpowiedź
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Karta 147
Pytanie
What does authentication establish?
Odpowiedź
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Karta 148
Pytanie
What risk comes from an untrusted file attachment?
Odpowiedź
Opening or parsing it can execute malicious code or expose data.
Karta 149
Pytanie
How does risk tolerance affect vulnerability remediation?
Odpowiedź
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Karta 150
Pytanie
How can a global requirement affect security governance?
Odpowiedź
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Karta 151
Pytanie
Why should questionnaire answers be supported by evidence?
Odpowiedź
Self-assertions alone may not prove that controls are designed or operating effectively.
Karta 152
Pytanie
What is an independent third-party audit?
Odpowiedź
An external party with suitable independence examines evidence against defined criteria.
Karta 153
Pytanie
What do account provisioning and deprovisioning do?
Odpowiedź
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Karta 154
Pytanie
What is an unskilled attacker commonly called?
Odpowiedź
A script kiddie: someone who relies on tools or instructions created by others.
Karta 155
Pytanie
What is a rootkit?
Odpowiedź
Software designed to maintain privileged, concealed access by altering or subverting the system.
Karta 156
Pytanie
What does an access control list enforce?
Odpowiedź
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Karta 157
Pytanie
What should system security monitoring observe?
Odpowiedź
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Karta 158
Pytanie
What can operating-system security logs reveal?
Odpowiedź
Authentication, privilege use, policy changes, services, and other host security events.
Karta 159
Pytanie
Why isolate operational technology from general business networks?
Odpowiedź
To limit attack paths into safety- and availability-critical processes.
Karta 160
Pytanie
What is the COPE mobile deployment model?
Odpowiedź
The organization owns the device but permits defined personal use while retaining management control.
Karta 161
Pytanie
What security work belongs in asset acquisition and procurement?
Odpowiedź
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Karta 162
Pytanie
How can user-provisioning automation improve security?
Odpowiedź
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Karta 163
Pytanie
What people capacity must a continuity plan account for?
Odpowiedź
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Karta 164
Pytanie
What do authorization models define?
Odpowiedź
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Karta 165
Pytanie
Why are removable devices an attack vector?
Odpowiedź
They can introduce malware or remove data while bypassing network controls.
Karta 166
Pytanie
What should predeployment change-test results show?
Odpowiedź
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Karta 167
Pytanie
What is the time-of-use stage of a race-condition vulnerability?
Odpowiedź
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Karta 168
Pytanie
What is data in use?
Odpowiedź
Data actively processed in memory or by an application.
Karta 169
Pytanie
What does open-source vulnerability intelligence contribute?
Odpowiedź
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Karta 170
Pytanie
What can file-integrity monitoring detect?
Odpowiedź
Unexpected changes to protected files, directories, or configuration.
Karta 171
Pytanie
Why should deprovisioning be prompt?
Odpowiedź
Former users or roles should not retain usable access.
Karta 172
Pytanie
What is an acceptable use policy?
Odpowiedź
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Karta 173
Pytanie
What makes a compliance report internal?
Odpowiedź
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Karta 174
Pytanie
What is a logic bomb?
Odpowiedź
Malicious code that activates when a specified condition or time is reached.
Karta 175
Pytanie
What does a right-to-audit clause provide?
Odpowiedź
Contractual authority to inspect or obtain evidence about agreed controls.
Karta 176
Pytanie
Where should a forward proxy sit in an enterprise traffic path?
Odpowiedź
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Karta 177
Pytanie
Which cues should make a message look suspicious?
Odpowiedź
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Karta 178
Pytanie
What makes a security control managerial?
Odpowiedź
It directs risk and governance through decisions such as policies, assessments, and oversight.
Karta 179
Pytanie
What is the CYOD mobile deployment model?
Odpowiedź
The user selects from organization-approved device options that remain subject to corporate security requirements.
Karta 180
Pytanie
How does client-based vulnerable software differ from an agentless exposure?
Odpowiedź
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Karta 181
Pytanie
What makes a risk assessment recurring?
Odpowiedź
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Karta 182
Pytanie
What does a defensive penetration-testing team practice?
Odpowiedź
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Karta 183
Pytanie
In a zero-trust data plane, what can the subject or system represent?
Odpowiedź
The user, device, workload, or service requesting access to a protected resource.
Karta 184
Pytanie
What primarily motivates a hacktivist?
Odpowiedź
A political, social, or ideological cause.
Karta 185
Pytanie
What is bloatware?
Odpowiedź
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Karta 186
Pytanie
Why keep endpoint-protection signatures and engines current?
Odpowiedź
They need current detection logic to recognize newly identified malware and exploit behavior.
Karta 187
Pytanie
What should application security monitoring observe?
Odpowiedź
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Karta 188
Pytanie
What is role-based access control?
Odpowiedź
Permissions are assigned to roles, and identities receive access through their roles.
Karta 189
Pytanie
What is geographic dispersal?
Odpowiedź
Placing redundant resources in separate locations so one regional event does not affect all copies.
Karta 190
Pytanie
What is a malicious update?
Odpowiedź
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Karta 191
Pytanie
What does static application analysis inspect?
Odpowiedź
Source code, bytecode, or compiled code without executing the application.
Karta 192
Pytanie
What does a firewall access list define?
Odpowiedź
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Karta 193
Pytanie
What does a disaster recovery policy establish?
Odpowiedź
Management expectations for restoring technology and data after a disruptive event.
Karta 194
Pytanie
How does logical segmentation separate workloads that share physical infrastructure?
Odpowiedź
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Karta 195
Pytanie
How should IDS and IPS placement differ?
Odpowiedź
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Karta 196
Pytanie
What should automated ticket creation capture?
Odpowiedź
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Karta 197
Pytanie
What makes information intellectual property?
Odpowiedź
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Karta 198
Pytanie
What is a backout plan?
Odpowiedź
Predefined steps for safely reversing a failed or harmful change.
Karta 199
Pytanie
Why is an unsecure wireless network an attack vector?
Odpowiedź
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Karta 200
Pytanie
What is physical brute force?
Odpowiedź
Using force to defeat a lock, barrier, enclosure, or other physical control.
Karta 201
Pytanie
What is application sandboxing?
Odpowiedź
Running code in a constrained environment with limited access to the host and data.
Karta 202
Pytanie
Why assign an asset owner?
Odpowiedź
One accountable party must decide its use, protection, and lifecycle.
Karta 203
Pytanie
What happens during risk identification?
Odpowiedź
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Karta 204
Pytanie
What should an SLA state about breach notification?
Odpowiedź
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Karta 205
Pytanie
How do due diligence and due care differ in compliance?
Odpowiedź
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Karta 206
Pytanie
What is attribute-based access control?
Odpowiedź
Policy evaluates attributes of the subject, resource, action, and environment.
Karta 207
Pytanie
What does a zero-trust policy engine do?
Odpowiedź
It evaluates policy and signals to decide whether access should be allowed.
Karta 208
Pytanie
How does a cloud responsibility matrix allocate security duties?
Odpowiedź
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Karta 209
Pytanie
Where should a load balancer sit in a service path?
Odpowiedź
In front of service instances so it can route requests to healthy backends.
Karta 210
Pytanie
What should the security team do with a reported suspicious message?
Odpowiedź
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Karta 211
Pytanie
What makes an operating-system vulnerability high impact?
Odpowiedź
It can affect every application and security control that relies on the compromised OS.
Karta 212
Pytanie
What does dynamic application analysis inspect?
Odpowiedź
The behavior and externally visible weaknesses of a running application.
Karta 213
Pytanie
How can false-positive trends affect IDS or IPS tuning?
Odpowiedź
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Karta 214
Pytanie
What does a business continuity policy establish?
Odpowiedź
Management expectations for sustaining and restoring critical business functions.
Karta 215
Pytanie
What is a hot recovery site?
Odpowiedź
A ready, synchronized environment intended to take over quickly.
Karta 216
Pytanie
What makes an insider threat distinct?
Odpowiedź
The actor has legitimate access or organizational knowledge that can be misused.
Karta 217
Pytanie
What is RFID cloning?
Odpowiedź
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Karta 218
Pytanie
Why apply vendor security updates promptly?
Odpowiedź
They remove known weaknesses before attackers can exploit the unpatched exposure.
Karta 219
Pytanie
What should infrastructure security monitoring observe?
Odpowiedź
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Karta 220
Pytanie
What can firewall logs reveal?
Odpowiedź
Allowed or denied network connections across controlled boundaries.
Karta 221
Pytanie
Why minimize open service ports?
Odpowiedź
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Karta 222
Pytanie
What is threat hunting?
Odpowiedź
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Karta 223
Pytanie
What triggers an ad hoc risk assessment?
Odpowiedź
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Karta 224
Pytanie
What makes an assessment external?
Odpowiedź
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Karta 225
Pytanie
What is data sovereignty?
Odpowiedź
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Karta 226
Pytanie
What security boundary does a cellular connection create for a mobile device?
Odpowiedź
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Karta 227
Pytanie
What makes a security control operational?
Odpowiedź
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Karta 228
Pytanie
What is discretionary access control?
Odpowiedź
A resource owner can decide who receives access, within system policy.
Karta 229
Pytanie
How can careful automation support employee retention?
Odpowiedź
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Karta 230
Pytanie
Why does ease of deployment matter in an architecture decision?
Odpowiedź
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Karta 231
Pytanie
What tradeoff comes with placing an NGFW inline?
Odpowiedź
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Karta 232
Pytanie
What does a zero-trust policy administrator do?
Odpowiedź
It carries out the policy engine's decision, such as creating or ending a session.
Karta 233
Pytanie
What should a master service agreement define for data return and deletion?
Odpowiedź
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Karta 234
Pytanie
What is an environmental physical attack?
Odpowiedź
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Karta 235
Pytanie
When should a maintenance window be chosen?
Odpowiedź
When disruption and rollback can be managed with the least business impact.
Karta 236
Pytanie
What is memory injection?
Odpowiedź
Placing malicious code or data into another process's memory so it executes in that process's context.
Karta 237
Pytanie
What does software composition analysis find?
Odpowiedź
Known risks and license information in third-party dependencies.
Karta 238
Pytanie
What is DNS filtering?
Odpowiedź
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Karta 239
Pytanie
What should an incident response policy establish?
Odpowiedź
Authority, scope, reporting duties, and organizational commitment for incident handling.
Karta 240
Pytanie
How can noncompliance cause reputational damage?
Odpowiedź
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Karta 241
Pytanie
What does full-disk encryption protect?
Odpowiedź
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Karta 242
Pytanie
Why are default credentials dangerous?
Odpowiedź
They are widely known or easily discovered and often remain unchanged.
Karta 243
Pytanie
What makes a risk assessment one-time?
Odpowiedź
It evaluates a defined decision or scope once without an established repeating cadence.
Karta 244
Pytanie
What is a warm recovery site?
Odpowiedź
A partially equipped environment that needs some data restoration or configuration before use.
Karta 245
Pytanie
What does application input validation do?
Odpowiedź
It checks that input matches the expected type, length, range, and format before use.
Karta 246
Pytanie
What should an asset inventory record besides a device name?
Odpowiedź
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Karta 247
Pytanie
What is mandatory access control?
Odpowiedź
A central authority enforces access through labels and rules that ordinary owners cannot override.
Karta 248
Pytanie
What security benefit does infrastructure as code provide?
Odpowiedź
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Karta 249
Pytanie
When should a public service control fail closed?
Odpowiedź
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Karta 250
Pytanie
What should users do with a suspicious message?
Odpowiedź
Report it through the approved channel without interacting with its links or attachments.
Karta 251
Pytanie
What usually motivates organized cybercrime?
Odpowiedź
Financial gain through scalable or repeatable criminal activity.
Karta 252
Pytanie
How can malicious code support a network attack?
Odpowiedź
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Karta 253
Pytanie
When is virtual patching useful?
Odpowiedź
When a network or application control can block exploit traffic before the underlying system can be patched.
Karta 254
Pytanie
What does security-monitoring reporting provide?
Odpowiedź
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Karta 255
Pytanie
What does data geolocation identify?
Odpowiedź
The physical or legal location where data is stored, processed, or transmitted.
Karta 256
Pytanie
What does a zero-trust policy enforcement point do?
Odpowiedź
It enables, monitors, and terminates the connection between a subject and a resource.
Karta 257
Pytanie
What is cryptographic key exchange?
Odpowiedź
A method for parties to establish shared key material over an untrusted channel.
Karta 258
Pytanie
How can a vendor become a supply-chain attack vector?
Odpowiedź
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Karta 259
Pytanie
Why can legacy hardware remain vulnerable?
Odpowiedź
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Karta 260
Pytanie
What can proprietary vulnerability intelligence add beyond open sources?
Odpowiedź
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Karta 261
Pytanie
How does a centralized proxy apply web filtering?
Odpowiedź
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Karta 262
Pytanie
How can continuous integration and testing improve security automation?
Odpowiedź
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Karta 263
Pytanie
What is containment?
Odpowiedź
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Karta 264
Pytanie
What is a software development lifecycle policy meant to ensure?
Odpowiedź
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Karta 265
Pytanie
What makes risk assessment continuous?
Odpowiedź
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Karta 266
Pytanie
What is a memorandum of agreement?
Odpowiedź
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Karta 267
Pytanie
What makes a penetration test integrated?
Odpowiedź
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Karta 268
Pytanie
How does a DNS amplification attack magnify traffic?
Odpowiedź
It sends small spoofed queries that trigger larger replies toward the victim.
Karta 269
Pytanie
Why does ease of recovery matter in an architecture decision?
Odpowiedź
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Karta 270
Pytanie
What does 802.1X control before a device receives normal network access?
Odpowiedź
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Karta 271
Pytanie
What is rule-based access control?
Odpowiedź
System-wide rules grant or deny access based on conditions such as network, time, or action.
Karta 272
Pytanie
What is mobile device management?
Odpowiedź
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Karta 273
Pytanie
What tradeoff comes with a cold recovery site?
Odpowiedź
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Karta 274
Pytanie
Why identify stakeholders before approving a security-sensitive change?
Odpowiedź
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Karta 275
Pytanie
How do attestation and acknowledgement differ?
Odpowiedź
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Karta 276
Pytanie
What does zero-trust adaptive identity mean?
Odpowiedź
Access decisions adjust to current risk signals rather than relying only on a static login.
Karta 277
Pytanie
What makes a security control physical?
Odpowiedź
It protects facilities or equipment through a tangible barrier or mechanism.
Karta 278
Pytanie
What is geo-fencing for data?
Odpowiedź
Enforcing location-based boundaries on where data or services may be accessed or operated.
Karta 279
Pytanie
What does a Trusted Platform Module protect?
Odpowiedź
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Karta 280
Pytanie
Why can a managed service provider amplify risk?
Odpowiedź
Its privileged access and shared tooling can provide a path into many customers.
Karta 281
Pytanie
What does probability express in risk analysis?
Odpowiedź
A quantified chance that a defined event will occur within stated conditions or time.
Karta 282
Pytanie
Why can shadow IT create a threat?
Odpowiedź
It bypasses security review, inventory, monitoring, and supported configuration.
Karta 283
Pytanie
What is on-path interception?
Odpowiedź
An attacker positions between communicating parties to observe or alter traffic.
Karta 284
Pytanie
Why include encryption in a system-hardening baseline?
Odpowiedź
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Karta 285
Pytanie
Why tune security alerts?
Odpowiedź
To keep useful detections while reducing noise that wastes analyst attention.
Karta 286
Pytanie
What can IPS or IDS logs contribute to an investigation?
Odpowiedź
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Karta 287
Pytanie
What is VM escape?
Odpowiedź
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Karta 288
Pytanie
How can segmentation reduce vulnerability exposure before a patch is available?
Odpowiedź
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Karta 289
Pytanie
Why should firewall policy name the required ports and protocols explicitly?
Odpowiedź
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Karta 290
Pytanie
What is a change management policy meant to control?
Odpowiedź
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Karta 291
Pytanie
What is a hybrid-cloud architecture?
Odpowiedź
An environment that integrates private or on-premises resources with public cloud services.
Karta 292
Pytanie
How do AH and ESP differ in the security services they can provide?
Odpowiedź
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Karta 293
Pytanie
What makes user behavior risky?
Odpowiedź
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Karta 294
Pytanie
What is least privilege?
Odpowiedź
Granting only the access needed for the required task and no more.
Karta 295
Pytanie
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Odpowiedź
Transmission to HTTPS, script access, and cross-site sending, respectively.
Karta 296
Pytanie
Why discover unmanaged assets?
Odpowiedź
Unknown systems cannot be patched, monitored, or governed reliably.
Karta 297
Pytanie
What is a service-level agreement?
Odpowiedź
Measurable service commitments and remedies, such as availability or response targets.
Karta 298
Pytanie
What should govern automated security escalation?
Odpowiedź
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Karta 299
Pytanie
What is platform diversity as a resilience strategy?
Odpowiedź
Using different implementations so one common flaw or failure is less likely to affect every copy.
Karta 300
Pytanie
How can replayed session material affect an application?
Odpowiedź
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Karta 301
Pytanie
What is an implicit trust zone in zero trust?
Odpowiedź
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Karta 302
Pytanie
What does salting a password hash accomplish?
Odpowiedź
It makes identical passwords hash differently and defeats precomputed hash tables.
Karta 303
Pytanie
What is spear phishing?
Odpowiedź
Phishing tailored to a specific person, role, or organization.
Karta 304
Pytanie
What is eradication?
Odpowiedź
Removing the attacker's access, malicious artifacts, and exploited conditions.
Karta 305
Pytanie
Who is a risk owner?
Odpowiedź
The person accountable for deciding and monitoring how a specific risk is handled.
Karta 306
Pytanie
What does a partially known penetration-test environment provide?
Odpowiedź
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Karta 307
Pytanie
What is a microservices architecture?
Odpowiedź
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Karta 308
Pytanie
What is a jump server?
Odpowiedź
A hardened intermediary used to reach systems in a restricted management network.
Karta 309
Pytanie
What can happen when a configuration change is made without dependency analysis?
Odpowiedź
A downstream service can fail even when the changed component works.
Karta 310
Pytanie
What is resource reuse exposure?
Odpowiedź
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Karta 311
Pytanie
Why does financial information require explicit protection?
Odpowiedź
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Karta 312
Pytanie
What does CVE provide?
Odpowiedź
A common identifier for a publicly disclosed vulnerability.
Karta 313
Pytanie
Where can DLP controls operate?
Odpowiedź
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Karta 314
Pytanie
What does privileged password vaulting protect?
Odpowiedź
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Karta 315
Pytanie
What does an access-control standard define?
Odpowiedź
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Karta 316
Pytanie
How can automation support compliance monitoring?
Odpowiedź
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Karta 317
Pytanie
What does static code analysis examine?
Odpowiedź
Source or compiled code for weakness patterns without executing the application.
Karta 318
Pytanie
What actor attribute describes funding, time, and personnel?
Odpowiedź
Resources.
Karta 319
Pytanie
What is DNS poisoning?
Odpowiedź
Introducing false DNS data so names resolve to attacker-chosen destinations.
Karta 320
Pytanie
Why change default credentials during hardening?
Odpowiedź
Default secrets are predictable and commonly targeted.
Karta 321
Pytanie
What does quarantine do after a security alert?
Odpowiedź
It restricts a suspected asset or object while analysts validate and remediate the risk.
Karta 322
Pytanie
What does key stretching do for stored passwords?
Odpowiedź
It deliberately makes each password guess more computationally expensive.
Karta 323
Pytanie
What is smishing?
Odpowiedź
Phishing delivered through SMS or another text-messaging service.
Karta 324
Pytanie
What is qualitative risk analysis?
Odpowiedź
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Karta 325
Pytanie
What is a master service agreement?
Odpowiedź
An umbrella contract establishing general legal and commercial terms for ongoing work.
Karta 326
Pytanie
What is threat scope reduction?
Odpowiedź
Narrowing the systems, privileges, or paths an attacker can reach.
Karta 327
Pytanie
Why use a third-party cloud service instead of building locally?
Odpowiedź
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Karta 328
Pytanie
What should determine security-device placement?
Odpowiedź
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Karta 329
Pytanie
What does situational awareness mean for a user?
Odpowiedź
Notice the people, devices, requests, location, and context around a task before acting.
Karta 330
Pytanie
What does a failover test validate?
Odpowiedź
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Karta 331
Pytanie
What is a preventive control meant to do?
Odpowiedź
Stop an unwanted event before it succeeds.
Karta 332
Pytanie
What is just-in-time privileged access?
Odpowiedź
Elevated access is granted only when needed and expires after a short approved period.
Karta 333
Pytanie
What safeguard should security-group automation enforce?
Odpowiedź
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Karta 334
Pytanie
How does a reflected DDoS attack hide and multiply sources?
Odpowiedź
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Karta 335
Pytanie
What is a security misconfiguration?
Odpowiedź
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Karta 336
Pytanie
Why can the same vulnerability have different organizational impact?
Odpowiedź
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Karta 337
Pytanie
What does URL scanning evaluate before a user opens a web destination?
Odpowiedź
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Karta 338
Pytanie
What is the board's security governance role?
Odpowiedź
Provide oversight, set risk direction, and hold executives accountable.
Karta 339
Pytanie
What does code signing establish?
Odpowiedź
That code came from the holder of the signing key and has not changed since signing.
Karta 340
Pytanie
How should an asset's classification affect security operations?
Odpowiedź
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Karta 341
Pytanie
How does encryption protect data?
Odpowiedź
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Karta 342
Pytanie
What is a secure enclave?
Odpowiedź
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Karta 343
Pytanie
What is business email compromise?
Odpowiedź
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Karta 344
Pytanie
What is recovery in incident response?
Odpowiedź
Restoring services safely, monitoring them, and returning to normal operations.
Karta 345
Pytanie
How is single loss expectancy commonly estimated?
Odpowiedź
Asset value multiplied by the exposure factor.
Karta 346
Pytanie
What does an unknown penetration-test environment provide?
Odpowiedź
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Karta 347
Pytanie
What security boundary does a hypervisor provide?
Odpowiedź
It isolates virtual machines while controlling their access to shared hardware.
Karta 348
Pytanie
Why does a TLS tunnel not protect a compromised endpoint?
Odpowiedź
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Karta 349
Pytanie
Why update diagrams after an infrastructure change?
Odpowiedź
Operations and incident responders need the documentation to match the deployed environment.
Karta 350
Pytanie
What does privacy ownership assign?
Odpowiedź
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Karta 351
Pytanie
What does a security control gap analysis compare?
Odpowiedź
The controls required for the target state with the controls currently in place.
Karta 352
Pytanie
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Odpowiedź
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Karta 353
Pytanie
What is application privilege escalation?
Odpowiedź
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Karta 354
Pytanie
What risk remains when unnecessary software is left installed?
Odpowiedź
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Karta 355
Pytanie
What does SCAP standardize?
Odpowiedź
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Karta 356
Pytanie
What can packet capture reveal?
Odpowiedź
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Karta 357
Pytanie
What makes a privileged credential ephemeral?
Odpowiedź
It is created for a limited task or session and expires or is destroyed automatically after that use.
Karta 358
Pytanie
How do a statement of work and a work order differ?
Odpowiedź
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Karta 359
Pytanie
Why might multi-cloud improve resilience?
Odpowiedź
A provider-wide failure need not stop workloads that can run independently elsewhere.
Karta 360
Pytanie
How can a service provider introduce a supply-chain vulnerability?
Odpowiedź
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Karta 361
Pytanie
What is a false positive in vulnerability scanning?
Odpowiedź
A reported weakness that is not actually present or exploitable in the assessed context.
Karta 362
Pytanie
How do EDR and XDR differ?
Odpowiedź
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Karta 363
Pytanie
What should onboarding and offboarding procedures coordinate?
Odpowiedź
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Karta 364
Pytanie
How should an organization harden managed mobile devices?
Odpowiedź
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Karta 365
Pytanie
What is a certificate signing request?
Odpowiedź
A request containing a public key and subject information for a certificate authority to sign.
Karta 366
Pytanie
What is pretexting?
Odpowiedź
Using a fabricated role or situation to make a request seem legitimate.
Karta 367
Pytanie
How is annualized loss expectancy commonly estimated?
Odpowiedź
Single loss expectancy multiplied by annualized rate of occurrence.
Karta 368
Pytanie
What security consequence follows from containers sharing a kernel?
Odpowiedź
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Karta 369
Pytanie
Where does 802.1X enforce a network admission decision?
Odpowiedź
At the controlled switch port or wireless access point before normal network access is granted.
Karta 370
Pytanie
What should insider-threat awareness teach?
Odpowiedź
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Karta 371
Pytanie
What access action is suitable for careful automation?
Odpowiedź
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Karta 372
Pytanie
What is an evil twin?
Odpowiedź
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 karty
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Ucz się z tej talii za darmo
Otworzy się Nibomo, żeby od razu zacząć naukę.
Karta 373
Pytanie
Does non-human-readable data need less protection?
Odpowiedź
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Karta 374
Pytanie
What does authenticating a system establish?
Odpowiedź
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Karta 375
Pytanie
What does LDAP provide in identity systems?
Odpowiedź
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Karta 376
Pytanie
What is a deterrent control meant to do?
Odpowiedź
Discourage an attacker from attempting an unwanted action.
Karta 377
Pytanie
Why update procedures after changing a security control?
Odpowiedź
Staff need accurate steps for operating, monitoring, and recovering the new control.
Karta 378
Pytanie
How does OCSP differ from a certificate revocation list?
Odpowiedź
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Karta 379
Pytanie
What is the goal of data exfiltration?
Odpowiedź
Remove data from its authorized environment without permission.
Karta 380
Pytanie
What is a watering-hole attack?
Odpowiedź
Compromising a site frequented by the intended targets so their visits expose them.
Karta 381
Pytanie
How can a hardware provider introduce a supply-chain vulnerability?
Odpowiedź
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Karta 382
Pytanie
What is application forgery?
Odpowiedź
Creating or altering a request, token, or object so the application treats it as authentic.
Karta 383
Pytanie
How does least privilege mitigate compromise?
Odpowiedź
It limits the actions and resources available to a compromised account or process.
Karta 384
Pytanie
What is serverless computing?
Odpowiedź
A model where the provider manages servers and the customer deploys event-driven code or functions.
Karta 385
Pytanie
What makes an infrastructure control effective for a specific risk?
Odpowiedź
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Karta 386
Pytanie
What does parallel recovery processing test?
Odpowiedź
Whether primary and alternate environments can run together consistently before a controlled cutover.
Karta 387
Pytanie
Which password-authentication method does WPA3-Personal use?
Odpowiedź
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Karta 388
Pytanie
How does data retention affect asset disposal?
Odpowiedź
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Karta 389
Pytanie
What is a false negative in vulnerability scanning?
Odpowiedź
A real weakness that the assessment fails to report.
Karta 390
Pytanie
What does recurring security scanning add to monitoring?
Odpowiedź
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Karta 391
Pytanie
What should guide port selection for a secure protocol?
Odpowiedź
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Karta 392
Pytanie
What does forensic acquisition create?
Odpowiedź
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Karta 393
Pytanie
How do system owners and data owners divide security accountability?
Odpowiedź
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Karta 394
Pytanie
What does likelihood express in risk analysis?
Odpowiedź
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Karta 395
Pytanie
What is a memorandum of understanding?
Odpowiedź
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Karta 396
Pytanie
What does the right to be forgotten generally require?
Odpowiedź
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Karta 397
Pytanie
What does an audit committee oversee?
Odpowiedź
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Karta 398
Pytanie
What does identity interoperability require?
Odpowiedź
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Karta 399
Pytanie
How does a bollard protect a facility?
Odpowiedź
It blocks or redirects vehicles before they can reach a protected area.
Karta 400
Pytanie
How can hashing protect a downloaded file?
Odpowiedź
A trusted digest lets the recipient detect whether the file changed.
Karta 401
Pytanie
What is a credential replay attack?
Odpowiedź
Using captured valid credentials or tokens again without needing to discover the secret.
Karta 402
Pytanie
How can automation complexity create security risk?
Odpowiedź
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Karta 403
Pytanie
What must an architecture provide when a component cannot be patched?
Odpowiedź
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Karta 404
Pytanie
What makes remote access secure?
Odpowiedź
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Karta 405
Pytanie
What should users verify before connecting removable media or a cable?
Odpowiedź
That the device and connection are approved, expected, and handled under organizational policy.
Karta 406
Pytanie
What is a self-signed certificate?
Odpowiedź
A certificate signed by its own private key rather than by a separate trusted issuer.
Karta 407
Pytanie
What is brand impersonation?
Odpowiedź
Using a trusted organization's identity or look to deceive people.
Karta 408
Pytanie
What characterizes a conservative risk appetite?
Odpowiedź
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Karta 409
Pytanie
What should a managed mobile device verify before using Wi-Fi?
Odpowiedź
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Karta 410
Pytanie
What is a zero-day vulnerability?
Odpowiedź
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Karta 411
Pytanie
What does verification confirm after vulnerability remediation?
Odpowiedź
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Karta 412
Pytanie
What is user and entity behavior analytics?
Odpowiedź
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Karta 413
Pytanie
What does a physical security policy establish?
Odpowiedź
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Karta 414
Pytanie
What does a UPS provide?
Odpowiedź
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Karta 415
Pytanie
What is a nondisclosure agreement?
Odpowiedź
A contract restricting use and disclosure of defined confidential information.
Karta 416
Pytanie
What should be checked before assigning a user permission?
Odpowiedź
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Karta 417
Pytanie
How does espionage differ from ordinary theft?
Odpowiedź
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Karta 418
Pytanie
What is password spraying?
Odpowiedź
Trying a small set of common passwords across many accounts to avoid lockouts.
Karta 419
Pytanie
What is the purpose of system isolation during an incident?
Odpowiedź
Stop harmful communication while preserving the system for response and investigation.
Karta 420
Pytanie
What is a security benchmark?
Odpowiedź
A documented set of recommended configuration checks for a platform or product.
Karta 421
Pytanie
Which metadata fields give a log record investigative context?
Odpowiedź
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Karta 422
Pytanie
What does an access-control vestibule prevent?
Odpowiedź
It limits tailgating by allowing controlled passage through one door at a time.
Karta 423
Pytanie
What is version control's security value for configuration?
Odpowiedź
It preserves attributable history and enables review or rollback of changes.
Karta 424
Pytanie
Why use both internal and external compliance monitoring?
Odpowiedź
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Karta 425
Pytanie
What distinguishes on-premises architecture?
Odpowiedź
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Karta 426
Pytanie
What risk can split tunneling add to a VPN?
Odpowiedź
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Karta 427
Pytanie
What is a certificate root of trust?
Odpowiedź
A trusted root certificate or key from which a client validates a certificate chain.
Karta 428
Pytanie
What is typosquatting?
Odpowiedź
Registering a look-alike domain based on common typing errors or visual similarity.
Karta 429
Pytanie
What is root-cause analysis?
Odpowiedź
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Karta 430
Pytanie
What is risk tolerance?
Odpowiedź
The acceptable variation or boundary around a specific objective or risk area.
Karta 431
Pytanie
What is a security self-assessment?
Odpowiedź
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Karta 432
Pytanie
What does data masking change?
Odpowiedź
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Karta 433
Pytanie
How do wireless authentication protocols let clients prove identity securely?
Odpowiedź
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Karta 434
Pytanie
Why reconcile inventory with network discovery?
Odpowiedź
Differences expose missing records, retired systems, or unauthorized devices.
Karta 435
Pytanie
Why does sideloading raise mobile risk?
Odpowiedź
It can bypass store review, signing policy, and managed application controls.
Karta 436
Pytanie
What does an information-sharing organization add to vulnerability management?
Odpowiedź
Sector or community intelligence about relevant threats, incidents, and defensive action.
Karta 437
Pytanie
What does a web-filter block rule specify?
Odpowiedź
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Karta 438
Pytanie
How do data custodians and data stewards differ?
Odpowiedź
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Karta 439
Pytanie
What is a brute-force password attack?
Odpowiedź
Systematically trying many candidate secrets against an account or protected value.
Karta 440
Pytanie
What is a compensating control?
Odpowiedź
An alternative safeguard used when the preferred control is impractical or unavailable.
Karta 441
Pytanie
How can location act as an authentication factor?
Odpowiedź
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Karta 442
Pytanie
Why must security automation remain supportable?
Odpowiedź
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Karta 443
Pytanie
What does a standby generator provide?
Odpowiedź
Longer-duration power during a utility outage, after a startup delay.
Karta 444
Pytanie
What makes an architecture air-gapped?
Odpowiedź
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Karta 445
Pytanie
What is a software-defined WAN?
Odpowiedź
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Karta 446
Pytanie
What password-management behavior should awareness training reinforce?
Odpowiedź
Use unique long passwords through an approved manager and report suspected compromise promptly.
Karta 447
Pytanie
What security value does fencing provide?
Odpowiedź
It defines and delays entry across a physical perimeter.
Karta 448
Pytanie
What is a wildcard certificate?
Odpowiedź
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Karta 449
Pytanie
How does misinformation differ from disinformation?
Odpowiedź
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Karta 450
Pytanie
What is a risk threshold?
Odpowiedź
A defined level that triggers escalation, treatment, or another required response.
Karta 451
Pytanie
What does a vendor penetration test contribute to assessment?
Odpowiedź
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Karta 452
Pytanie
What is the objective of a service-disruption attack?
Odpowiedź
Make a system or business function unavailable or unreliable.
Karta 453
Pytanie
What is directory traversal?
Odpowiedź
Manipulating a file path to reach files outside the directory the application intended to expose.
Karta 454
Pytanie
Why decommission an unsupported system?
Odpowiedź
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Karta 455
Pytanie
Why archive security-monitoring data?
Odpowiedź
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Karta 456
Pytanie
What role does RADIUS commonly play in enterprise Wi-Fi?
Odpowiedź
It centralizes authentication, authorization information, and accounting for network access.
Karta 457
Pytanie
Why separate the requester and approver of a high-risk change?
Odpowiedź
To reduce error, fraud, and unilateral unauthorized modification.
Karta 458
Pytanie
Why can a jailbroken device violate a security baseline?
Odpowiedź
It weakens platform isolation and allows unapproved privileged changes.
Karta 459
Pytanie
When is tokenization especially useful?
Odpowiedź
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Karta 460
Pytanie
Why can dark-web intelligence affect vulnerability priority?
Odpowiedź
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Karta 461
Pytanie
What firewall policy should govern traffic from a screened subnet to internal systems?
Odpowiedź
Deny it by default and allow only explicitly required flows.
Karta 462
Pytanie
What does SAML commonly carry?
Odpowiedź
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Karta 463
Pytanie
What does a security governance committee do?
Odpowiedź
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Karta 464
Pytanie
How can global privacy requirements affect one data process?
Odpowiedź
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Karta 465
Pytanie
What characterizes an IoT device?
Odpowiedź
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Karta 466
Pytanie
What is a unified threat management appliance?
Odpowiedź
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Karta 467
Pytanie
What does a hardware security module provide?
Odpowiedź
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Karta 468
Pytanie
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Odpowiedź
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Karta 469
Pytanie
What is a tabletop exercise?
Odpowiedź
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Karta 470
Pytanie
What does a risk exemption authorize?
Odpowiedź
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Karta 471
Pytanie
What is a regulatory examination?
Odpowiedź
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Karta 472
Pytanie
What does physical video surveillance primarily provide?
Odpowiedź
Detection and evidence of activity in monitored areas.
Karta 473
Pytanie
What is a birthday attack against a hash?
Odpowiedź
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Karta 474
Pytanie
Why keep backups both onsite and offsite?
Odpowiedź
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Karta 475
Pytanie
How does technical debt affect security automation?
Odpowiedź
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Karta 476
Pytanie
What should switch hardening restrict first?
Odpowiedź
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Karta 477
Pytanie
What should happen when an asset changes owners?
Odpowiedź
Inventory, access, support responsibility, and data handling should be updated.
Karta 478
Pytanie
What does evidence of a vendor's internal audits contribute?
Odpowiedź
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Karta 479
Pytanie
What is identity attestation?
Odpowiedź
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Karta 480
Pytanie
Why can standard enterprise patching be unsafe for an RTOS device?
Odpowiedź
A change can disrupt timing guarantees or certified operational behavior.
Karta 481
Pytanie
What is secure access service edge?
Odpowiedź
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Karta 482
Pytanie
What social-engineering habit should awareness training reinforce?
Odpowiedź
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Karta 483
Pytanie
How can a software provider introduce a supply-chain vulnerability?
Odpowiedź
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Karta 484
Pytanie
Why include internet exposure in remediation priority?
Odpowiedź
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Karta 485
Pytanie
What does a mail gateway inspect?
Odpowiedź
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Karta 486
Pytanie
What is a data controller?
Odpowiedź
The entity that determines why and how personal data is processed.
Karta 487
Pytanie
How does blackmail motivate a cyberattack?
Odpowiedź
The attacker threatens disclosure or harm unless the victim complies.
Karta 488
Pytanie
What is a downgrade attack?
Odpowiedź
Forcing parties to use an older or weaker protocol or security mode.
Karta 489
Pytanie
How does encryption mitigate data exposure?
Odpowiedź
It makes captured data unreadable without the required key.
Karta 490
Pytanie
How do network and web vulnerability scanners differ?
Odpowiedź
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Karta 491
Pytanie
How can vulnerability-scan data support an investigation?
Odpowiedź
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Karta 492
Pytanie
What is key escrow?
Odpowiedź
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Karta 493
Pytanie
Which human vector commonly uses a fake sign-in page to harvest credentials?
Odpowiedź
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Karta 494
Pytanie
What is risk avoidance?
Odpowiedź
Stopping or not starting the activity that creates the risk.
Karta 495
Pytanie
What is data obfuscation?
Odpowiedź
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Karta 496
Pytanie
What is a directive control?
Odpowiedź
A safeguard that tells people what behavior or action is required.
Karta 497
Pytanie
What does a security guard add that a camera cannot?
Odpowiedź
Human judgment and an immediate physical response.
Karta 498
Pytanie
Why define restricted activities in change management?
Odpowiedź
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Karta 499
Pytanie
What contractual impact can noncompliance create?
Odpowiedź
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Karta 500
Pytanie
What should determine backup frequency?
Odpowiedź
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Karta 501
Pytanie
What should router hardening protect?
Odpowiedź
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Karta 502
Pytanie
What problem does OAuth 2.0 address?
Odpowiedź
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Karta 503
Pytanie
What does SCADA do?
Odpowiedź
It provides supervisory monitoring and control across distributed industrial equipment.
Karta 504
Pytanie
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Odpowiedź
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Karta 505
Pytanie
What distinguishes a computer virus?
Odpowiedź
It attaches to a host file or program and spreads when that infected host executes or is shared.
Karta 506
Pytanie
What does a key management system coordinate?
Odpowiedź
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Karta 507
Pytanie
How can an unsecure wired network expose traffic?
Odpowiedź
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Karta 508
Pytanie
Why is vulnerable device firmware hard to remediate?
Odpowiedź
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Karta 509
Pytanie
What does patching change in vulnerability remediation?
Odpowiedź
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Karta 510
Pytanie
What does DMARC add to SPF and DKIM?
Odpowiedź
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Karta 511
Pytanie
How does automation improve security efficiency?
Odpowiedź
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Karta 512
Pytanie
What is a simulation exercise?
Odpowiedź
A more realistic practice in which participants respond to injected events using operational processes.
Karta 513
Pytanie
What is a data processor?
Odpowiedź
An entity that processes personal data on behalf of a controller.
Karta 514
Pytanie
What is risk mitigation?
Odpowiedź
Reducing likelihood, impact, or both through controls or process changes.
Karta 515
Pytanie
Why monitor a vendor after onboarding?
Odpowiedź
Security posture, ownership, services, incidents, and dependencies can change.
Karta 516
Pytanie
What does a physical penetration test assess?
Odpowiedź
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Karta 517
Pytanie
Why use access badges at a facility?
Odpowiedź
To associate entry attempts with authorized identities and enforce access rules.
Karta 518
Pytanie
How does permission restriction protect data?
Odpowiedź
Only authorized identities receive the actions and scope their roles require.
Karta 519
Pytanie
What is the usual objective of ransomware extortion?
Odpowiedź
Force payment by denying access, threatening disclosure, or both.
Karta 520
Pytanie
What does impossible travel indicate?
Odpowiedź
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Karta 521
Pytanie
What is configuration enforcement?
Odpowiedź
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Karta 522
Pytanie
What does a web vulnerability scanner inspect?
Odpowiedź
Running web behavior for issues such as unsafe input handling and insecure configuration.
Karta 523
Pytanie
How does cost affect an architecture choice?
Odpowiedź
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Karta 524
Pytanie
What does EAP provide with 802.1X?
Odpowiedź
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Karta 525
Pytanie
What should operational-security training help users protect?
Odpowiedź
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Karta 526
Pytanie
What does a time-of-day access rule do?
Odpowiedź
Allows or denies a requested action according to an approved schedule.
Karta 527
Pytanie
What should cloud infrastructure hardening establish?
Odpowiedź
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Karta 528
Pytanie
What should an asset owner ensure during offboarding?
Odpowiedź
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Karta 529
Pytanie
Why encrypt backups?
Odpowiedź
Backup media and transfers can expose the same sensitive data as production systems.
Karta 530
Pytanie
What is steganography?
Odpowiedź
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Karta 531
Pytanie
Which human vector uses a fabricated authority role to justify a sensitive request?
Odpowiedź
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Karta 532
Pytanie
Why does risk transfer not remove accountability?
Odpowiedź
The organization can retain legal, reputational, operational, and oversight consequences.
Karta 533
Pytanie
Why validate a change after deployment?
Odpowiedź
To confirm the intended result occurred without introducing unacceptable side effects.
Karta 534
Pytanie
What makes end-of-life hardware a security vulnerability?
Odpowiedź
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Karta 535
Pytanie
What does an audit add to remediation validation?
Odpowiedź
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Karta 536
Pytanie
Why can SPF pass while a message still impersonates a brand?
Odpowiedź
SPF checks the envelope domain, which may differ from the visible From domain.
Karta 537
Pytanie
What role can a government entity have in security governance?
Odpowiedź
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Karta 538
Pytanie
How do data inventory and retention support privacy governance?
Odpowiedź
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Karta 539
Pytanie
What can concurrent sessions from distant regions indicate?
Odpowiedź
A stolen account or shared credential, subject to VPN and proxy context.
Karta 540
Pytanie
What does supply-chain analysis examine?
Odpowiedź
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Karta 541
Pytanie
What is the purpose of facility lighting as a control?
Odpowiedź
Deter covert activity and improve observation of people and areas.
Karta 542
Pytanie
What architecture quality keeps a service usable during component failure?
Odpowiedź
Availability.
Karta 543
Pytanie
When is fail-open behavior preferable to fail-closed behavior?
Odpowiedź
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Karta 544
Pytanie
Which control function does a login-failure alert provide?
Odpowiedź
Detection; it reveals suspicious authentication activity.
Karta 545
Pytanie
What does a biometric MFA implementation verify?
Odpowiedź
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Karta 546
Pytanie
How can automation enforce a security baseline?
Odpowiedź
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Karta 547
Pytanie
How do wireless cryptographic protocols protect network traffic?
Odpowiedź
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Karta 548
Pytanie
Why segment sensitive data stores?
Odpowiedź
It limits reachable paths and separates them from lower-trust workloads.
Karta 549
Pytanie
What must remain secret in an asymmetric key pair?
Odpowiedź
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Karta 550
Pytanie
How can a supplier become a supply-chain attack vector?
Odpowiedź
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Karta 551
Pytanie
What is e-discovery?
Odpowiedź
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Karta 552
Pytanie
What characterizes a neutral risk appetite?
Odpowiedź
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Karta 553
Pytanie
What is passive reconnaissance?
Odpowiedź
Gathering information without directly interacting with the target's systems.
Karta 554
Pytanie
What does a philosophical motive mean for a threat actor?
Odpowiedź
The actor acts to advance a belief or moral position rather than primarily for money.
Karta 555
Pytanie
What does unexpected resource consumption indicate?
Odpowiedź
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Karta 556
Pytanie
What does a host-based intrusion prevention system do?
Odpowiedź
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Karta 557
Pytanie
How does agent-based monitoring differ from agentless monitoring?
Odpowiedź
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Karta 558
Pytanie
What can network logs contribute to an investigation?
Odpowiedź
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Karta 559
Pytanie
What is the purpose of a backup restore test?
Odpowiedź
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Karta 560
Pytanie
Why can obsolete hardware become a security risk?
Odpowiedź
It may lack supported firmware, modern protections, or replacement parts.
Karta 561
Pytanie
What does rescanning confirm after remediation?
Odpowiedź
Whether the scanner can still detect the original finding on the affected asset.
Karta 562
Pytanie
What should a secure transport method provide?
Odpowiedź
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Karta 563
Pytanie
How can law affect security governance?
Odpowiedź
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Karta 564
Pytanie
What does resilience mean for a security architecture?
Odpowiedź
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Karta 565
Pytanie
Why minimize an infrastructure's attack surface?
Odpowiedź
Fewer exposed services and paths leave fewer opportunities for exploitation.
Karta 566
Pytanie
What does executing a security-awareness program require?
Odpowiedź
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Karta 567
Pytanie
What does an infrared security sensor detect?
Odpowiedź
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Karta 568
Pytanie
What is a knowledge factor?
Odpowiedź
Something the claimant knows, such as a password.
Karta 569
Pytanie
Why review allow-list and deny-list impact before a change?
Odpowiedź
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Karta 570
Pytanie
What does partition-level encryption protect?
Odpowiedź
One selected disk partition, leaving other partitions outside that encryption boundary.
Karta 571
Pytanie
How can instant messaging deliver a security attack?
Odpowiedź
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Karta 572
Pytanie
What can repeated blocked-content events indicate?
Odpowiedź
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Karta 573
Pytanie
What should a server-hardening baseline reduce?
Odpowiedź
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Karta 574
Pytanie
When is physical media destruction appropriate?
Odpowiedź
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Karta 575
Pytanie
What is mean time to repair?
Odpowiedź
The average time required to restore a failed component or service.
Karta 576
Pytanie
Why disclose conflicts of interest during vendor selection?
Odpowiedź
A personal or financial relationship can bias evaluation away from the organization's requirements.
Karta 577
Pytanie
What is a fine for noncompliance?
Odpowiedź
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Karta 578
Pytanie
What does a public data classification authorize?
Odpowiedź
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Karta 579
Pytanie
What security benefit comes from standard infrastructure configurations?
Odpowiedź
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Karta 580
Pytanie
How does horizontal scaling increase capacity?
Odpowiedź
It adds more service instances and distributes work among them.
Karta 581
Pytanie
Why can added connectivity weaken segmentation?
Odpowiedź
Each allowed path can become a route for lateral movement or data escape.
Karta 582
Pytanie
What coding practice is central to preventing SQL injection?
Odpowiedź
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Karta 583
Pytanie
When is a compensating control appropriate for a vulnerability?
Odpowiedź
When timely removal or patching is infeasible and another control can reduce the risk.
Karta 584
Pytanie
How does agent-based web filtering enforce policy?
Odpowiedź
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Karta 585
Pytanie
How can regulation differ from an internal policy?
Odpowiedź
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Karta 586
Pytanie
What is a storage snapshot?
Odpowiedź
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Karta 587
Pytanie
What does password age measure?
Odpowiedź
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Karta 588
Pytanie
What does an ethical motive mean in vulnerability research?
Odpowiedź
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Karta 589
Pytanie
What can missing security logs indicate?
Odpowiedź
Logging failure, tampering, retention misconfiguration, or an inactive source.
Karta 590
Pytanie
Why disable unused ports and protocols?
Odpowiedź
They expose unnecessary communication paths and code that attackers can reach.
Karta 591
Pytanie
What does antivirus contribute to monitoring?
Odpowiedź
It scans files, memory, or behavior and reports suspected malicious code.
Karta 592
Pytanie
What is a honeypot?
Odpowiedź
A decoy system or service designed to attract and observe malicious activity.
Karta 593
Pytanie
What does file-level encryption protect?
Odpowiedź
Selected files independently of whether the rest of the disk or volume is encrypted.
Karta 594
Pytanie
How can SMS deliver a security attack?
Odpowiedź
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Karta 595
Pytanie
What happens during incident analysis?
Odpowiedź
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Karta 596
Pytanie
What is mean time between failures?
Odpowiedź
The average operating time between repairable failures.
Karta 597
Pytanie
What is active reconnaissance?
Odpowiedź
Probing or interacting with target systems to discover services and behavior.
Karta 598
Pytanie
What constraint should guide ICS or SCADA hardening?
Odpowiedź
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Karta 599
Pytanie
Which control function does restoring a clean system image provide?
Odpowiedź
Correction; it returns the system to a known-good state.
Karta 600
Pytanie
What does responsiveness mean in an architecture decision?
Odpowiedź
How quickly the system and its operators can adapt to demand, failure, or attack.
Karta 601
Pytanie
How does out-of-band access strengthen remote administration?
Odpowiedź
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Karta 602
Pytanie
What makes user behavior unexpected?
Odpowiedź
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Karta 603
Pytanie
What is a work order?
Odpowiedź
A document authorizing a defined unit of work under an existing agreement.
Karta 604
Pytanie
What can out-of-cycle logging indicate?
Odpowiedź
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Karta 605
Pytanie
Why update a standard operating procedure after a change?
Odpowiedź
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Karta 606
Pytanie
What coding practice limits cross-site scripting?
Odpowiedź
Context-appropriate output encoding, supported by safe templating and input handling.
Karta 607
Pytanie
What does a restricted data classification indicate?
Odpowiedź
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Karta 608
Pytanie
How does a bug bounty support responsible disclosure?
Odpowiedź
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Karta 609
Pytanie
What does web-filter content categorization provide?
Odpowiedź
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Karta 610
Pytanie
How do hard and soft authentication tokens differ?
Odpowiedź
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Karta 611
Pytanie
How can industry requirements affect security governance?
Odpowiedź
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Karta 612
Pytanie
How can noncompliance cause loss of a license?
Odpowiedź
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Karta 613
Pytanie
What does volume-level encryption protect?
Odpowiedź
All data within a selected logical storage volume.
Karta 614
Pytanie
How can impersonation exploit familiarity?
Odpowiedź
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Karta 615
Pytanie
How does RTO guide recovery design?
Odpowiedź
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Karta 616
Pytanie
What is a honeynet?
Odpowiedź
A network of decoy systems used to study or divert attackers.
Karta 617
Pytanie
What does backup replication provide?
Odpowiedź
Additional synchronized or copied recovery data in another system or location.
Karta 618
Pytanie
What lets automation scale securely?
Odpowiedź
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Karta 619
Pytanie
Why monitor a hardened computing resource continuously?
Odpowiedź
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Karta 620
Pytanie
Why keep a certificate of destruction?
Odpowiedź
It documents that a disposal provider handled specified media under the agreed process.
Karta 621
Pytanie
Why consider patch availability before selecting a platform?
Odpowiedź
Unsupported or difficult-to-update components accumulate known exposure.
Karta 622
Pytanie
Why should remote administration use an encrypted, authenticated protocol?
Odpowiedź
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Karta 623
Pytanie
How can revenge motivate an insider incident?
Odpowiedź
A disgruntled person may damage systems or disclose data to punish the organization.
Karta 624
Pytanie
What is a published or documented indicator of malicious activity?
Odpowiedź
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Karta 625
Pytanie
Why monitor a system more closely when a mitigation exception is accepted?
Odpowiedź
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Karta 626
Pytanie
What is an SNMP trap?
Odpowiedź
An unsolicited device notification sent to a management system when a configured event occurs.
Karta 627
Pytanie
How can an automated report support an investigation?
Odpowiedź
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Karta 628
Pytanie
What is a security key?
Odpowiedź
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Karta 629
Pytanie
What does database-level encryption protect?
Odpowiedź
A database or selected database structures through controls managed at the database layer.
Karta 630
Pytanie
How does brand impersonation exploit trust?
Odpowiedź
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Karta 631
Pytanie
What browser-side impact can a cross-site scripting vulnerability create?
Odpowiedź
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Karta 632
Pytanie
How can a system or process audit identify vulnerabilities?
Odpowiedź
It compares evidence with required configuration and procedure to reveal control gaps.
Karta 633
Pytanie
What security role can Group Policy provide?
Odpowiedź
Centralized Windows configuration of account, application, audit, and system security settings.
Karta 634
Pytanie
What should incident-response training prepare people to do?
Odpowiedź
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Karta 635
Pytanie
Why must governance track local or regional requirements?
Odpowiedź
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Karta 636
Pytanie
How can a dependency become a useful key risk indicator?
Odpowiedź
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Karta 637
Pytanie
What is a business partners agreement?
Odpowiedź
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Karta 638
Pytanie
What makes an audit regulatory?
Odpowiedź
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Karta 639
Pytanie
What is a honeyfile?
Odpowiedź
A decoy file whose access can reveal unauthorized activity.
Karta 640
Pytanie
Why does legal information require explicit protection?
Odpowiedź
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Karta 641
Pytanie
Which indicator can mass file renaming and encryption produce?
Odpowiedź
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Karta 642
Pytanie
What remains with an organization after transferring architecture risk?
Odpowiedź
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Karta 643
Pytanie
When does local console placement provide useful administrative access?
Odpowiedź
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Karta 644
Pytanie
What makes a harmful user action unintentional?
Odpowiedź
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Karta 645
Pytanie
How should an organization harden workstations?
Odpowiedź
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Karta 646
Pytanie
What is journaling in recovery?
Odpowiedź
Recording ordered changes so data can be replayed or restored to a consistent point.
Karta 647
Pytanie
What downtime must a change plan account for?
Odpowiedź
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Karta 648
Pytanie
Why must a privacy program map local or regional law to data flows?
Odpowiedź
The applicable duties can change with the location of the person, organization, processing, or stored data.
Karta 649
Pytanie
Why combine independent preventive controls at different layers?
Odpowiedź
A failure at one layer does not automatically let the same attack succeed at the next layer.
Karta 650
Pytanie
What is passwordless authentication?
Odpowiedź
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Karta 651
Pytanie
How can automation improve security reaction time?
Odpowiedź
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Karta 652
Pytanie
What does record-level encryption protect?
Odpowiedź
Individual records or fields, allowing finer protection than encrypting the entire database.
Karta 653
Pytanie
How can business email compromise misuse urgency?
Odpowiedź
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Karta 654
Pytanie
What does impact measure in risk analysis?
Odpowiedź
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Karta 655
Pytanie
What makes cyber activity part of warfare?
Odpowiedź
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Karta 656
Pytanie
Which indicator can a newly created privileged account produce outside the normal change window?
Odpowiedź
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Karta 657
Pytanie
How can configuration enforcement validate a deployed mitigation?
Odpowiedź
It compares the realized settings with the approved state and corrects or reports drift.
Karta 658
Pytanie
How does validating an alert improve alert tuning?
Odpowiedź
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Karta 659
Pytanie
What data-layer impact can a SQL injection vulnerability create?
Odpowiedź
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Karta 660
Pytanie
What environmental variables can change vulnerability priority?
Odpowiedź
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Karta 661
Pytanie
What security role does SELinux provide?
Odpowiedź
Mandatory access controls that confine processes according to centrally defined policy.
Karta 662
Pytanie
Why review governance documents periodically?
Odpowiedź
Business, technology, threats, and external obligations change.
Karta 663
Pytanie
Why evaluate power requirements for a system design?
Odpowiedź
Power capacity and redundancy constrain availability and recovery.
Karta 664
Pytanie
When is IPsec a better tunnel choice than TLS?
Odpowiedź
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Karta 665
Pytanie
What is a honeytoken?
Odpowiedź
A fake credential or data element that generates a high-confidence alert when used.
Karta 666
Pytanie
What should embedded-system hardening prioritize?
Odpowiedź
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Karta 667
Pytanie
Why must sanitization address data remanence?
Odpowiedź
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Karta 668
Pytanie
Why require rules of engagement for vendor testing?
Odpowiedź
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Karta 669
Pytanie
What does a private data classification indicate?
Odpowiedź
The information concerns an individual or limited internal audience and should not be exposed publicly.
Karta 670
Pytanie
What does a tabletop recovery exercise test?
Odpowiedź
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Karta 671
Pytanie
Why prevent password reuse?
Odpowiedź
One compromised password should not unlock other accounts or services.
Karta 672
Pytanie
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Odpowiedź
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Karta 673
Pytanie
What does transport encryption protect?
Odpowiedź
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Karta 674
Pytanie
How can a voice call become an attack vector?
Odpowiedź
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Karta 675
Pytanie
What should a digital-forensics report document?
Odpowiedź
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Karta 676
Pytanie
What tradeoff comes with an expansionary risk appetite?
Odpowiedź
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Karta 677
Pytanie
What does a known penetration-test environment provide?
Odpowiedź
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Karta 678
Pytanie
Why evaluate compute requirements before deployment?
Odpowiedź
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Karta 679
Pytanie
Why place sensors at network choke points?
Odpowiedź
They can observe traffic crossing important trust boundaries.
Karta 680
Pytanie
What should hybrid or remote-work security training emphasize?
Odpowiedź
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Karta 681
Pytanie
Why plan an application restart separately from a service restart?
Odpowiedź
The application may need its own state handling, user coordination, health checks, and rollback point.
Karta 682
Pytanie
What is a cryptographic vulnerability?
Odpowiedź
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Karta 683
Pytanie
Why report findings by asset owner?
Odpowiedź
Owners need clear accountability and a prioritized remediation queue.
Karta 684
Pytanie
What should guide selection of a secure protocol?
Odpowiedź
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Karta 685
Pytanie
How do centralized and decentralized governance structures differ?
Odpowiedź
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Karta 686
Pytanie
How does privacy-aware design limit data retention?
Odpowiedź
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Karta 687
Pytanie
What does a pressure security sensor detect?
Odpowiedź
Force or weight applied to a protected surface, such as a floor mat or fence line.
Karta 688
Pytanie
What automation costs should a security team plan for?
Odpowiedź
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Karta 689
Pytanie
What should RTOS hardening preserve while reducing attack surface?
Odpowiedź
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Karta 690
Pytanie
What is the goal of disruption-for-chaos activity?
Odpowiedź
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Karta 691
Pytanie
Which indicator can repeated password guessing produce?
Odpowiedź
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Karta 692
Pytanie
How does removing unnecessary software harden a system?
Odpowiedź
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Karta 693
Pytanie
What does NetFlow provide?
Odpowiedź
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Karta 694
Pytanie
How can a dashboard support an investigation?
Odpowiedź
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Karta 695
Pytanie
When should a password be expired?
Odpowiedź
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Karta 696
Pytanie
Why does cryptographic key length matter?
Odpowiedź
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Karta 697
Pytanie
How can an unsecure Bluetooth connection become an attack vector?
Odpowiedź
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Karta 698
Pytanie
What is a key risk indicator?
Odpowiedź
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Karta 699
Pytanie
What should vendor monitoring verify when a contract ends?
Odpowiedź
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Karta 700
Pytanie
What does a sensitive data classification indicate?
Odpowiedź
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Karta 701
Pytanie
What does software-defined networking separate?
Odpowiedź
The control plane that decides traffic behavior from the data plane that forwards traffic.
Karta 702
Pytanie
Where should a web application firewall be placed?
Odpowiedź
In the path of web requests before they reach the protected application.
Karta 703
Pytanie
What does a simulated recovery exercise test?
Odpowiedź
Participants perform realistic response actions in a controlled environment without disrupting production.
Karta 704
Pytanie
How can a team verify that a detective control is effective?
Odpowiedź
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Karta 705
Pytanie
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Odpowiedź
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Karta 706
Pytanie
What makes a vulnerability cloud-specific?
Odpowiedź
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Karta 707
Pytanie
How can insurance respond to vulnerability risk?
Odpowiedź
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Karta 708
Pytanie
How does reputation improve web filtering?
Odpowiedź
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Karta 709
Pytanie
What does an encryption policy establish?
Odpowiedź
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Karta 710
Pytanie
How does a microwave security sensor detect movement?
Odpowiedź
It emits microwave energy and detects changes in the reflected signal caused by motion.
Karta 711
Pytanie
What should IoT-device hardening change before deployment?
Odpowiedź
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Karta 712
Pytanie
Why track software licenses as assets?
Odpowiedź
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Karta 713
Pytanie
What does a password manager improve?
Odpowiedź
It can generate and store unique long passwords so users do not memorize or reuse them.
Karta 714
Pytanie
What makes a ledger open and public?
Odpowiedź
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Karta 715
Pytanie
What should a payment-change request trigger?
Odpowiedź
Independent verification through a known channel before any account or payment detail is changed.
Karta 716
Pytanie
What does preserving digital evidence require?
Odpowiedź
Protecting its integrity, context, access history, and availability from collection through final disposition.
Karta 717
Pytanie
What should a risk report tell decision-makers?
Odpowiedź
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Karta 718
Pytanie
What should an external assessment report provide?
Odpowiedź
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Karta 719
Pytanie
What is a centralized design's main resilience risk?
Odpowiedź
A central dependency can become a bottleneck or single point of failure.
Karta 720
Pytanie
What does mutual TLS add to a TLS-protected service connection?
Odpowiedź
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Karta 721
Pytanie
What should recurring security-awareness reporting show?
Odpowiedź
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Karta 722
Pytanie
Why do legacy applications require extra change planning?
Odpowiedź
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Karta 723
Pytanie
How do a data controller and a data processor differ?
Odpowiedź
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Karta 724
Pytanie
How can orchestration become a single point of failure?
Odpowiedź
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Karta 725
Pytanie
Why should defenses account for a threat actor's sophistication and capability?
Odpowiedź
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Karta 726
Pytanie
How does an injection attack make an application execute unintended instructions?
Odpowiedź
It sends crafted input that an interpreter treats as code or commands instead of data.
Karta 727
Pytanie
What does a host-based firewall control?
Odpowiedź
Inbound and outbound network traffic for one endpoint according to local rules.
Karta 728
Pytanie
Why revise alerting after an incident?
Odpowiedź
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Karta 729
Pytanie
Why include security duties in procurement criteria?
Odpowiedź
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Karta 730
Pytanie
What does a critical data classification indicate?
Odpowiedź
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Karta 731
Pytanie
What infrastructure capacity must support failover?
Odpowiedź
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Karta 732
Pytanie
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Odpowiedź
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Karta 733
Pytanie
How does a remediation exemption differ from an exception?
Odpowiedź
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Karta 734
Pytanie
Why should automated EDR or XDR blocking have an exception and rollback path?
Odpowiedź
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Karta 735
Pytanie
What does a security playbook provide?
Odpowiedź
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Karta 736
Pytanie
How does an ultrasonic security sensor detect movement?
Odpowiedź
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Karta 737
Pytanie
What should a managed mobile device require for Bluetooth connections?
Odpowiedź
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Karta 738
Pytanie
How do password complexity rules differ from password length?
Odpowiedź
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Karta 739
Pytanie
What makes a certificate third-party trusted?
Odpowiedź
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Karta 740
Pytanie
Why is an out-of-band check effective against impersonation?
Odpowiedź
It verifies the request through a separate, previously trusted communication path.
Karta 741
Pytanie
What does a risk exception authorize?
Odpowiedź
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Karta 742
Pytanie
What security challenge grows in a decentralized design?
Odpowiedź
Consistent policy, inventory, monitoring, and patching become harder.
Karta 743
Pytanie
How should controls be selected for an unused network path?
Odpowiedź
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Karta 744
Pytanie
How can a buffer-overflow attack affect an application?
Odpowiedź
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 karty