What does an information security policy establish?

Management's required direction, responsibilities, and high-level rules for protecting information and systems.

A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.

What does a public-key certificate bind to an identity?

A public key, together with identifying information and the issuer's signature.

What is data at rest?

Data stored on media such as disks, databases, backups, or mobile devices.

How does policy-driven access control decide a zero-trust access request?

Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.

What does establishing a secure baseline produce?

An approved, documented configuration that defines the required secure state for a class of computing resource.

What is hashing used to verify?

Whether data has changed by comparing fixed-length digest values.

What is impersonation in social engineering?

Pretending to be a trusted person or organization to obtain access, data, or action.

What is virtualization?

Abstracting physical compute so multiple isolated guest systems can share a host.

What is chain of custody?

A documented history of who collected, handled, transferred, stored, and examined evidence.

What is quantitative risk analysis?

Estimating risk with numerical values such as money, frequency, or probability.

What is a phishing awareness campaign?

A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.

What is high availability?

Designing a service to remain accessible despite expected component failures.

What is a network security zone?

A group of systems with similar trust, function, or control requirements.

What is risk transfer?

Shifting some financial or operational consequence to another party, such as through insurance or contract.

What is media sanitization?

Making stored data infeasible to recover for the intended level of protection.

What does CVSS provide?

A standardized way to describe a vulnerability's technical severity characteristics.

What does security alerting do?

It turns matched events or behavior into a notification that the right responder can review.

What does a firewall rule enforce?

A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.

What is deprovisioning?

Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.

How does inline placement differ from a tap or monitor port?

Inline traffic passes through the control; a tap or monitor receives a copy for observation.

What is asymmetric encryption?

Encryption that uses a mathematically related public and private key pair.

What does SPF authorize?

Which mail servers may send mail for a domain in the SMTP envelope.

What is a possession factor?

Something the claimant has, such as a cryptographic authenticator.

What does ordinary TLS usually protect and authenticate?

It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.

What is single loss expectancy?

The estimated loss from one occurrence of a risk event.

What does a certificate authority do?

It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.

What is a detective control meant to do?

Identify that an unwanted event has happened or is happening.

What is the security purpose of change-control approval?

Ensure authorized reviewers assess risk before the production change occurs.

Technology used for organizational work without required approval or oversight.

What is a buffer overflow vulnerability?

A bounds-checking failure that lets input overwrite memory outside its intended buffer.

Malware or an intrusion outcome that denies access to data or systems to extort the victim.

How does network segmentation limit an incident?

It restricts communication paths and reduces lateral movement between zones.

How do load balancing and clustering support availability differently?

Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.

What is vendor due diligence?

Evaluating a provider's security, capability, stability, and fit before commitment.

Who is a data subject?

The person whose personal data is collected or processed.

A formal assertion or report about a subject matter, often supported by an independent examination.

What is a replay attack?

Valid captured data is retransmitted to repeat an authenticated or authorized action.

What does a wireless site survey establish?

Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.

What is the time-of-check stage of a race-condition vulnerability?

The application verifies a condition or resource state before acting on it.

What is a penetration test?

An authorized attempt to exploit weaknesses and demonstrate practical impact.

What is a cold recovery site?

A facility with basic space and utilities but little preinstalled technology or current data.

What is data in transit?

Data moving between systems or across a network.

What is a vendor security questionnaire?

A structured request for information about a provider's controls and practices.

How does an internal actor's starting position differ from an external actor's?

An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.

What can unexpected account lockouts indicate?

Password guessing, credential stuffing, user error, or a broken client.

How do permissions enforce access control?

They specify which actions a subject may perform on a particular resource.

What is log aggregation?

Central collection of logs from multiple sources for search, correlation, and retention.

Why plan a service restart as part of a change?

The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.

What is infrastructure as code?

Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.

What should security-awareness program development start with?

The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.

CompTIA Security+ SY0-701 Flashcards: Complete Objective Review

Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.

Tác giả Flashcards Open Source App

Học bộ thẻ này miễn phí

Nibomo sẽ mở ra để bạn bắt đầu học.

Chi tiết bộ thẻ

Thẻ: 744 thẻ
Phiên bản: 1
Xuất bản: 26 tháng 8, 2026
Cập nhật lần cuối: 10 tháng 9, 2026
Giấy phép: Common knowledge · CC0 1.0
Ngôn ngữ người học: en
Chủ đề: Cybersecurity
Cấp độ: Security+ SY0-701
Nhãn: security-plus-701, governance-risk, threats-mitigations, general-concepts, security-architecture, security-operations

Bộ thẻ tương tự

Về bộ thẻ này

Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.

What this deck covers

General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.

Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.

The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.

Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.

This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.

Thẻ trong bộ này

Thẻ 1
Câu hỏi
What does an information security policy establish?
Câu trả lời
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Thẻ 2
Câu hỏi
What is phishing?
Câu trả lời
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Thẻ 3
Câu hỏi
What does a public-key certificate bind to an identity?
Câu trả lời
A public key, together with identifying information and the issuer's signature.
Thẻ 4
Câu hỏi
What is data at rest?
Câu trả lời
Data stored on media such as disks, databases, backups, or mobile devices.
Thẻ 5
Câu hỏi
How does policy-driven access control decide a zero-trust access request?
Câu trả lời
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Thẻ 6
Câu hỏi
What does establishing a secure baseline produce?
Câu trả lời
An approved, documented configuration that defines the required secure state for a class of computing resource.
Thẻ 7
Câu hỏi
What is hashing used to verify?
Câu trả lời
Whether data has changed by comparing fixed-length digest values.
Thẻ 8
Câu hỏi
What is impersonation in social engineering?
Câu trả lời
Pretending to be a trusted person or organization to obtain access, data, or action.
Thẻ 9
Câu hỏi
What is virtualization?
Câu trả lời
Abstracting physical compute so multiple isolated guest systems can share a host.
Thẻ 10
Câu hỏi
What is chain of custody?
Câu trả lời
A documented history of who collected, handled, transferred, stored, and examined evidence.
Thẻ 11
Câu hỏi
What is quantitative risk analysis?
Câu trả lời
Estimating risk with numerical values such as money, frequency, or probability.
Thẻ 12
Câu hỏi
What is a phishing awareness campaign?
Câu trả lời
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Thẻ 13
Câu hỏi
What is high availability?
Câu trả lời
Designing a service to remain accessible despite expected component failures.
Thẻ 14
Câu hỏi
What is a network security zone?
Câu trả lời
A group of systems with similar trust, function, or control requirements.
Thẻ 15
Câu hỏi
What is risk transfer?
Câu trả lời
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Thẻ 16
Câu hỏi
What is media sanitization?
Câu trả lời
Making stored data infeasible to recover for the intended level of protection.
Thẻ 17
Câu hỏi
What does CVSS provide?
Câu trả lời
A standardized way to describe a vulnerability's technical severity characteristics.
Thẻ 18
Câu hỏi
What does security alerting do?
Câu trả lời
It turns matched events or behavior into a notification that the right responder can review.
Thẻ 19
Câu hỏi
What does a firewall rule enforce?
Câu trả lời
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Thẻ 20
Câu hỏi
What is deprovisioning?
Câu trả lời
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Thẻ 21
Câu hỏi
How does inline placement differ from a tap or monitor port?
Câu trả lời
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Thẻ 22
Câu hỏi
What is asymmetric encryption?
Câu trả lời
Encryption that uses a mathematically related public and private key pair.
Thẻ 23
Câu hỏi
What does SPF authorize?
Câu trả lời
Which mail servers may send mail for a domain in the SMTP envelope.
Thẻ 24
Câu hỏi
What is a possession factor?
Câu trả lời
Something the claimant has, such as a cryptographic authenticator.
Thẻ 25
Câu hỏi
What does ordinary TLS usually protect and authenticate?
Câu trả lời
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Thẻ 26
Câu hỏi
What is single loss expectancy?
Câu trả lời
The estimated loss from one occurrence of a risk event.
Thẻ 27
Câu hỏi
What does a certificate authority do?
Câu trả lời
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Thẻ 28
Câu hỏi
What is a detective control meant to do?
Câu trả lời
Identify that an unwanted event has happened or is happening.
Thẻ 29
Câu hỏi
What is the security purpose of change-control approval?
Câu trả lời
Ensure authorized reviewers assess risk before the production change occurs.
Thẻ 30
Câu hỏi
What is shadow IT?
Câu trả lời
Technology used for organizational work without required approval or oversight.
Thẻ 31
Câu hỏi
What is a buffer overflow vulnerability?
Câu trả lời
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Thẻ 32
Câu hỏi
What is ransomware?
Câu trả lời
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Thẻ 33
Câu hỏi
How does network segmentation limit an incident?
Câu trả lời
It restricts communication paths and reduces lateral movement between zones.
Thẻ 34
Câu hỏi
How do load balancing and clustering support availability differently?
Câu trả lời
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Thẻ 35
Câu hỏi
What is vendor due diligence?
Câu trả lời
Evaluating a provider's security, capability, stability, and fit before commitment.
Thẻ 36
Câu hỏi
Who is a data subject?
Câu trả lời
The person whose personal data is collected or processed.
Thẻ 37
Câu hỏi
What is attestation?
Câu trả lời
A formal assertion or report about a subject matter, often supported by an independent examination.
Thẻ 38
Câu hỏi
What is a replay attack?
Câu trả lời
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Thẻ 39
Câu hỏi
What does a wireless site survey establish?
Câu trả lời
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Thẻ 40
Câu hỏi
What is the time-of-check stage of a race-condition vulnerability?
Câu trả lời
The application verifies a condition or resource state before acting on it.
Thẻ 41
Câu hỏi
What is a penetration test?
Câu trả lời
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Thẻ 42
Câu hỏi
What is a cold recovery site?
Câu trả lời
A facility with basic space and utilities but little preinstalled technology or current data.
Thẻ 43
Câu hỏi
What is data in transit?
Câu trả lời
Data moving between systems or across a network.
Thẻ 44
Câu hỏi
What is a vendor security questionnaire?
Câu trả lời
A structured request for information about a provider's controls and practices.
Thẻ 45
Câu hỏi
How does an internal actor's starting position differ from an external actor's?
Câu trả lời
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Thẻ 46
Câu hỏi
What can unexpected account lockouts indicate?
Câu trả lời
Password guessing, credential stuffing, user error, or a broken client.
Thẻ 47
Câu hỏi
How do permissions enforce access control?
Câu trả lời
They specify which actions a subject may perform on a particular resource.
Thẻ 48
Câu hỏi
What is log aggregation?
Câu trả lời
Central collection of logs from multiple sources for search, correlation, and retention.
Thẻ 49
Câu hỏi
Why plan a service restart as part of a change?
Câu trả lời
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Thẻ 50
Câu hỏi
What is infrastructure as code?
Câu trả lời
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Thẻ 51
Câu hỏi
What should security-awareness program development start with?
Câu trả lời
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Thẻ 52
Câu hỏi
What is a voice-based social-engineering attack called?
Câu trả lời
Vishing.
Thẻ 53
Câu hỏi
What happens during incident-response preparation?
Câu trả lời
Teams establish people, tools, access, communications, training, and procedures before an incident.
Thẻ 54
Câu hỏi
What does an offensive penetration-testing team do?
Câu trả lời
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Thẻ 55
Câu hỏi
What is federation?
Câu trả lời
One security domain relies on identity assertions from another trusted domain.
Thẻ 56
Câu hỏi
What is asset classification?
Câu trả lời
Grouping an asset by sensitivity, criticality, or required handling.
Thẻ 57
Câu hỏi
What is cross-site scripting?
Câu trả lời
Injection of script-capable content that a browser executes in another site's security context.
Thẻ 58
Câu hỏi
What can IDS or IPS trends reveal?
Câu trả lời
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Thẻ 59
Câu hỏi
What can unexpected resource inaccessibility indicate?
Câu trả lời
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Thẻ 60
Câu hỏi
What is a corrective control meant to do?
Câu trả lời
Limit damage and restore a secure state after an event.
Thẻ 61
Câu hỏi
How do containers differ from virtual machines?
Câu trả lời
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Thẻ 62
Câu hỏi
How does an active security device differ from a passive one?
Câu trả lời
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Thẻ 63
Câu hỏi
Why is unsupported software a persistent attack surface?
Câu trả lời
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Thẻ 64
Câu hỏi
What is annualized rate of occurrence?
Câu trả lời
The estimated number of times a risk event occurs per year.
Thẻ 65
Câu hỏi
What is an inherence factor?
Câu trả lời
A biometric characteristic of the claimant.
Thẻ 66
Câu hỏi
What do a threat actor's sophistication and capability describe?
Câu trả lời
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Thẻ 67
Câu hỏi
What is a SIEM?
Câu trả lời
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Thẻ 68
Câu hỏi
What is sideloading?
Câu trả lời
Installing software from outside the platform's approved distribution path.
Thẻ 69
Câu hỏi
What does an IDS or IPS signature match?
Câu trả lời
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Thẻ 70
Câu hỏi
Why are embedded systems often difficult to patch?
Câu trả lời
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Thẻ 71
Câu hỏi
What is a virtual private network?
Câu trả lời
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Thẻ 72
Câu hỏi
What should an initial security-awareness report establish?
Câu trả lời
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Thẻ 73
Câu hỏi
What is symmetric encryption?
Câu trả lời
Encryption that uses the same secret key to encrypt and decrypt data.
Thẻ 74
Câu hỏi
What happens during incident detection?
Câu trả lời
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Thẻ 75
Câu hỏi
What is recovery time objective?
Câu trả lời
The target maximum time to restore a function after disruption.
Thẻ 76
Câu hỏi
Why prioritize password length?
Câu trả lời
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Thẻ 77
Câu hỏi
What must sanitization accomplish before an asset leaves organizational control?
Câu trả lời
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Thẻ 78
Câu hỏi
What is a real-time operating system designed to provide?
Câu trả lời
Predictable response timing for tasks with strict deadlines.
Thẻ 79
Câu hỏi
What does fail-open behavior do when a control fails?
Câu trả lời
It permits traffic or access to preserve availability.
Thẻ 80
Câu hỏi
What is jailbreaking or rooting a mobile device?
Câu trả lời
Removing platform restrictions to gain privileged control over the operating system.
Thẻ 81
Câu hỏi
What does network access control enforce?
Câu trả lời
Identity, device posture, and access policy at network connection time and during a session.
Thẻ 82
Câu hỏi
What does data loss prevention do?
Câu trả lời
Detects and may block sensitive data use or transfer that violates policy.
Thẻ 83
Câu hỏi
What security property does a blockchain provide?
Câu trả lời
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Thẻ 84
Câu hỏi
What is recovery point objective?
Câu trả lời
The target maximum acceptable data loss measured backward in time.
Thẻ 85
Câu hỏi
How do ICS and SCADA relate?
Câu trả lời
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Thẻ 86
Câu hỏi
What does fail-closed behavior do when a control fails?
Câu trả lời
It denies traffic or access to preserve security.
Thẻ 87
Câu hỏi
Which keys create and verify a typical digital signature?
Câu trả lời
The signer creates it with a private key, and others verify it with the corresponding public key.
Thẻ 88
Câu hỏi
What is SQL injection?
Câu trả lời
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Thẻ 89
Câu hỏi
What does DKIM verify?
Câu trả lời
That selected message content was signed by a domain and was not altered after signing.
Thẻ 90
Câu hỏi
What is post-incident activity?
Câu trả lời
Learning from the event and improving controls, plans, and recovery based on evidence.
Thẻ 91
Câu hỏi
What characterizes an expansionary risk appetite?
Câu trả lời
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Thẻ 92
Câu hỏi
How do centralized and decentralized architectures differ?
Câu trả lời
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Thẻ 93
Câu hỏi
What does a certificate revocation list publish?
Câu trả lời
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Thẻ 94
Câu hỏi
What is a legal hold?
Câu trả lời
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Thẻ 95
Câu hỏi
What is exposure factor in quantitative risk analysis?
Câu trả lời
The estimated percentage of an asset's value lost in one event.
Thẻ 96
Câu hỏi
What is decentralized architecture?
Câu trả lời
Control or service responsibility is distributed across multiple independent components or locations.
Thẻ 97
Câu hỏi
What is tokenization?
Câu trả lời
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Thẻ 98
Câu hỏi
How can automation act as a workforce multiplier?
Câu trả lời
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Thẻ 99
Câu hỏi
What can endpoint process logs reveal?
Câu trả lời
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Thẻ 100
Câu hỏi
What does the CIA triad protect?
Câu trả lời
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Thẻ 101
Câu hỏi
How does data masking protect information?
Câu trả lời
It hides selected values or characters while preserving a usable representation.
Thẻ 102
Câu hỏi
How can a national requirement affect security governance?
Câu trả lời
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Thẻ 103
Câu hỏi
What do integrations and APIs provide to security orchestration?
Câu trả lời
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Thẻ 104
Câu hỏi
What makes a compliance report external?
Câu trả lời
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Thẻ 105
Câu hỏi
What does a cryptographic algorithm define?
Câu trả lời
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Thẻ 106
Câu hỏi
Why compare systems with a secure baseline regularly?
Câu trả lời
To detect drift, unauthorized changes, and missing hardening.
Thẻ 107
Câu hỏi
What does integrity protect?
Câu trả lời
The accuracy and completeness of data and systems against unauthorized change.
Thẻ 108
Câu hỏi
What does vulnerability classification organize?
Câu trả lời
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Thẻ 109
Câu hỏi
What does a password standard define?
Câu trả lời
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Thẻ 110
Câu hỏi
What technology capacity must a recovery design plan for?
Câu trả lời
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Thẻ 111
Câu hỏi
What does a confidential data classification indicate?
Câu trả lời
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Thẻ 112
Câu hỏi
What makes a vendor assessment independent?
Câu trả lời
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Thẻ 113
Câu hỏi
What lets a worm spread without attaching itself to another file?
Câu trả lời
It is a standalone program that replicates across reachable systems or services.
Thẻ 114
Câu hỏi
What is microsegmentation?
Câu trả lời
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Thẻ 115
Câu hỏi
What can application logs reveal?
Câu trả lời
Transactions, errors, user actions, and application-specific security events.
Thẻ 116
Câu hỏi
What does deploying a secure baseline require?
Câu trả lời
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Thẻ 117
Câu hỏi
How can resource-provisioning automation improve security?
Câu trả lời
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Thẻ 118
Câu hỏi
What does availability protect?
Câu trả lời
Reliable, timely access to systems and data when authorized users need them.
Thẻ 119
Câu hỏi
Why must a change request describe business impact?
Câu trả lời
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Thẻ 120
Câu hỏi
What does an authenticated vulnerability scan add?
Câu trả lời
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Thẻ 121
Câu hỏi
What does a change-management procedure specify?
Câu trả lời
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Thẻ 122
Câu hỏi
What is a sanction for noncompliance?
Câu trả lời
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Thẻ 123
Câu hỏi
How can email deliver a security attack?
Câu trả lời
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Thẻ 124
Câu hỏi
What is an internal compliance audit?
Câu trả lời
An organization-led examination of whether selected operations and controls meet defined requirements.
Thẻ 125
Câu hỏi
What is a Trojan?
Câu trả lời
Malware disguised as legitimate or desirable software.
Thẻ 126
Câu hỏi
What is clustering?
Câu trả lời
Multiple systems work together to provide a service and tolerate member failure.
Thẻ 127
Câu hỏi
What makes data regulated?
Câu trả lời
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Thẻ 128
Câu hỏi
What does a wireless heat map show?
Câu trả lời
Measured or modeled signal strength and coverage across a physical area.
Thẻ 129
Câu hỏi
How should vendor criticality affect due diligence?
Câu trả lời
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Thẻ 130
Câu hỏi
How can a digital signature support non-repudiation?
Câu trả lời
It provides evidence that the holder of a private key signed specific data.
Thẻ 131
Câu hỏi
What should vulnerability prioritization consider beyond severity?
Câu trả lời
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Thẻ 132
Câu hỏi
What is a security guideline?
Câu trả lời
Recommended practice that allows judgment unless adopted as a requirement.
Thẻ 133
Câu hỏi
What usually distinguishes a nation-state threat actor?
Câu trả lời
Strategic objectives, substantial resources, patience, and advanced operational capability.
Thẻ 134
Câu hỏi
What is spyware?
Câu trả lời
Software that secretly collects information about a user or system.
Thẻ 135
Câu hỏi
Why maintain an allow list for applications?
Câu trả lời
Only explicitly approved software is permitted to execute.
Thẻ 136
Câu hỏi
How can an image become an attack vector?
Câu trả lời
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Thẻ 137
Câu hỏi
What makes a security control technical?
Câu trả lời
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Thẻ 138
Câu hỏi
What is identity proofing?
Câu trả lời
Establishing that a person is who they claim to be before issuing an account or credential.
Thẻ 139
Câu hỏi
What is an automated security guardrail?
Câu trả lời
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Thẻ 140
Câu hỏi
Why assign an owner to a planned change?
Câu trả lời
To make one party accountable for coordination, execution, and follow-through.
Thẻ 141
Câu hỏi
How can national privacy law affect data handling?
Câu trả lời
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Thẻ 142
Câu hỏi
What is continuity of operations?
Câu trả lời
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Thẻ 143
Câu hỏi
What security tradeoff comes with BYOD?
Câu trả lời
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Thẻ 144
Câu hỏi
How should policies and handbooks support security training?
Câu trả lời
They provide accessible, current rules and reporting steps that training can apply to real situations.
Thẻ 145
Câu hỏi
What is a keylogger?
Câu trả lời
A tool that records keystrokes to capture data such as credentials.
Thẻ 146
Câu hỏi
What makes information a trade secret?
Câu trả lời
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Thẻ 147
Câu hỏi
What does authentication establish?
Câu trả lời
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Thẻ 148
Câu hỏi
What risk comes from an untrusted file attachment?
Câu trả lời
Opening or parsing it can execute malicious code or expose data.
Thẻ 149
Câu hỏi
How does risk tolerance affect vulnerability remediation?
Câu trả lời
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Thẻ 150
Câu hỏi
How can a global requirement affect security governance?
Câu trả lời
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Thẻ 151
Câu hỏi
Why should questionnaire answers be supported by evidence?
Câu trả lời
Self-assertions alone may not prove that controls are designed or operating effectively.
Thẻ 152
Câu hỏi
What is an independent third-party audit?
Câu trả lời
An external party with suitable independence examines evidence against defined criteria.
Thẻ 153
Câu hỏi
What do account provisioning and deprovisioning do?
Câu trả lời
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Thẻ 154
Câu hỏi
What is an unskilled attacker commonly called?
Câu trả lời
A script kiddie: someone who relies on tools or instructions created by others.
Thẻ 155
Câu hỏi
What is a rootkit?
Câu trả lời
Software designed to maintain privileged, concealed access by altering or subverting the system.
Thẻ 156
Câu hỏi
What does an access control list enforce?
Câu trả lời
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Thẻ 157
Câu hỏi
What should system security monitoring observe?
Câu trả lời
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Thẻ 158
Câu hỏi
What can operating-system security logs reveal?
Câu trả lời
Authentication, privilege use, policy changes, services, and other host security events.
Thẻ 159
Câu hỏi
Why isolate operational technology from general business networks?
Câu trả lời
To limit attack paths into safety- and availability-critical processes.
Thẻ 160
Câu hỏi
What is the COPE mobile deployment model?
Câu trả lời
The organization owns the device but permits defined personal use while retaining management control.
Thẻ 161
Câu hỏi
What security work belongs in asset acquisition and procurement?
Câu trả lời
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Thẻ 162
Câu hỏi
How can user-provisioning automation improve security?
Câu trả lời
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Thẻ 163
Câu hỏi
What people capacity must a continuity plan account for?
Câu trả lời
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Thẻ 164
Câu hỏi
What do authorization models define?
Câu trả lời
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Thẻ 165
Câu hỏi
Why are removable devices an attack vector?
Câu trả lời
They can introduce malware or remove data while bypassing network controls.
Thẻ 166
Câu hỏi
What should predeployment change-test results show?
Câu trả lời
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Thẻ 167
Câu hỏi
What is the time-of-use stage of a race-condition vulnerability?
Câu trả lời
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Thẻ 168
Câu hỏi
What is data in use?
Câu trả lời
Data actively processed in memory or by an application.
Thẻ 169
Câu hỏi
What does open-source vulnerability intelligence contribute?
Câu trả lời
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Thẻ 170
Câu hỏi
What can file-integrity monitoring detect?
Câu trả lời
Unexpected changes to protected files, directories, or configuration.
Thẻ 171
Câu hỏi
Why should deprovisioning be prompt?
Câu trả lời
Former users or roles should not retain usable access.
Thẻ 172
Câu hỏi
What is an acceptable use policy?
Câu trả lời
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Thẻ 173
Câu hỏi
What makes a compliance report internal?
Câu trả lời
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Thẻ 174
Câu hỏi
What is a logic bomb?
Câu trả lời
Malicious code that activates when a specified condition or time is reached.
Thẻ 175
Câu hỏi
What does a right-to-audit clause provide?
Câu trả lời
Contractual authority to inspect or obtain evidence about agreed controls.
Thẻ 176
Câu hỏi
Where should a forward proxy sit in an enterprise traffic path?
Câu trả lời
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Thẻ 177
Câu hỏi
Which cues should make a message look suspicious?
Câu trả lời
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Thẻ 178
Câu hỏi
What makes a security control managerial?
Câu trả lời
It directs risk and governance through decisions such as policies, assessments, and oversight.
Thẻ 179
Câu hỏi
What is the CYOD mobile deployment model?
Câu trả lời
The user selects from organization-approved device options that remain subject to corporate security requirements.
Thẻ 180
Câu hỏi
How does client-based vulnerable software differ from an agentless exposure?
Câu trả lời
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Thẻ 181
Câu hỏi
What makes a risk assessment recurring?
Câu trả lời
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Thẻ 182
Câu hỏi
What does a defensive penetration-testing team practice?
Câu trả lời
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Thẻ 183
Câu hỏi
In a zero-trust data plane, what can the subject or system represent?
Câu trả lời
The user, device, workload, or service requesting access to a protected resource.
Thẻ 184
Câu hỏi
What primarily motivates a hacktivist?
Câu trả lời
A political, social, or ideological cause.
Thẻ 185
Câu hỏi
What is bloatware?
Câu trả lời
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Thẻ 186
Câu hỏi
Why keep endpoint-protection signatures and engines current?
Câu trả lời
They need current detection logic to recognize newly identified malware and exploit behavior.
Thẻ 187
Câu hỏi
What should application security monitoring observe?
Câu trả lời
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Thẻ 188
Câu hỏi
What is role-based access control?
Câu trả lời
Permissions are assigned to roles, and identities receive access through their roles.
Thẻ 189
Câu hỏi
What is geographic dispersal?
Câu trả lời
Placing redundant resources in separate locations so one regional event does not affect all copies.
Thẻ 190
Câu hỏi
What is a malicious update?
Câu trả lời
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Thẻ 191
Câu hỏi
What does static application analysis inspect?
Câu trả lời
Source code, bytecode, or compiled code without executing the application.
Thẻ 192
Câu hỏi
What does a firewall access list define?
Câu trả lời
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Thẻ 193
Câu hỏi
What does a disaster recovery policy establish?
Câu trả lời
Management expectations for restoring technology and data after a disruptive event.
Thẻ 194
Câu hỏi
How does logical segmentation separate workloads that share physical infrastructure?
Câu trả lời
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Thẻ 195
Câu hỏi
How should IDS and IPS placement differ?
Câu trả lời
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Thẻ 196
Câu hỏi
What should automated ticket creation capture?
Câu trả lời
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Thẻ 197
Câu hỏi
What makes information intellectual property?
Câu trả lời
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Thẻ 198
Câu hỏi
What is a backout plan?
Câu trả lời
Predefined steps for safely reversing a failed or harmful change.
Thẻ 199
Câu hỏi
Why is an unsecure wireless network an attack vector?
Câu trả lời
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Thẻ 200
Câu hỏi
What is physical brute force?
Câu trả lời
Using force to defeat a lock, barrier, enclosure, or other physical control.
Thẻ 201
Câu hỏi
What is application sandboxing?
Câu trả lời
Running code in a constrained environment with limited access to the host and data.
Thẻ 202
Câu hỏi
Why assign an asset owner?
Câu trả lời
One accountable party must decide its use, protection, and lifecycle.
Thẻ 203
Câu hỏi
What happens during risk identification?
Câu trả lời
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Thẻ 204
Câu hỏi
What should an SLA state about breach notification?
Câu trả lời
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Thẻ 205
Câu hỏi
How do due diligence and due care differ in compliance?
Câu trả lời
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Thẻ 206
Câu hỏi
What is attribute-based access control?
Câu trả lời
Policy evaluates attributes of the subject, resource, action, and environment.
Thẻ 207
Câu hỏi
What does a zero-trust policy engine do?
Câu trả lời
It evaluates policy and signals to decide whether access should be allowed.
Thẻ 208
Câu hỏi
How does a cloud responsibility matrix allocate security duties?
Câu trả lời
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Thẻ 209
Câu hỏi
Where should a load balancer sit in a service path?
Câu trả lời
In front of service instances so it can route requests to healthy backends.
Thẻ 210
Câu hỏi
What should the security team do with a reported suspicious message?
Câu trả lời
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Thẻ 211
Câu hỏi
What makes an operating-system vulnerability high impact?
Câu trả lời
It can affect every application and security control that relies on the compromised OS.
Thẻ 212
Câu hỏi
What does dynamic application analysis inspect?
Câu trả lời
The behavior and externally visible weaknesses of a running application.
Thẻ 213
Câu hỏi
How can false-positive trends affect IDS or IPS tuning?
Câu trả lời
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Thẻ 214
Câu hỏi
What does a business continuity policy establish?
Câu trả lời
Management expectations for sustaining and restoring critical business functions.
Thẻ 215
Câu hỏi
What is a hot recovery site?
Câu trả lời
A ready, synchronized environment intended to take over quickly.
Thẻ 216
Câu hỏi
What makes an insider threat distinct?
Câu trả lời
The actor has legitimate access or organizational knowledge that can be misused.
Thẻ 217
Câu hỏi
What is RFID cloning?
Câu trả lời
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Thẻ 218
Câu hỏi
Why apply vendor security updates promptly?
Câu trả lời
They remove known weaknesses before attackers can exploit the unpatched exposure.
Thẻ 219
Câu hỏi
What should infrastructure security monitoring observe?
Câu trả lời
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Thẻ 220
Câu hỏi
What can firewall logs reveal?
Câu trả lời
Allowed or denied network connections across controlled boundaries.
Thẻ 221
Câu hỏi
Why minimize open service ports?
Câu trả lời
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Thẻ 222
Câu hỏi
What is threat hunting?
Câu trả lời
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Thẻ 223
Câu hỏi
What triggers an ad hoc risk assessment?
Câu trả lời
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Thẻ 224
Câu hỏi
What makes an assessment external?
Câu trả lời
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Thẻ 225
Câu hỏi
What is data sovereignty?
Câu trả lời
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Thẻ 226
Câu hỏi
What security boundary does a cellular connection create for a mobile device?
Câu trả lời
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Thẻ 227
Câu hỏi
What makes a security control operational?
Câu trả lời
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Thẻ 228
Câu hỏi
What is discretionary access control?
Câu trả lời
A resource owner can decide who receives access, within system policy.
Thẻ 229
Câu hỏi
How can careful automation support employee retention?
Câu trả lời
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Thẻ 230
Câu hỏi
Why does ease of deployment matter in an architecture decision?
Câu trả lời
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Thẻ 231
Câu hỏi
What tradeoff comes with placing an NGFW inline?
Câu trả lời
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Thẻ 232
Câu hỏi
What does a zero-trust policy administrator do?
Câu trả lời
It carries out the policy engine's decision, such as creating or ending a session.
Thẻ 233
Câu hỏi
What should a master service agreement define for data return and deletion?
Câu trả lời
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Thẻ 234
Câu hỏi
What is an environmental physical attack?
Câu trả lời
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Thẻ 235
Câu hỏi
When should a maintenance window be chosen?
Câu trả lời
When disruption and rollback can be managed with the least business impact.
Thẻ 236
Câu hỏi
What is memory injection?
Câu trả lời
Placing malicious code or data into another process's memory so it executes in that process's context.
Thẻ 237
Câu hỏi
What does software composition analysis find?
Câu trả lời
Known risks and license information in third-party dependencies.
Thẻ 238
Câu hỏi
What is DNS filtering?
Câu trả lời
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Thẻ 239
Câu hỏi
What should an incident response policy establish?
Câu trả lời
Authority, scope, reporting duties, and organizational commitment for incident handling.
Thẻ 240
Câu hỏi
How can noncompliance cause reputational damage?
Câu trả lời
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Thẻ 241
Câu hỏi
What does full-disk encryption protect?
Câu trả lời
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Thẻ 242
Câu hỏi
Why are default credentials dangerous?
Câu trả lời
They are widely known or easily discovered and often remain unchanged.
Thẻ 243
Câu hỏi
What makes a risk assessment one-time?
Câu trả lời
It evaluates a defined decision or scope once without an established repeating cadence.
Thẻ 244
Câu hỏi
What is a warm recovery site?
Câu trả lời
A partially equipped environment that needs some data restoration or configuration before use.
Thẻ 245
Câu hỏi
What does application input validation do?
Câu trả lời
It checks that input matches the expected type, length, range, and format before use.
Thẻ 246
Câu hỏi
What should an asset inventory record besides a device name?
Câu trả lời
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Thẻ 247
Câu hỏi
What is mandatory access control?
Câu trả lời
A central authority enforces access through labels and rules that ordinary owners cannot override.
Thẻ 248
Câu hỏi
What security benefit does infrastructure as code provide?
Câu trả lời
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Thẻ 249
Câu hỏi
When should a public service control fail closed?
Câu trả lời
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Thẻ 250
Câu hỏi
What should users do with a suspicious message?
Câu trả lời
Report it through the approved channel without interacting with its links or attachments.
Thẻ 251
Câu hỏi
What usually motivates organized cybercrime?
Câu trả lời
Financial gain through scalable or repeatable criminal activity.
Thẻ 252
Câu hỏi
How can malicious code support a network attack?
Câu trả lời
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Thẻ 253
Câu hỏi
When is virtual patching useful?
Câu trả lời
When a network or application control can block exploit traffic before the underlying system can be patched.
Thẻ 254
Câu hỏi
What does security-monitoring reporting provide?
Câu trả lời
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Thẻ 255
Câu hỏi
What does data geolocation identify?
Câu trả lời
The physical or legal location where data is stored, processed, or transmitted.
Thẻ 256
Câu hỏi
What does a zero-trust policy enforcement point do?
Câu trả lời
It enables, monitors, and terminates the connection between a subject and a resource.
Thẻ 257
Câu hỏi
What is cryptographic key exchange?
Câu trả lời
A method for parties to establish shared key material over an untrusted channel.
Thẻ 258
Câu hỏi
How can a vendor become a supply-chain attack vector?
Câu trả lời
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Thẻ 259
Câu hỏi
Why can legacy hardware remain vulnerable?
Câu trả lời
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Thẻ 260
Câu hỏi
What can proprietary vulnerability intelligence add beyond open sources?
Câu trả lời
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Thẻ 261
Câu hỏi
How does a centralized proxy apply web filtering?
Câu trả lời
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Thẻ 262
Câu hỏi
How can continuous integration and testing improve security automation?
Câu trả lời
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Thẻ 263
Câu hỏi
What is containment?
Câu trả lời
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Thẻ 264
Câu hỏi
What is a software development lifecycle policy meant to ensure?
Câu trả lời
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Thẻ 265
Câu hỏi
What makes risk assessment continuous?
Câu trả lời
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Thẻ 266
Câu hỏi
What is a memorandum of agreement?
Câu trả lời
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Thẻ 267
Câu hỏi
What makes a penetration test integrated?
Câu trả lời
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Thẻ 268
Câu hỏi
How does a DNS amplification attack magnify traffic?
Câu trả lời
It sends small spoofed queries that trigger larger replies toward the victim.
Thẻ 269
Câu hỏi
Why does ease of recovery matter in an architecture decision?
Câu trả lời
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Thẻ 270
Câu hỏi
What does 802.1X control before a device receives normal network access?
Câu trả lời
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Thẻ 271
Câu hỏi
What is rule-based access control?
Câu trả lời
System-wide rules grant or deny access based on conditions such as network, time, or action.
Thẻ 272
Câu hỏi
What is mobile device management?
Câu trả lời
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Thẻ 273
Câu hỏi
What tradeoff comes with a cold recovery site?
Câu trả lời
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Thẻ 274
Câu hỏi
Why identify stakeholders before approving a security-sensitive change?
Câu trả lời
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Thẻ 275
Câu hỏi
How do attestation and acknowledgement differ?
Câu trả lời
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Thẻ 276
Câu hỏi
What does zero-trust adaptive identity mean?
Câu trả lời
Access decisions adjust to current risk signals rather than relying only on a static login.
Thẻ 277
Câu hỏi
What makes a security control physical?
Câu trả lời
It protects facilities or equipment through a tangible barrier or mechanism.
Thẻ 278
Câu hỏi
What is geo-fencing for data?
Câu trả lời
Enforcing location-based boundaries on where data or services may be accessed or operated.
Thẻ 279
Câu hỏi
What does a Trusted Platform Module protect?
Câu trả lời
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Thẻ 280
Câu hỏi
Why can a managed service provider amplify risk?
Câu trả lời
Its privileged access and shared tooling can provide a path into many customers.
Thẻ 281
Câu hỏi
What does probability express in risk analysis?
Câu trả lời
A quantified chance that a defined event will occur within stated conditions or time.
Thẻ 282
Câu hỏi
Why can shadow IT create a threat?
Câu trả lời
It bypasses security review, inventory, monitoring, and supported configuration.
Thẻ 283
Câu hỏi
What is on-path interception?
Câu trả lời
An attacker positions between communicating parties to observe or alter traffic.
Thẻ 284
Câu hỏi
Why include encryption in a system-hardening baseline?
Câu trả lời
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Thẻ 285
Câu hỏi
Why tune security alerts?
Câu trả lời
To keep useful detections while reducing noise that wastes analyst attention.
Thẻ 286
Câu hỏi
What can IPS or IDS logs contribute to an investigation?
Câu trả lời
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Thẻ 287
Câu hỏi
What is VM escape?
Câu trả lời
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Thẻ 288
Câu hỏi
How can segmentation reduce vulnerability exposure before a patch is available?
Câu trả lời
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Thẻ 289
Câu hỏi
Why should firewall policy name the required ports and protocols explicitly?
Câu trả lời
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Thẻ 290
Câu hỏi
What is a change management policy meant to control?
Câu trả lời
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Thẻ 291
Câu hỏi
What is a hybrid-cloud architecture?
Câu trả lời
An environment that integrates private or on-premises resources with public cloud services.
Thẻ 292
Câu hỏi
How do AH and ESP differ in the security services they can provide?
Câu trả lời
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Thẻ 293
Câu hỏi
What makes user behavior risky?
Câu trả lời
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Thẻ 294
Câu hỏi
What is least privilege?
Câu trả lời
Granting only the access needed for the required task and no more.
Thẻ 295
Câu hỏi
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Câu trả lời
Transmission to HTTPS, script access, and cross-site sending, respectively.
Thẻ 296
Câu hỏi
Why discover unmanaged assets?
Câu trả lời
Unknown systems cannot be patched, monitored, or governed reliably.
Thẻ 297
Câu hỏi
What is a service-level agreement?
Câu trả lời
Measurable service commitments and remedies, such as availability or response targets.
Thẻ 298
Câu hỏi
What should govern automated security escalation?
Câu trả lời
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Thẻ 299
Câu hỏi
What is platform diversity as a resilience strategy?
Câu trả lời
Using different implementations so one common flaw or failure is less likely to affect every copy.
Thẻ 300
Câu hỏi
How can replayed session material affect an application?
Câu trả lời
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Thẻ 301
Câu hỏi
What is an implicit trust zone in zero trust?
Câu trả lời
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Thẻ 302
Câu hỏi
What does salting a password hash accomplish?
Câu trả lời
It makes identical passwords hash differently and defeats precomputed hash tables.
Thẻ 303
Câu hỏi
What is spear phishing?
Câu trả lời
Phishing tailored to a specific person, role, or organization.
Thẻ 304
Câu hỏi
What is eradication?
Câu trả lời
Removing the attacker's access, malicious artifacts, and exploited conditions.
Thẻ 305
Câu hỏi
Who is a risk owner?
Câu trả lời
The person accountable for deciding and monitoring how a specific risk is handled.
Thẻ 306
Câu hỏi
What does a partially known penetration-test environment provide?
Câu trả lời
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Thẻ 307
Câu hỏi
What is a microservices architecture?
Câu trả lời
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Thẻ 308
Câu hỏi
What is a jump server?
Câu trả lời
A hardened intermediary used to reach systems in a restricted management network.
Thẻ 309
Câu hỏi
What can happen when a configuration change is made without dependency analysis?
Câu trả lời
A downstream service can fail even when the changed component works.
Thẻ 310
Câu hỏi
What is resource reuse exposure?
Câu trả lời
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Thẻ 311
Câu hỏi
Why does financial information require explicit protection?
Câu trả lời
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Thẻ 312
Câu hỏi
What does CVE provide?
Câu trả lời
A common identifier for a publicly disclosed vulnerability.
Thẻ 313
Câu hỏi
Where can DLP controls operate?
Câu trả lời
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Thẻ 314
Câu hỏi
What does privileged password vaulting protect?
Câu trả lời
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Thẻ 315
Câu hỏi
What does an access-control standard define?
Câu trả lời
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Thẻ 316
Câu hỏi
How can automation support compliance monitoring?
Câu trả lời
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Thẻ 317
Câu hỏi
What does static code analysis examine?
Câu trả lời
Source or compiled code for weakness patterns without executing the application.
Thẻ 318
Câu hỏi
What actor attribute describes funding, time, and personnel?
Câu trả lời
Resources.
Thẻ 319
Câu hỏi
What is DNS poisoning?
Câu trả lời
Introducing false DNS data so names resolve to attacker-chosen destinations.
Thẻ 320
Câu hỏi
Why change default credentials during hardening?
Câu trả lời
Default secrets are predictable and commonly targeted.
Thẻ 321
Câu hỏi
What does quarantine do after a security alert?
Câu trả lời
It restricts a suspected asset or object while analysts validate and remediate the risk.
Thẻ 322
Câu hỏi
What does key stretching do for stored passwords?
Câu trả lời
It deliberately makes each password guess more computationally expensive.
Thẻ 323
Câu hỏi
What is smishing?
Câu trả lời
Phishing delivered through SMS or another text-messaging service.
Thẻ 324
Câu hỏi
What is qualitative risk analysis?
Câu trả lời
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Thẻ 325
Câu hỏi
What is a master service agreement?
Câu trả lời
An umbrella contract establishing general legal and commercial terms for ongoing work.
Thẻ 326
Câu hỏi
What is threat scope reduction?
Câu trả lời
Narrowing the systems, privileges, or paths an attacker can reach.
Thẻ 327
Câu hỏi
Why use a third-party cloud service instead of building locally?
Câu trả lời
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Thẻ 328
Câu hỏi
What should determine security-device placement?
Câu trả lời
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Thẻ 329
Câu hỏi
What does situational awareness mean for a user?
Câu trả lời
Notice the people, devices, requests, location, and context around a task before acting.
Thẻ 330
Câu hỏi
What does a failover test validate?
Câu trả lời
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Thẻ 331
Câu hỏi
What is a preventive control meant to do?
Câu trả lời
Stop an unwanted event before it succeeds.
Thẻ 332
Câu hỏi
What is just-in-time privileged access?
Câu trả lời
Elevated access is granted only when needed and expires after a short approved period.
Thẻ 333
Câu hỏi
What safeguard should security-group automation enforce?
Câu trả lời
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Thẻ 334
Câu hỏi
How does a reflected DDoS attack hide and multiply sources?
Câu trả lời
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Thẻ 335
Câu hỏi
What is a security misconfiguration?
Câu trả lời
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Thẻ 336
Câu hỏi
Why can the same vulnerability have different organizational impact?
Câu trả lời
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Thẻ 337
Câu hỏi
What does URL scanning evaluate before a user opens a web destination?
Câu trả lời
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Thẻ 338
Câu hỏi
What is the board's security governance role?
Câu trả lời
Provide oversight, set risk direction, and hold executives accountable.
Thẻ 339
Câu hỏi
What does code signing establish?
Câu trả lời
That code came from the holder of the signing key and has not changed since signing.
Thẻ 340
Câu hỏi
How should an asset's classification affect security operations?
Câu trả lời
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Thẻ 341
Câu hỏi
How does encryption protect data?
Câu trả lời
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Thẻ 342
Câu hỏi
What is a secure enclave?
Câu trả lời
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Thẻ 343
Câu hỏi
What is business email compromise?
Câu trả lời
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Thẻ 344
Câu hỏi
What is recovery in incident response?
Câu trả lời
Restoring services safely, monitoring them, and returning to normal operations.
Thẻ 345
Câu hỏi
How is single loss expectancy commonly estimated?
Câu trả lời
Asset value multiplied by the exposure factor.
Thẻ 346
Câu hỏi
What does an unknown penetration-test environment provide?
Câu trả lời
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Thẻ 347
Câu hỏi
What security boundary does a hypervisor provide?
Câu trả lời
It isolates virtual machines while controlling their access to shared hardware.
Thẻ 348
Câu hỏi
Why does a TLS tunnel not protect a compromised endpoint?
Câu trả lời
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Thẻ 349
Câu hỏi
Why update diagrams after an infrastructure change?
Câu trả lời
Operations and incident responders need the documentation to match the deployed environment.
Thẻ 350
Câu hỏi
What does privacy ownership assign?
Câu trả lời
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Thẻ 351
Câu hỏi
What does a security control gap analysis compare?
Câu trả lời
The controls required for the target state with the controls currently in place.
Thẻ 352
Câu hỏi
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Câu trả lời
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Thẻ 353
Câu hỏi
What is application privilege escalation?
Câu trả lời
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Thẻ 354
Câu hỏi
What risk remains when unnecessary software is left installed?
Câu trả lời
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Thẻ 355
Câu hỏi
What does SCAP standardize?
Câu trả lời
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Thẻ 356
Câu hỏi
What can packet capture reveal?
Câu trả lời
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Thẻ 357
Câu hỏi
What makes a privileged credential ephemeral?
Câu trả lời
It is created for a limited task or session and expires or is destroyed automatically after that use.
Thẻ 358
Câu hỏi
How do a statement of work and a work order differ?
Câu trả lời
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Thẻ 359
Câu hỏi
Why might multi-cloud improve resilience?
Câu trả lời
A provider-wide failure need not stop workloads that can run independently elsewhere.
Thẻ 360
Câu hỏi
How can a service provider introduce a supply-chain vulnerability?
Câu trả lời
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Thẻ 361
Câu hỏi
What is a false positive in vulnerability scanning?
Câu trả lời
A reported weakness that is not actually present or exploitable in the assessed context.
Thẻ 362
Câu hỏi
How do EDR and XDR differ?
Câu trả lời
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Thẻ 363
Câu hỏi
What should onboarding and offboarding procedures coordinate?
Câu trả lời
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Thẻ 364
Câu hỏi
How should an organization harden managed mobile devices?
Câu trả lời
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Thẻ 365
Câu hỏi
What is a certificate signing request?
Câu trả lời
A request containing a public key and subject information for a certificate authority to sign.
Thẻ 366
Câu hỏi
What is pretexting?
Câu trả lời
Using a fabricated role or situation to make a request seem legitimate.
Thẻ 367
Câu hỏi
How is annualized loss expectancy commonly estimated?
Câu trả lời
Single loss expectancy multiplied by annualized rate of occurrence.
Thẻ 368
Câu hỏi
What security consequence follows from containers sharing a kernel?
Câu trả lời
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Thẻ 369
Câu hỏi
Where does 802.1X enforce a network admission decision?
Câu trả lời
At the controlled switch port or wireless access point before normal network access is granted.
Thẻ 370
Câu hỏi
What should insider-threat awareness teach?
Câu trả lời
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Thẻ 371
Câu hỏi
What access action is suitable for careful automation?
Câu trả lời
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Thẻ 372
Câu hỏi
What is an evil twin?
Câu trả lời
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 thẻ
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Học bộ thẻ này miễn phí
Nibomo sẽ mở ra để bạn bắt đầu học.
Thẻ 373
Câu hỏi
Does non-human-readable data need less protection?
Câu trả lời
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Thẻ 374
Câu hỏi
What does authenticating a system establish?
Câu trả lời
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Thẻ 375
Câu hỏi
What does LDAP provide in identity systems?
Câu trả lời
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Thẻ 376
Câu hỏi
What is a deterrent control meant to do?
Câu trả lời
Discourage an attacker from attempting an unwanted action.
Thẻ 377
Câu hỏi
Why update procedures after changing a security control?
Câu trả lời
Staff need accurate steps for operating, monitoring, and recovering the new control.
Thẻ 378
Câu hỏi
How does OCSP differ from a certificate revocation list?
Câu trả lời
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Thẻ 379
Câu hỏi
What is the goal of data exfiltration?
Câu trả lời
Remove data from its authorized environment without permission.
Thẻ 380
Câu hỏi
What is a watering-hole attack?
Câu trả lời
Compromising a site frequented by the intended targets so their visits expose them.
Thẻ 381
Câu hỏi
How can a hardware provider introduce a supply-chain vulnerability?
Câu trả lời
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Thẻ 382
Câu hỏi
What is application forgery?
Câu trả lời
Creating or altering a request, token, or object so the application treats it as authentic.
Thẻ 383
Câu hỏi
How does least privilege mitigate compromise?
Câu trả lời
It limits the actions and resources available to a compromised account or process.
Thẻ 384
Câu hỏi
What is serverless computing?
Câu trả lời
A model where the provider manages servers and the customer deploys event-driven code or functions.
Thẻ 385
Câu hỏi
What makes an infrastructure control effective for a specific risk?
Câu trả lời
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Thẻ 386
Câu hỏi
What does parallel recovery processing test?
Câu trả lời
Whether primary and alternate environments can run together consistently before a controlled cutover.
Thẻ 387
Câu hỏi
Which password-authentication method does WPA3-Personal use?
Câu trả lời
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Thẻ 388
Câu hỏi
How does data retention affect asset disposal?
Câu trả lời
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Thẻ 389
Câu hỏi
What is a false negative in vulnerability scanning?
Câu trả lời
A real weakness that the assessment fails to report.
Thẻ 390
Câu hỏi
What does recurring security scanning add to monitoring?
Câu trả lời
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Thẻ 391
Câu hỏi
What should guide port selection for a secure protocol?
Câu trả lời
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Thẻ 392
Câu hỏi
What does forensic acquisition create?
Câu trả lời
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Thẻ 393
Câu hỏi
How do system owners and data owners divide security accountability?
Câu trả lời
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Thẻ 394
Câu hỏi
What does likelihood express in risk analysis?
Câu trả lời
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Thẻ 395
Câu hỏi
What is a memorandum of understanding?
Câu trả lời
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Thẻ 396
Câu hỏi
What does the right to be forgotten generally require?
Câu trả lời
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Thẻ 397
Câu hỏi
What does an audit committee oversee?
Câu trả lời
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Thẻ 398
Câu hỏi
What does identity interoperability require?
Câu trả lời
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Thẻ 399
Câu hỏi
How does a bollard protect a facility?
Câu trả lời
It blocks or redirects vehicles before they can reach a protected area.
Thẻ 400
Câu hỏi
How can hashing protect a downloaded file?
Câu trả lời
A trusted digest lets the recipient detect whether the file changed.
Thẻ 401
Câu hỏi
What is a credential replay attack?
Câu trả lời
Using captured valid credentials or tokens again without needing to discover the secret.
Thẻ 402
Câu hỏi
How can automation complexity create security risk?
Câu trả lời
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Thẻ 403
Câu hỏi
What must an architecture provide when a component cannot be patched?
Câu trả lời
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Thẻ 404
Câu hỏi
What makes remote access secure?
Câu trả lời
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Thẻ 405
Câu hỏi
What should users verify before connecting removable media or a cable?
Câu trả lời
That the device and connection are approved, expected, and handled under organizational policy.
Thẻ 406
Câu hỏi
What is a self-signed certificate?
Câu trả lời
A certificate signed by its own private key rather than by a separate trusted issuer.
Thẻ 407
Câu hỏi
What is brand impersonation?
Câu trả lời
Using a trusted organization's identity or look to deceive people.
Thẻ 408
Câu hỏi
What characterizes a conservative risk appetite?
Câu trả lời
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Thẻ 409
Câu hỏi
What should a managed mobile device verify before using Wi-Fi?
Câu trả lời
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Thẻ 410
Câu hỏi
What is a zero-day vulnerability?
Câu trả lời
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Thẻ 411
Câu hỏi
What does verification confirm after vulnerability remediation?
Câu trả lời
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Thẻ 412
Câu hỏi
What is user and entity behavior analytics?
Câu trả lời
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Thẻ 413
Câu hỏi
What does a physical security policy establish?
Câu trả lời
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Thẻ 414
Câu hỏi
What does a UPS provide?
Câu trả lời
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Thẻ 415
Câu hỏi
What is a nondisclosure agreement?
Câu trả lời
A contract restricting use and disclosure of defined confidential information.
Thẻ 416
Câu hỏi
What should be checked before assigning a user permission?
Câu trả lời
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Thẻ 417
Câu hỏi
How does espionage differ from ordinary theft?
Câu trả lời
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Thẻ 418
Câu hỏi
What is password spraying?
Câu trả lời
Trying a small set of common passwords across many accounts to avoid lockouts.
Thẻ 419
Câu hỏi
What is the purpose of system isolation during an incident?
Câu trả lời
Stop harmful communication while preserving the system for response and investigation.
Thẻ 420
Câu hỏi
What is a security benchmark?
Câu trả lời
A documented set of recommended configuration checks for a platform or product.
Thẻ 421
Câu hỏi
Which metadata fields give a log record investigative context?
Câu trả lời
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Thẻ 422
Câu hỏi
What does an access-control vestibule prevent?
Câu trả lời
It limits tailgating by allowing controlled passage through one door at a time.
Thẻ 423
Câu hỏi
What is version control's security value for configuration?
Câu trả lời
It preserves attributable history and enables review or rollback of changes.
Thẻ 424
Câu hỏi
Why use both internal and external compliance monitoring?
Câu trả lời
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Thẻ 425
Câu hỏi
What distinguishes on-premises architecture?
Câu trả lời
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Thẻ 426
Câu hỏi
What risk can split tunneling add to a VPN?
Câu trả lời
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Thẻ 427
Câu hỏi
What is a certificate root of trust?
Câu trả lời
A trusted root certificate or key from which a client validates a certificate chain.
Thẻ 428
Câu hỏi
What is typosquatting?
Câu trả lời
Registering a look-alike domain based on common typing errors or visual similarity.
Thẻ 429
Câu hỏi
What is root-cause analysis?
Câu trả lời
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Thẻ 430
Câu hỏi
What is risk tolerance?
Câu trả lời
The acceptable variation or boundary around a specific objective or risk area.
Thẻ 431
Câu hỏi
What is a security self-assessment?
Câu trả lời
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Thẻ 432
Câu hỏi
What does data masking change?
Câu trả lời
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Thẻ 433
Câu hỏi
How do wireless authentication protocols let clients prove identity securely?
Câu trả lời
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Thẻ 434
Câu hỏi
Why reconcile inventory with network discovery?
Câu trả lời
Differences expose missing records, retired systems, or unauthorized devices.
Thẻ 435
Câu hỏi
Why does sideloading raise mobile risk?
Câu trả lời
It can bypass store review, signing policy, and managed application controls.
Thẻ 436
Câu hỏi
What does an information-sharing organization add to vulnerability management?
Câu trả lời
Sector or community intelligence about relevant threats, incidents, and defensive action.
Thẻ 437
Câu hỏi
What does a web-filter block rule specify?
Câu trả lời
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Thẻ 438
Câu hỏi
How do data custodians and data stewards differ?
Câu trả lời
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Thẻ 439
Câu hỏi
What is a brute-force password attack?
Câu trả lời
Systematically trying many candidate secrets against an account or protected value.
Thẻ 440
Câu hỏi
What is a compensating control?
Câu trả lời
An alternative safeguard used when the preferred control is impractical or unavailable.
Thẻ 441
Câu hỏi
How can location act as an authentication factor?
Câu trả lời
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Thẻ 442
Câu hỏi
Why must security automation remain supportable?
Câu trả lời
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Thẻ 443
Câu hỏi
What does a standby generator provide?
Câu trả lời
Longer-duration power during a utility outage, after a startup delay.
Thẻ 444
Câu hỏi
What makes an architecture air-gapped?
Câu trả lời
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Thẻ 445
Câu hỏi
What is a software-defined WAN?
Câu trả lời
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Thẻ 446
Câu hỏi
What password-management behavior should awareness training reinforce?
Câu trả lời
Use unique long passwords through an approved manager and report suspected compromise promptly.
Thẻ 447
Câu hỏi
What security value does fencing provide?
Câu trả lời
It defines and delays entry across a physical perimeter.
Thẻ 448
Câu hỏi
What is a wildcard certificate?
Câu trả lời
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Thẻ 449
Câu hỏi
How does misinformation differ from disinformation?
Câu trả lời
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Thẻ 450
Câu hỏi
What is a risk threshold?
Câu trả lời
A defined level that triggers escalation, treatment, or another required response.
Thẻ 451
Câu hỏi
What does a vendor penetration test contribute to assessment?
Câu trả lời
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Thẻ 452
Câu hỏi
What is the objective of a service-disruption attack?
Câu trả lời
Make a system or business function unavailable or unreliable.
Thẻ 453
Câu hỏi
What is directory traversal?
Câu trả lời
Manipulating a file path to reach files outside the directory the application intended to expose.
Thẻ 454
Câu hỏi
Why decommission an unsupported system?
Câu trả lời
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Thẻ 455
Câu hỏi
Why archive security-monitoring data?
Câu trả lời
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Thẻ 456
Câu hỏi
What role does RADIUS commonly play in enterprise Wi-Fi?
Câu trả lời
It centralizes authentication, authorization information, and accounting for network access.
Thẻ 457
Câu hỏi
Why separate the requester and approver of a high-risk change?
Câu trả lời
To reduce error, fraud, and unilateral unauthorized modification.
Thẻ 458
Câu hỏi
Why can a jailbroken device violate a security baseline?
Câu trả lời
It weakens platform isolation and allows unapproved privileged changes.
Thẻ 459
Câu hỏi
When is tokenization especially useful?
Câu trả lời
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Thẻ 460
Câu hỏi
Why can dark-web intelligence affect vulnerability priority?
Câu trả lời
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Thẻ 461
Câu hỏi
What firewall policy should govern traffic from a screened subnet to internal systems?
Câu trả lời
Deny it by default and allow only explicitly required flows.
Thẻ 462
Câu hỏi
What does SAML commonly carry?
Câu trả lời
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Thẻ 463
Câu hỏi
What does a security governance committee do?
Câu trả lời
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Thẻ 464
Câu hỏi
How can global privacy requirements affect one data process?
Câu trả lời
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Thẻ 465
Câu hỏi
What characterizes an IoT device?
Câu trả lời
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Thẻ 466
Câu hỏi
What is a unified threat management appliance?
Câu trả lời
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Thẻ 467
Câu hỏi
What does a hardware security module provide?
Câu trả lời
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Thẻ 468
Câu hỏi
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Câu trả lời
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Thẻ 469
Câu hỏi
What is a tabletop exercise?
Câu trả lời
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Thẻ 470
Câu hỏi
What does a risk exemption authorize?
Câu trả lời
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Thẻ 471
Câu hỏi
What is a regulatory examination?
Câu trả lời
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Thẻ 472
Câu hỏi
What does physical video surveillance primarily provide?
Câu trả lời
Detection and evidence of activity in monitored areas.
Thẻ 473
Câu hỏi
What is a birthday attack against a hash?
Câu trả lời
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Thẻ 474
Câu hỏi
Why keep backups both onsite and offsite?
Câu trả lời
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Thẻ 475
Câu hỏi
How does technical debt affect security automation?
Câu trả lời
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Thẻ 476
Câu hỏi
What should switch hardening restrict first?
Câu trả lời
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Thẻ 477
Câu hỏi
What should happen when an asset changes owners?
Câu trả lời
Inventory, access, support responsibility, and data handling should be updated.
Thẻ 478
Câu hỏi
What does evidence of a vendor's internal audits contribute?
Câu trả lời
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Thẻ 479
Câu hỏi
What is identity attestation?
Câu trả lời
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Thẻ 480
Câu hỏi
Why can standard enterprise patching be unsafe for an RTOS device?
Câu trả lời
A change can disrupt timing guarantees or certified operational behavior.
Thẻ 481
Câu hỏi
What is secure access service edge?
Câu trả lời
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Thẻ 482
Câu hỏi
What social-engineering habit should awareness training reinforce?
Câu trả lời
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Thẻ 483
Câu hỏi
How can a software provider introduce a supply-chain vulnerability?
Câu trả lời
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Thẻ 484
Câu hỏi
Why include internet exposure in remediation priority?
Câu trả lời
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Thẻ 485
Câu hỏi
What does a mail gateway inspect?
Câu trả lời
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Thẻ 486
Câu hỏi
What is a data controller?
Câu trả lời
The entity that determines why and how personal data is processed.
Thẻ 487
Câu hỏi
How does blackmail motivate a cyberattack?
Câu trả lời
The attacker threatens disclosure or harm unless the victim complies.
Thẻ 488
Câu hỏi
What is a downgrade attack?
Câu trả lời
Forcing parties to use an older or weaker protocol or security mode.
Thẻ 489
Câu hỏi
How does encryption mitigate data exposure?
Câu trả lời
It makes captured data unreadable without the required key.
Thẻ 490
Câu hỏi
How do network and web vulnerability scanners differ?
Câu trả lời
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Thẻ 491
Câu hỏi
How can vulnerability-scan data support an investigation?
Câu trả lời
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Thẻ 492
Câu hỏi
What is key escrow?
Câu trả lời
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Thẻ 493
Câu hỏi
Which human vector commonly uses a fake sign-in page to harvest credentials?
Câu trả lời
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Thẻ 494
Câu hỏi
What is risk avoidance?
Câu trả lời
Stopping or not starting the activity that creates the risk.
Thẻ 495
Câu hỏi
What is data obfuscation?
Câu trả lời
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Thẻ 496
Câu hỏi
What is a directive control?
Câu trả lời
A safeguard that tells people what behavior or action is required.
Thẻ 497
Câu hỏi
What does a security guard add that a camera cannot?
Câu trả lời
Human judgment and an immediate physical response.
Thẻ 498
Câu hỏi
Why define restricted activities in change management?
Câu trả lời
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Thẻ 499
Câu hỏi
What contractual impact can noncompliance create?
Câu trả lời
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Thẻ 500
Câu hỏi
What should determine backup frequency?
Câu trả lời
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Thẻ 501
Câu hỏi
What should router hardening protect?
Câu trả lời
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Thẻ 502
Câu hỏi
What problem does OAuth 2.0 address?
Câu trả lời
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Thẻ 503
Câu hỏi
What does SCADA do?
Câu trả lời
It provides supervisory monitoring and control across distributed industrial equipment.
Thẻ 504
Câu hỏi
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Câu trả lời
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Thẻ 505
Câu hỏi
What distinguishes a computer virus?
Câu trả lời
It attaches to a host file or program and spreads when that infected host executes or is shared.
Thẻ 506
Câu hỏi
What does a key management system coordinate?
Câu trả lời
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Thẻ 507
Câu hỏi
How can an unsecure wired network expose traffic?
Câu trả lời
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Thẻ 508
Câu hỏi
Why is vulnerable device firmware hard to remediate?
Câu trả lời
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Thẻ 509
Câu hỏi
What does patching change in vulnerability remediation?
Câu trả lời
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Thẻ 510
Câu hỏi
What does DMARC add to SPF and DKIM?
Câu trả lời
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Thẻ 511
Câu hỏi
How does automation improve security efficiency?
Câu trả lời
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Thẻ 512
Câu hỏi
What is a simulation exercise?
Câu trả lời
A more realistic practice in which participants respond to injected events using operational processes.
Thẻ 513
Câu hỏi
What is a data processor?
Câu trả lời
An entity that processes personal data on behalf of a controller.
Thẻ 514
Câu hỏi
What is risk mitigation?
Câu trả lời
Reducing likelihood, impact, or both through controls or process changes.
Thẻ 515
Câu hỏi
Why monitor a vendor after onboarding?
Câu trả lời
Security posture, ownership, services, incidents, and dependencies can change.
Thẻ 516
Câu hỏi
What does a physical penetration test assess?
Câu trả lời
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Thẻ 517
Câu hỏi
Why use access badges at a facility?
Câu trả lời
To associate entry attempts with authorized identities and enforce access rules.
Thẻ 518
Câu hỏi
How does permission restriction protect data?
Câu trả lời
Only authorized identities receive the actions and scope their roles require.
Thẻ 519
Câu hỏi
What is the usual objective of ransomware extortion?
Câu trả lời
Force payment by denying access, threatening disclosure, or both.
Thẻ 520
Câu hỏi
What does impossible travel indicate?
Câu trả lời
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Thẻ 521
Câu hỏi
What is configuration enforcement?
Câu trả lời
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Thẻ 522
Câu hỏi
What does a web vulnerability scanner inspect?
Câu trả lời
Running web behavior for issues such as unsafe input handling and insecure configuration.
Thẻ 523
Câu hỏi
How does cost affect an architecture choice?
Câu trả lời
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Thẻ 524
Câu hỏi
What does EAP provide with 802.1X?
Câu trả lời
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Thẻ 525
Câu hỏi
What should operational-security training help users protect?
Câu trả lời
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Thẻ 526
Câu hỏi
What does a time-of-day access rule do?
Câu trả lời
Allows or denies a requested action according to an approved schedule.
Thẻ 527
Câu hỏi
What should cloud infrastructure hardening establish?
Câu trả lời
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Thẻ 528
Câu hỏi
What should an asset owner ensure during offboarding?
Câu trả lời
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Thẻ 529
Câu hỏi
Why encrypt backups?
Câu trả lời
Backup media and transfers can expose the same sensitive data as production systems.
Thẻ 530
Câu hỏi
What is steganography?
Câu trả lời
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Thẻ 531
Câu hỏi
Which human vector uses a fabricated authority role to justify a sensitive request?
Câu trả lời
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Thẻ 532
Câu hỏi
Why does risk transfer not remove accountability?
Câu trả lời
The organization can retain legal, reputational, operational, and oversight consequences.
Thẻ 533
Câu hỏi
Why validate a change after deployment?
Câu trả lời
To confirm the intended result occurred without introducing unacceptable side effects.
Thẻ 534
Câu hỏi
What makes end-of-life hardware a security vulnerability?
Câu trả lời
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Thẻ 535
Câu hỏi
What does an audit add to remediation validation?
Câu trả lời
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Thẻ 536
Câu hỏi
Why can SPF pass while a message still impersonates a brand?
Câu trả lời
SPF checks the envelope domain, which may differ from the visible From domain.
Thẻ 537
Câu hỏi
What role can a government entity have in security governance?
Câu trả lời
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Thẻ 538
Câu hỏi
How do data inventory and retention support privacy governance?
Câu trả lời
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Thẻ 539
Câu hỏi
What can concurrent sessions from distant regions indicate?
Câu trả lời
A stolen account or shared credential, subject to VPN and proxy context.
Thẻ 540
Câu hỏi
What does supply-chain analysis examine?
Câu trả lời
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Thẻ 541
Câu hỏi
What is the purpose of facility lighting as a control?
Câu trả lời
Deter covert activity and improve observation of people and areas.
Thẻ 542
Câu hỏi
What architecture quality keeps a service usable during component failure?
Câu trả lời
Availability.
Thẻ 543
Câu hỏi
When is fail-open behavior preferable to fail-closed behavior?
Câu trả lời
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Thẻ 544
Câu hỏi
Which control function does a login-failure alert provide?
Câu trả lời
Detection; it reveals suspicious authentication activity.
Thẻ 545
Câu hỏi
What does a biometric MFA implementation verify?
Câu trả lời
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Thẻ 546
Câu hỏi
How can automation enforce a security baseline?
Câu trả lời
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Thẻ 547
Câu hỏi
How do wireless cryptographic protocols protect network traffic?
Câu trả lời
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Thẻ 548
Câu hỏi
Why segment sensitive data stores?
Câu trả lời
It limits reachable paths and separates them from lower-trust workloads.
Thẻ 549
Câu hỏi
What must remain secret in an asymmetric key pair?
Câu trả lời
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Thẻ 550
Câu hỏi
How can a supplier become a supply-chain attack vector?
Câu trả lời
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Thẻ 551
Câu hỏi
What is e-discovery?
Câu trả lời
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Thẻ 552
Câu hỏi
What characterizes a neutral risk appetite?
Câu trả lời
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Thẻ 553
Câu hỏi
What is passive reconnaissance?
Câu trả lời
Gathering information without directly interacting with the target's systems.
Thẻ 554
Câu hỏi
What does a philosophical motive mean for a threat actor?
Câu trả lời
The actor acts to advance a belief or moral position rather than primarily for money.
Thẻ 555
Câu hỏi
What does unexpected resource consumption indicate?
Câu trả lời
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Thẻ 556
Câu hỏi
What does a host-based intrusion prevention system do?
Câu trả lời
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Thẻ 557
Câu hỏi
How does agent-based monitoring differ from agentless monitoring?
Câu trả lời
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Thẻ 558
Câu hỏi
What can network logs contribute to an investigation?
Câu trả lời
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Thẻ 559
Câu hỏi
What is the purpose of a backup restore test?
Câu trả lời
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Thẻ 560
Câu hỏi
Why can obsolete hardware become a security risk?
Câu trả lời
It may lack supported firmware, modern protections, or replacement parts.
Thẻ 561
Câu hỏi
What does rescanning confirm after remediation?
Câu trả lời
Whether the scanner can still detect the original finding on the affected asset.
Thẻ 562
Câu hỏi
What should a secure transport method provide?
Câu trả lời
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Thẻ 563
Câu hỏi
How can law affect security governance?
Câu trả lời
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Thẻ 564
Câu hỏi
What does resilience mean for a security architecture?
Câu trả lời
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Thẻ 565
Câu hỏi
Why minimize an infrastructure's attack surface?
Câu trả lời
Fewer exposed services and paths leave fewer opportunities for exploitation.
Thẻ 566
Câu hỏi
What does executing a security-awareness program require?
Câu trả lời
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Thẻ 567
Câu hỏi
What does an infrared security sensor detect?
Câu trả lời
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Thẻ 568
Câu hỏi
What is a knowledge factor?
Câu trả lời
Something the claimant knows, such as a password.
Thẻ 569
Câu hỏi
Why review allow-list and deny-list impact before a change?
Câu trả lời
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Thẻ 570
Câu hỏi
What does partition-level encryption protect?
Câu trả lời
One selected disk partition, leaving other partitions outside that encryption boundary.
Thẻ 571
Câu hỏi
How can instant messaging deliver a security attack?
Câu trả lời
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Thẻ 572
Câu hỏi
What can repeated blocked-content events indicate?
Câu trả lời
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Thẻ 573
Câu hỏi
What should a server-hardening baseline reduce?
Câu trả lời
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Thẻ 574
Câu hỏi
When is physical media destruction appropriate?
Câu trả lời
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Thẻ 575
Câu hỏi
What is mean time to repair?
Câu trả lời
The average time required to restore a failed component or service.
Thẻ 576
Câu hỏi
Why disclose conflicts of interest during vendor selection?
Câu trả lời
A personal or financial relationship can bias evaluation away from the organization's requirements.
Thẻ 577
Câu hỏi
What is a fine for noncompliance?
Câu trả lời
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Thẻ 578
Câu hỏi
What does a public data classification authorize?
Câu trả lời
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Thẻ 579
Câu hỏi
What security benefit comes from standard infrastructure configurations?
Câu trả lời
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Thẻ 580
Câu hỏi
How does horizontal scaling increase capacity?
Câu trả lời
It adds more service instances and distributes work among them.
Thẻ 581
Câu hỏi
Why can added connectivity weaken segmentation?
Câu trả lời
Each allowed path can become a route for lateral movement or data escape.
Thẻ 582
Câu hỏi
What coding practice is central to preventing SQL injection?
Câu trả lời
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Thẻ 583
Câu hỏi
When is a compensating control appropriate for a vulnerability?
Câu trả lời
When timely removal or patching is infeasible and another control can reduce the risk.
Thẻ 584
Câu hỏi
How does agent-based web filtering enforce policy?
Câu trả lời
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Thẻ 585
Câu hỏi
How can regulation differ from an internal policy?
Câu trả lời
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Thẻ 586
Câu hỏi
What is a storage snapshot?
Câu trả lời
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Thẻ 587
Câu hỏi
What does password age measure?
Câu trả lời
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Thẻ 588
Câu hỏi
What does an ethical motive mean in vulnerability research?
Câu trả lời
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Thẻ 589
Câu hỏi
What can missing security logs indicate?
Câu trả lời
Logging failure, tampering, retention misconfiguration, or an inactive source.
Thẻ 590
Câu hỏi
Why disable unused ports and protocols?
Câu trả lời
They expose unnecessary communication paths and code that attackers can reach.
Thẻ 591
Câu hỏi
What does antivirus contribute to monitoring?
Câu trả lời
It scans files, memory, or behavior and reports suspected malicious code.
Thẻ 592
Câu hỏi
What is a honeypot?
Câu trả lời
A decoy system or service designed to attract and observe malicious activity.
Thẻ 593
Câu hỏi
What does file-level encryption protect?
Câu trả lời
Selected files independently of whether the rest of the disk or volume is encrypted.
Thẻ 594
Câu hỏi
How can SMS deliver a security attack?
Câu trả lời
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Thẻ 595
Câu hỏi
What happens during incident analysis?
Câu trả lời
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Thẻ 596
Câu hỏi
What is mean time between failures?
Câu trả lời
The average operating time between repairable failures.
Thẻ 597
Câu hỏi
What is active reconnaissance?
Câu trả lời
Probing or interacting with target systems to discover services and behavior.
Thẻ 598
Câu hỏi
What constraint should guide ICS or SCADA hardening?
Câu trả lời
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Thẻ 599
Câu hỏi
Which control function does restoring a clean system image provide?
Câu trả lời
Correction; it returns the system to a known-good state.
Thẻ 600
Câu hỏi
What does responsiveness mean in an architecture decision?
Câu trả lời
How quickly the system and its operators can adapt to demand, failure, or attack.
Thẻ 601
Câu hỏi
How does out-of-band access strengthen remote administration?
Câu trả lời
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Thẻ 602
Câu hỏi
What makes user behavior unexpected?
Câu trả lời
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Thẻ 603
Câu hỏi
What is a work order?
Câu trả lời
A document authorizing a defined unit of work under an existing agreement.
Thẻ 604
Câu hỏi
What can out-of-cycle logging indicate?
Câu trả lời
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Thẻ 605
Câu hỏi
Why update a standard operating procedure after a change?
Câu trả lời
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Thẻ 606
Câu hỏi
What coding practice limits cross-site scripting?
Câu trả lời
Context-appropriate output encoding, supported by safe templating and input handling.
Thẻ 607
Câu hỏi
What does a restricted data classification indicate?
Câu trả lời
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Thẻ 608
Câu hỏi
How does a bug bounty support responsible disclosure?
Câu trả lời
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Thẻ 609
Câu hỏi
What does web-filter content categorization provide?
Câu trả lời
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Thẻ 610
Câu hỏi
How do hard and soft authentication tokens differ?
Câu trả lời
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Thẻ 611
Câu hỏi
How can industry requirements affect security governance?
Câu trả lời
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Thẻ 612
Câu hỏi
How can noncompliance cause loss of a license?
Câu trả lời
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Thẻ 613
Câu hỏi
What does volume-level encryption protect?
Câu trả lời
All data within a selected logical storage volume.
Thẻ 614
Câu hỏi
How can impersonation exploit familiarity?
Câu trả lời
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Thẻ 615
Câu hỏi
How does RTO guide recovery design?
Câu trả lời
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Thẻ 616
Câu hỏi
What is a honeynet?
Câu trả lời
A network of decoy systems used to study or divert attackers.
Thẻ 617
Câu hỏi
What does backup replication provide?
Câu trả lời
Additional synchronized or copied recovery data in another system or location.
Thẻ 618
Câu hỏi
What lets automation scale securely?
Câu trả lời
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Thẻ 619
Câu hỏi
Why monitor a hardened computing resource continuously?
Câu trả lời
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Thẻ 620
Câu hỏi
Why keep a certificate of destruction?
Câu trả lời
It documents that a disposal provider handled specified media under the agreed process.
Thẻ 621
Câu hỏi
Why consider patch availability before selecting a platform?
Câu trả lời
Unsupported or difficult-to-update components accumulate known exposure.
Thẻ 622
Câu hỏi
Why should remote administration use an encrypted, authenticated protocol?
Câu trả lời
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Thẻ 623
Câu hỏi
How can revenge motivate an insider incident?
Câu trả lời
A disgruntled person may damage systems or disclose data to punish the organization.
Thẻ 624
Câu hỏi
What is a published or documented indicator of malicious activity?
Câu trả lời
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Thẻ 625
Câu hỏi
Why monitor a system more closely when a mitigation exception is accepted?
Câu trả lời
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Thẻ 626
Câu hỏi
What is an SNMP trap?
Câu trả lời
An unsolicited device notification sent to a management system when a configured event occurs.
Thẻ 627
Câu hỏi
How can an automated report support an investigation?
Câu trả lời
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Thẻ 628
Câu hỏi
What is a security key?
Câu trả lời
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Thẻ 629
Câu hỏi
What does database-level encryption protect?
Câu trả lời
A database or selected database structures through controls managed at the database layer.
Thẻ 630
Câu hỏi
How does brand impersonation exploit trust?
Câu trả lời
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Thẻ 631
Câu hỏi
What browser-side impact can a cross-site scripting vulnerability create?
Câu trả lời
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Thẻ 632
Câu hỏi
How can a system or process audit identify vulnerabilities?
Câu trả lời
It compares evidence with required configuration and procedure to reveal control gaps.
Thẻ 633
Câu hỏi
What security role can Group Policy provide?
Câu trả lời
Centralized Windows configuration of account, application, audit, and system security settings.
Thẻ 634
Câu hỏi
What should incident-response training prepare people to do?
Câu trả lời
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Thẻ 635
Câu hỏi
Why must governance track local or regional requirements?
Câu trả lời
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Thẻ 636
Câu hỏi
How can a dependency become a useful key risk indicator?
Câu trả lời
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Thẻ 637
Câu hỏi
What is a business partners agreement?
Câu trả lời
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Thẻ 638
Câu hỏi
What makes an audit regulatory?
Câu trả lời
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Thẻ 639
Câu hỏi
What is a honeyfile?
Câu trả lời
A decoy file whose access can reveal unauthorized activity.
Thẻ 640
Câu hỏi
Why does legal information require explicit protection?
Câu trả lời
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Thẻ 641
Câu hỏi
Which indicator can mass file renaming and encryption produce?
Câu trả lời
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Thẻ 642
Câu hỏi
What remains with an organization after transferring architecture risk?
Câu trả lời
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Thẻ 643
Câu hỏi
When does local console placement provide useful administrative access?
Câu trả lời
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Thẻ 644
Câu hỏi
What makes a harmful user action unintentional?
Câu trả lời
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Thẻ 645
Câu hỏi
How should an organization harden workstations?
Câu trả lời
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Thẻ 646
Câu hỏi
What is journaling in recovery?
Câu trả lời
Recording ordered changes so data can be replayed or restored to a consistent point.
Thẻ 647
Câu hỏi
What downtime must a change plan account for?
Câu trả lời
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Thẻ 648
Câu hỏi
Why must a privacy program map local or regional law to data flows?
Câu trả lời
The applicable duties can change with the location of the person, organization, processing, or stored data.
Thẻ 649
Câu hỏi
Why combine independent preventive controls at different layers?
Câu trả lời
A failure at one layer does not automatically let the same attack succeed at the next layer.
Thẻ 650
Câu hỏi
What is passwordless authentication?
Câu trả lời
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Thẻ 651
Câu hỏi
How can automation improve security reaction time?
Câu trả lời
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Thẻ 652
Câu hỏi
What does record-level encryption protect?
Câu trả lời
Individual records or fields, allowing finer protection than encrypting the entire database.
Thẻ 653
Câu hỏi
How can business email compromise misuse urgency?
Câu trả lời
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Thẻ 654
Câu hỏi
What does impact measure in risk analysis?
Câu trả lời
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Thẻ 655
Câu hỏi
What makes cyber activity part of warfare?
Câu trả lời
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Thẻ 656
Câu hỏi
Which indicator can a newly created privileged account produce outside the normal change window?
Câu trả lời
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Thẻ 657
Câu hỏi
How can configuration enforcement validate a deployed mitigation?
Câu trả lời
It compares the realized settings with the approved state and corrects or reports drift.
Thẻ 658
Câu hỏi
How does validating an alert improve alert tuning?
Câu trả lời
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Thẻ 659
Câu hỏi
What data-layer impact can a SQL injection vulnerability create?
Câu trả lời
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Thẻ 660
Câu hỏi
What environmental variables can change vulnerability priority?
Câu trả lời
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Thẻ 661
Câu hỏi
What security role does SELinux provide?
Câu trả lời
Mandatory access controls that confine processes according to centrally defined policy.
Thẻ 662
Câu hỏi
Why review governance documents periodically?
Câu trả lời
Business, technology, threats, and external obligations change.
Thẻ 663
Câu hỏi
Why evaluate power requirements for a system design?
Câu trả lời
Power capacity and redundancy constrain availability and recovery.
Thẻ 664
Câu hỏi
When is IPsec a better tunnel choice than TLS?
Câu trả lời
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Thẻ 665
Câu hỏi
What is a honeytoken?
Câu trả lời
A fake credential or data element that generates a high-confidence alert when used.
Thẻ 666
Câu hỏi
What should embedded-system hardening prioritize?
Câu trả lời
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Thẻ 667
Câu hỏi
Why must sanitization address data remanence?
Câu trả lời
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Thẻ 668
Câu hỏi
Why require rules of engagement for vendor testing?
Câu trả lời
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Thẻ 669
Câu hỏi
What does a private data classification indicate?
Câu trả lời
The information concerns an individual or limited internal audience and should not be exposed publicly.
Thẻ 670
Câu hỏi
What does a tabletop recovery exercise test?
Câu trả lời
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Thẻ 671
Câu hỏi
Why prevent password reuse?
Câu trả lời
One compromised password should not unlock other accounts or services.
Thẻ 672
Câu hỏi
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Câu trả lời
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Thẻ 673
Câu hỏi
What does transport encryption protect?
Câu trả lời
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Thẻ 674
Câu hỏi
How can a voice call become an attack vector?
Câu trả lời
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Thẻ 675
Câu hỏi
What should a digital-forensics report document?
Câu trả lời
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Thẻ 676
Câu hỏi
What tradeoff comes with an expansionary risk appetite?
Câu trả lời
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Thẻ 677
Câu hỏi
What does a known penetration-test environment provide?
Câu trả lời
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Thẻ 678
Câu hỏi
Why evaluate compute requirements before deployment?
Câu trả lời
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Thẻ 679
Câu hỏi
Why place sensors at network choke points?
Câu trả lời
They can observe traffic crossing important trust boundaries.
Thẻ 680
Câu hỏi
What should hybrid or remote-work security training emphasize?
Câu trả lời
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Thẻ 681
Câu hỏi
Why plan an application restart separately from a service restart?
Câu trả lời
The application may need its own state handling, user coordination, health checks, and rollback point.
Thẻ 682
Câu hỏi
What is a cryptographic vulnerability?
Câu trả lời
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Thẻ 683
Câu hỏi
Why report findings by asset owner?
Câu trả lời
Owners need clear accountability and a prioritized remediation queue.
Thẻ 684
Câu hỏi
What should guide selection of a secure protocol?
Câu trả lời
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Thẻ 685
Câu hỏi
How do centralized and decentralized governance structures differ?
Câu trả lời
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Thẻ 686
Câu hỏi
How does privacy-aware design limit data retention?
Câu trả lời
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Thẻ 687
Câu hỏi
What does a pressure security sensor detect?
Câu trả lời
Force or weight applied to a protected surface, such as a floor mat or fence line.
Thẻ 688
Câu hỏi
What automation costs should a security team plan for?
Câu trả lời
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Thẻ 689
Câu hỏi
What should RTOS hardening preserve while reducing attack surface?
Câu trả lời
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Thẻ 690
Câu hỏi
What is the goal of disruption-for-chaos activity?
Câu trả lời
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Thẻ 691
Câu hỏi
Which indicator can repeated password guessing produce?
Câu trả lời
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Thẻ 692
Câu hỏi
How does removing unnecessary software harden a system?
Câu trả lời
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Thẻ 693
Câu hỏi
What does NetFlow provide?
Câu trả lời
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Thẻ 694
Câu hỏi
How can a dashboard support an investigation?
Câu trả lời
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Thẻ 695
Câu hỏi
When should a password be expired?
Câu trả lời
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Thẻ 696
Câu hỏi
Why does cryptographic key length matter?
Câu trả lời
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Thẻ 697
Câu hỏi
How can an unsecure Bluetooth connection become an attack vector?
Câu trả lời
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Thẻ 698
Câu hỏi
What is a key risk indicator?
Câu trả lời
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Thẻ 699
Câu hỏi
What should vendor monitoring verify when a contract ends?
Câu trả lời
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Thẻ 700
Câu hỏi
What does a sensitive data classification indicate?
Câu trả lời
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Thẻ 701
Câu hỏi
What does software-defined networking separate?
Câu trả lời
The control plane that decides traffic behavior from the data plane that forwards traffic.
Thẻ 702
Câu hỏi
Where should a web application firewall be placed?
Câu trả lời
In the path of web requests before they reach the protected application.
Thẻ 703
Câu hỏi
What does a simulated recovery exercise test?
Câu trả lời
Participants perform realistic response actions in a controlled environment without disrupting production.
Thẻ 704
Câu hỏi
How can a team verify that a detective control is effective?
Câu trả lời
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Thẻ 705
Câu hỏi
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Câu trả lời
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Thẻ 706
Câu hỏi
What makes a vulnerability cloud-specific?
Câu trả lời
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Thẻ 707
Câu hỏi
How can insurance respond to vulnerability risk?
Câu trả lời
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Thẻ 708
Câu hỏi
How does reputation improve web filtering?
Câu trả lời
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Thẻ 709
Câu hỏi
What does an encryption policy establish?
Câu trả lời
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Thẻ 710
Câu hỏi
How does a microwave security sensor detect movement?
Câu trả lời
It emits microwave energy and detects changes in the reflected signal caused by motion.
Thẻ 711
Câu hỏi
What should IoT-device hardening change before deployment?
Câu trả lời
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Thẻ 712
Câu hỏi
Why track software licenses as assets?
Câu trả lời
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Thẻ 713
Câu hỏi
What does a password manager improve?
Câu trả lời
It can generate and store unique long passwords so users do not memorize or reuse them.
Thẻ 714
Câu hỏi
What makes a ledger open and public?
Câu trả lời
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Thẻ 715
Câu hỏi
What should a payment-change request trigger?
Câu trả lời
Independent verification through a known channel before any account or payment detail is changed.
Thẻ 716
Câu hỏi
What does preserving digital evidence require?
Câu trả lời
Protecting its integrity, context, access history, and availability from collection through final disposition.
Thẻ 717
Câu hỏi
What should a risk report tell decision-makers?
Câu trả lời
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Thẻ 718
Câu hỏi
What should an external assessment report provide?
Câu trả lời
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Thẻ 719
Câu hỏi
What is a centralized design's main resilience risk?
Câu trả lời
A central dependency can become a bottleneck or single point of failure.
Thẻ 720
Câu hỏi
What does mutual TLS add to a TLS-protected service connection?
Câu trả lời
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Thẻ 721
Câu hỏi
What should recurring security-awareness reporting show?
Câu trả lời
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Thẻ 722
Câu hỏi
Why do legacy applications require extra change planning?
Câu trả lời
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Thẻ 723
Câu hỏi
How do a data controller and a data processor differ?
Câu trả lời
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Thẻ 724
Câu hỏi
How can orchestration become a single point of failure?
Câu trả lời
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Thẻ 725
Câu hỏi
Why should defenses account for a threat actor's sophistication and capability?
Câu trả lời
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Thẻ 726
Câu hỏi
How does an injection attack make an application execute unintended instructions?
Câu trả lời
It sends crafted input that an interpreter treats as code or commands instead of data.
Thẻ 727
Câu hỏi
What does a host-based firewall control?
Câu trả lời
Inbound and outbound network traffic for one endpoint according to local rules.
Thẻ 728
Câu hỏi
Why revise alerting after an incident?
Câu trả lời
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Thẻ 729
Câu hỏi
Why include security duties in procurement criteria?
Câu trả lời
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Thẻ 730
Câu hỏi
What does a critical data classification indicate?
Câu trả lời
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Thẻ 731
Câu hỏi
What infrastructure capacity must support failover?
Câu trả lời
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Thẻ 732
Câu hỏi
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Câu trả lời
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Thẻ 733
Câu hỏi
How does a remediation exemption differ from an exception?
Câu trả lời
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Thẻ 734
Câu hỏi
Why should automated EDR or XDR blocking have an exception and rollback path?
Câu trả lời
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Thẻ 735
Câu hỏi
What does a security playbook provide?
Câu trả lời
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Thẻ 736
Câu hỏi
How does an ultrasonic security sensor detect movement?
Câu trả lời
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Thẻ 737
Câu hỏi
What should a managed mobile device require for Bluetooth connections?
Câu trả lời
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Thẻ 738
Câu hỏi
How do password complexity rules differ from password length?
Câu trả lời
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Thẻ 739
Câu hỏi
What makes a certificate third-party trusted?
Câu trả lời
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Thẻ 740
Câu hỏi
Why is an out-of-band check effective against impersonation?
Câu trả lời
It verifies the request through a separate, previously trusted communication path.
Thẻ 741
Câu hỏi
What does a risk exception authorize?
Câu trả lời
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Thẻ 742
Câu hỏi
What security challenge grows in a decentralized design?
Câu trả lời
Consistent policy, inventory, monitoring, and patching become harder.
Thẻ 743
Câu hỏi
How should controls be selected for an unused network path?
Câu trả lời
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Thẻ 744
Câu hỏi
How can a buffer-overflow attack affect an application?
Câu trả lời
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.

Abstract network paths and learning nodes converging on a calm central gateway.

744 thẻ