How does a Network-Based Intrusion Detection System (NIDS) differ from a Host-Based IDS (HIDS)?

  • HIDS focuses on the security of individual devices
  • HIDS is less effective in detecting unauthorized access
  • NIDS monitors network traffic for suspicious activities
  • NIDS requires agents on each device for monitoring
The primary distinction lies in the scope of monitoring. NIDS operates at the network level, analyzing traffic for signs of intrusion across multiple devices. In contrast, HIDS focuses on the security of individual devices, employing agents on each system to detect and respond to local threats. Understanding these differences is crucial for deploying effective intrusion detection strategies tailored to specific security requirements.__________________________________________________

In BCM, what is the primary focus of a 'Crisis Communication Plan'?

  • Ensuring employee safety during a crisis
  • Facilitating communication with the media
  • Maintaining regular business operations during a crisis
  • Providing technical support during a crisis
The primary focus of a Crisis Communication Plan in Business Continuity Management (BCM) is ensuring employee safety during a crisis. This plan outlines communication strategies to keep employees informed, address concerns, and provide guidance on safety measures. Effective communication fosters a sense of security, promotes orderly response, and contributes to overall resilience in the face of unexpected events.__________________________________________________

In a DRP, what does the term 'Failback' refer to?

  • Activating a backup data center
  • Initial response to a disaster event
  • Process of returning to normal operations after a failover
  • Replicating data to an offsite location
'Failback' in a Disaster Recovery Plan (DRP) refers to the process of returning to normal operations after a failover. Failover occurs when systems switch to backup resources during a disruption. Understanding failback procedures is vital for ensuring a smooth transition back to the primary infrastructure once the crisis is resolved, minimizing downtime and optimizing resource utilization.__________________________________________________

In disaster recovery, what does the term 'RTO' stand for?

  • Recovery Time Objective
  • Regulatory Technology Oversight
  • Resource Tracking Overview
  • Risk Tolerance
RTO stands for Recovery Time Objective, representing the targeted duration for restoring services after a disaster. It defines the acceptable downtime for specific systems or processes. Understanding RTO is crucial for planning and implementing effective disaster recovery strategies, ensuring that the organization can resume critical operations within the defined timeframe.__________________________________________________

A ____________ attack is when a blockchain network participant modifies the network's transaction history to their advantage.

  • 51%
  • DDoS
  • Man-in-the-Middle
  • Sybil
A 51% attack occurs when a single participant or a group controls more than 50% of a blockchain network's mining power. This allows them to manipulate the transaction history, potentially leading to double-spending or other malicious activities. Understanding the concept of 51% attacks is crucial for assessing the security and decentralization of blockchain networks.__________________________________________________

What is the term for the cryptographic algorithm that is designed to be secure against the capabilities of quantum computers?

  • Post-Quantum Cryptography
  • Quantum Resistant Encryption
  • Quantum-Proof Algorithms
  • Quantum-Safe Cryptography
Post-Quantum Cryptography refers to cryptographic algorithms specifically designed to resist attacks by quantum computers. As quantum computers pose a threat to traditional cryptographic systems, understanding and implementing post-quantum cryptography is crucial for ensuring the security of sensitive information in the future quantum computing era.__________________________________________________

A ____________ attack involves overwhelming a system with traffic or information to make it unavailable to users.

  • DDoS (Distributed Denial of Service)
  • Phishing
  • SQL Injection
  • XSS (Cross-Site Scripting)
A Distributed Denial of Service (DDoS) attack involves overwhelming a system with a flood of traffic, making it unavailable to users. Attackers use multiple compromised systems to flood the target with traffic, causing service disruptions. Understanding DDoS attacks is crucial for implementing effective mitigation strategies and maintaining the availability of online services.__________________________________________________

The section in a security policy that outlines disciplinary actions for policy violations is known as ____________.

  • Compliance Appendix
  • Enforcement Clause
  • Punishment Provision
  • Sanction Section
The section in a security policy that outlines disciplinary actions for policy violations is known as the Sanction Section. This part specifies the consequences or penalties individuals may face if they violate the security policy. It plays a crucial role in promoting compliance and deterring security breaches within an organization. Understanding this aspect is essential for maintaining a secure and disciplined environment.__________________________________________________

Which service model in cloud computing is most responsible for managing application security?

  • Function as a Service (FaaS)
  • Infrastructure as a Service (IaaS)
  • Platform as a Service (PaaS)
  • Software as a Service (SaaS)
Platform as a Service (PaaS) is most responsible for managing application security in cloud computing. PaaS providers offer a platform that includes tools and services for developing, testing, and deploying applications securely. Understanding the service models is essential for selecting the right cloud solution based on security responsibilities and requirements.__________________________________________________

How does federated identity management enhance cybersecurity?

  • Enables Single Sign-On across multiple systems and applications
  • Encrypts all user credentials during transmission
  • Implements strict access control policies for each user
  • Utilizes biometric authentication for enhanced security
Federated identity management facilitates Single Sign-On (SSO) across various systems, allowing users to access multiple applications with a single set of credentials. This not only enhances user convenience but also streamlines access control, reducing the risk of password-related vulnerabilities. Understanding this concept is crucial for implementing secure and user-friendly identity management solutions.__________________________________________________