What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

Avtor Flashcards Open Source App

O tem kompletu

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Kartice v tem kompletu

Kartica 1
Vprašanje
What does an information security policy establish?
Odgovor
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kartica 2
Vprašanje
What is phishing?
Odgovor
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kartica 3
Vprašanje
What does a public-key certificate bind to an identity?
Odgovor
A public key, together with identifying information and the issuer's signature.
Kartica 4
Vprašanje
What is data at rest?
Odgovor
Data stored on media such as disks, databases, backups, or mobile devices.
Kartica 5
Vprašanje
How does policy-driven access control decide a zero-trust access request?
Odgovor
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kartica 6
Vprašanje
What does establishing a secure baseline produce?
Odgovor
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kartica 7
Vprašanje
What is hashing used to verify?
Odgovor
Whether data has changed by comparing fixed-length digest values.
Kartica 8
Vprašanje
What is impersonation in social engineering?
Odgovor
Pretending to be a trusted person or organization to obtain access, data, or action.
Kartica 9
Vprašanje
What is virtualization?
Odgovor
Abstracting physical compute so multiple isolated guest systems can share a host.
Kartica 10
Vprašanje
What is chain of custody?
Odgovor
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kartica 11
Vprašanje
What is quantitative risk analysis?
Odgovor
Estimating risk with numerical values such as money, frequency, or probability.
Kartica 12
Vprašanje
What is a phishing awareness campaign?
Odgovor
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kartica 13
Vprašanje
What is high availability?
Odgovor
Designing a service to remain accessible despite expected component failures.
Kartica 14
Vprašanje
What is a network security zone?
Odgovor
A group of systems with similar trust, function, or control requirements.
Kartica 15
Vprašanje
What is risk transfer?
Odgovor
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kartica 16
Vprašanje
What is media sanitization?
Odgovor
Making stored data infeasible to recover for the intended level of protection.
Kartica 17
Vprašanje
What does CVSS provide?
Odgovor
A standardized way to describe a vulnerability's technical severity characteristics.
Kartica 18
Vprašanje
What does security alerting do?
Odgovor
It turns matched events or behavior into a notification that the right responder can review.
Kartica 19
Vprašanje
What does a firewall rule enforce?
Odgovor
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kartica 20
Vprašanje
What is deprovisioning?
Odgovor
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kartica 21
Vprašanje
How does inline placement differ from a tap or monitor port?
Odgovor
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kartica 22
Vprašanje
What is asymmetric encryption?
Odgovor
Encryption that uses a mathematically related public and private key pair.
Kartica 23
Vprašanje
What does SPF authorize?
Odgovor
Which mail servers may send mail for a domain in the SMTP envelope.
Kartica 24
Vprašanje
What is a possession factor?
Odgovor
Something the claimant has, such as a cryptographic authenticator.
Kartica 25
Vprašanje
What does ordinary TLS usually protect and authenticate?
Odgovor
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kartica 26
Vprašanje
What is single loss expectancy?
Odgovor
The estimated loss from one occurrence of a risk event.
Kartica 27
Vprašanje
What does a certificate authority do?
Odgovor
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kartica 28
Vprašanje
What is a detective control meant to do?
Odgovor
Identify that an unwanted event has happened or is happening.
Kartica 29
Vprašanje
What is the security purpose of change-control approval?
Odgovor
Ensure authorized reviewers assess risk before the production change occurs.
Kartica 30
Vprašanje
What is shadow IT?
Odgovor
Technology used for organizational work without required approval or oversight.
Kartica 31
Vprašanje
What is a buffer overflow vulnerability?
Odgovor
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kartica 32
Vprašanje
What is ransomware?
Odgovor
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kartica 33
Vprašanje
How does network segmentation limit an incident?
Odgovor
It restricts communication paths and reduces lateral movement between zones.
Kartica 34
Vprašanje
How do load balancing and clustering support availability differently?
Odgovor
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kartica 35
Vprašanje
What is vendor due diligence?
Odgovor
Evaluating a provider's security, capability, stability, and fit before commitment.
Kartica 36
Vprašanje
Who is a data subject?
Odgovor
The person whose personal data is collected or processed.
Kartica 37
Vprašanje
What is attestation?
Odgovor
A formal assertion or report about a subject matter, often supported by an independent examination.
Kartica 38
Vprašanje
What is a replay attack?
Odgovor
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kartica 39
Vprašanje
What does a wireless site survey establish?
Odgovor
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kartica 40
Vprašanje
What is the time-of-check stage of a race-condition vulnerability?
Odgovor
The application verifies a condition or resource state before acting on it.
Kartica 41
Vprašanje
What is a penetration test?
Odgovor
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kartica 42
Vprašanje
What is a cold recovery site?
Odgovor
A facility with basic space and utilities but little preinstalled technology or current data.
Kartica 43
Vprašanje
What is data in transit?
Odgovor
Data moving between systems or across a network.
Kartica 44
Vprašanje
What is a vendor security questionnaire?
Odgovor
A structured request for information about a provider's controls and practices.
Kartica 45
Vprašanje
How does an internal actor's starting position differ from an external actor's?
Odgovor
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kartica 46
Vprašanje
What can unexpected account lockouts indicate?
Odgovor
Password guessing, credential stuffing, user error, or a broken client.
Kartica 47
Vprašanje
How do permissions enforce access control?
Odgovor
They specify which actions a subject may perform on a particular resource.
Kartica 48
Vprašanje
What is log aggregation?
Odgovor
Central collection of logs from multiple sources for search, correlation, and retention.
Kartica 49
Vprašanje
Why plan a service restart as part of a change?
Odgovor
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kartica 50
Vprašanje
What is infrastructure as code?
Odgovor
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kartica 51
Vprašanje
What should security-awareness program development start with?
Odgovor
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kartica 52
Vprašanje
What is a voice-based social-engineering attack called?
Odgovor
Vishing.
Kartica 53
Vprašanje
What happens during incident-response preparation?
Odgovor
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kartica 54
Vprašanje
What does an offensive penetration-testing team do?
Odgovor
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kartica 55
Vprašanje
What is federation?
Odgovor
One security domain relies on identity assertions from another trusted domain.
Kartica 56
Vprašanje
What is asset classification?
Odgovor
Grouping an asset by sensitivity, criticality, or required handling.
Kartica 57
Vprašanje
What is cross-site scripting?
Odgovor
Injection of script-capable content that a browser executes in another site's security context.
Kartica 58
Vprašanje
What can IDS or IPS trends reveal?
Odgovor
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kartica 59
Vprašanje
What can unexpected resource inaccessibility indicate?
Odgovor
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kartica 60
Vprašanje
What is a corrective control meant to do?
Odgovor
Limit damage and restore a secure state after an event.
Kartica 61
Vprašanje
How do containers differ from virtual machines?
Odgovor
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kartica 62
Vprašanje
How does an active security device differ from a passive one?
Odgovor
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kartica 63
Vprašanje
Why is unsupported software a persistent attack surface?
Odgovor
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kartica 64
Vprašanje
What is annualized rate of occurrence?
Odgovor
The estimated number of times a risk event occurs per year.
Kartica 65
Vprašanje
What is an inherence factor?
Odgovor
A biometric characteristic of the claimant.
Kartica 66
Vprašanje
What do a threat actor's sophistication and capability describe?
Odgovor
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kartica 67
Vprašanje
What is a SIEM?
Odgovor
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kartica 68
Vprašanje
What is sideloading?
Odgovor
Installing software from outside the platform's approved distribution path.
Kartica 69
Vprašanje
What does an IDS or IPS signature match?
Odgovor
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kartica 70
Vprašanje
Why are embedded systems often difficult to patch?
Odgovor
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kartica 71
Vprašanje
What is a virtual private network?
Odgovor
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kartica 72
Vprašanje
What should an initial security-awareness report establish?
Odgovor
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kartica 73
Vprašanje
What is symmetric encryption?
Odgovor
Encryption that uses the same secret key to encrypt and decrypt data.
Kartica 74
Vprašanje
What happens during incident detection?
Odgovor
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kartica 75
Vprašanje
What is recovery time objective?
Odgovor
The target maximum time to restore a function after disruption.
Kartica 76
Vprašanje
Why prioritize password length?
Odgovor
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kartica 77
Vprašanje
What must sanitization accomplish before an asset leaves organizational control?
Odgovor
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kartica 78
Vprašanje
What is a real-time operating system designed to provide?
Odgovor
Predictable response timing for tasks with strict deadlines.
Kartica 79
Vprašanje
What does fail-open behavior do when a control fails?
Odgovor
It permits traffic or access to preserve availability.
Kartica 80
Vprašanje
What is jailbreaking or rooting a mobile device?
Odgovor
Removing platform restrictions to gain privileged control over the operating system.
Kartica 81
Vprašanje
What does network access control enforce?
Odgovor
Identity, device posture, and access policy at network connection time and during a session.
Kartica 82
Vprašanje
What does data loss prevention do?
Odgovor
Detects and may block sensitive data use or transfer that violates policy.
Kartica 83
Vprašanje
What security property does a blockchain provide?
Odgovor
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kartica 84
Vprašanje
What is recovery point objective?
Odgovor
The target maximum acceptable data loss measured backward in time.
Kartica 85
Vprašanje
How do ICS and SCADA relate?
Odgovor
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kartica 86
Vprašanje
What does fail-closed behavior do when a control fails?
Odgovor
It denies traffic or access to preserve security.
Kartica 87
Vprašanje
Which keys create and verify a typical digital signature?
Odgovor
The signer creates it with a private key, and others verify it with the corresponding public key.
Kartica 88
Vprašanje
What is SQL injection?
Odgovor
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kartica 89
Vprašanje
What does DKIM verify?
Odgovor
That selected message content was signed by a domain and was not altered after signing.
Kartica 90
Vprašanje
What is post-incident activity?
Odgovor
Learning from the event and improving controls, plans, and recovery based on evidence.
Kartica 91
Vprašanje
What characterizes an expansionary risk appetite?
Odgovor
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kartica 92
Vprašanje
How do centralized and decentralized architectures differ?
Odgovor
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kartica 93
Vprašanje
What does a certificate revocation list publish?
Odgovor
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kartica 94
Vprašanje
What is a legal hold?
Odgovor
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kartica 95
Vprašanje
What is exposure factor in quantitative risk analysis?
Odgovor
The estimated percentage of an asset's value lost in one event.
Kartica 96
Vprašanje
What is decentralized architecture?
Odgovor
Control or service responsibility is distributed across multiple independent components or locations.
Kartica 97
Vprašanje
What is tokenization?
Odgovor
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kartica 98
Vprašanje
How can automation act as a workforce multiplier?
Odgovor
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kartica 99
Vprašanje
What can endpoint process logs reveal?
Odgovor
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kartica 100
Vprašanje
What does the CIA triad protect?
Odgovor
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kartica 101
Vprašanje
How does data masking protect information?
Odgovor
It hides selected values or characters while preserving a usable representation.
Kartica 102
Vprašanje
How can a national requirement affect security governance?
Odgovor
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kartica 103
Vprašanje
What do integrations and APIs provide to security orchestration?
Odgovor
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kartica 104
Vprašanje
What makes a compliance report external?
Odgovor
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kartica 105
Vprašanje
What does a cryptographic algorithm define?
Odgovor
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kartica 106
Vprašanje
Why compare systems with a secure baseline regularly?
Odgovor
To detect drift, unauthorized changes, and missing hardening.
Kartica 107
Vprašanje
What does integrity protect?
Odgovor
The accuracy and completeness of data and systems against unauthorized change.
Kartica 108
Vprašanje
What does vulnerability classification organize?
Odgovor
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kartica 109
Vprašanje
What does a password standard define?
Odgovor
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kartica 110
Vprašanje
What technology capacity must a recovery design plan for?
Odgovor
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kartica 111
Vprašanje
What does a confidential data classification indicate?
Odgovor
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kartica 112
Vprašanje
What makes a vendor assessment independent?
Odgovor
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kartica 113
Vprašanje
What lets a worm spread without attaching itself to another file?
Odgovor
It is a standalone program that replicates across reachable systems or services.
Kartica 114
Vprašanje
What is microsegmentation?
Odgovor
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kartica 115
Vprašanje
What can application logs reveal?
Odgovor
Transactions, errors, user actions, and application-specific security events.
Kartica 116
Vprašanje
What does deploying a secure baseline require?
Odgovor
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kartica 117
Vprašanje
How can resource-provisioning automation improve security?
Odgovor
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kartica 118
Vprašanje
What does availability protect?
Odgovor
Reliable, timely access to systems and data when authorized users need them.
Kartica 119
Vprašanje
Why must a change request describe business impact?
Odgovor
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kartica 120
Vprašanje
What does an authenticated vulnerability scan add?
Odgovor
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kartica 121
Vprašanje
What does a change-management procedure specify?
Odgovor
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kartica 122
Vprašanje
What is a sanction for noncompliance?
Odgovor
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kartica 123
Vprašanje
How can email deliver a security attack?
Odgovor
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kartica 124
Vprašanje
What is an internal compliance audit?
Odgovor
An organization-led examination of whether selected operations and controls meet defined requirements.
Kartica 125
Vprašanje
What is a Trojan?
Odgovor
Malware disguised as legitimate or desirable software.
Kartica 126
Vprašanje
What is clustering?
Odgovor
Multiple systems work together to provide a service and tolerate member failure.
Kartica 127
Vprašanje
What makes data regulated?
Odgovor
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kartica 128
Vprašanje
What does a wireless heat map show?
Odgovor
Measured or modeled signal strength and coverage across a physical area.
Kartica 129
Vprašanje
How should vendor criticality affect due diligence?
Odgovor
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kartica 130
Vprašanje
How can a digital signature support non-repudiation?
Odgovor
It provides evidence that the holder of a private key signed specific data.
Kartica 131
Vprašanje
What should vulnerability prioritization consider beyond severity?
Odgovor
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kartica 132
Vprašanje
What is a security guideline?
Odgovor
Recommended practice that allows judgment unless adopted as a requirement.
Kartica 133
Vprašanje
What usually distinguishes a nation-state threat actor?
Odgovor
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kartica 134
Vprašanje
What is spyware?
Odgovor
Software that secretly collects information about a user or system.
Kartica 135
Vprašanje
Why maintain an allow list for applications?
Odgovor
Only explicitly approved software is permitted to execute.
Kartica 136
Vprašanje
How can an image become an attack vector?
Odgovor
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kartica 137
Vprašanje
What makes a security control technical?
Odgovor
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kartica 138
Vprašanje
What is identity proofing?
Odgovor
Establishing that a person is who they claim to be before issuing an account or credential.
Kartica 139
Vprašanje
What is an automated security guardrail?
Odgovor
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kartica 140
Vprašanje
Why assign an owner to a planned change?
Odgovor
To make one party accountable for coordination, execution, and follow-through.
Kartica 141
Vprašanje
How can national privacy law affect data handling?
Odgovor
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kartica 142
Vprašanje
What is continuity of operations?
Odgovor
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kartica 143
Vprašanje
What security tradeoff comes with BYOD?
Odgovor
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kartica 144
Vprašanje
How should policies and handbooks support security training?
Odgovor
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kartica 145
Vprašanje
What is a keylogger?
Odgovor
A tool that records keystrokes to capture data such as credentials.
Kartica 146
Vprašanje
What makes information a trade secret?
Odgovor
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kartica 147
Vprašanje
What does authentication establish?
Odgovor
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kartica 148
Vprašanje
What risk comes from an untrusted file attachment?
Odgovor
Opening or parsing it can execute malicious code or expose data.
Kartica 149
Vprašanje
How does risk tolerance affect vulnerability remediation?
Odgovor
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kartica 150
Vprašanje
How can a global requirement affect security governance?
Odgovor
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kartica 151
Vprašanje
Why should questionnaire answers be supported by evidence?
Odgovor
Self-assertions alone may not prove that controls are designed or operating effectively.
Kartica 152
Vprašanje
What is an independent third-party audit?
Odgovor
An external party with suitable independence examines evidence against defined criteria.
Kartica 153
Vprašanje
What do account provisioning and deprovisioning do?
Odgovor
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kartica 154
Vprašanje
What is an unskilled attacker commonly called?
Odgovor
A script kiddie: someone who relies on tools or instructions created by others.
Kartica 155
Vprašanje
What is a rootkit?
Odgovor
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kartica 156
Vprašanje
What does an access control list enforce?
Odgovor
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kartica 157
Vprašanje
What should system security monitoring observe?
Odgovor
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kartica 158
Vprašanje
What can operating-system security logs reveal?
Odgovor
Authentication, privilege use, policy changes, services, and other host security events.
Kartica 159
Vprašanje
Why isolate operational technology from general business networks?
Odgovor
To limit attack paths into safety- and availability-critical processes.
Kartica 160
Vprašanje
What is the COPE mobile deployment model?
Odgovor
The organization owns the device but permits defined personal use while retaining management control.
Kartica 161
Vprašanje
What security work belongs in asset acquisition and procurement?
Odgovor
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kartica 162
Vprašanje
How can user-provisioning automation improve security?
Odgovor
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kartica 163
Vprašanje
What people capacity must a continuity plan account for?
Odgovor
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kartica 164
Vprašanje
What do authorization models define?
Odgovor
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kartica 165
Vprašanje
Why are removable devices an attack vector?
Odgovor
They can introduce malware or remove data while bypassing network controls.
Kartica 166
Vprašanje
What should predeployment change-test results show?
Odgovor
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kartica 167
Vprašanje
What is the time-of-use stage of a race-condition vulnerability?
Odgovor
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kartica 168
Vprašanje
What is data in use?
Odgovor
Data actively processed in memory or by an application.
Kartica 169
Vprašanje
What does open-source vulnerability intelligence contribute?
Odgovor
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kartica 170
Vprašanje
What can file-integrity monitoring detect?
Odgovor
Unexpected changes to protected files, directories, or configuration.
Kartica 171
Vprašanje
Why should deprovisioning be prompt?
Odgovor
Former users or roles should not retain usable access.
Kartica 172
Vprašanje
What is an acceptable use policy?
Odgovor
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kartica 173
Vprašanje
What makes a compliance report internal?
Odgovor
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kartica 174
Vprašanje
What is a logic bomb?
Odgovor
Malicious code that activates when a specified condition or time is reached.
Kartica 175
Vprašanje
What does a right-to-audit clause provide?
Odgovor
Contractual authority to inspect or obtain evidence about agreed controls.
Kartica 176
Vprašanje
Where should a forward proxy sit in an enterprise traffic path?
Odgovor
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kartica 177
Vprašanje
Which cues should make a message look suspicious?
Odgovor
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kartica 178
Vprašanje
What makes a security control managerial?
Odgovor
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kartica 179
Vprašanje
What is the CYOD mobile deployment model?
Odgovor
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kartica 180
Vprašanje
How does client-based vulnerable software differ from an agentless exposure?
Odgovor
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kartica 181
Vprašanje
What makes a risk assessment recurring?
Odgovor
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kartica 182
Vprašanje
What does a defensive penetration-testing team practice?
Odgovor
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kartica 183
Vprašanje
In a zero-trust data plane, what can the subject or system represent?
Odgovor
The user, device, workload, or service requesting access to a protected resource.
Kartica 184
Vprašanje
What primarily motivates a hacktivist?
Odgovor
A political, social, or ideological cause.
Kartica 185
Vprašanje
What is bloatware?
Odgovor
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kartica 186
Vprašanje
Why keep endpoint-protection signatures and engines current?
Odgovor
They need current detection logic to recognize newly identified malware and exploit behavior.
Kartica 187
Vprašanje
What should application security monitoring observe?
Odgovor
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kartica 188
Vprašanje
What is role-based access control?
Odgovor
Permissions are assigned to roles, and identities receive access through their roles.
Kartica 189
Vprašanje
What is geographic dispersal?
Odgovor
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kartica 190
Vprašanje
What is a malicious update?
Odgovor
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kartica 191
Vprašanje
What does static application analysis inspect?
Odgovor
Source code, bytecode, or compiled code without executing the application.
Kartica 192
Vprašanje
What does a firewall access list define?
Odgovor
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kartica 193
Vprašanje
What does a disaster recovery policy establish?
Odgovor
Management expectations for restoring technology and data after a disruptive event.
Kartica 194
Vprašanje
How does logical segmentation separate workloads that share physical infrastructure?
Odgovor
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kartica 195
Vprašanje
How should IDS and IPS placement differ?
Odgovor
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kartica 196
Vprašanje
What should automated ticket creation capture?
Odgovor
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kartica 197
Vprašanje
What makes information intellectual property?
Odgovor
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kartica 198
Vprašanje
What is a backout plan?
Odgovor
Predefined steps for safely reversing a failed or harmful change.
Kartica 199
Vprašanje
Why is an unsecure wireless network an attack vector?
Odgovor
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kartica 200
Vprašanje
What is physical brute force?
Odgovor
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kartica 201
Vprašanje
What is application sandboxing?
Odgovor
Running code in a constrained environment with limited access to the host and data.
Kartica 202
Vprašanje
Why assign an asset owner?
Odgovor
One accountable party must decide its use, protection, and lifecycle.
Kartica 203
Vprašanje
What happens during risk identification?
Odgovor
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kartica 204
Vprašanje
What should an SLA state about breach notification?
Odgovor
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kartica 205
Vprašanje
How do due diligence and due care differ in compliance?
Odgovor
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kartica 206
Vprašanje
What is attribute-based access control?
Odgovor
Policy evaluates attributes of the subject, resource, action, and environment.
Kartica 207
Vprašanje
What does a zero-trust policy engine do?
Odgovor
It evaluates policy and signals to decide whether access should be allowed.
Kartica 208
Vprašanje
How does a cloud responsibility matrix allocate security duties?
Odgovor
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kartica 209
Vprašanje
Where should a load balancer sit in a service path?
Odgovor
In front of service instances so it can route requests to healthy backends.
Kartica 210
Vprašanje
What should the security team do with a reported suspicious message?
Odgovor
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kartica 211
Vprašanje
What makes an operating-system vulnerability high impact?
Odgovor
It can affect every application and security control that relies on the compromised OS.
Kartica 212
Vprašanje
What does dynamic application analysis inspect?
Odgovor
The behavior and externally visible weaknesses of a running application.
Kartica 213
Vprašanje
How can false-positive trends affect IDS or IPS tuning?
Odgovor
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kartica 214
Vprašanje
What does a business continuity policy establish?
Odgovor
Management expectations for sustaining and restoring critical business functions.
Kartica 215
Vprašanje
What is a hot recovery site?
Odgovor
A ready, synchronized environment intended to take over quickly.
Kartica 216
Vprašanje
What makes an insider threat distinct?
Odgovor
The actor has legitimate access or organizational knowledge that can be misused.
Kartica 217
Vprašanje
What is RFID cloning?
Odgovor
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kartica 218
Vprašanje
Why apply vendor security updates promptly?
Odgovor
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kartica 219
Vprašanje
What should infrastructure security monitoring observe?
Odgovor
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kartica 220
Vprašanje
What can firewall logs reveal?
Odgovor
Allowed or denied network connections across controlled boundaries.
Kartica 221
Vprašanje
Why minimize open service ports?
Odgovor
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kartica 222
Vprašanje
What is threat hunting?
Odgovor
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kartica 223
Vprašanje
What triggers an ad hoc risk assessment?
Odgovor
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kartica 224
Vprašanje
What makes an assessment external?
Odgovor
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kartica 225
Vprašanje
What is data sovereignty?
Odgovor
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kartica 226
Vprašanje
What security boundary does a cellular connection create for a mobile device?
Odgovor
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kartica 227
Vprašanje
What makes a security control operational?
Odgovor
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kartica 228
Vprašanje
What is discretionary access control?
Odgovor
A resource owner can decide who receives access, within system policy.
Kartica 229
Vprašanje
How can careful automation support employee retention?
Odgovor
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kartica 230
Vprašanje
Why does ease of deployment matter in an architecture decision?
Odgovor
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kartica 231
Vprašanje
What tradeoff comes with placing an NGFW inline?
Odgovor
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kartica 232
Vprašanje
What does a zero-trust policy administrator do?
Odgovor
It carries out the policy engine's decision, such as creating or ending a session.
Kartica 233
Vprašanje
What should a master service agreement define for data return and deletion?
Odgovor
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kartica 234
Vprašanje
What is an environmental physical attack?
Odgovor
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kartica 235
Vprašanje
When should a maintenance window be chosen?
Odgovor
When disruption and rollback can be managed with the least business impact.
Kartica 236
Vprašanje
What is memory injection?
Odgovor
Placing malicious code or data into another process's memory so it executes in that process's context.
Kartica 237
Vprašanje
What does software composition analysis find?
Odgovor
Known risks and license information in third-party dependencies.
Kartica 238
Vprašanje
What is DNS filtering?
Odgovor
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kartica 239
Vprašanje
What should an incident response policy establish?
Odgovor
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kartica 240
Vprašanje
How can noncompliance cause reputational damage?
Odgovor
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kartica 241
Vprašanje
What does full-disk encryption protect?
Odgovor
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kartica 242
Vprašanje
Why are default credentials dangerous?
Odgovor
They are widely known or easily discovered and often remain unchanged.
Kartica 243
Vprašanje
What makes a risk assessment one-time?
Odgovor
It evaluates a defined decision or scope once without an established repeating cadence.
Kartica 244
Vprašanje
What is a warm recovery site?
Odgovor
A partially equipped environment that needs some data restoration or configuration before use.
Kartica 245
Vprašanje
What does application input validation do?
Odgovor
It checks that input matches the expected type, length, range, and format before use.
Kartica 246
Vprašanje
What should an asset inventory record besides a device name?
Odgovor
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kartica 247
Vprašanje
What is mandatory access control?
Odgovor
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kartica 248
Vprašanje
What security benefit does infrastructure as code provide?
Odgovor
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kartica 249
Vprašanje
When should a public service control fail closed?
Odgovor
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kartica 250
Vprašanje
What should users do with a suspicious message?
Odgovor
Report it through the approved channel without interacting with its links or attachments.
Kartica 251
Vprašanje
What usually motivates organized cybercrime?
Odgovor
Financial gain through scalable or repeatable criminal activity.
Kartica 252
Vprašanje
How can malicious code support a network attack?
Odgovor
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kartica 253
Vprašanje
When is virtual patching useful?
Odgovor
When a network or application control can block exploit traffic before the underlying system can be patched.
Kartica 254
Vprašanje
What does security-monitoring reporting provide?
Odgovor
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kartica 255
Vprašanje
What does data geolocation identify?
Odgovor
The physical or legal location where data is stored, processed, or transmitted.
Kartica 256
Vprašanje
What does a zero-trust policy enforcement point do?
Odgovor
It enables, monitors, and terminates the connection between a subject and a resource.
Kartica 257
Vprašanje
What is cryptographic key exchange?
Odgovor
A method for parties to establish shared key material over an untrusted channel.
Kartica 258
Vprašanje
How can a vendor become a supply-chain attack vector?
Odgovor
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kartica 259
Vprašanje
Why can legacy hardware remain vulnerable?
Odgovor
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kartica 260
Vprašanje
What can proprietary vulnerability intelligence add beyond open sources?
Odgovor
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kartica 261
Vprašanje
How does a centralized proxy apply web filtering?
Odgovor
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kartica 262
Vprašanje
How can continuous integration and testing improve security automation?
Odgovor
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kartica 263
Vprašanje
What is containment?
Odgovor
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kartica 264
Vprašanje
What is a software development lifecycle policy meant to ensure?
Odgovor
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kartica 265
Vprašanje
What makes risk assessment continuous?
Odgovor
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kartica 266
Vprašanje
What is a memorandum of agreement?
Odgovor
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kartica 267
Vprašanje
What makes a penetration test integrated?
Odgovor
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kartica 268
Vprašanje
How does a DNS amplification attack magnify traffic?
Odgovor
It sends small spoofed queries that trigger larger replies toward the victim.
Kartica 269
Vprašanje
Why does ease of recovery matter in an architecture decision?
Odgovor
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kartica 270
Vprašanje
What does 802.1X control before a device receives normal network access?
Odgovor
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kartica 271
Vprašanje
What is rule-based access control?
Odgovor
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kartica 272
Vprašanje
What is mobile device management?
Odgovor
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kartica 273
Vprašanje
What tradeoff comes with a cold recovery site?
Odgovor
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kartica 274
Vprašanje
Why identify stakeholders before approving a security-sensitive change?
Odgovor
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kartica 275
Vprašanje
How do attestation and acknowledgement differ?
Odgovor
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kartica 276
Vprašanje
What does zero-trust adaptive identity mean?
Odgovor
Access decisions adjust to current risk signals rather than relying only on a static login.
Kartica 277
Vprašanje
What makes a security control physical?
Odgovor
It protects facilities or equipment through a tangible barrier or mechanism.
Kartica 278
Vprašanje
What is geo-fencing for data?
Odgovor
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kartica 279
Vprašanje
What does a Trusted Platform Module protect?
Odgovor
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kartica 280
Vprašanje
Why can a managed service provider amplify risk?
Odgovor
Its privileged access and shared tooling can provide a path into many customers.
Kartica 281
Vprašanje
What does probability express in risk analysis?
Odgovor
A quantified chance that a defined event will occur within stated conditions or time.
Kartica 282
Vprašanje
Why can shadow IT create a threat?
Odgovor
It bypasses security review, inventory, monitoring, and supported configuration.
Kartica 283
Vprašanje
What is on-path interception?
Odgovor
An attacker positions between communicating parties to observe or alter traffic.
Kartica 284
Vprašanje
Why include encryption in a system-hardening baseline?
Odgovor
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kartica 285
Vprašanje
Why tune security alerts?
Odgovor
To keep useful detections while reducing noise that wastes analyst attention.
Kartica 286
Vprašanje
What can IPS or IDS logs contribute to an investigation?
Odgovor
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kartica 287
Vprašanje
What is VM escape?
Odgovor
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kartica 288
Vprašanje
How can segmentation reduce vulnerability exposure before a patch is available?
Odgovor
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kartica 289
Vprašanje
Why should firewall policy name the required ports and protocols explicitly?
Odgovor
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kartica 290
Vprašanje
What is a change management policy meant to control?
Odgovor
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kartica 291
Vprašanje
What is a hybrid-cloud architecture?
Odgovor
An environment that integrates private or on-premises resources with public cloud services.
Kartica 292
Vprašanje
How do AH and ESP differ in the security services they can provide?
Odgovor
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kartica 293
Vprašanje
What makes user behavior risky?
Odgovor
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kartica 294
Vprašanje
What is least privilege?
Odgovor
Granting only the access needed for the required task and no more.
Kartica 295
Vprašanje
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Odgovor
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kartica 296
Vprašanje
Why discover unmanaged assets?
Odgovor
Unknown systems cannot be patched, monitored, or governed reliably.
Kartica 297
Vprašanje
What is a service-level agreement?
Odgovor
Measurable service commitments and remedies, such as availability or response targets.
Kartica 298
Vprašanje
What should govern automated security escalation?
Odgovor
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kartica 299
Vprašanje
What is platform diversity as a resilience strategy?
Odgovor
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kartica 300
Vprašanje
How can replayed session material affect an application?
Odgovor
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kartica 301
Vprašanje
What is an implicit trust zone in zero trust?
Odgovor
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kartica 302
Vprašanje
What does salting a password hash accomplish?
Odgovor
It makes identical passwords hash differently and defeats precomputed hash tables.
Kartica 303
Vprašanje
What is spear phishing?
Odgovor
Phishing tailored to a specific person, role, or organization.
Kartica 304
Vprašanje
What is eradication?
Odgovor
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kartica 305
Vprašanje
Who is a risk owner?
Odgovor
The person accountable for deciding and monitoring how a specific risk is handled.
Kartica 306
Vprašanje
What does a partially known penetration-test environment provide?
Odgovor
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kartica 307
Vprašanje
What is a microservices architecture?
Odgovor
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kartica 308
Vprašanje
What is a jump server?
Odgovor
A hardened intermediary used to reach systems in a restricted management network.
Kartica 309
Vprašanje
What can happen when a configuration change is made without dependency analysis?
Odgovor
A downstream service can fail even when the changed component works.
Kartica 310
Vprašanje
What is resource reuse exposure?
Odgovor
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kartica 311
Vprašanje
Why does financial information require explicit protection?
Odgovor
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kartica 312
Vprašanje
What does CVE provide?
Odgovor
A common identifier for a publicly disclosed vulnerability.
Kartica 313
Vprašanje
Where can DLP controls operate?
Odgovor
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kartica 314
Vprašanje
What does privileged password vaulting protect?
Odgovor
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kartica 315
Vprašanje
What does an access-control standard define?
Odgovor
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kartica 316
Vprašanje
How can automation support compliance monitoring?
Odgovor
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kartica 317
Vprašanje
What does static code analysis examine?
Odgovor
Source or compiled code for weakness patterns without executing the application.
Kartica 318
Vprašanje
What actor attribute describes funding, time, and personnel?
Odgovor
Resources.
Kartica 319
Vprašanje
What is DNS poisoning?
Odgovor
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kartica 320
Vprašanje
Why change default credentials during hardening?
Odgovor
Default secrets are predictable and commonly targeted.
Kartica 321
Vprašanje
What does quarantine do after a security alert?
Odgovor
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kartica 322
Vprašanje
What does key stretching do for stored passwords?
Odgovor
It deliberately makes each password guess more computationally expensive.
Kartica 323
Vprašanje
What is smishing?
Odgovor
Phishing delivered through SMS or another text-messaging service.
Kartica 324
Vprašanje
What is qualitative risk analysis?
Odgovor
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kartica 325
Vprašanje
What is a master service agreement?
Odgovor
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kartica 326
Vprašanje
What is threat scope reduction?
Odgovor
Narrowing the systems, privileges, or paths an attacker can reach.
Kartica 327
Vprašanje
Why use a third-party cloud service instead of building locally?
Odgovor
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kartica 328
Vprašanje
What should determine security-device placement?
Odgovor
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kartica 329
Vprašanje
What does situational awareness mean for a user?
Odgovor
Notice the people, devices, requests, location, and context around a task before acting.
Kartica 330
Vprašanje
What does a failover test validate?
Odgovor
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kartica 331
Vprašanje
What is a preventive control meant to do?
Odgovor
Stop an unwanted event before it succeeds.
Kartica 332
Vprašanje
What is just-in-time privileged access?
Odgovor
Elevated access is granted only when needed and expires after a short approved period.
Kartica 333
Vprašanje
What safeguard should security-group automation enforce?
Odgovor
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kartica 334
Vprašanje
How does a reflected DDoS attack hide and multiply sources?
Odgovor
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kartica 335
Vprašanje
What is a security misconfiguration?
Odgovor
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kartica 336
Vprašanje
Why can the same vulnerability have different organizational impact?
Odgovor
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kartica 337
Vprašanje
What does URL scanning evaluate before a user opens a web destination?
Odgovor
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kartica 338
Vprašanje
What is the board's security governance role?
Odgovor
Provide oversight, set risk direction, and hold executives accountable.
Kartica 339
Vprašanje
What does code signing establish?
Odgovor
That code came from the holder of the signing key and has not changed since signing.
Kartica 340
Vprašanje
How should an asset's classification affect security operations?
Odgovor
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kartica 341
Vprašanje
How does encryption protect data?
Odgovor
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kartica 342
Vprašanje
What is a secure enclave?
Odgovor
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kartica 343
Vprašanje
What is business email compromise?
Odgovor
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kartica 344
Vprašanje
What is recovery in incident response?
Odgovor
Restoring services safely, monitoring them, and returning to normal operations.
Kartica 345
Vprašanje
How is single loss expectancy commonly estimated?
Odgovor
Asset value multiplied by the exposure factor.
Kartica 346
Vprašanje
What does an unknown penetration-test environment provide?
Odgovor
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kartica 347
Vprašanje
What security boundary does a hypervisor provide?
Odgovor
It isolates virtual machines while controlling their access to shared hardware.
Kartica 348
Vprašanje
Why does a TLS tunnel not protect a compromised endpoint?
Odgovor
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kartica 349
Vprašanje
Why update diagrams after an infrastructure change?
Odgovor
Operations and incident responders need the documentation to match the deployed environment.
Kartica 350
Vprašanje
What does privacy ownership assign?
Odgovor
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kartica 351
Vprašanje
What does a security control gap analysis compare?
Odgovor
The controls required for the target state with the controls currently in place.
Kartica 352
Vprašanje
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Odgovor
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kartica 353
Vprašanje
What is application privilege escalation?
Odgovor
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kartica 354
Vprašanje
What risk remains when unnecessary software is left installed?
Odgovor
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kartica 355
Vprašanje
What does SCAP standardize?
Odgovor
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kartica 356
Vprašanje
What can packet capture reveal?
Odgovor
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kartica 357
Vprašanje
What makes a privileged credential ephemeral?
Odgovor
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kartica 358
Vprašanje
How do a statement of work and a work order differ?
Odgovor
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kartica 359
Vprašanje
Why might multi-cloud improve resilience?
Odgovor
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kartica 360
Vprašanje
How can a service provider introduce a supply-chain vulnerability?
Odgovor
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kartica 361
Vprašanje
What is a false positive in vulnerability scanning?
Odgovor
A reported weakness that is not actually present or exploitable in the assessed context.
Kartica 362
Vprašanje
How do EDR and XDR differ?
Odgovor
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kartica 363
Vprašanje
What should onboarding and offboarding procedures coordinate?
Odgovor
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kartica 364
Vprašanje
How should an organization harden managed mobile devices?
Odgovor
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kartica 365
Vprašanje
What is a certificate signing request?
Odgovor
A request containing a public key and subject information for a certificate authority to sign.
Kartica 366
Vprašanje
What is pretexting?
Odgovor
Using a fabricated role or situation to make a request seem legitimate.
Kartica 367
Vprašanje
How is annualized loss expectancy commonly estimated?
Odgovor
Single loss expectancy multiplied by annualized rate of occurrence.
Kartica 368
Vprašanje
What security consequence follows from containers sharing a kernel?
Odgovor
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kartica 369
Vprašanje
Where does 802.1X enforce a network admission decision?
Odgovor
At the controlled switch port or wireless access point before normal network access is granted.
Kartica 370
Vprašanje
What should insider-threat awareness teach?
Odgovor
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kartica 371
Vprašanje
What access action is suitable for careful automation?
Odgovor
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kartica 372
Vprašanje
What is an evil twin?
Odgovor
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kartic
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Brezplačno se učite s tem kompletom
Nibomo se odpre, da lahko začnete z učenjem.
Kartica 373
Vprašanje
Does non-human-readable data need less protection?
Odgovor
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kartica 374
Vprašanje
What does authenticating a system establish?
Odgovor
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kartica 375
Vprašanje
What does LDAP provide in identity systems?
Odgovor
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kartica 376
Vprašanje
What is a deterrent control meant to do?
Odgovor
Discourage an attacker from attempting an unwanted action.
Kartica 377
Vprašanje
Why update procedures after changing a security control?
Odgovor
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kartica 378
Vprašanje
How does OCSP differ from a certificate revocation list?
Odgovor
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kartica 379
Vprašanje
What is the goal of data exfiltration?
Odgovor
Remove data from its authorized environment without permission.
Kartica 380
Vprašanje
What is a watering-hole attack?
Odgovor
Compromising a site frequented by the intended targets so their visits expose them.
Kartica 381
Vprašanje
How can a hardware provider introduce a supply-chain vulnerability?
Odgovor
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kartica 382
Vprašanje
What is application forgery?
Odgovor
Creating or altering a request, token, or object so the application treats it as authentic.
Kartica 383
Vprašanje
How does least privilege mitigate compromise?
Odgovor
It limits the actions and resources available to a compromised account or process.
Kartica 384
Vprašanje
What is serverless computing?
Odgovor
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kartica 385
Vprašanje
What makes an infrastructure control effective for a specific risk?
Odgovor
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kartica 386
Vprašanje
What does parallel recovery processing test?
Odgovor
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kartica 387
Vprašanje
Which password-authentication method does WPA3-Personal use?
Odgovor
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kartica 388
Vprašanje
How does data retention affect asset disposal?
Odgovor
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kartica 389
Vprašanje
What is a false negative in vulnerability scanning?
Odgovor
A real weakness that the assessment fails to report.
Kartica 390
Vprašanje
What does recurring security scanning add to monitoring?
Odgovor
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kartica 391
Vprašanje
What should guide port selection for a secure protocol?
Odgovor
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kartica 392
Vprašanje
What does forensic acquisition create?
Odgovor
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kartica 393
Vprašanje
How do system owners and data owners divide security accountability?
Odgovor
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kartica 394
Vprašanje
What does likelihood express in risk analysis?
Odgovor
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kartica 395
Vprašanje
What is a memorandum of understanding?
Odgovor
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kartica 396
Vprašanje
What does the right to be forgotten generally require?
Odgovor
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kartica 397
Vprašanje
What does an audit committee oversee?
Odgovor
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kartica 398
Vprašanje
What does identity interoperability require?
Odgovor
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kartica 399
Vprašanje
How does a bollard protect a facility?
Odgovor
It blocks or redirects vehicles before they can reach a protected area.
Kartica 400
Vprašanje
How can hashing protect a downloaded file?
Odgovor
A trusted digest lets the recipient detect whether the file changed.
Kartica 401
Vprašanje
What is a credential replay attack?
Odgovor
Using captured valid credentials or tokens again without needing to discover the secret.
Kartica 402
Vprašanje
How can automation complexity create security risk?
Odgovor
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kartica 403
Vprašanje
What must an architecture provide when a component cannot be patched?
Odgovor
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kartica 404
Vprašanje
What makes remote access secure?
Odgovor
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kartica 405
Vprašanje
What should users verify before connecting removable media or a cable?
Odgovor
That the device and connection are approved, expected, and handled under organizational policy.
Kartica 406
Vprašanje
What is a self-signed certificate?
Odgovor
A certificate signed by its own private key rather than by a separate trusted issuer.
Kartica 407
Vprašanje
What is brand impersonation?
Odgovor
Using a trusted organization's identity or look to deceive people.
Kartica 408
Vprašanje
What characterizes a conservative risk appetite?
Odgovor
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kartica 409
Vprašanje
What should a managed mobile device verify before using Wi-Fi?
Odgovor
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kartica 410
Vprašanje
What is a zero-day vulnerability?
Odgovor
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kartica 411
Vprašanje
What does verification confirm after vulnerability remediation?
Odgovor
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kartica 412
Vprašanje
What is user and entity behavior analytics?
Odgovor
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kartica 413
Vprašanje
What does a physical security policy establish?
Odgovor
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kartica 414
Vprašanje
What does a UPS provide?
Odgovor
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kartica 415
Vprašanje
What is a nondisclosure agreement?
Odgovor
A contract restricting use and disclosure of defined confidential information.
Kartica 416
Vprašanje
What should be checked before assigning a user permission?
Odgovor
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kartica 417
Vprašanje
How does espionage differ from ordinary theft?
Odgovor
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kartica 418
Vprašanje
What is password spraying?
Odgovor
Trying a small set of common passwords across many accounts to avoid lockouts.
Kartica 419
Vprašanje
What is the purpose of system isolation during an incident?
Odgovor
Stop harmful communication while preserving the system for response and investigation.
Kartica 420
Vprašanje
What is a security benchmark?
Odgovor
A documented set of recommended configuration checks for a platform or product.
Kartica 421
Vprašanje
Which metadata fields give a log record investigative context?
Odgovor
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kartica 422
Vprašanje
What does an access-control vestibule prevent?
Odgovor
It limits tailgating by allowing controlled passage through one door at a time.
Kartica 423
Vprašanje
What is version control's security value for configuration?
Odgovor
It preserves attributable history and enables review or rollback of changes.
Kartica 424
Vprašanje
Why use both internal and external compliance monitoring?
Odgovor
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kartica 425
Vprašanje
What distinguishes on-premises architecture?
Odgovor
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kartica 426
Vprašanje
What risk can split tunneling add to a VPN?
Odgovor
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kartica 427
Vprašanje
What is a certificate root of trust?
Odgovor
A trusted root certificate or key from which a client validates a certificate chain.
Kartica 428
Vprašanje
What is typosquatting?
Odgovor
Registering a look-alike domain based on common typing errors or visual similarity.
Kartica 429
Vprašanje
What is root-cause analysis?
Odgovor
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kartica 430
Vprašanje
What is risk tolerance?
Odgovor
The acceptable variation or boundary around a specific objective or risk area.
Kartica 431
Vprašanje
What is a security self-assessment?
Odgovor
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kartica 432
Vprašanje
What does data masking change?
Odgovor
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kartica 433
Vprašanje
How do wireless authentication protocols let clients prove identity securely?
Odgovor
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kartica 434
Vprašanje
Why reconcile inventory with network discovery?
Odgovor
Differences expose missing records, retired systems, or unauthorized devices.
Kartica 435
Vprašanje
Why does sideloading raise mobile risk?
Odgovor
It can bypass store review, signing policy, and managed application controls.
Kartica 436
Vprašanje
What does an information-sharing organization add to vulnerability management?
Odgovor
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kartica 437
Vprašanje
What does a web-filter block rule specify?
Odgovor
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kartica 438
Vprašanje
How do data custodians and data stewards differ?
Odgovor
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kartica 439
Vprašanje
What is a brute-force password attack?
Odgovor
Systematically trying many candidate secrets against an account or protected value.
Kartica 440
Vprašanje
What is a compensating control?
Odgovor
An alternative safeguard used when the preferred control is impractical or unavailable.
Kartica 441
Vprašanje
How can location act as an authentication factor?
Odgovor
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kartica 442
Vprašanje
Why must security automation remain supportable?
Odgovor
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kartica 443
Vprašanje
What does a standby generator provide?
Odgovor
Longer-duration power during a utility outage, after a startup delay.
Kartica 444
Vprašanje
What makes an architecture air-gapped?
Odgovor
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kartica 445
Vprašanje
What is a software-defined WAN?
Odgovor
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kartica 446
Vprašanje
What password-management behavior should awareness training reinforce?
Odgovor
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kartica 447
Vprašanje
What security value does fencing provide?
Odgovor
It defines and delays entry across a physical perimeter.
Kartica 448
Vprašanje
What is a wildcard certificate?
Odgovor
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kartica 449
Vprašanje
How does misinformation differ from disinformation?
Odgovor
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kartica 450
Vprašanje
What is a risk threshold?
Odgovor
A defined level that triggers escalation, treatment, or another required response.
Kartica 451
Vprašanje
What does a vendor penetration test contribute to assessment?
Odgovor
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kartica 452
Vprašanje
What is the objective of a service-disruption attack?
Odgovor
Make a system or business function unavailable or unreliable.
Kartica 453
Vprašanje
What is directory traversal?
Odgovor
Manipulating a file path to reach files outside the directory the application intended to expose.
Kartica 454
Vprašanje
Why decommission an unsupported system?
Odgovor
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kartica 455
Vprašanje
Why archive security-monitoring data?
Odgovor
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kartica 456
Vprašanje
What role does RADIUS commonly play in enterprise Wi-Fi?
Odgovor
It centralizes authentication, authorization information, and accounting for network access.
Kartica 457
Vprašanje
Why separate the requester and approver of a high-risk change?
Odgovor
To reduce error, fraud, and unilateral unauthorized modification.
Kartica 458
Vprašanje
Why can a jailbroken device violate a security baseline?
Odgovor
It weakens platform isolation and allows unapproved privileged changes.
Kartica 459
Vprašanje
When is tokenization especially useful?
Odgovor
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kartica 460
Vprašanje
Why can dark-web intelligence affect vulnerability priority?
Odgovor
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kartica 461
Vprašanje
What firewall policy should govern traffic from a screened subnet to internal systems?
Odgovor
Deny it by default and allow only explicitly required flows.
Kartica 462
Vprašanje
What does SAML commonly carry?
Odgovor
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kartica 463
Vprašanje
What does a security governance committee do?
Odgovor
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kartica 464
Vprašanje
How can global privacy requirements affect one data process?
Odgovor
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kartica 465
Vprašanje
What characterizes an IoT device?
Odgovor
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kartica 466
Vprašanje
What is a unified threat management appliance?
Odgovor
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kartica 467
Vprašanje
What does a hardware security module provide?
Odgovor
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kartica 468
Vprašanje
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Odgovor
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kartica 469
Vprašanje
What is a tabletop exercise?
Odgovor
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kartica 470
Vprašanje
What does a risk exemption authorize?
Odgovor
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kartica 471
Vprašanje
What is a regulatory examination?
Odgovor
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kartica 472
Vprašanje
What does physical video surveillance primarily provide?
Odgovor
Detection and evidence of activity in monitored areas.
Kartica 473
Vprašanje
What is a birthday attack against a hash?
Odgovor
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kartica 474
Vprašanje
Why keep backups both onsite and offsite?
Odgovor
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kartica 475
Vprašanje
How does technical debt affect security automation?
Odgovor
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kartica 476
Vprašanje
What should switch hardening restrict first?
Odgovor
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kartica 477
Vprašanje
What should happen when an asset changes owners?
Odgovor
Inventory, access, support responsibility, and data handling should be updated.
Kartica 478
Vprašanje
What does evidence of a vendor's internal audits contribute?
Odgovor
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kartica 479
Vprašanje
What is identity attestation?
Odgovor
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kartica 480
Vprašanje
Why can standard enterprise patching be unsafe for an RTOS device?
Odgovor
A change can disrupt timing guarantees or certified operational behavior.
Kartica 481
Vprašanje
What is secure access service edge?
Odgovor
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kartica 482
Vprašanje
What social-engineering habit should awareness training reinforce?
Odgovor
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kartica 483
Vprašanje
How can a software provider introduce a supply-chain vulnerability?
Odgovor
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kartica 484
Vprašanje
Why include internet exposure in remediation priority?
Odgovor
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kartica 485
Vprašanje
What does a mail gateway inspect?
Odgovor
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kartica 486
Vprašanje
What is a data controller?
Odgovor
The entity that determines why and how personal data is processed.
Kartica 487
Vprašanje
How does blackmail motivate a cyberattack?
Odgovor
The attacker threatens disclosure or harm unless the victim complies.
Kartica 488
Vprašanje
What is a downgrade attack?
Odgovor
Forcing parties to use an older or weaker protocol or security mode.
Kartica 489
Vprašanje
How does encryption mitigate data exposure?
Odgovor
It makes captured data unreadable without the required key.
Kartica 490
Vprašanje
How do network and web vulnerability scanners differ?
Odgovor
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kartica 491
Vprašanje
How can vulnerability-scan data support an investigation?
Odgovor
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kartica 492
Vprašanje
What is key escrow?
Odgovor
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kartica 493
Vprašanje
Which human vector commonly uses a fake sign-in page to harvest credentials?
Odgovor
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kartica 494
Vprašanje
What is risk avoidance?
Odgovor
Stopping or not starting the activity that creates the risk.
Kartica 495
Vprašanje
What is data obfuscation?
Odgovor
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kartica 496
Vprašanje
What is a directive control?
Odgovor
A safeguard that tells people what behavior or action is required.
Kartica 497
Vprašanje
What does a security guard add that a camera cannot?
Odgovor
Human judgment and an immediate physical response.
Kartica 498
Vprašanje
Why define restricted activities in change management?
Odgovor
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kartica 499
Vprašanje
What contractual impact can noncompliance create?
Odgovor
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kartica 500
Vprašanje
What should determine backup frequency?
Odgovor
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kartica 501
Vprašanje
What should router hardening protect?
Odgovor
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kartica 502
Vprašanje
What problem does OAuth 2.0 address?
Odgovor
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kartica 503
Vprašanje
What does SCADA do?
Odgovor
It provides supervisory monitoring and control across distributed industrial equipment.
Kartica 504
Vprašanje
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Odgovor
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kartica 505
Vprašanje
What distinguishes a computer virus?
Odgovor
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kartica 506
Vprašanje
What does a key management system coordinate?
Odgovor
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kartica 507
Vprašanje
How can an unsecure wired network expose traffic?
Odgovor
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kartica 508
Vprašanje
Why is vulnerable device firmware hard to remediate?
Odgovor
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kartica 509
Vprašanje
What does patching change in vulnerability remediation?
Odgovor
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kartica 510
Vprašanje
What does DMARC add to SPF and DKIM?
Odgovor
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kartica 511
Vprašanje
How does automation improve security efficiency?
Odgovor
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kartica 512
Vprašanje
What is a simulation exercise?
Odgovor
A more realistic practice in which participants respond to injected events using operational processes.
Kartica 513
Vprašanje
What is a data processor?
Odgovor
An entity that processes personal data on behalf of a controller.
Kartica 514
Vprašanje
What is risk mitigation?
Odgovor
Reducing likelihood, impact, or both through controls or process changes.
Kartica 515
Vprašanje
Why monitor a vendor after onboarding?
Odgovor
Security posture, ownership, services, incidents, and dependencies can change.
Kartica 516
Vprašanje
What does a physical penetration test assess?
Odgovor
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kartica 517
Vprašanje
Why use access badges at a facility?
Odgovor
To associate entry attempts with authorized identities and enforce access rules.
Kartica 518
Vprašanje
How does permission restriction protect data?
Odgovor
Only authorized identities receive the actions and scope their roles require.
Kartica 519
Vprašanje
What is the usual objective of ransomware extortion?
Odgovor
Force payment by denying access, threatening disclosure, or both.
Kartica 520
Vprašanje
What does impossible travel indicate?
Odgovor
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kartica 521
Vprašanje
What is configuration enforcement?
Odgovor
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kartica 522
Vprašanje
What does a web vulnerability scanner inspect?
Odgovor
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kartica 523
Vprašanje
How does cost affect an architecture choice?
Odgovor
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kartica 524
Vprašanje
What does EAP provide with 802.1X?
Odgovor
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kartica 525
Vprašanje
What should operational-security training help users protect?
Odgovor
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kartica 526
Vprašanje
What does a time-of-day access rule do?
Odgovor
Allows or denies a requested action according to an approved schedule.
Kartica 527
Vprašanje
What should cloud infrastructure hardening establish?
Odgovor
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kartica 528
Vprašanje
What should an asset owner ensure during offboarding?
Odgovor
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kartica 529
Vprašanje
Why encrypt backups?
Odgovor
Backup media and transfers can expose the same sensitive data as production systems.
Kartica 530
Vprašanje
What is steganography?
Odgovor
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kartica 531
Vprašanje
Which human vector uses a fabricated authority role to justify a sensitive request?
Odgovor
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kartica 532
Vprašanje
Why does risk transfer not remove accountability?
Odgovor
The organization can retain legal, reputational, operational, and oversight consequences.
Kartica 533
Vprašanje
Why validate a change after deployment?
Odgovor
To confirm the intended result occurred without introducing unacceptable side effects.
Kartica 534
Vprašanje
What makes end-of-life hardware a security vulnerability?
Odgovor
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kartica 535
Vprašanje
What does an audit add to remediation validation?
Odgovor
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kartica 536
Vprašanje
Why can SPF pass while a message still impersonates a brand?
Odgovor
SPF checks the envelope domain, which may differ from the visible From domain.
Kartica 537
Vprašanje
What role can a government entity have in security governance?
Odgovor
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kartica 538
Vprašanje
How do data inventory and retention support privacy governance?
Odgovor
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kartica 539
Vprašanje
What can concurrent sessions from distant regions indicate?
Odgovor
A stolen account or shared credential, subject to VPN and proxy context.
Kartica 540
Vprašanje
What does supply-chain analysis examine?
Odgovor
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kartica 541
Vprašanje
What is the purpose of facility lighting as a control?
Odgovor
Deter covert activity and improve observation of people and areas.
Kartica 542
Vprašanje
What architecture quality keeps a service usable during component failure?
Odgovor
Availability.
Kartica 543
Vprašanje
When is fail-open behavior preferable to fail-closed behavior?
Odgovor
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kartica 544
Vprašanje
Which control function does a login-failure alert provide?
Odgovor
Detection; it reveals suspicious authentication activity.
Kartica 545
Vprašanje
What does a biometric MFA implementation verify?
Odgovor
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kartica 546
Vprašanje
How can automation enforce a security baseline?
Odgovor
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kartica 547
Vprašanje
How do wireless cryptographic protocols protect network traffic?
Odgovor
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kartica 548
Vprašanje
Why segment sensitive data stores?
Odgovor
It limits reachable paths and separates them from lower-trust workloads.
Kartica 549
Vprašanje
What must remain secret in an asymmetric key pair?
Odgovor
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kartica 550
Vprašanje
How can a supplier become a supply-chain attack vector?
Odgovor
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kartica 551
Vprašanje
What is e-discovery?
Odgovor
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kartica 552
Vprašanje
What characterizes a neutral risk appetite?
Odgovor
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kartica 553
Vprašanje
What is passive reconnaissance?
Odgovor
Gathering information without directly interacting with the target's systems.
Kartica 554
Vprašanje
What does a philosophical motive mean for a threat actor?
Odgovor
The actor acts to advance a belief or moral position rather than primarily for money.
Kartica 555
Vprašanje
What does unexpected resource consumption indicate?
Odgovor
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kartica 556
Vprašanje
What does a host-based intrusion prevention system do?
Odgovor
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kartica 557
Vprašanje
How does agent-based monitoring differ from agentless monitoring?
Odgovor
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kartica 558
Vprašanje
What can network logs contribute to an investigation?
Odgovor
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kartica 559
Vprašanje
What is the purpose of a backup restore test?
Odgovor
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kartica 560
Vprašanje
Why can obsolete hardware become a security risk?
Odgovor
It may lack supported firmware, modern protections, or replacement parts.
Kartica 561
Vprašanje
What does rescanning confirm after remediation?
Odgovor
Whether the scanner can still detect the original finding on the affected asset.
Kartica 562
Vprašanje
What should a secure transport method provide?
Odgovor
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kartica 563
Vprašanje
How can law affect security governance?
Odgovor
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kartica 564
Vprašanje
What does resilience mean for a security architecture?
Odgovor
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kartica 565
Vprašanje
Why minimize an infrastructure's attack surface?
Odgovor
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kartica 566
Vprašanje
What does executing a security-awareness program require?
Odgovor
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kartica 567
Vprašanje
What does an infrared security sensor detect?
Odgovor
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kartica 568
Vprašanje
What is a knowledge factor?
Odgovor
Something the claimant knows, such as a password.
Kartica 569
Vprašanje
Why review allow-list and deny-list impact before a change?
Odgovor
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kartica 570
Vprašanje
What does partition-level encryption protect?
Odgovor
One selected disk partition, leaving other partitions outside that encryption boundary.
Kartica 571
Vprašanje
How can instant messaging deliver a security attack?
Odgovor
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kartica 572
Vprašanje
What can repeated blocked-content events indicate?
Odgovor
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kartica 573
Vprašanje
What should a server-hardening baseline reduce?
Odgovor
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kartica 574
Vprašanje
When is physical media destruction appropriate?
Odgovor
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kartica 575
Vprašanje
What is mean time to repair?
Odgovor
The average time required to restore a failed component or service.
Kartica 576
Vprašanje
Why disclose conflicts of interest during vendor selection?
Odgovor
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kartica 577
Vprašanje
What is a fine for noncompliance?
Odgovor
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kartica 578
Vprašanje
What does a public data classification authorize?
Odgovor
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kartica 579
Vprašanje
What security benefit comes from standard infrastructure configurations?
Odgovor
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kartica 580
Vprašanje
How does horizontal scaling increase capacity?
Odgovor
It adds more service instances and distributes work among them.
Kartica 581
Vprašanje
Why can added connectivity weaken segmentation?
Odgovor
Each allowed path can become a route for lateral movement or data escape.
Kartica 582
Vprašanje
What coding practice is central to preventing SQL injection?
Odgovor
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kartica 583
Vprašanje
When is a compensating control appropriate for a vulnerability?
Odgovor
When timely removal or patching is infeasible and another control can reduce the risk.
Kartica 584
Vprašanje
How does agent-based web filtering enforce policy?
Odgovor
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kartica 585
Vprašanje
How can regulation differ from an internal policy?
Odgovor
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kartica 586
Vprašanje
What is a storage snapshot?
Odgovor
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kartica 587
Vprašanje
What does password age measure?
Odgovor
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kartica 588
Vprašanje
What does an ethical motive mean in vulnerability research?
Odgovor
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kartica 589
Vprašanje
What can missing security logs indicate?
Odgovor
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kartica 590
Vprašanje
Why disable unused ports and protocols?
Odgovor
They expose unnecessary communication paths and code that attackers can reach.
Kartica 591
Vprašanje
What does antivirus contribute to monitoring?
Odgovor
It scans files, memory, or behavior and reports suspected malicious code.
Kartica 592
Vprašanje
What is a honeypot?
Odgovor
A decoy system or service designed to attract and observe malicious activity.
Kartica 593
Vprašanje
What does file-level encryption protect?
Odgovor
Selected files independently of whether the rest of the disk or volume is encrypted.
Kartica 594
Vprašanje
How can SMS deliver a security attack?
Odgovor
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kartica 595
Vprašanje
What happens during incident analysis?
Odgovor
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kartica 596
Vprašanje
What is mean time between failures?
Odgovor
The average operating time between repairable failures.
Kartica 597
Vprašanje
What is active reconnaissance?
Odgovor
Probing or interacting with target systems to discover services and behavior.
Kartica 598
Vprašanje
What constraint should guide ICS or SCADA hardening?
Odgovor
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kartica 599
Vprašanje
Which control function does restoring a clean system image provide?
Odgovor
Correction; it returns the system to a known-good state.
Kartica 600
Vprašanje
What does responsiveness mean in an architecture decision?
Odgovor
How quickly the system and its operators can adapt to demand, failure, or attack.
Kartica 601
Vprašanje
How does out-of-band access strengthen remote administration?
Odgovor
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kartica 602
Vprašanje
What makes user behavior unexpected?
Odgovor
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kartica 603
Vprašanje
What is a work order?
Odgovor
A document authorizing a defined unit of work under an existing agreement.
Kartica 604
Vprašanje
What can out-of-cycle logging indicate?
Odgovor
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kartica 605
Vprašanje
Why update a standard operating procedure after a change?
Odgovor
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kartica 606
Vprašanje
What coding practice limits cross-site scripting?
Odgovor
Context-appropriate output encoding, supported by safe templating and input handling.
Kartica 607
Vprašanje
What does a restricted data classification indicate?
Odgovor
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kartica 608
Vprašanje
How does a bug bounty support responsible disclosure?
Odgovor
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kartica 609
Vprašanje
What does web-filter content categorization provide?
Odgovor
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kartica 610
Vprašanje
How do hard and soft authentication tokens differ?
Odgovor
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kartica 611
Vprašanje
How can industry requirements affect security governance?
Odgovor
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kartica 612
Vprašanje
How can noncompliance cause loss of a license?
Odgovor
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kartica 613
Vprašanje
What does volume-level encryption protect?
Odgovor
All data within a selected logical storage volume.
Kartica 614
Vprašanje
How can impersonation exploit familiarity?
Odgovor
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kartica 615
Vprašanje
How does RTO guide recovery design?
Odgovor
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kartica 616
Vprašanje
What is a honeynet?
Odgovor
A network of decoy systems used to study or divert attackers.
Kartica 617
Vprašanje
What does backup replication provide?
Odgovor
Additional synchronized or copied recovery data in another system or location.
Kartica 618
Vprašanje
What lets automation scale securely?
Odgovor
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kartica 619
Vprašanje
Why monitor a hardened computing resource continuously?
Odgovor
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kartica 620
Vprašanje
Why keep a certificate of destruction?
Odgovor
It documents that a disposal provider handled specified media under the agreed process.
Kartica 621
Vprašanje
Why consider patch availability before selecting a platform?
Odgovor
Unsupported or difficult-to-update components accumulate known exposure.
Kartica 622
Vprašanje
Why should remote administration use an encrypted, authenticated protocol?
Odgovor
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kartica 623
Vprašanje
How can revenge motivate an insider incident?
Odgovor
A disgruntled person may damage systems or disclose data to punish the organization.
Kartica 624
Vprašanje
What is a published or documented indicator of malicious activity?
Odgovor
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kartica 625
Vprašanje
Why monitor a system more closely when a mitigation exception is accepted?
Odgovor
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kartica 626
Vprašanje
What is an SNMP trap?
Odgovor
An unsolicited device notification sent to a management system when a configured event occurs.
Kartica 627
Vprašanje
How can an automated report support an investigation?
Odgovor
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kartica 628
Vprašanje
What is a security key?
Odgovor
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kartica 629
Vprašanje
What does database-level encryption protect?
Odgovor
A database or selected database structures through controls managed at the database layer.
Kartica 630
Vprašanje
How does brand impersonation exploit trust?
Odgovor
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kartica 631
Vprašanje
What browser-side impact can a cross-site scripting vulnerability create?
Odgovor
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kartica 632
Vprašanje
How can a system or process audit identify vulnerabilities?
Odgovor
It compares evidence with required configuration and procedure to reveal control gaps.
Kartica 633
Vprašanje
What security role can Group Policy provide?
Odgovor
Centralized Windows configuration of account, application, audit, and system security settings.
Kartica 634
Vprašanje
What should incident-response training prepare people to do?
Odgovor
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kartica 635
Vprašanje
Why must governance track local or regional requirements?
Odgovor
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kartica 636
Vprašanje
How can a dependency become a useful key risk indicator?
Odgovor
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kartica 637
Vprašanje
What is a business partners agreement?
Odgovor
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kartica 638
Vprašanje
What makes an audit regulatory?
Odgovor
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kartica 639
Vprašanje
What is a honeyfile?
Odgovor
A decoy file whose access can reveal unauthorized activity.
Kartica 640
Vprašanje
Why does legal information require explicit protection?
Odgovor
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kartica 641
Vprašanje
Which indicator can mass file renaming and encryption produce?
Odgovor
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kartica 642
Vprašanje
What remains with an organization after transferring architecture risk?
Odgovor
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kartica 643
Vprašanje
When does local console placement provide useful administrative access?
Odgovor
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kartica 644
Vprašanje
What makes a harmful user action unintentional?
Odgovor
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kartica 645
Vprašanje
How should an organization harden workstations?
Odgovor
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kartica 646
Vprašanje
What is journaling in recovery?
Odgovor
Recording ordered changes so data can be replayed or restored to a consistent point.
Kartica 647
Vprašanje
What downtime must a change plan account for?
Odgovor
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kartica 648
Vprašanje
Why must a privacy program map local or regional law to data flows?
Odgovor
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kartica 649
Vprašanje
Why combine independent preventive controls at different layers?
Odgovor
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kartica 650
Vprašanje
What is passwordless authentication?
Odgovor
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kartica 651
Vprašanje
How can automation improve security reaction time?
Odgovor
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kartica 652
Vprašanje
What does record-level encryption protect?
Odgovor
Individual records or fields, allowing finer protection than encrypting the entire database.
Kartica 653
Vprašanje
How can business email compromise misuse urgency?
Odgovor
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kartica 654
Vprašanje
What does impact measure in risk analysis?
Odgovor
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kartica 655
Vprašanje
What makes cyber activity part of warfare?
Odgovor
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kartica 656
Vprašanje
Which indicator can a newly created privileged account produce outside the normal change window?
Odgovor
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kartica 657
Vprašanje
How can configuration enforcement validate a deployed mitigation?
Odgovor
It compares the realized settings with the approved state and corrects or reports drift.
Kartica 658
Vprašanje
How does validating an alert improve alert tuning?
Odgovor
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kartica 659
Vprašanje
What data-layer impact can a SQL injection vulnerability create?
Odgovor
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kartica 660
Vprašanje
What environmental variables can change vulnerability priority?
Odgovor
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kartica 661
Vprašanje
What security role does SELinux provide?
Odgovor
Mandatory access controls that confine processes according to centrally defined policy.
Kartica 662
Vprašanje
Why review governance documents periodically?
Odgovor
Business, technology, threats, and external obligations change.
Kartica 663
Vprašanje
Why evaluate power requirements for a system design?
Odgovor
Power capacity and redundancy constrain availability and recovery.
Kartica 664
Vprašanje
When is IPsec a better tunnel choice than TLS?
Odgovor
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kartica 665
Vprašanje
What is a honeytoken?
Odgovor
A fake credential or data element that generates a high-confidence alert when used.
Kartica 666
Vprašanje
What should embedded-system hardening prioritize?
Odgovor
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kartica 667
Vprašanje
Why must sanitization address data remanence?
Odgovor
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kartica 668
Vprašanje
Why require rules of engagement for vendor testing?
Odgovor
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kartica 669
Vprašanje
What does a private data classification indicate?
Odgovor
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kartica 670
Vprašanje
What does a tabletop recovery exercise test?
Odgovor
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kartica 671
Vprašanje
Why prevent password reuse?
Odgovor
One compromised password should not unlock other accounts or services.
Kartica 672
Vprašanje
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Odgovor
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kartica 673
Vprašanje
What does transport encryption protect?
Odgovor
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kartica 674
Vprašanje
How can a voice call become an attack vector?
Odgovor
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kartica 675
Vprašanje
What should a digital-forensics report document?
Odgovor
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kartica 676
Vprašanje
What tradeoff comes with an expansionary risk appetite?
Odgovor
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kartica 677
Vprašanje
What does a known penetration-test environment provide?
Odgovor
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kartica 678
Vprašanje
Why evaluate compute requirements before deployment?
Odgovor
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kartica 679
Vprašanje
Why place sensors at network choke points?
Odgovor
They can observe traffic crossing important trust boundaries.
Kartica 680
Vprašanje
What should hybrid or remote-work security training emphasize?
Odgovor
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kartica 681
Vprašanje
Why plan an application restart separately from a service restart?
Odgovor
The application may need its own state handling, user coordination, health checks, and rollback point.
Kartica 682
Vprašanje
What is a cryptographic vulnerability?
Odgovor
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kartica 683
Vprašanje
Why report findings by asset owner?
Odgovor
Owners need clear accountability and a prioritized remediation queue.
Kartica 684
Vprašanje
What should guide selection of a secure protocol?
Odgovor
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kartica 685
Vprašanje
How do centralized and decentralized governance structures differ?
Odgovor
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kartica 686
Vprašanje
How does privacy-aware design limit data retention?
Odgovor
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kartica 687
Vprašanje
What does a pressure security sensor detect?
Odgovor
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kartica 688
Vprašanje
What automation costs should a security team plan for?
Odgovor
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kartica 689
Vprašanje
What should RTOS hardening preserve while reducing attack surface?
Odgovor
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kartica 690
Vprašanje
What is the goal of disruption-for-chaos activity?
Odgovor
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kartica 691
Vprašanje
Which indicator can repeated password guessing produce?
Odgovor
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kartica 692
Vprašanje
How does removing unnecessary software harden a system?
Odgovor
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kartica 693
Vprašanje
What does NetFlow provide?
Odgovor
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kartica 694
Vprašanje
How can a dashboard support an investigation?
Odgovor
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kartica 695
Vprašanje
When should a password be expired?
Odgovor
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kartica 696
Vprašanje
Why does cryptographic key length matter?
Odgovor
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kartica 697
Vprašanje
How can an unsecure Bluetooth connection become an attack vector?
Odgovor
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kartica 698
Vprašanje
What is a key risk indicator?
Odgovor
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kartica 699
Vprašanje
What should vendor monitoring verify when a contract ends?
Odgovor
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kartica 700
Vprašanje
What does a sensitive data classification indicate?
Odgovor
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kartica 701
Vprašanje
What does software-defined networking separate?
Odgovor
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kartica 702
Vprašanje
Where should a web application firewall be placed?
Odgovor
In the path of web requests before they reach the protected application.
Kartica 703
Vprašanje
What does a simulated recovery exercise test?
Odgovor
Participants perform realistic response actions in a controlled environment without disrupting production.
Kartica 704
Vprašanje
How can a team verify that a detective control is effective?
Odgovor
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kartica 705
Vprašanje
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Odgovor
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kartica 706
Vprašanje
What makes a vulnerability cloud-specific?
Odgovor
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kartica 707
Vprašanje
How can insurance respond to vulnerability risk?
Odgovor
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kartica 708
Vprašanje
How does reputation improve web filtering?
Odgovor
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kartica 709
Vprašanje
What does an encryption policy establish?
Odgovor
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kartica 710
Vprašanje
How does a microwave security sensor detect movement?
Odgovor
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kartica 711
Vprašanje
What should IoT-device hardening change before deployment?
Odgovor
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kartica 712
Vprašanje
Why track software licenses as assets?
Odgovor
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kartica 713
Vprašanje
What does a password manager improve?
Odgovor
It can generate and store unique long passwords so users do not memorize or reuse them.
Kartica 714
Vprašanje
What makes a ledger open and public?
Odgovor
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kartica 715
Vprašanje
What should a payment-change request trigger?
Odgovor
Independent verification through a known channel before any account or payment detail is changed.
Kartica 716
Vprašanje
What does preserving digital evidence require?
Odgovor
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kartica 717
Vprašanje
What should a risk report tell decision-makers?
Odgovor
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kartica 718
Vprašanje
What should an external assessment report provide?
Odgovor
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kartica 719
Vprašanje
What is a centralized design's main resilience risk?
Odgovor
A central dependency can become a bottleneck or single point of failure.
Kartica 720
Vprašanje
What does mutual TLS add to a TLS-protected service connection?
Odgovor
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kartica 721
Vprašanje
What should recurring security-awareness reporting show?
Odgovor
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kartica 722
Vprašanje
Why do legacy applications require extra change planning?
Odgovor
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kartica 723
Vprašanje
How do a data controller and a data processor differ?
Odgovor
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kartica 724
Vprašanje
How can orchestration become a single point of failure?
Odgovor
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kartica 725
Vprašanje
Why should defenses account for a threat actor's sophistication and capability?
Odgovor
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kartica 726
Vprašanje
How does an injection attack make an application execute unintended instructions?
Odgovor
It sends crafted input that an interpreter treats as code or commands instead of data.
Kartica 727
Vprašanje
What does a host-based firewall control?
Odgovor
Inbound and outbound network traffic for one endpoint according to local rules.
Kartica 728
Vprašanje
Why revise alerting after an incident?
Odgovor
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kartica 729
Vprašanje
Why include security duties in procurement criteria?
Odgovor
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kartica 730
Vprašanje
What does a critical data classification indicate?
Odgovor
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kartica 731
Vprašanje
What infrastructure capacity must support failover?
Odgovor
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kartica 732
Vprašanje
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Odgovor
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kartica 733
Vprašanje
How does a remediation exemption differ from an exception?
Odgovor
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kartica 734
Vprašanje
Why should automated EDR or XDR blocking have an exception and rollback path?
Odgovor
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kartica 735
Vprašanje
What does a security playbook provide?
Odgovor
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kartica 736
Vprašanje
How does an ultrasonic security sensor detect movement?
Odgovor
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kartica 737
Vprašanje
What should a managed mobile device require for Bluetooth connections?
Odgovor
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kartica 738
Vprašanje
How do password complexity rules differ from password length?
Odgovor
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kartica 739
Vprašanje
What makes a certificate third-party trusted?
Odgovor
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kartica 740
Vprašanje
Why is an out-of-band check effective against impersonation?
Odgovor
It verifies the request through a separate, previously trusted communication path.
Kartica 741
Vprašanje
What does a risk exception authorize?
Odgovor
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kartica 742
Vprašanje
What security challenge grows in a decentralized design?
Odgovor
Consistent policy, inventory, monitoring, and patching become harder.
Kartica 743
Vprašanje
How should controls be selected for an unused network path?
Odgovor
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kartica 744
Vprašanje
How can a buffer-overflow attack affect an application?
Odgovor
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 kartic