Mobile Device Management (MDM) solutions are primarily used to enforce what within an organization's BYOD policy?
- Data encryption
- Enforcing security policies and configurations
- Monitoring device location
- Restricting personal app usage
MDM solutions are primarily used to enforce security policies and configurations within an organization's Bring Your Own Device (BYOD) policy. These policies can include things like password requirements, app restrictions, and encryption settings to ensure that personal devices used for work are secure and compliant with company standards.
Which of the following is a software designed to infiltrate and damage computer systems without the user's knowledge or consent?
- Antivirus
- Browser
- Firewall
- Malware
Malware is a term used to describe any software specifically designed to infiltrate and damage computer systems, often without the user's knowledge or consent. Malware can take various forms, including viruses, worms, Trojans, and spyware, among others.
A multinational company with its headquarters in the US is collecting and processing personal data of European citizens. A customer from France requests a copy of all the personal data the company has about him. Which regulation mandates the company to honor this request?
- CCPA
- FERPA
- GDPR
- HIPAA
GDPR (General Data Protection Regulation) is the European Union's regulation that mandates data protection and privacy for European citizens. It requires organizations, regardless of where they are based, to comply with strict data protection rules when processing personal data of European citizens.
How does a network-based IDS (NIDS) differ from a host-based IDS (HIDS)?
- NIDS is software-based; HIDS is hardware-based
- NIDS monitors host system logs and activities; HIDS monitors network traffic
- NIDS monitors network traffic; HIDS monitors host system logs and activities
- NIDS relies on anomaly detection; HIDS relies on signature-based detection
NIDS and HIDS are distinct intrusion detection systems. NIDS monitors network traffic for suspicious activities, while HIDS focuses on monitoring the activities and logs of a specific host system. They differ in their monitoring scope.
An employee in the finance department is found accessing confidential HR records without a valid reason. This action is indicative of which type of security concern?
- Firewall
- Insider Threat
- Phishing
- Ransomware
This situation points to an insider threat. An insider threat occurs when someone within an organization misuses their access or privileges to compromise security, such as unauthorized access to sensitive data.
An employee receives an email from her bank asking her to verify her account details due to recent security breaches. The email contains a link to a website that looks similar to her bank's website. She becomes suspicious because the email has typos and the URL seems off. This email is likely an example of which type of attack?
- Phishing
- Spear Phishing
- Malware
- Social Engineering
This scenario is an example of "Phishing." Phishing attacks involve sending deceptive emails, often impersonating trusted entities, to trick recipients into revealing sensitive information or clicking on malicious links. In this case, the email's typos and suspicious URL are typical signs of phishing.
A _______ is a list maintained by a Certificate Authority that contains all the certificates it has revoked.
- CA (Certificate Authority)
- CRL (Certificate Revocation List)
- CSR (Certificate Signing Request)
- PKI (Public Key Infrastructure)
A CRL (Certificate Revocation List) is a crucial component of a Public Key Infrastructure (PKI). It is a list maintained by a Certificate Authority (CA) and contains all the certificates it has revoked before their expiration dates. This helps ensure the security of digital certificates and public keys.
What is the primary purpose of a strong password policy in user authentication?
- Enhancing user creativity
- Improving user experience
- Increasing security
- Reducing login times
The primary purpose of a strong password policy in user authentication is to increase security. A strong password policy enforces the use of complex passwords, making it more difficult for unauthorized users to gain access to accounts through brute force or dictionary attacks.
When a policy violation occurs, the CSP can be configured to send a report to a specified URI using the _______ directive.
- content-uri
- policy-uri
- report-uri
- security-uri
The correct directive for configuring CSP to send a report to a specified URI is report-uri. This directive is essential for monitoring and resolving policy violations by receiving reports on security incidents.
A financial institution enforces a policy where users must change their passwords every 45 days, and the new password cannot be any of the last five passwords used. This policy is primarily designed to mitigate which type of threat?
- Brute Force Attacks
- Credential Theft
- Insider Threats
- Password Guessing Attacks
The password policy is designed to mitigate Password Guessing Attacks, where attackers attempt to guess user passwords to gain unauthorized access.