Deck 8: Operations Security

Question 1

Users should be given access only to resources required to do their job.

Answer 1

True

Question 2

Separation of Duties is considered a detective administrative control.

Answer 2

False

Question 3

All default administrator passwords on the devices should be left in place.

Answer 3

False

Question 4

RAID 1 is also called disk striping.

Question 5

HSM is a type of backup management system that provides a continuous online backup.

Question 6

Data purging uses a method such as degaussing to make the old data unavailable even with forensics.

Question 7

MTBF describes the average amount of time it takes to get a device fixed and back online.

Question 8

The first step in the incident response process is respond.

Question 9

All changes should be formally requested.

Question 10

Trusted Recoveries set a baseline for normal user errors, and violations exceeding that threshold will be recorded for analysis of why the violations occurred.

Question 11

Which principle is valuable in deterring fraud?

A) Need to Know
B) Least Privilege
C) Separation of Duties
D) DAC

Question 12

Which form of RAID requires at least three hard drives?

A) RAID 0
B) RAID 1
C) RAID 3
D) RAID 5

Question 13

Which of the following is composed of high-capacity storage devices connected by a high-speed private network?

A) NAS
B) SAN
C) HSM
D) RPM

Question 14

Which of the following describes how often a component fails on average?

A) MTBF
B) HSM
C) MTTR
D) NAS

Question 15

What is the final step in the incident response process?

A) Report
B) Detect
C) Respond
D) Recover

Question 16

Which of the following is NOT a part of system hardening?

A) Unnecessary applications should be removed.
B) All services should be enabled.
C) Unrequired ports should be blocked.
D) External storage devices and media should be tightly controlled.

Question 17

Which of the following protocols is recommended for remote management?

A) Telnet
B) SSH
C) FTP
D) ICMP

Question 18

At what temperature does damage start occurring to magnetic media?

A) 80 degrees
B) 85 degrees
C) 90 degrees
D) 100 degrees

Question 19

Which of the following is an agreement about the capability of the support system to respond to problems within a certain time frame?

A) SLA
B) MTBF
C) RAID
D) PCP