Question 1

A new U.S. Federal Information Processing Standard specifies a cryptographic algorithm. This algorithm is used by U.S. government organizations to protect sensitive, but unclassified, information. What is the name of this Standard?
A) Triple DES
B) Blowfish
C) AES
D) CAST
E) RSA

Accepted Answer

The Advanced Encryption Standard (AES) is the U.S. Federal Information Processing Standard (FIPS) used to protect sensitive, but unclassified, information. It was established by the National Institute of Standards and Technology (NIST) in 2001.

Question 2

Which type of Business Continuity Plan (BCP) test involves shutting down z on-line, and moving all operations to the alternate site?
A) Parallel
B) Full interruption
C) Checklist
D) Structured walkthrough
E) Simulation

Accepted Answer

A Full interruption test involves shutting down operations at the primary site and moving all operations to the alternate site to test the effectiveness of the BCP.

Question 3

Internal intrusions are loosely divided into which categories? (Choose TWO.)
A) Attempts by insiders to perform appropriate acts, on information assets to which they have been given rights or permissions.
B) Attempts by insiders to access resources, without proper access rights
C) Attempts by insiders to access external resources, without proper access rights.
D) Attempts by insiders to perform inappropriate acts, on external information assets to which they have been given rights or permissions.
E) Attempts by insiders to perform inappropriate acts, on information assets to which they have been given rights or permissions.

Accepted Answer

Internal intrusions are typically categorized as attempts by insiders to access resources without proper access rights (B) and attempts by insiders to perform inappropriate acts on information assets to which they have been given rights or permissions (E).

Question 4

Which of the following is NOT an auditing function that should be performed regularly?
A) Reviewing IDS alerts
B) Reviewing performance logs
C) Reviewing IDS logs
D) Reviewing audit logs
E) Reviewing system logs

Accepted Answer

Reviewing performance logs is more related to system performance monitoring rather than auditing for security purposes.

Question 5

Organizations____________ risk, when they convince another entity to assume the risk for them.
A) Elevate
B) Assume
C) Deny
D) Transfer
E) Mitigate

Accepted Answer

Organizations transfer risk when they convince another entity to assume the risk for them, often through insurance or outsourcing.

Question 6

_________ educate(s) security administrators and end users about organizations' security policies.
A) Security-awareness training
B) Information Security (INFOSEC) briefings
C) Acceptable-use policies
D) Continuing education
E) Nondisclosure agreements

Accepted Answer

Security-awareness training is specifically designed to educate security administrators and end users about an organization's security policies, helping them understand and adhere to these policies effectively.

Question 7

What type of document contains information on alternative business locations, IT resources, and personnel?
A) End-user license agreement
B) Nondisclosure agreement
C) Acceptable use policy
D) Security policy
E) Business continuity plan

Accepted Answer

A Business Continuity Plan contains information on alternative business locations, IT resources, and personnel to ensure operations can continue during a disruption.

Question 8

Which of the following is an integrity requirement for Remote Offices/Branch Offices (ROBOs)?
A) Private data must remain internal to an organization.
B) Data must be consistent between ROBO sites and headquarters.
C) Users must be educated about appropriate security policies.
D) Improvised solutions must provide the level of protection required.
E) Data must remain available to all remote offices.

Accepted Answer

Data consistency between ROBO sites and headquarters is an integrity requirement, ensuring that the data is accurate and reliable across all locations.

Question 9

Operating-svstem fingerprinting uses all of the following, EXCEPT ______, to identify a target operating system.
A) Sequence Verifier
B) Initial sequence number
C) Address spoofing
D) Time to Live
E) IP ID field

Accepted Answer

Address spoofing is not used for operating system fingerprinting; it is a technique used to disguise the source of IP packets.

Question 10

Which of the following is a cost-effective solution for securely transmitting data between remote offices?
A) Standard e-mail
B) Fax machine
C) Virtual private network
D) Bonded courier
E) Telephone

Accepted Answer

A Virtual Private Network (VPN) is a cost-effective solution that encrypts data, ensuring secure transmission over the internet between remote offices.

Question 11

Which of the following is likely in a small-business environment?
A) Most small businesses employ a full-time information-technology staff.
B) Resources are available as needed.
C) Small businesses have security personnel on staff.
D) Most employees have experience with information security.
E) Security budgets are very small.

Accepted Answer

Small businesses often have limited financial resources, leading to smaller budgets for security measures compared to larger organizations.

Question 12

Which types of security solutions should a home user deploy? (Choose TWO.)
A) Managed Security Gateway
B) Access control lists on a router
C) Personal firewall
D) Network intrusion-detection system
E) Anti-virus software

Accepted Answer

A personal firewall helps protect a home user's computer from unauthorized access and threats from the internet. Anti-virus software is essential for detecting and removing malicious software that could harm the user's system.

Question 13

Which of the following statements about encryption's benefits is false? Encryption can: (Choose TWO.)
A) significantly reduce the chance information will be modified by unauthorized entities.
B) only be used to protect data in transit. Encryption provides no protection to stored data.
C) allow private information to be sent over public networks, in relative safety.
D) significantly reduce the chance information will be viewed by unauthorized entities.
E) prevent information from being destroyed by malicious entities, while in transit.

Accepted Answer

Encryption can be used to protect both data in transit and stored data, so statement B is false. Encryption does not prevent data from being destroyed; it only protects against unauthorized access or modification, making statement E false.

Question 14

Which encryption algorithm has the highest bit strength?
A) AES
B) Blowfish
C) DES
D) CAST
E) Triple DES

Accepted Answer

AES (Advanced Encryption Standard) can have a key size of up to 256 bits, which is higher than the maximum key sizes of Blowfish (448 bits), DES (56 bits), CAST (128 bits), and Triple DES (168 bits).

Question 15

Which of these metrics measure how a biometric device performs, when attempting to authenticate subjects? (Choose THREE.)
A) False Rejection Rate
B) User Acceptance Rate
C) Crossover Error Rate
D) False Acceptance Rate
E) Enrollment Failure Rate

Accepted Answer

False Rejection Rate (FRR) measures the percentage of genuine users who are incorrectly rejected by the biometric system. Crossover Error Rate (CER) is the point at which the FRR and False Acceptance Rate (FAR) are equal. FAR measures the percentage of impostors who are incorrectly accepted by the biometric system.

Question 16

Which TWO of the following items should be accomplished, when interviewing candidates for a position within an organization?
A) Hire an investigation agency to run background checks.
B) Verify all dates of previous employment.
C) question candidates, using polygraphs, n
D) Contact personal and professional references.
E) Run criminal-background checks.

Accepted Answer

Verifying dates of previous employment ensures the candidate's work history is accurate. Contacting references provides insights into the candidate's past performance and character.

Question 17

Which type of access management uses information about job duties and positions, to indicate subjects' clearance levels?
A) Discretionary
B) Role-based
C) Nondiscretionary
D) Hybrid
E) Mandatory

Accepted Answer

Role-based access management assigns permissions based on job roles and responsibilities, aligning access with the duties and positions of subjects.

Question 18

Which of the following equations results in the Single Loss Expectancy for an asset?
A) Asset Value x % Of Loss From Realized Exposure
B) Asset Value x % Of Loss From Realized Threat
C) Annualized Rate of Occurrence / Annualized Loss Expectancy
D) Asset Value x % Of Loss From Realized Vulnerability
E) Annualized Rate of Occurrence x Annualized Loss Expectancy

Accepted Answer

The answer of Which of the following equations results in...

Question 19

When attempting to identify OPSEC indicators, information-security professionals must: (Choose THREE.)
A) Discover the information daily activities yield.
B) Meet with adversaries.
C) Perform business impact analysis surveys.
D) Scrutinize their organizations' daily activities.
E) Analyze indicators, to determine the information an adversary can glean both from routine and nonroutine activities.

Accepted Answer

Information-security professionals must discover the information daily activities yield, scrutinize their organizations' daily activities, and analyze indicators to determine what information an adversary can glean from both routine and nonroutine activities. These steps help in identifying potential OPSEC indicators that could be exploited.

Question 20

_________ intrusion detection involves comparing traffic to known characteristics of malicious traffic, known as attack signatures.
A) Pattern matching
B) Statistical anomaly
C) Behavioral analysis
D) Host
E) Network

Accepted Answer

Pattern matching intrusion detection involves comparing traffic to known attack signatures, which are predefined patterns of malicious activity.

Exam 1: Check Point Certified Security Principles Associate (CCSPA)

A new U.S. Federal Information Processing Standard specifies a cryptographic algorithm. This algorithm is used by U.S. government organizations to protect sensitive, but unclassified, information. What is the name of this Standard?

Which type of Business Continuity Plan (BCP) test involves shutting down z on-line, and moving all operations to the alternate site?

Internal intrusions are loosely divided into which categories? (Choose TWO.)

Which of the following is NOT an auditing function that should be performed regularly?

Organizations____________ risk, when they convince another entity to assume the risk for them.

_________ educate(s) security administrators and end users about organizations' security policies.

What type of document contains information on alternative business locations, IT resources, and personnel?

Which of the following is an integrity requirement for Remote Offices/Branch Offices (ROBOs) ?

Operating-svstem fingerprinting uses all of the following, EXCEPT ______, to identify a target operating system.

Which of the following is a cost-effective solution for securely transmitting data between remote offices?

Which of the following is likely in a small-business environment?

Which types of security solutions should a home user deploy? (Choose TWO.)

Which of the following statements about encryption's benefits is false? Encryption can: (Choose TWO.)

Which encryption algorithm has the highest bit strength?

Which of these metrics measure how a biometric device performs, when attempting to authenticate subjects? (Choose THREE.)

Which TWO of the following items should be accomplished, when interviewing candidates for a position within an organization?

Which type of access management uses information about job duties and positions, to indicate subjects' clearance levels?

Which of the following equations results in the Single Loss Expectancy for an asset?

When attempting to identify OPSEC indicators, information-security professionals must: (Choose THREE.)

_________ intrusion detection involves comparing traffic to known characteristics of malicious traffic, known as attack signatures.