0 of 32 Questions completed
Questions:
You have already completed the quiz before. Hence you can not start it again.
You must sign in or sign up to start the quiz.
You must first complete the following:
Quiz complete. Results are being recorded.
0 of 32 Questions answered correctly
Your time:
Time has elapsed
You have reached 0 of 0 point(s), (0 )
Earned Point(s): 0 of 0 , (0 ) 0 Essay(s) Pending (Possible Point(s): 0 )
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
Question 1 of 32
Which principle of the ISC2 Code of Ethics requires security professionals to prioritize actions that maintain public trust and confidence?
Question 2 of 32
A company chooses not to replace a high-risk, legacy system required for operations. Instead, they deploy additional compensating controls (e.g., enhanced monitoring, strict access policies). Which risk response strategy does this action represent?
Question 3 of 32
What is the primary purpose of due care?
Question 4 of 32
After calculating SLE and ALE for damaged servers, management concludes that implementing improved cooling systems costs far more than the losses. What risk response is appropriate?
Question 5 of 32
In data protection programs, who is ultimately accountable for determining classification levels?
Question 6 of 32
Which statement best describes defensible destruction?
Question 7 of 32
Which method is least effective for destroying data on SSDs?
Question 8 of 32
What is the primary objective of asset classification?
Question 9 of 32
Which NIST Special Publication (SP) provides the official standard and guidance for integrating security into the development and engineering of systems (Systems Security Engineering)?
Question 10 of 32
What is VM sprawl?
Question 11 of 32
Which asymmetrical algorithm delivers the highest strength per bit?
Question 12 of 32
What is the main difference between edge and fog computing?
Question 13 of 32
What is the function of ARP?
Question 14 of 32
A network attack where an attacker acts as an intermediary system is known as:
Question 15 of 32
IPv6 uses how many bits?
Question 16 of 32
Which protocol is connectionless and includes no error checking?
Question 17 of 32
Who approves access requests?
Question 18 of 32
Which is an example of privilege escalation to gain higher level privileges ?
Question 19 of 32
Physical access tokens are read by:
Question 20 of 32
Facebook, Gmail, LinkedIn operate at which IAL level?
Question 21 of 32
Which test measures whether a system meets internal standards?
Question 22 of 32
Which test uses scripts rather than “live” user actions?
Question 23 of 32
A fire-drill style evacuation is what type of test?
Question 24 of 32
Which is true of code testing?
Question 25 of 32
Which IDS/IPS method compares activities to a baseline?
Question 26 of 32
According to the ITIL framework for change management, which of the following is NOT a recognized category for classifying a change?
Question 27 of 32
According to the NIST SP 800-61 framework for Incident Response, which of the following is NOT a recognized phase in the Incident Response Life Cycle?
Question 28 of 32
Which device uses magnets for intrusion detection? Revised Question: Which of the following intrusion detection devices operates by using a magnetic field to detect the opening of a door or window?
Question 29 of 32
Which Software Development Life Cycle (SDLC) model is characterized by completing each phase fully before moving on to the next one in a strict, linear order?
Question 30 of 32
Which security mechanism is used to protect data objects from unwanted inference or unauthorized access in a database environment? (This question uses OOP terms but refers to a database security concept.)
Question 31 of 32
Which programming language is considered the lowest-level because its instructions directly correspond to the hardware’s machine code?
Question 32 of 32
Which of the ACID properties guarantees that concurrent database transactions are executed in such a way that they appear to be executed sequentially, making the uncommitted changes of one transaction invisible to all other transactions?
