What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

De autorul Flashcards Open Source App

Despre acest pachet

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Fișele din acest pachet

Fișa 1
Întrebare
What does an information security policy establish?
Răspuns
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Fișa 2
Întrebare
What is phishing?
Răspuns
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Fișa 3
Întrebare
What does a public-key certificate bind to an identity?
Răspuns
A public key, together with identifying information and the issuer's signature.
Fișa 4
Întrebare
What is data at rest?
Răspuns
Data stored on media such as disks, databases, backups, or mobile devices.
Fișa 5
Întrebare
How does policy-driven access control decide a zero-trust access request?
Răspuns
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Fișa 6
Întrebare
What does establishing a secure baseline produce?
Răspuns
An approved, documented configuration that defines the required secure state for a class of computing resource.
Fișa 7
Întrebare
What is hashing used to verify?
Răspuns
Whether data has changed by comparing fixed-length digest values.
Fișa 8
Întrebare
What is impersonation in social engineering?
Răspuns
Pretending to be a trusted person or organization to obtain access, data, or action.
Fișa 9
Întrebare
What is virtualization?
Răspuns
Abstracting physical compute so multiple isolated guest systems can share a host.
Fișa 10
Întrebare
What is chain of custody?
Răspuns
A documented history of who collected, handled, transferred, stored, and examined evidence.
Fișa 11
Întrebare
What is quantitative risk analysis?
Răspuns
Estimating risk with numerical values such as money, frequency, or probability.
Fișa 12
Întrebare
What is a phishing awareness campaign?
Răspuns
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Fișa 13
Întrebare
What is high availability?
Răspuns
Designing a service to remain accessible despite expected component failures.
Fișa 14
Întrebare
What is a network security zone?
Răspuns
A group of systems with similar trust, function, or control requirements.
Fișa 15
Întrebare
What is risk transfer?
Răspuns
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Fișa 16
Întrebare
What is media sanitization?
Răspuns
Making stored data infeasible to recover for the intended level of protection.
Fișa 17
Întrebare
What does CVSS provide?
Răspuns
A standardized way to describe a vulnerability's technical severity characteristics.
Fișa 18
Întrebare
What does security alerting do?
Răspuns
It turns matched events or behavior into a notification that the right responder can review.
Fișa 19
Întrebare
What does a firewall rule enforce?
Răspuns
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Fișa 20
Întrebare
What is deprovisioning?
Răspuns
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Fișa 21
Întrebare
How does inline placement differ from a tap or monitor port?
Răspuns
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Fișa 22
Întrebare
What is asymmetric encryption?
Răspuns
Encryption that uses a mathematically related public and private key pair.
Fișa 23
Întrebare
What does SPF authorize?
Răspuns
Which mail servers may send mail for a domain in the SMTP envelope.
Fișa 24
Întrebare
What is a possession factor?
Răspuns
Something the claimant has, such as a cryptographic authenticator.
Fișa 25
Întrebare
What does ordinary TLS usually protect and authenticate?
Răspuns
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Fișa 26
Întrebare
What is single loss expectancy?
Răspuns
The estimated loss from one occurrence of a risk event.
Fișa 27
Întrebare
What does a certificate authority do?
Răspuns
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Fișa 28
Întrebare
What is a detective control meant to do?
Răspuns
Identify that an unwanted event has happened or is happening.
Fișa 29
Întrebare
What is the security purpose of change-control approval?
Răspuns
Ensure authorized reviewers assess risk before the production change occurs.
Fișa 30
Întrebare
What is shadow IT?
Răspuns
Technology used for organizational work without required approval or oversight.
Fișa 31
Întrebare
What is a buffer overflow vulnerability?
Răspuns
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Fișa 32
Întrebare
What is ransomware?
Răspuns
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Fișa 33
Întrebare
How does network segmentation limit an incident?
Răspuns
It restricts communication paths and reduces lateral movement between zones.
Fișa 34
Întrebare
How do load balancing and clustering support availability differently?
Răspuns
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Fișa 35
Întrebare
What is vendor due diligence?
Răspuns
Evaluating a provider's security, capability, stability, and fit before commitment.
Fișa 36
Întrebare
Who is a data subject?
Răspuns
The person whose personal data is collected or processed.
Fișa 37
Întrebare
What is attestation?
Răspuns
A formal assertion or report about a subject matter, often supported by an independent examination.
Fișa 38
Întrebare
What is a replay attack?
Răspuns
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Fișa 39
Întrebare
What does a wireless site survey establish?
Răspuns
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Fișa 40
Întrebare
What is the time-of-check stage of a race-condition vulnerability?
Răspuns
The application verifies a condition or resource state before acting on it.
Fișa 41
Întrebare
What is a penetration test?
Răspuns
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Fișa 42
Întrebare
What is a cold recovery site?
Răspuns
A facility with basic space and utilities but little preinstalled technology or current data.
Fișa 43
Întrebare
What is data in transit?
Răspuns
Data moving between systems or across a network.
Fișa 44
Întrebare
What is a vendor security questionnaire?
Răspuns
A structured request for information about a provider's controls and practices.
Fișa 45
Întrebare
How does an internal actor's starting position differ from an external actor's?
Răspuns
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Fișa 46
Întrebare
What can unexpected account lockouts indicate?
Răspuns
Password guessing, credential stuffing, user error, or a broken client.
Fișa 47
Întrebare
How do permissions enforce access control?
Răspuns
They specify which actions a subject may perform on a particular resource.
Fișa 48
Întrebare
What is log aggregation?
Răspuns
Central collection of logs from multiple sources for search, correlation, and retention.
Fișa 49
Întrebare
Why plan a service restart as part of a change?
Răspuns
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Fișa 50
Întrebare
What is infrastructure as code?
Răspuns
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Fișa 51
Întrebare
What should security-awareness program development start with?
Răspuns
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Fișa 52
Întrebare
What is a voice-based social-engineering attack called?
Răspuns
Vishing.
Fișa 53
Întrebare
What happens during incident-response preparation?
Răspuns
Teams establish people, tools, access, communications, training, and procedures before an incident.
Fișa 54
Întrebare
What does an offensive penetration-testing team do?
Răspuns
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Fișa 55
Întrebare
What is federation?
Răspuns
One security domain relies on identity assertions from another trusted domain.
Fișa 56
Întrebare
What is asset classification?
Răspuns
Grouping an asset by sensitivity, criticality, or required handling.
Fișa 57
Întrebare
What is cross-site scripting?
Răspuns
Injection of script-capable content that a browser executes in another site's security context.
Fișa 58
Întrebare
What can IDS or IPS trends reveal?
Răspuns
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Fișa 59
Întrebare
What can unexpected resource inaccessibility indicate?
Răspuns
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Fișa 60
Întrebare
What is a corrective control meant to do?
Răspuns
Limit damage and restore a secure state after an event.
Fișa 61
Întrebare
How do containers differ from virtual machines?
Răspuns
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Fișa 62
Întrebare
How does an active security device differ from a passive one?
Răspuns
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Fișa 63
Întrebare
Why is unsupported software a persistent attack surface?
Răspuns
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Fișa 64
Întrebare
What is annualized rate of occurrence?
Răspuns
The estimated number of times a risk event occurs per year.
Fișa 65
Întrebare
What is an inherence factor?
Răspuns
A biometric characteristic of the claimant.
Fișa 66
Întrebare
What do a threat actor's sophistication and capability describe?
Răspuns
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Fișa 67
Întrebare
What is a SIEM?
Răspuns
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Fișa 68
Întrebare
What is sideloading?
Răspuns
Installing software from outside the platform's approved distribution path.
Fișa 69
Întrebare
What does an IDS or IPS signature match?
Răspuns
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Fișa 70
Întrebare
Why are embedded systems often difficult to patch?
Răspuns
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Fișa 71
Întrebare
What is a virtual private network?
Răspuns
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Fișa 72
Întrebare
What should an initial security-awareness report establish?
Răspuns
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Fișa 73
Întrebare
What is symmetric encryption?
Răspuns
Encryption that uses the same secret key to encrypt and decrypt data.
Fișa 74
Întrebare
What happens during incident detection?
Răspuns
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Fișa 75
Întrebare
What is recovery time objective?
Răspuns
The target maximum time to restore a function after disruption.
Fișa 76
Întrebare
Why prioritize password length?
Răspuns
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Fișa 77
Întrebare
What must sanitization accomplish before an asset leaves organizational control?
Răspuns
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Fișa 78
Întrebare
What is a real-time operating system designed to provide?
Răspuns
Predictable response timing for tasks with strict deadlines.
Fișa 79
Întrebare
What does fail-open behavior do when a control fails?
Răspuns
It permits traffic or access to preserve availability.
Fișa 80
Întrebare
What is jailbreaking or rooting a mobile device?
Răspuns
Removing platform restrictions to gain privileged control over the operating system.
Fișa 81
Întrebare
What does network access control enforce?
Răspuns
Identity, device posture, and access policy at network connection time and during a session.
Fișa 82
Întrebare
What does data loss prevention do?
Răspuns
Detects and may block sensitive data use or transfer that violates policy.
Fișa 83
Întrebare
What security property does a blockchain provide?
Răspuns
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Fișa 84
Întrebare
What is recovery point objective?
Răspuns
The target maximum acceptable data loss measured backward in time.
Fișa 85
Întrebare
How do ICS and SCADA relate?
Răspuns
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Fișa 86
Întrebare
What does fail-closed behavior do when a control fails?
Răspuns
It denies traffic or access to preserve security.
Fișa 87
Întrebare
Which keys create and verify a typical digital signature?
Răspuns
The signer creates it with a private key, and others verify it with the corresponding public key.
Fișa 88
Întrebare
What is SQL injection?
Răspuns
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Fișa 89
Întrebare
What does DKIM verify?
Răspuns
That selected message content was signed by a domain and was not altered after signing.
Fișa 90
Întrebare
What is post-incident activity?
Răspuns
Learning from the event and improving controls, plans, and recovery based on evidence.
Fișa 91
Întrebare
What characterizes an expansionary risk appetite?
Răspuns
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Fișa 92
Întrebare
How do centralized and decentralized architectures differ?
Răspuns
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Fișa 93
Întrebare
What does a certificate revocation list publish?
Răspuns
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Fișa 94
Întrebare
What is a legal hold?
Răspuns
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Fișa 95
Întrebare
What is exposure factor in quantitative risk analysis?
Răspuns
The estimated percentage of an asset's value lost in one event.
Fișa 96
Întrebare
What is decentralized architecture?
Răspuns
Control or service responsibility is distributed across multiple independent components or locations.
Fișa 97
Întrebare
What is tokenization?
Răspuns
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Fișa 98
Întrebare
How can automation act as a workforce multiplier?
Răspuns
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Fișa 99
Întrebare
What can endpoint process logs reveal?
Răspuns
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Fișa 100
Întrebare
What does the CIA triad protect?
Răspuns
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Fișa 101
Întrebare
How does data masking protect information?
Răspuns
It hides selected values or characters while preserving a usable representation.
Fișa 102
Întrebare
How can a national requirement affect security governance?
Răspuns
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Fișa 103
Întrebare
What do integrations and APIs provide to security orchestration?
Răspuns
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Fișa 104
Întrebare
What makes a compliance report external?
Răspuns
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Fișa 105
Întrebare
What does a cryptographic algorithm define?
Răspuns
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Fișa 106
Întrebare
Why compare systems with a secure baseline regularly?
Răspuns
To detect drift, unauthorized changes, and missing hardening.
Fișa 107
Întrebare
What does integrity protect?
Răspuns
The accuracy and completeness of data and systems against unauthorized change.
Fișa 108
Întrebare
What does vulnerability classification organize?
Răspuns
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Fișa 109
Întrebare
What does a password standard define?
Răspuns
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Fișa 110
Întrebare
What technology capacity must a recovery design plan for?
Răspuns
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Fișa 111
Întrebare
What does a confidential data classification indicate?
Răspuns
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Fișa 112
Întrebare
What makes a vendor assessment independent?
Răspuns
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Fișa 113
Întrebare
What lets a worm spread without attaching itself to another file?
Răspuns
It is a standalone program that replicates across reachable systems or services.
Fișa 114
Întrebare
What is microsegmentation?
Răspuns
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Fișa 115
Întrebare
What can application logs reveal?
Răspuns
Transactions, errors, user actions, and application-specific security events.
Fișa 116
Întrebare
What does deploying a secure baseline require?
Răspuns
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Fișa 117
Întrebare
How can resource-provisioning automation improve security?
Răspuns
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Fișa 118
Întrebare
What does availability protect?
Răspuns
Reliable, timely access to systems and data when authorized users need them.
Fișa 119
Întrebare
Why must a change request describe business impact?
Răspuns
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Fișa 120
Întrebare
What does an authenticated vulnerability scan add?
Răspuns
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Fișa 121
Întrebare
What does a change-management procedure specify?
Răspuns
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Fișa 122
Întrebare
What is a sanction for noncompliance?
Răspuns
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Fișa 123
Întrebare
How can email deliver a security attack?
Răspuns
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Fișa 124
Întrebare
What is an internal compliance audit?
Răspuns
An organization-led examination of whether selected operations and controls meet defined requirements.
Fișa 125
Întrebare
What is a Trojan?
Răspuns
Malware disguised as legitimate or desirable software.
Fișa 126
Întrebare
What is clustering?
Răspuns
Multiple systems work together to provide a service and tolerate member failure.
Fișa 127
Întrebare
What makes data regulated?
Răspuns
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Fișa 128
Întrebare
What does a wireless heat map show?
Răspuns
Measured or modeled signal strength and coverage across a physical area.
Fișa 129
Întrebare
How should vendor criticality affect due diligence?
Răspuns
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Fișa 130
Întrebare
How can a digital signature support non-repudiation?
Răspuns
It provides evidence that the holder of a private key signed specific data.
Fișa 131
Întrebare
What should vulnerability prioritization consider beyond severity?
Răspuns
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Fișa 132
Întrebare
What is a security guideline?
Răspuns
Recommended practice that allows judgment unless adopted as a requirement.
Fișa 133
Întrebare
What usually distinguishes a nation-state threat actor?
Răspuns
Strategic objectives, substantial resources, patience, and advanced operational capability.
Fișa 134
Întrebare
What is spyware?
Răspuns
Software that secretly collects information about a user or system.
Fișa 135
Întrebare
Why maintain an allow list for applications?
Răspuns
Only explicitly approved software is permitted to execute.
Fișa 136
Întrebare
How can an image become an attack vector?
Răspuns
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Fișa 137
Întrebare
What makes a security control technical?
Răspuns
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Fișa 138
Întrebare
What is identity proofing?
Răspuns
Establishing that a person is who they claim to be before issuing an account or credential.
Fișa 139
Întrebare
What is an automated security guardrail?
Răspuns
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Fișa 140
Întrebare
Why assign an owner to a planned change?
Răspuns
To make one party accountable for coordination, execution, and follow-through.
Fișa 141
Întrebare
How can national privacy law affect data handling?
Răspuns
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Fișa 142
Întrebare
What is continuity of operations?
Răspuns
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Fișa 143
Întrebare
What security tradeoff comes with BYOD?
Răspuns
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Fișa 144
Întrebare
How should policies and handbooks support security training?
Răspuns
They provide accessible, current rules and reporting steps that training can apply to real situations.
Fișa 145
Întrebare
What is a keylogger?
Răspuns
A tool that records keystrokes to capture data such as credentials.
Fișa 146
Întrebare
What makes information a trade secret?
Răspuns
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Fișa 147
Întrebare
What does authentication establish?
Răspuns
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Fișa 148
Întrebare
What risk comes from an untrusted file attachment?
Răspuns
Opening or parsing it can execute malicious code or expose data.
Fișa 149
Întrebare
How does risk tolerance affect vulnerability remediation?
Răspuns
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Fișa 150
Întrebare
How can a global requirement affect security governance?
Răspuns
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Fișa 151
Întrebare
Why should questionnaire answers be supported by evidence?
Răspuns
Self-assertions alone may not prove that controls are designed or operating effectively.
Fișa 152
Întrebare
What is an independent third-party audit?
Răspuns
An external party with suitable independence examines evidence against defined criteria.
Fișa 153
Întrebare
What do account provisioning and deprovisioning do?
Răspuns
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Fișa 154
Întrebare
What is an unskilled attacker commonly called?
Răspuns
A script kiddie: someone who relies on tools or instructions created by others.
Fișa 155
Întrebare
What is a rootkit?
Răspuns
Software designed to maintain privileged, concealed access by altering or subverting the system.
Fișa 156
Întrebare
What does an access control list enforce?
Răspuns
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Fișa 157
Întrebare
What should system security monitoring observe?
Răspuns
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Fișa 158
Întrebare
What can operating-system security logs reveal?
Răspuns
Authentication, privilege use, policy changes, services, and other host security events.
Fișa 159
Întrebare
Why isolate operational technology from general business networks?
Răspuns
To limit attack paths into safety- and availability-critical processes.
Fișa 160
Întrebare
What is the COPE mobile deployment model?
Răspuns
The organization owns the device but permits defined personal use while retaining management control.
Fișa 161
Întrebare
What security work belongs in asset acquisition and procurement?
Răspuns
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Fișa 162
Întrebare
How can user-provisioning automation improve security?
Răspuns
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Fișa 163
Întrebare
What people capacity must a continuity plan account for?
Răspuns
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Fișa 164
Întrebare
What do authorization models define?
Răspuns
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Fișa 165
Întrebare
Why are removable devices an attack vector?
Răspuns
They can introduce malware or remove data while bypassing network controls.
Fișa 166
Întrebare
What should predeployment change-test results show?
Răspuns
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Fișa 167
Întrebare
What is the time-of-use stage of a race-condition vulnerability?
Răspuns
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Fișa 168
Întrebare
What is data in use?
Răspuns
Data actively processed in memory or by an application.
Fișa 169
Întrebare
What does open-source vulnerability intelligence contribute?
Răspuns
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Fișa 170
Întrebare
What can file-integrity monitoring detect?
Răspuns
Unexpected changes to protected files, directories, or configuration.
Fișa 171
Întrebare
Why should deprovisioning be prompt?
Răspuns
Former users or roles should not retain usable access.
Fișa 172
Întrebare
What is an acceptable use policy?
Răspuns
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Fișa 173
Întrebare
What makes a compliance report internal?
Răspuns
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Fișa 174
Întrebare
What is a logic bomb?
Răspuns
Malicious code that activates when a specified condition or time is reached.
Fișa 175
Întrebare
What does a right-to-audit clause provide?
Răspuns
Contractual authority to inspect or obtain evidence about agreed controls.
Fișa 176
Întrebare
Where should a forward proxy sit in an enterprise traffic path?
Răspuns
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Fișa 177
Întrebare
Which cues should make a message look suspicious?
Răspuns
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Fișa 178
Întrebare
What makes a security control managerial?
Răspuns
It directs risk and governance through decisions such as policies, assessments, and oversight.
Fișa 179
Întrebare
What is the CYOD mobile deployment model?
Răspuns
The user selects from organization-approved device options that remain subject to corporate security requirements.
Fișa 180
Întrebare
How does client-based vulnerable software differ from an agentless exposure?
Răspuns
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Fișa 181
Întrebare
What makes a risk assessment recurring?
Răspuns
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Fișa 182
Întrebare
What does a defensive penetration-testing team practice?
Răspuns
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Fișa 183
Întrebare
In a zero-trust data plane, what can the subject or system represent?
Răspuns
The user, device, workload, or service requesting access to a protected resource.
Fișa 184
Întrebare
What primarily motivates a hacktivist?
Răspuns
A political, social, or ideological cause.
Fișa 185
Întrebare
What is bloatware?
Răspuns
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Fișa 186
Întrebare
Why keep endpoint-protection signatures and engines current?
Răspuns
They need current detection logic to recognize newly identified malware and exploit behavior.
Fișa 187
Întrebare
What should application security monitoring observe?
Răspuns
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Fișa 188
Întrebare
What is role-based access control?
Răspuns
Permissions are assigned to roles, and identities receive access through their roles.
Fișa 189
Întrebare
What is geographic dispersal?
Răspuns
Placing redundant resources in separate locations so one regional event does not affect all copies.
Fișa 190
Întrebare
What is a malicious update?
Răspuns
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Fișa 191
Întrebare
What does static application analysis inspect?
Răspuns
Source code, bytecode, or compiled code without executing the application.
Fișa 192
Întrebare
What does a firewall access list define?
Răspuns
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Fișa 193
Întrebare
What does a disaster recovery policy establish?
Răspuns
Management expectations for restoring technology and data after a disruptive event.
Fișa 194
Întrebare
How does logical segmentation separate workloads that share physical infrastructure?
Răspuns
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Fișa 195
Întrebare
How should IDS and IPS placement differ?
Răspuns
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Fișa 196
Întrebare
What should automated ticket creation capture?
Răspuns
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Fișa 197
Întrebare
What makes information intellectual property?
Răspuns
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Fișa 198
Întrebare
What is a backout plan?
Răspuns
Predefined steps for safely reversing a failed or harmful change.
Fișa 199
Întrebare
Why is an unsecure wireless network an attack vector?
Răspuns
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Fișa 200
Întrebare
What is physical brute force?
Răspuns
Using force to defeat a lock, barrier, enclosure, or other physical control.
Fișa 201
Întrebare
What is application sandboxing?
Răspuns
Running code in a constrained environment with limited access to the host and data.
Fișa 202
Întrebare
Why assign an asset owner?
Răspuns
One accountable party must decide its use, protection, and lifecycle.
Fișa 203
Întrebare
What happens during risk identification?
Răspuns
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Fișa 204
Întrebare
What should an SLA state about breach notification?
Răspuns
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Fișa 205
Întrebare
How do due diligence and due care differ in compliance?
Răspuns
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Fișa 206
Întrebare
What is attribute-based access control?
Răspuns
Policy evaluates attributes of the subject, resource, action, and environment.
Fișa 207
Întrebare
What does a zero-trust policy engine do?
Răspuns
It evaluates policy and signals to decide whether access should be allowed.
Fișa 208
Întrebare
How does a cloud responsibility matrix allocate security duties?
Răspuns
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Fișa 209
Întrebare
Where should a load balancer sit in a service path?
Răspuns
In front of service instances so it can route requests to healthy backends.
Fișa 210
Întrebare
What should the security team do with a reported suspicious message?
Răspuns
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Fișa 211
Întrebare
What makes an operating-system vulnerability high impact?
Răspuns
It can affect every application and security control that relies on the compromised OS.
Fișa 212
Întrebare
What does dynamic application analysis inspect?
Răspuns
The behavior and externally visible weaknesses of a running application.
Fișa 213
Întrebare
How can false-positive trends affect IDS or IPS tuning?
Răspuns
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Fișa 214
Întrebare
What does a business continuity policy establish?
Răspuns
Management expectations for sustaining and restoring critical business functions.
Fișa 215
Întrebare
What is a hot recovery site?
Răspuns
A ready, synchronized environment intended to take over quickly.
Fișa 216
Întrebare
What makes an insider threat distinct?
Răspuns
The actor has legitimate access or organizational knowledge that can be misused.
Fișa 217
Întrebare
What is RFID cloning?
Răspuns
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Fișa 218
Întrebare
Why apply vendor security updates promptly?
Răspuns
They remove known weaknesses before attackers can exploit the unpatched exposure.
Fișa 219
Întrebare
What should infrastructure security monitoring observe?
Răspuns
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Fișa 220
Întrebare
What can firewall logs reveal?
Răspuns
Allowed or denied network connections across controlled boundaries.
Fișa 221
Întrebare
Why minimize open service ports?
Răspuns
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Fișa 222
Întrebare
What is threat hunting?
Răspuns
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Fișa 223
Întrebare
What triggers an ad hoc risk assessment?
Răspuns
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Fișa 224
Întrebare
What makes an assessment external?
Răspuns
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Fișa 225
Întrebare
What is data sovereignty?
Răspuns
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Fișa 226
Întrebare
What security boundary does a cellular connection create for a mobile device?
Răspuns
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Fișa 227
Întrebare
What makes a security control operational?
Răspuns
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Fișa 228
Întrebare
What is discretionary access control?
Răspuns
A resource owner can decide who receives access, within system policy.
Fișa 229
Întrebare
How can careful automation support employee retention?
Răspuns
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Fișa 230
Întrebare
Why does ease of deployment matter in an architecture decision?
Răspuns
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Fișa 231
Întrebare
What tradeoff comes with placing an NGFW inline?
Răspuns
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Fișa 232
Întrebare
What does a zero-trust policy administrator do?
Răspuns
It carries out the policy engine's decision, such as creating or ending a session.
Fișa 233
Întrebare
What should a master service agreement define for data return and deletion?
Răspuns
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Fișa 234
Întrebare
What is an environmental physical attack?
Răspuns
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Fișa 235
Întrebare
When should a maintenance window be chosen?
Răspuns
When disruption and rollback can be managed with the least business impact.
Fișa 236
Întrebare
What is memory injection?
Răspuns
Placing malicious code or data into another process's memory so it executes in that process's context.
Fișa 237
Întrebare
What does software composition analysis find?
Răspuns
Known risks and license information in third-party dependencies.
Fișa 238
Întrebare
What is DNS filtering?
Răspuns
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Fișa 239
Întrebare
What should an incident response policy establish?
Răspuns
Authority, scope, reporting duties, and organizational commitment for incident handling.
Fișa 240
Întrebare
How can noncompliance cause reputational damage?
Răspuns
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Fișa 241
Întrebare
What does full-disk encryption protect?
Răspuns
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Fișa 242
Întrebare
Why are default credentials dangerous?
Răspuns
They are widely known or easily discovered and often remain unchanged.
Fișa 243
Întrebare
What makes a risk assessment one-time?
Răspuns
It evaluates a defined decision or scope once without an established repeating cadence.
Fișa 244
Întrebare
What is a warm recovery site?
Răspuns
A partially equipped environment that needs some data restoration or configuration before use.
Fișa 245
Întrebare
What does application input validation do?
Răspuns
It checks that input matches the expected type, length, range, and format before use.
Fișa 246
Întrebare
What should an asset inventory record besides a device name?
Răspuns
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Fișa 247
Întrebare
What is mandatory access control?
Răspuns
A central authority enforces access through labels and rules that ordinary owners cannot override.
Fișa 248
Întrebare
What security benefit does infrastructure as code provide?
Răspuns
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Fișa 249
Întrebare
When should a public service control fail closed?
Răspuns
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Fișa 250
Întrebare
What should users do with a suspicious message?
Răspuns
Report it through the approved channel without interacting with its links or attachments.
Fișa 251
Întrebare
What usually motivates organized cybercrime?
Răspuns
Financial gain through scalable or repeatable criminal activity.
Fișa 252
Întrebare
How can malicious code support a network attack?
Răspuns
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Fișa 253
Întrebare
When is virtual patching useful?
Răspuns
When a network or application control can block exploit traffic before the underlying system can be patched.
Fișa 254
Întrebare
What does security-monitoring reporting provide?
Răspuns
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Fișa 255
Întrebare
What does data geolocation identify?
Răspuns
The physical or legal location where data is stored, processed, or transmitted.
Fișa 256
Întrebare
What does a zero-trust policy enforcement point do?
Răspuns
It enables, monitors, and terminates the connection between a subject and a resource.
Fișa 257
Întrebare
What is cryptographic key exchange?
Răspuns
A method for parties to establish shared key material over an untrusted channel.
Fișa 258
Întrebare
How can a vendor become a supply-chain attack vector?
Răspuns
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Fișa 259
Întrebare
Why can legacy hardware remain vulnerable?
Răspuns
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Fișa 260
Întrebare
What can proprietary vulnerability intelligence add beyond open sources?
Răspuns
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Fișa 261
Întrebare
How does a centralized proxy apply web filtering?
Răspuns
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Fișa 262
Întrebare
How can continuous integration and testing improve security automation?
Răspuns
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Fișa 263
Întrebare
What is containment?
Răspuns
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Fișa 264
Întrebare
What is a software development lifecycle policy meant to ensure?
Răspuns
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Fișa 265
Întrebare
What makes risk assessment continuous?
Răspuns
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Fișa 266
Întrebare
What is a memorandum of agreement?
Răspuns
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Fișa 267
Întrebare
What makes a penetration test integrated?
Răspuns
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Fișa 268
Întrebare
How does a DNS amplification attack magnify traffic?
Răspuns
It sends small spoofed queries that trigger larger replies toward the victim.
Fișa 269
Întrebare
Why does ease of recovery matter in an architecture decision?
Răspuns
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Fișa 270
Întrebare
What does 802.1X control before a device receives normal network access?
Răspuns
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Fișa 271
Întrebare
What is rule-based access control?
Răspuns
System-wide rules grant or deny access based on conditions such as network, time, or action.
Fișa 272
Întrebare
What is mobile device management?
Răspuns
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Fișa 273
Întrebare
What tradeoff comes with a cold recovery site?
Răspuns
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Fișa 274
Întrebare
Why identify stakeholders before approving a security-sensitive change?
Răspuns
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Fișa 275
Întrebare
How do attestation and acknowledgement differ?
Răspuns
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Fișa 276
Întrebare
What does zero-trust adaptive identity mean?
Răspuns
Access decisions adjust to current risk signals rather than relying only on a static login.
Fișa 277
Întrebare
What makes a security control physical?
Răspuns
It protects facilities or equipment through a tangible barrier or mechanism.
Fișa 278
Întrebare
What is geo-fencing for data?
Răspuns
Enforcing location-based boundaries on where data or services may be accessed or operated.
Fișa 279
Întrebare
What does a Trusted Platform Module protect?
Răspuns
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Fișa 280
Întrebare
Why can a managed service provider amplify risk?
Răspuns
Its privileged access and shared tooling can provide a path into many customers.
Fișa 281
Întrebare
What does probability express in risk analysis?
Răspuns
A quantified chance that a defined event will occur within stated conditions or time.
Fișa 282
Întrebare
Why can shadow IT create a threat?
Răspuns
It bypasses security review, inventory, monitoring, and supported configuration.
Fișa 283
Întrebare
What is on-path interception?
Răspuns
An attacker positions between communicating parties to observe or alter traffic.
Fișa 284
Întrebare
Why include encryption in a system-hardening baseline?
Răspuns
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Fișa 285
Întrebare
Why tune security alerts?
Răspuns
To keep useful detections while reducing noise that wastes analyst attention.
Fișa 286
Întrebare
What can IPS or IDS logs contribute to an investigation?
Răspuns
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Fișa 287
Întrebare
What is VM escape?
Răspuns
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Fișa 288
Întrebare
How can segmentation reduce vulnerability exposure before a patch is available?
Răspuns
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Fișa 289
Întrebare
Why should firewall policy name the required ports and protocols explicitly?
Răspuns
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Fișa 290
Întrebare
What is a change management policy meant to control?
Răspuns
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Fișa 291
Întrebare
What is a hybrid-cloud architecture?
Răspuns
An environment that integrates private or on-premises resources with public cloud services.
Fișa 292
Întrebare
How do AH and ESP differ in the security services they can provide?
Răspuns
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Fișa 293
Întrebare
What makes user behavior risky?
Răspuns
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Fișa 294
Întrebare
What is least privilege?
Răspuns
Granting only the access needed for the required task and no more.
Fișa 295
Întrebare
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Răspuns
Transmission to HTTPS, script access, and cross-site sending, respectively.
Fișa 296
Întrebare
Why discover unmanaged assets?
Răspuns
Unknown systems cannot be patched, monitored, or governed reliably.
Fișa 297
Întrebare
What is a service-level agreement?
Răspuns
Measurable service commitments and remedies, such as availability or response targets.
Fișa 298
Întrebare
What should govern automated security escalation?
Răspuns
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Fișa 299
Întrebare
What is platform diversity as a resilience strategy?
Răspuns
Using different implementations so one common flaw or failure is less likely to affect every copy.
Fișa 300
Întrebare
How can replayed session material affect an application?
Răspuns
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Fișa 301
Întrebare
What is an implicit trust zone in zero trust?
Răspuns
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Fișa 302
Întrebare
What does salting a password hash accomplish?
Răspuns
It makes identical passwords hash differently and defeats precomputed hash tables.
Fișa 303
Întrebare
What is spear phishing?
Răspuns
Phishing tailored to a specific person, role, or organization.
Fișa 304
Întrebare
What is eradication?
Răspuns
Removing the attacker's access, malicious artifacts, and exploited conditions.
Fișa 305
Întrebare
Who is a risk owner?
Răspuns
The person accountable for deciding and monitoring how a specific risk is handled.
Fișa 306
Întrebare
What does a partially known penetration-test environment provide?
Răspuns
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Fișa 307
Întrebare
What is a microservices architecture?
Răspuns
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Fișa 308
Întrebare
What is a jump server?
Răspuns
A hardened intermediary used to reach systems in a restricted management network.
Fișa 309
Întrebare
What can happen when a configuration change is made without dependency analysis?
Răspuns
A downstream service can fail even when the changed component works.
Fișa 310
Întrebare
What is resource reuse exposure?
Răspuns
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Fișa 311
Întrebare
Why does financial information require explicit protection?
Răspuns
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Fișa 312
Întrebare
What does CVE provide?
Răspuns
A common identifier for a publicly disclosed vulnerability.
Fișa 313
Întrebare
Where can DLP controls operate?
Răspuns
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Fișa 314
Întrebare
What does privileged password vaulting protect?
Răspuns
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Fișa 315
Întrebare
What does an access-control standard define?
Răspuns
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Fișa 316
Întrebare
How can automation support compliance monitoring?
Răspuns
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Fișa 317
Întrebare
What does static code analysis examine?
Răspuns
Source or compiled code for weakness patterns without executing the application.
Fișa 318
Întrebare
What actor attribute describes funding, time, and personnel?
Răspuns
Resources.
Fișa 319
Întrebare
What is DNS poisoning?
Răspuns
Introducing false DNS data so names resolve to attacker-chosen destinations.
Fișa 320
Întrebare
Why change default credentials during hardening?
Răspuns
Default secrets are predictable and commonly targeted.
Fișa 321
Întrebare
What does quarantine do after a security alert?
Răspuns
It restricts a suspected asset or object while analysts validate and remediate the risk.
Fișa 322
Întrebare
What does key stretching do for stored passwords?
Răspuns
It deliberately makes each password guess more computationally expensive.
Fișa 323
Întrebare
What is smishing?
Răspuns
Phishing delivered through SMS or another text-messaging service.
Fișa 324
Întrebare
What is qualitative risk analysis?
Răspuns
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Fișa 325
Întrebare
What is a master service agreement?
Răspuns
An umbrella contract establishing general legal and commercial terms for ongoing work.
Fișa 326
Întrebare
What is threat scope reduction?
Răspuns
Narrowing the systems, privileges, or paths an attacker can reach.
Fișa 327
Întrebare
Why use a third-party cloud service instead of building locally?
Răspuns
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Fișa 328
Întrebare
What should determine security-device placement?
Răspuns
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Fișa 329
Întrebare
What does situational awareness mean for a user?
Răspuns
Notice the people, devices, requests, location, and context around a task before acting.
Fișa 330
Întrebare
What does a failover test validate?
Răspuns
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Fișa 331
Întrebare
What is a preventive control meant to do?
Răspuns
Stop an unwanted event before it succeeds.
Fișa 332
Întrebare
What is just-in-time privileged access?
Răspuns
Elevated access is granted only when needed and expires after a short approved period.
Fișa 333
Întrebare
What safeguard should security-group automation enforce?
Răspuns
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Fișa 334
Întrebare
How does a reflected DDoS attack hide and multiply sources?
Răspuns
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Fișa 335
Întrebare
What is a security misconfiguration?
Răspuns
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Fișa 336
Întrebare
Why can the same vulnerability have different organizational impact?
Răspuns
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Fișa 337
Întrebare
What does URL scanning evaluate before a user opens a web destination?
Răspuns
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Fișa 338
Întrebare
What is the board's security governance role?
Răspuns
Provide oversight, set risk direction, and hold executives accountable.
Fișa 339
Întrebare
What does code signing establish?
Răspuns
That code came from the holder of the signing key and has not changed since signing.
Fișa 340
Întrebare
How should an asset's classification affect security operations?
Răspuns
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Fișa 341
Întrebare
How does encryption protect data?
Răspuns
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Fișa 342
Întrebare
What is a secure enclave?
Răspuns
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Fișa 343
Întrebare
What is business email compromise?
Răspuns
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Fișa 344
Întrebare
What is recovery in incident response?
Răspuns
Restoring services safely, monitoring them, and returning to normal operations.
Fișa 345
Întrebare
How is single loss expectancy commonly estimated?
Răspuns
Asset value multiplied by the exposure factor.
Fișa 346
Întrebare
What does an unknown penetration-test environment provide?
Răspuns
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Fișa 347
Întrebare
What security boundary does a hypervisor provide?
Răspuns
It isolates virtual machines while controlling their access to shared hardware.
Fișa 348
Întrebare
Why does a TLS tunnel not protect a compromised endpoint?
Răspuns
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Fișa 349
Întrebare
Why update diagrams after an infrastructure change?
Răspuns
Operations and incident responders need the documentation to match the deployed environment.
Fișa 350
Întrebare
What does privacy ownership assign?
Răspuns
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Fișa 351
Întrebare
What does a security control gap analysis compare?
Răspuns
The controls required for the target state with the controls currently in place.
Fișa 352
Întrebare
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Răspuns
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Fișa 353
Întrebare
What is application privilege escalation?
Răspuns
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Fișa 354
Întrebare
What risk remains when unnecessary software is left installed?
Răspuns
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Fișa 355
Întrebare
What does SCAP standardize?
Răspuns
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Fișa 356
Întrebare
What can packet capture reveal?
Răspuns
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Fișa 357
Întrebare
What makes a privileged credential ephemeral?
Răspuns
It is created for a limited task or session and expires or is destroyed automatically after that use.
Fișa 358
Întrebare
How do a statement of work and a work order differ?
Răspuns
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Fișa 359
Întrebare
Why might multi-cloud improve resilience?
Răspuns
A provider-wide failure need not stop workloads that can run independently elsewhere.
Fișa 360
Întrebare
How can a service provider introduce a supply-chain vulnerability?
Răspuns
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Fișa 361
Întrebare
What is a false positive in vulnerability scanning?
Răspuns
A reported weakness that is not actually present or exploitable in the assessed context.
Fișa 362
Întrebare
How do EDR and XDR differ?
Răspuns
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Fișa 363
Întrebare
What should onboarding and offboarding procedures coordinate?
Răspuns
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Fișa 364
Întrebare
How should an organization harden managed mobile devices?
Răspuns
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Fișa 365
Întrebare
What is a certificate signing request?
Răspuns
A request containing a public key and subject information for a certificate authority to sign.
Fișa 366
Întrebare
What is pretexting?
Răspuns
Using a fabricated role or situation to make a request seem legitimate.
Fișa 367
Întrebare
How is annualized loss expectancy commonly estimated?
Răspuns
Single loss expectancy multiplied by annualized rate of occurrence.
Fișa 368
Întrebare
What security consequence follows from containers sharing a kernel?
Răspuns
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Fișa 369
Întrebare
Where does 802.1X enforce a network admission decision?
Răspuns
At the controlled switch port or wireless access point before normal network access is granted.
Fișa 370
Întrebare
What should insider-threat awareness teach?
Răspuns
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Fișa 371
Întrebare
What access action is suitable for careful automation?
Răspuns
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Fișa 372
Întrebare
What is an evil twin?
Răspuns
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 de fișe
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Studiază gratuit acest pachet
Nibomo se deschide ca să poți începe să studiezi.
Fișa 373
Întrebare
Does non-human-readable data need less protection?
Răspuns
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Fișa 374
Întrebare
What does authenticating a system establish?
Răspuns
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Fișa 375
Întrebare
What does LDAP provide in identity systems?
Răspuns
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Fișa 376
Întrebare
What is a deterrent control meant to do?
Răspuns
Discourage an attacker from attempting an unwanted action.
Fișa 377
Întrebare
Why update procedures after changing a security control?
Răspuns
Staff need accurate steps for operating, monitoring, and recovering the new control.
Fișa 378
Întrebare
How does OCSP differ from a certificate revocation list?
Răspuns
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Fișa 379
Întrebare
What is the goal of data exfiltration?
Răspuns
Remove data from its authorized environment without permission.
Fișa 380
Întrebare
What is a watering-hole attack?
Răspuns
Compromising a site frequented by the intended targets so their visits expose them.
Fișa 381
Întrebare
How can a hardware provider introduce a supply-chain vulnerability?
Răspuns
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Fișa 382
Întrebare
What is application forgery?
Răspuns
Creating or altering a request, token, or object so the application treats it as authentic.
Fișa 383
Întrebare
How does least privilege mitigate compromise?
Răspuns
It limits the actions and resources available to a compromised account or process.
Fișa 384
Întrebare
What is serverless computing?
Răspuns
A model where the provider manages servers and the customer deploys event-driven code or functions.
Fișa 385
Întrebare
What makes an infrastructure control effective for a specific risk?
Răspuns
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Fișa 386
Întrebare
What does parallel recovery processing test?
Răspuns
Whether primary and alternate environments can run together consistently before a controlled cutover.
Fișa 387
Întrebare
Which password-authentication method does WPA3-Personal use?
Răspuns
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Fișa 388
Întrebare
How does data retention affect asset disposal?
Răspuns
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Fișa 389
Întrebare
What is a false negative in vulnerability scanning?
Răspuns
A real weakness that the assessment fails to report.
Fișa 390
Întrebare
What does recurring security scanning add to monitoring?
Răspuns
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Fișa 391
Întrebare
What should guide port selection for a secure protocol?
Răspuns
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Fișa 392
Întrebare
What does forensic acquisition create?
Răspuns
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Fișa 393
Întrebare
How do system owners and data owners divide security accountability?
Răspuns
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Fișa 394
Întrebare
What does likelihood express in risk analysis?
Răspuns
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Fișa 395
Întrebare
What is a memorandum of understanding?
Răspuns
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Fișa 396
Întrebare
What does the right to be forgotten generally require?
Răspuns
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Fișa 397
Întrebare
What does an audit committee oversee?
Răspuns
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Fișa 398
Întrebare
What does identity interoperability require?
Răspuns
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Fișa 399
Întrebare
How does a bollard protect a facility?
Răspuns
It blocks or redirects vehicles before they can reach a protected area.
Fișa 400
Întrebare
How can hashing protect a downloaded file?
Răspuns
A trusted digest lets the recipient detect whether the file changed.
Fișa 401
Întrebare
What is a credential replay attack?
Răspuns
Using captured valid credentials or tokens again without needing to discover the secret.
Fișa 402
Întrebare
How can automation complexity create security risk?
Răspuns
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Fișa 403
Întrebare
What must an architecture provide when a component cannot be patched?
Răspuns
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Fișa 404
Întrebare
What makes remote access secure?
Răspuns
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Fișa 405
Întrebare
What should users verify before connecting removable media or a cable?
Răspuns
That the device and connection are approved, expected, and handled under organizational policy.
Fișa 406
Întrebare
What is a self-signed certificate?
Răspuns
A certificate signed by its own private key rather than by a separate trusted issuer.
Fișa 407
Întrebare
What is brand impersonation?
Răspuns
Using a trusted organization's identity or look to deceive people.
Fișa 408
Întrebare
What characterizes a conservative risk appetite?
Răspuns
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Fișa 409
Întrebare
What should a managed mobile device verify before using Wi-Fi?
Răspuns
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Fișa 410
Întrebare
What is a zero-day vulnerability?
Răspuns
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Fișa 411
Întrebare
What does verification confirm after vulnerability remediation?
Răspuns
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Fișa 412
Întrebare
What is user and entity behavior analytics?
Răspuns
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Fișa 413
Întrebare
What does a physical security policy establish?
Răspuns
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Fișa 414
Întrebare
What does a UPS provide?
Răspuns
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Fișa 415
Întrebare
What is a nondisclosure agreement?
Răspuns
A contract restricting use and disclosure of defined confidential information.
Fișa 416
Întrebare
What should be checked before assigning a user permission?
Răspuns
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Fișa 417
Întrebare
How does espionage differ from ordinary theft?
Răspuns
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Fișa 418
Întrebare
What is password spraying?
Răspuns
Trying a small set of common passwords across many accounts to avoid lockouts.
Fișa 419
Întrebare
What is the purpose of system isolation during an incident?
Răspuns
Stop harmful communication while preserving the system for response and investigation.
Fișa 420
Întrebare
What is a security benchmark?
Răspuns
A documented set of recommended configuration checks for a platform or product.
Fișa 421
Întrebare
Which metadata fields give a log record investigative context?
Răspuns
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Fișa 422
Întrebare
What does an access-control vestibule prevent?
Răspuns
It limits tailgating by allowing controlled passage through one door at a time.
Fișa 423
Întrebare
What is version control's security value for configuration?
Răspuns
It preserves attributable history and enables review or rollback of changes.
Fișa 424
Întrebare
Why use both internal and external compliance monitoring?
Răspuns
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Fișa 425
Întrebare
What distinguishes on-premises architecture?
Răspuns
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Fișa 426
Întrebare
What risk can split tunneling add to a VPN?
Răspuns
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Fișa 427
Întrebare
What is a certificate root of trust?
Răspuns
A trusted root certificate or key from which a client validates a certificate chain.
Fișa 428
Întrebare
What is typosquatting?
Răspuns
Registering a look-alike domain based on common typing errors or visual similarity.
Fișa 429
Întrebare
What is root-cause analysis?
Răspuns
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Fișa 430
Întrebare
What is risk tolerance?
Răspuns
The acceptable variation or boundary around a specific objective or risk area.
Fișa 431
Întrebare
What is a security self-assessment?
Răspuns
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Fișa 432
Întrebare
What does data masking change?
Răspuns
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Fișa 433
Întrebare
How do wireless authentication protocols let clients prove identity securely?
Răspuns
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Fișa 434
Întrebare
Why reconcile inventory with network discovery?
Răspuns
Differences expose missing records, retired systems, or unauthorized devices.
Fișa 435
Întrebare
Why does sideloading raise mobile risk?
Răspuns
It can bypass store review, signing policy, and managed application controls.
Fișa 436
Întrebare
What does an information-sharing organization add to vulnerability management?
Răspuns
Sector or community intelligence about relevant threats, incidents, and defensive action.
Fișa 437
Întrebare
What does a web-filter block rule specify?
Răspuns
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Fișa 438
Întrebare
How do data custodians and data stewards differ?
Răspuns
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Fișa 439
Întrebare
What is a brute-force password attack?
Răspuns
Systematically trying many candidate secrets against an account or protected value.
Fișa 440
Întrebare
What is a compensating control?
Răspuns
An alternative safeguard used when the preferred control is impractical or unavailable.
Fișa 441
Întrebare
How can location act as an authentication factor?
Răspuns
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Fișa 442
Întrebare
Why must security automation remain supportable?
Răspuns
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Fișa 443
Întrebare
What does a standby generator provide?
Răspuns
Longer-duration power during a utility outage, after a startup delay.
Fișa 444
Întrebare
What makes an architecture air-gapped?
Răspuns
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Fișa 445
Întrebare
What is a software-defined WAN?
Răspuns
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Fișa 446
Întrebare
What password-management behavior should awareness training reinforce?
Răspuns
Use unique long passwords through an approved manager and report suspected compromise promptly.
Fișa 447
Întrebare
What security value does fencing provide?
Răspuns
It defines and delays entry across a physical perimeter.
Fișa 448
Întrebare
What is a wildcard certificate?
Răspuns
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Fișa 449
Întrebare
How does misinformation differ from disinformation?
Răspuns
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Fișa 450
Întrebare
What is a risk threshold?
Răspuns
A defined level that triggers escalation, treatment, or another required response.
Fișa 451
Întrebare
What does a vendor penetration test contribute to assessment?
Răspuns
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Fișa 452
Întrebare
What is the objective of a service-disruption attack?
Răspuns
Make a system or business function unavailable or unreliable.
Fișa 453
Întrebare
What is directory traversal?
Răspuns
Manipulating a file path to reach files outside the directory the application intended to expose.
Fișa 454
Întrebare
Why decommission an unsupported system?
Răspuns
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Fișa 455
Întrebare
Why archive security-monitoring data?
Răspuns
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Fișa 456
Întrebare
What role does RADIUS commonly play in enterprise Wi-Fi?
Răspuns
It centralizes authentication, authorization information, and accounting for network access.
Fișa 457
Întrebare
Why separate the requester and approver of a high-risk change?
Răspuns
To reduce error, fraud, and unilateral unauthorized modification.
Fișa 458
Întrebare
Why can a jailbroken device violate a security baseline?
Răspuns
It weakens platform isolation and allows unapproved privileged changes.
Fișa 459
Întrebare
When is tokenization especially useful?
Răspuns
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Fișa 460
Întrebare
Why can dark-web intelligence affect vulnerability priority?
Răspuns
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Fișa 461
Întrebare
What firewall policy should govern traffic from a screened subnet to internal systems?
Răspuns
Deny it by default and allow only explicitly required flows.
Fișa 462
Întrebare
What does SAML commonly carry?
Răspuns
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Fișa 463
Întrebare
What does a security governance committee do?
Răspuns
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Fișa 464
Întrebare
How can global privacy requirements affect one data process?
Răspuns
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Fișa 465
Întrebare
What characterizes an IoT device?
Răspuns
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Fișa 466
Întrebare
What is a unified threat management appliance?
Răspuns
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Fișa 467
Întrebare
What does a hardware security module provide?
Răspuns
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Fișa 468
Întrebare
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Răspuns
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Fișa 469
Întrebare
What is a tabletop exercise?
Răspuns
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Fișa 470
Întrebare
What does a risk exemption authorize?
Răspuns
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Fișa 471
Întrebare
What is a regulatory examination?
Răspuns
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Fișa 472
Întrebare
What does physical video surveillance primarily provide?
Răspuns
Detection and evidence of activity in monitored areas.
Fișa 473
Întrebare
What is a birthday attack against a hash?
Răspuns
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Fișa 474
Întrebare
Why keep backups both onsite and offsite?
Răspuns
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Fișa 475
Întrebare
How does technical debt affect security automation?
Răspuns
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Fișa 476
Întrebare
What should switch hardening restrict first?
Răspuns
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Fișa 477
Întrebare
What should happen when an asset changes owners?
Răspuns
Inventory, access, support responsibility, and data handling should be updated.
Fișa 478
Întrebare
What does evidence of a vendor's internal audits contribute?
Răspuns
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Fișa 479
Întrebare
What is identity attestation?
Răspuns
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Fișa 480
Întrebare
Why can standard enterprise patching be unsafe for an RTOS device?
Răspuns
A change can disrupt timing guarantees or certified operational behavior.
Fișa 481
Întrebare
What is secure access service edge?
Răspuns
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Fișa 482
Întrebare
What social-engineering habit should awareness training reinforce?
Răspuns
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Fișa 483
Întrebare
How can a software provider introduce a supply-chain vulnerability?
Răspuns
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Fișa 484
Întrebare
Why include internet exposure in remediation priority?
Răspuns
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Fișa 485
Întrebare
What does a mail gateway inspect?
Răspuns
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Fișa 486
Întrebare
What is a data controller?
Răspuns
The entity that determines why and how personal data is processed.
Fișa 487
Întrebare
How does blackmail motivate a cyberattack?
Răspuns
The attacker threatens disclosure or harm unless the victim complies.
Fișa 488
Întrebare
What is a downgrade attack?
Răspuns
Forcing parties to use an older or weaker protocol or security mode.
Fișa 489
Întrebare
How does encryption mitigate data exposure?
Răspuns
It makes captured data unreadable without the required key.
Fișa 490
Întrebare
How do network and web vulnerability scanners differ?
Răspuns
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Fișa 491
Întrebare
How can vulnerability-scan data support an investigation?
Răspuns
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Fișa 492
Întrebare
What is key escrow?
Răspuns
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Fișa 493
Întrebare
Which human vector commonly uses a fake sign-in page to harvest credentials?
Răspuns
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Fișa 494
Întrebare
What is risk avoidance?
Răspuns
Stopping or not starting the activity that creates the risk.
Fișa 495
Întrebare
What is data obfuscation?
Răspuns
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Fișa 496
Întrebare
What is a directive control?
Răspuns
A safeguard that tells people what behavior or action is required.
Fișa 497
Întrebare
What does a security guard add that a camera cannot?
Răspuns
Human judgment and an immediate physical response.
Fișa 498
Întrebare
Why define restricted activities in change management?
Răspuns
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Fișa 499
Întrebare
What contractual impact can noncompliance create?
Răspuns
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Fișa 500
Întrebare
What should determine backup frequency?
Răspuns
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Fișa 501
Întrebare
What should router hardening protect?
Răspuns
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Fișa 502
Întrebare
What problem does OAuth 2.0 address?
Răspuns
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Fișa 503
Întrebare
What does SCADA do?
Răspuns
It provides supervisory monitoring and control across distributed industrial equipment.
Fișa 504
Întrebare
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Răspuns
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Fișa 505
Întrebare
What distinguishes a computer virus?
Răspuns
It attaches to a host file or program and spreads when that infected host executes or is shared.
Fișa 506
Întrebare
What does a key management system coordinate?
Răspuns
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Fișa 507
Întrebare
How can an unsecure wired network expose traffic?
Răspuns
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Fișa 508
Întrebare
Why is vulnerable device firmware hard to remediate?
Răspuns
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Fișa 509
Întrebare
What does patching change in vulnerability remediation?
Răspuns
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Fișa 510
Întrebare
What does DMARC add to SPF and DKIM?
Răspuns
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Fișa 511
Întrebare
How does automation improve security efficiency?
Răspuns
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Fișa 512
Întrebare
What is a simulation exercise?
Răspuns
A more realistic practice in which participants respond to injected events using operational processes.
Fișa 513
Întrebare
What is a data processor?
Răspuns
An entity that processes personal data on behalf of a controller.
Fișa 514
Întrebare
What is risk mitigation?
Răspuns
Reducing likelihood, impact, or both through controls or process changes.
Fișa 515
Întrebare
Why monitor a vendor after onboarding?
Răspuns
Security posture, ownership, services, incidents, and dependencies can change.
Fișa 516
Întrebare
What does a physical penetration test assess?
Răspuns
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Fișa 517
Întrebare
Why use access badges at a facility?
Răspuns
To associate entry attempts with authorized identities and enforce access rules.
Fișa 518
Întrebare
How does permission restriction protect data?
Răspuns
Only authorized identities receive the actions and scope their roles require.
Fișa 519
Întrebare
What is the usual objective of ransomware extortion?
Răspuns
Force payment by denying access, threatening disclosure, or both.
Fișa 520
Întrebare
What does impossible travel indicate?
Răspuns
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Fișa 521
Întrebare
What is configuration enforcement?
Răspuns
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Fișa 522
Întrebare
What does a web vulnerability scanner inspect?
Răspuns
Running web behavior for issues such as unsafe input handling and insecure configuration.
Fișa 523
Întrebare
How does cost affect an architecture choice?
Răspuns
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Fișa 524
Întrebare
What does EAP provide with 802.1X?
Răspuns
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Fișa 525
Întrebare
What should operational-security training help users protect?
Răspuns
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Fișa 526
Întrebare
What does a time-of-day access rule do?
Răspuns
Allows or denies a requested action according to an approved schedule.
Fișa 527
Întrebare
What should cloud infrastructure hardening establish?
Răspuns
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Fișa 528
Întrebare
What should an asset owner ensure during offboarding?
Răspuns
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Fișa 529
Întrebare
Why encrypt backups?
Răspuns
Backup media and transfers can expose the same sensitive data as production systems.
Fișa 530
Întrebare
What is steganography?
Răspuns
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Fișa 531
Întrebare
Which human vector uses a fabricated authority role to justify a sensitive request?
Răspuns
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Fișa 532
Întrebare
Why does risk transfer not remove accountability?
Răspuns
The organization can retain legal, reputational, operational, and oversight consequences.
Fișa 533
Întrebare
Why validate a change after deployment?
Răspuns
To confirm the intended result occurred without introducing unacceptable side effects.
Fișa 534
Întrebare
What makes end-of-life hardware a security vulnerability?
Răspuns
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Fișa 535
Întrebare
What does an audit add to remediation validation?
Răspuns
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Fișa 536
Întrebare
Why can SPF pass while a message still impersonates a brand?
Răspuns
SPF checks the envelope domain, which may differ from the visible From domain.
Fișa 537
Întrebare
What role can a government entity have in security governance?
Răspuns
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Fișa 538
Întrebare
How do data inventory and retention support privacy governance?
Răspuns
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Fișa 539
Întrebare
What can concurrent sessions from distant regions indicate?
Răspuns
A stolen account or shared credential, subject to VPN and proxy context.
Fișa 540
Întrebare
What does supply-chain analysis examine?
Răspuns
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Fișa 541
Întrebare
What is the purpose of facility lighting as a control?
Răspuns
Deter covert activity and improve observation of people and areas.
Fișa 542
Întrebare
What architecture quality keeps a service usable during component failure?
Răspuns
Availability.
Fișa 543
Întrebare
When is fail-open behavior preferable to fail-closed behavior?
Răspuns
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Fișa 544
Întrebare
Which control function does a login-failure alert provide?
Răspuns
Detection; it reveals suspicious authentication activity.
Fișa 545
Întrebare
What does a biometric MFA implementation verify?
Răspuns
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Fișa 546
Întrebare
How can automation enforce a security baseline?
Răspuns
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Fișa 547
Întrebare
How do wireless cryptographic protocols protect network traffic?
Răspuns
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Fișa 548
Întrebare
Why segment sensitive data stores?
Răspuns
It limits reachable paths and separates them from lower-trust workloads.
Fișa 549
Întrebare
What must remain secret in an asymmetric key pair?
Răspuns
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Fișa 550
Întrebare
How can a supplier become a supply-chain attack vector?
Răspuns
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Fișa 551
Întrebare
What is e-discovery?
Răspuns
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Fișa 552
Întrebare
What characterizes a neutral risk appetite?
Răspuns
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Fișa 553
Întrebare
What is passive reconnaissance?
Răspuns
Gathering information without directly interacting with the target's systems.
Fișa 554
Întrebare
What does a philosophical motive mean for a threat actor?
Răspuns
The actor acts to advance a belief or moral position rather than primarily for money.
Fișa 555
Întrebare
What does unexpected resource consumption indicate?
Răspuns
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Fișa 556
Întrebare
What does a host-based intrusion prevention system do?
Răspuns
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Fișa 557
Întrebare
How does agent-based monitoring differ from agentless monitoring?
Răspuns
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Fișa 558
Întrebare
What can network logs contribute to an investigation?
Răspuns
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Fișa 559
Întrebare
What is the purpose of a backup restore test?
Răspuns
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Fișa 560
Întrebare
Why can obsolete hardware become a security risk?
Răspuns
It may lack supported firmware, modern protections, or replacement parts.
Fișa 561
Întrebare
What does rescanning confirm after remediation?
Răspuns
Whether the scanner can still detect the original finding on the affected asset.
Fișa 562
Întrebare
What should a secure transport method provide?
Răspuns
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Fișa 563
Întrebare
How can law affect security governance?
Răspuns
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Fișa 564
Întrebare
What does resilience mean for a security architecture?
Răspuns
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Fișa 565
Întrebare
Why minimize an infrastructure's attack surface?
Răspuns
Fewer exposed services and paths leave fewer opportunities for exploitation.
Fișa 566
Întrebare
What does executing a security-awareness program require?
Răspuns
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Fișa 567
Întrebare
What does an infrared security sensor detect?
Răspuns
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Fișa 568
Întrebare
What is a knowledge factor?
Răspuns
Something the claimant knows, such as a password.
Fișa 569
Întrebare
Why review allow-list and deny-list impact before a change?
Răspuns
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Fișa 570
Întrebare
What does partition-level encryption protect?
Răspuns
One selected disk partition, leaving other partitions outside that encryption boundary.
Fișa 571
Întrebare
How can instant messaging deliver a security attack?
Răspuns
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Fișa 572
Întrebare
What can repeated blocked-content events indicate?
Răspuns
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Fișa 573
Întrebare
What should a server-hardening baseline reduce?
Răspuns
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Fișa 574
Întrebare
When is physical media destruction appropriate?
Răspuns
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Fișa 575
Întrebare
What is mean time to repair?
Răspuns
The average time required to restore a failed component or service.
Fișa 576
Întrebare
Why disclose conflicts of interest during vendor selection?
Răspuns
A personal or financial relationship can bias evaluation away from the organization's requirements.
Fișa 577
Întrebare
What is a fine for noncompliance?
Răspuns
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Fișa 578
Întrebare
What does a public data classification authorize?
Răspuns
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Fișa 579
Întrebare
What security benefit comes from standard infrastructure configurations?
Răspuns
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Fișa 580
Întrebare
How does horizontal scaling increase capacity?
Răspuns
It adds more service instances and distributes work among them.
Fișa 581
Întrebare
Why can added connectivity weaken segmentation?
Răspuns
Each allowed path can become a route for lateral movement or data escape.
Fișa 582
Întrebare
What coding practice is central to preventing SQL injection?
Răspuns
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Fișa 583
Întrebare
When is a compensating control appropriate for a vulnerability?
Răspuns
When timely removal or patching is infeasible and another control can reduce the risk.
Fișa 584
Întrebare
How does agent-based web filtering enforce policy?
Răspuns
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Fișa 585
Întrebare
How can regulation differ from an internal policy?
Răspuns
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Fișa 586
Întrebare
What is a storage snapshot?
Răspuns
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Fișa 587
Întrebare
What does password age measure?
Răspuns
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Fișa 588
Întrebare
What does an ethical motive mean in vulnerability research?
Răspuns
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Fișa 589
Întrebare
What can missing security logs indicate?
Răspuns
Logging failure, tampering, retention misconfiguration, or an inactive source.
Fișa 590
Întrebare
Why disable unused ports and protocols?
Răspuns
They expose unnecessary communication paths and code that attackers can reach.
Fișa 591
Întrebare
What does antivirus contribute to monitoring?
Răspuns
It scans files, memory, or behavior and reports suspected malicious code.
Fișa 592
Întrebare
What is a honeypot?
Răspuns
A decoy system or service designed to attract and observe malicious activity.
Fișa 593
Întrebare
What does file-level encryption protect?
Răspuns
Selected files independently of whether the rest of the disk or volume is encrypted.
Fișa 594
Întrebare
How can SMS deliver a security attack?
Răspuns
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Fișa 595
Întrebare
What happens during incident analysis?
Răspuns
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Fișa 596
Întrebare
What is mean time between failures?
Răspuns
The average operating time between repairable failures.
Fișa 597
Întrebare
What is active reconnaissance?
Răspuns
Probing or interacting with target systems to discover services and behavior.
Fișa 598
Întrebare
What constraint should guide ICS or SCADA hardening?
Răspuns
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Fișa 599
Întrebare
Which control function does restoring a clean system image provide?
Răspuns
Correction; it returns the system to a known-good state.
Fișa 600
Întrebare
What does responsiveness mean in an architecture decision?
Răspuns
How quickly the system and its operators can adapt to demand, failure, or attack.
Fișa 601
Întrebare
How does out-of-band access strengthen remote administration?
Răspuns
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Fișa 602
Întrebare
What makes user behavior unexpected?
Răspuns
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Fișa 603
Întrebare
What is a work order?
Răspuns
A document authorizing a defined unit of work under an existing agreement.
Fișa 604
Întrebare
What can out-of-cycle logging indicate?
Răspuns
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Fișa 605
Întrebare
Why update a standard operating procedure after a change?
Răspuns
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Fișa 606
Întrebare
What coding practice limits cross-site scripting?
Răspuns
Context-appropriate output encoding, supported by safe templating and input handling.
Fișa 607
Întrebare
What does a restricted data classification indicate?
Răspuns
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Fișa 608
Întrebare
How does a bug bounty support responsible disclosure?
Răspuns
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Fișa 609
Întrebare
What does web-filter content categorization provide?
Răspuns
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Fișa 610
Întrebare
How do hard and soft authentication tokens differ?
Răspuns
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Fișa 611
Întrebare
How can industry requirements affect security governance?
Răspuns
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Fișa 612
Întrebare
How can noncompliance cause loss of a license?
Răspuns
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Fișa 613
Întrebare
What does volume-level encryption protect?
Răspuns
All data within a selected logical storage volume.
Fișa 614
Întrebare
How can impersonation exploit familiarity?
Răspuns
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Fișa 615
Întrebare
How does RTO guide recovery design?
Răspuns
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Fișa 616
Întrebare
What is a honeynet?
Răspuns
A network of decoy systems used to study or divert attackers.
Fișa 617
Întrebare
What does backup replication provide?
Răspuns
Additional synchronized or copied recovery data in another system or location.
Fișa 618
Întrebare
What lets automation scale securely?
Răspuns
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Fișa 619
Întrebare
Why monitor a hardened computing resource continuously?
Răspuns
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Fișa 620
Întrebare
Why keep a certificate of destruction?
Răspuns
It documents that a disposal provider handled specified media under the agreed process.
Fișa 621
Întrebare
Why consider patch availability before selecting a platform?
Răspuns
Unsupported or difficult-to-update components accumulate known exposure.
Fișa 622
Întrebare
Why should remote administration use an encrypted, authenticated protocol?
Răspuns
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Fișa 623
Întrebare
How can revenge motivate an insider incident?
Răspuns
A disgruntled person may damage systems or disclose data to punish the organization.
Fișa 624
Întrebare
What is a published or documented indicator of malicious activity?
Răspuns
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Fișa 625
Întrebare
Why monitor a system more closely when a mitigation exception is accepted?
Răspuns
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Fișa 626
Întrebare
What is an SNMP trap?
Răspuns
An unsolicited device notification sent to a management system when a configured event occurs.
Fișa 627
Întrebare
How can an automated report support an investigation?
Răspuns
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Fișa 628
Întrebare
What is a security key?
Răspuns
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Fișa 629
Întrebare
What does database-level encryption protect?
Răspuns
A database or selected database structures through controls managed at the database layer.
Fișa 630
Întrebare
How does brand impersonation exploit trust?
Răspuns
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Fișa 631
Întrebare
What browser-side impact can a cross-site scripting vulnerability create?
Răspuns
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Fișa 632
Întrebare
How can a system or process audit identify vulnerabilities?
Răspuns
It compares evidence with required configuration and procedure to reveal control gaps.
Fișa 633
Întrebare
What security role can Group Policy provide?
Răspuns
Centralized Windows configuration of account, application, audit, and system security settings.
Fișa 634
Întrebare
What should incident-response training prepare people to do?
Răspuns
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Fișa 635
Întrebare
Why must governance track local or regional requirements?
Răspuns
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Fișa 636
Întrebare
How can a dependency become a useful key risk indicator?
Răspuns
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Fișa 637
Întrebare
What is a business partners agreement?
Răspuns
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Fișa 638
Întrebare
What makes an audit regulatory?
Răspuns
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Fișa 639
Întrebare
What is a honeyfile?
Răspuns
A decoy file whose access can reveal unauthorized activity.
Fișa 640
Întrebare
Why does legal information require explicit protection?
Răspuns
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Fișa 641
Întrebare
Which indicator can mass file renaming and encryption produce?
Răspuns
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Fișa 642
Întrebare
What remains with an organization after transferring architecture risk?
Răspuns
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Fișa 643
Întrebare
When does local console placement provide useful administrative access?
Răspuns
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Fișa 644
Întrebare
What makes a harmful user action unintentional?
Răspuns
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Fișa 645
Întrebare
How should an organization harden workstations?
Răspuns
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Fișa 646
Întrebare
What is journaling in recovery?
Răspuns
Recording ordered changes so data can be replayed or restored to a consistent point.
Fișa 647
Întrebare
What downtime must a change plan account for?
Răspuns
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Fișa 648
Întrebare
Why must a privacy program map local or regional law to data flows?
Răspuns
The applicable duties can change with the location of the person, organization, processing, or stored data.
Fișa 649
Întrebare
Why combine independent preventive controls at different layers?
Răspuns
A failure at one layer does not automatically let the same attack succeed at the next layer.
Fișa 650
Întrebare
What is passwordless authentication?
Răspuns
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Fișa 651
Întrebare
How can automation improve security reaction time?
Răspuns
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Fișa 652
Întrebare
What does record-level encryption protect?
Răspuns
Individual records or fields, allowing finer protection than encrypting the entire database.
Fișa 653
Întrebare
How can business email compromise misuse urgency?
Răspuns
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Fișa 654
Întrebare
What does impact measure in risk analysis?
Răspuns
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Fișa 655
Întrebare
What makes cyber activity part of warfare?
Răspuns
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Fișa 656
Întrebare
Which indicator can a newly created privileged account produce outside the normal change window?
Răspuns
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Fișa 657
Întrebare
How can configuration enforcement validate a deployed mitigation?
Răspuns
It compares the realized settings with the approved state and corrects or reports drift.
Fișa 658
Întrebare
How does validating an alert improve alert tuning?
Răspuns
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Fișa 659
Întrebare
What data-layer impact can a SQL injection vulnerability create?
Răspuns
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Fișa 660
Întrebare
What environmental variables can change vulnerability priority?
Răspuns
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Fișa 661
Întrebare
What security role does SELinux provide?
Răspuns
Mandatory access controls that confine processes according to centrally defined policy.
Fișa 662
Întrebare
Why review governance documents periodically?
Răspuns
Business, technology, threats, and external obligations change.
Fișa 663
Întrebare
Why evaluate power requirements for a system design?
Răspuns
Power capacity and redundancy constrain availability and recovery.
Fișa 664
Întrebare
When is IPsec a better tunnel choice than TLS?
Răspuns
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Fișa 665
Întrebare
What is a honeytoken?
Răspuns
A fake credential or data element that generates a high-confidence alert when used.
Fișa 666
Întrebare
What should embedded-system hardening prioritize?
Răspuns
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Fișa 667
Întrebare
Why must sanitization address data remanence?
Răspuns
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Fișa 668
Întrebare
Why require rules of engagement for vendor testing?
Răspuns
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Fișa 669
Întrebare
What does a private data classification indicate?
Răspuns
The information concerns an individual or limited internal audience and should not be exposed publicly.
Fișa 670
Întrebare
What does a tabletop recovery exercise test?
Răspuns
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Fișa 671
Întrebare
Why prevent password reuse?
Răspuns
One compromised password should not unlock other accounts or services.
Fișa 672
Întrebare
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Răspuns
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Fișa 673
Întrebare
What does transport encryption protect?
Răspuns
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Fișa 674
Întrebare
How can a voice call become an attack vector?
Răspuns
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Fișa 675
Întrebare
What should a digital-forensics report document?
Răspuns
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Fișa 676
Întrebare
What tradeoff comes with an expansionary risk appetite?
Răspuns
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Fișa 677
Întrebare
What does a known penetration-test environment provide?
Răspuns
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Fișa 678
Întrebare
Why evaluate compute requirements before deployment?
Răspuns
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Fișa 679
Întrebare
Why place sensors at network choke points?
Răspuns
They can observe traffic crossing important trust boundaries.
Fișa 680
Întrebare
What should hybrid or remote-work security training emphasize?
Răspuns
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Fișa 681
Întrebare
Why plan an application restart separately from a service restart?
Răspuns
The application may need its own state handling, user coordination, health checks, and rollback point.
Fișa 682
Întrebare
What is a cryptographic vulnerability?
Răspuns
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Fișa 683
Întrebare
Why report findings by asset owner?
Răspuns
Owners need clear accountability and a prioritized remediation queue.
Fișa 684
Întrebare
What should guide selection of a secure protocol?
Răspuns
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Fișa 685
Întrebare
How do centralized and decentralized governance structures differ?
Răspuns
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Fișa 686
Întrebare
How does privacy-aware design limit data retention?
Răspuns
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Fișa 687
Întrebare
What does a pressure security sensor detect?
Răspuns
Force or weight applied to a protected surface, such as a floor mat or fence line.
Fișa 688
Întrebare
What automation costs should a security team plan for?
Răspuns
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Fișa 689
Întrebare
What should RTOS hardening preserve while reducing attack surface?
Răspuns
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Fișa 690
Întrebare
What is the goal of disruption-for-chaos activity?
Răspuns
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Fișa 691
Întrebare
Which indicator can repeated password guessing produce?
Răspuns
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Fișa 692
Întrebare
How does removing unnecessary software harden a system?
Răspuns
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Fișa 693
Întrebare
What does NetFlow provide?
Răspuns
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Fișa 694
Întrebare
How can a dashboard support an investigation?
Răspuns
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Fișa 695
Întrebare
When should a password be expired?
Răspuns
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Fișa 696
Întrebare
Why does cryptographic key length matter?
Răspuns
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Fișa 697
Întrebare
How can an unsecure Bluetooth connection become an attack vector?
Răspuns
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Fișa 698
Întrebare
What is a key risk indicator?
Răspuns
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Fișa 699
Întrebare
What should vendor monitoring verify when a contract ends?
Răspuns
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Fișa 700
Întrebare
What does a sensitive data classification indicate?
Răspuns
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Fișa 701
Întrebare
What does software-defined networking separate?
Răspuns
The control plane that decides traffic behavior from the data plane that forwards traffic.
Fișa 702
Întrebare
Where should a web application firewall be placed?
Răspuns
In the path of web requests before they reach the protected application.
Fișa 703
Întrebare
What does a simulated recovery exercise test?
Răspuns
Participants perform realistic response actions in a controlled environment without disrupting production.
Fișa 704
Întrebare
How can a team verify that a detective control is effective?
Răspuns
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Fișa 705
Întrebare
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Răspuns
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Fișa 706
Întrebare
What makes a vulnerability cloud-specific?
Răspuns
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Fișa 707
Întrebare
How can insurance respond to vulnerability risk?
Răspuns
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Fișa 708
Întrebare
How does reputation improve web filtering?
Răspuns
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Fișa 709
Întrebare
What does an encryption policy establish?
Răspuns
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Fișa 710
Întrebare
How does a microwave security sensor detect movement?
Răspuns
It emits microwave energy and detects changes in the reflected signal caused by motion.
Fișa 711
Întrebare
What should IoT-device hardening change before deployment?
Răspuns
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Fișa 712
Întrebare
Why track software licenses as assets?
Răspuns
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Fișa 713
Întrebare
What does a password manager improve?
Răspuns
It can generate and store unique long passwords so users do not memorize or reuse them.
Fișa 714
Întrebare
What makes a ledger open and public?
Răspuns
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Fișa 715
Întrebare
What should a payment-change request trigger?
Răspuns
Independent verification through a known channel before any account or payment detail is changed.
Fișa 716
Întrebare
What does preserving digital evidence require?
Răspuns
Protecting its integrity, context, access history, and availability from collection through final disposition.
Fișa 717
Întrebare
What should a risk report tell decision-makers?
Răspuns
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Fișa 718
Întrebare
What should an external assessment report provide?
Răspuns
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Fișa 719
Întrebare
What is a centralized design's main resilience risk?
Răspuns
A central dependency can become a bottleneck or single point of failure.
Fișa 720
Întrebare
What does mutual TLS add to a TLS-protected service connection?
Răspuns
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Fișa 721
Întrebare
What should recurring security-awareness reporting show?
Răspuns
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Fișa 722
Întrebare
Why do legacy applications require extra change planning?
Răspuns
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Fișa 723
Întrebare
How do a data controller and a data processor differ?
Răspuns
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Fișa 724
Întrebare
How can orchestration become a single point of failure?
Răspuns
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Fișa 725
Întrebare
Why should defenses account for a threat actor's sophistication and capability?
Răspuns
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Fișa 726
Întrebare
How does an injection attack make an application execute unintended instructions?
Răspuns
It sends crafted input that an interpreter treats as code or commands instead of data.
Fișa 727
Întrebare
What does a host-based firewall control?
Răspuns
Inbound and outbound network traffic for one endpoint according to local rules.
Fișa 728
Întrebare
Why revise alerting after an incident?
Răspuns
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Fișa 729
Întrebare
Why include security duties in procurement criteria?
Răspuns
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Fișa 730
Întrebare
What does a critical data classification indicate?
Răspuns
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Fișa 731
Întrebare
What infrastructure capacity must support failover?
Răspuns
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Fișa 732
Întrebare
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Răspuns
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Fișa 733
Întrebare
How does a remediation exemption differ from an exception?
Răspuns
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Fișa 734
Întrebare
Why should automated EDR or XDR blocking have an exception and rollback path?
Răspuns
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Fișa 735
Întrebare
What does a security playbook provide?
Răspuns
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Fișa 736
Întrebare
How does an ultrasonic security sensor detect movement?
Răspuns
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Fișa 737
Întrebare
What should a managed mobile device require for Bluetooth connections?
Răspuns
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Fișa 738
Întrebare
How do password complexity rules differ from password length?
Răspuns
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Fișa 739
Întrebare
What makes a certificate third-party trusted?
Răspuns
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Fișa 740
Întrebare
Why is an out-of-band check effective against impersonation?
Răspuns
It verifies the request through a separate, previously trusted communication path.
Fișa 741
Întrebare
What does a risk exception authorize?
Răspuns
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Fișa 742
Întrebare
What security challenge grows in a decentralized design?
Răspuns
Consistent policy, inventory, monitoring, and patching become harder.
Fișa 743
Întrebare
How should controls be selected for an unused network path?
Răspuns
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Fișa 744
Întrebare
How can a buffer-overflow attack affect an application?
Răspuns
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 de fișe