Test your basic knowledge |

Comptia Security +: Domain2 Compliance And Organization Security

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 47 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Digital signatures enable forensic specialists to...
Cable trap
It must be handled properly
validate the authenticity of their evidence
Memory

2. The use of __________ should be evaluated when considering natural disaster safeguards.
Security policy
lightning rods
eradicate any causes of the incident
One

3. The forensic investigators should avoid _____________ where potential evidence is concerned.
due care
running programs that modify files
Security policy
Cable trap

4. Important principles governing the collection - preservation - and access of digital data.
Natural - External - Human induced accidents - Armed conflict
legitimate use of system accounts
Logging
The process of seizing - accessing - storing - or transferring digital evidence should be fully documented and made available for review - Only copies of evidence should be manipulated or analyzed whenever possible - Any investigation and analysis p

5. An effective disaster recovery plan for a small company could be as simple as...
a regular backup strategy
legitimate use of system accounts
Preset lock
delegating

6. Which choice represents the most expensive solution for an alternative backup site?
Logging
Water - Soda acid
as well as security consultants
Hot site

7. When collecting evidence - the 'state' of a crime scene should not be modified. This includes both...
the data and memory on the system
Cold site
Loss of power - Tornado - Terrorism - Hijacking
validate the authenticity of their evidence

8. An intrusion detection system is considered an integral part of an...
validate the authenticity of their evidence
incident response policy
running programs that modify files
Computer forensics

9. Which process is responsible for recovery of data - and the preservation of digital evidence?
Computer forensics
Preset lock
accuracy of the information maintained by the security department
It must be handled properly

10. Represents that an organization is responsibly managing it's data and security
Preset lock
Memory
Cold site
due care

11. A characteristic of Digital evidence
Loss of power - Tornado - Terrorism - Hijacking
Argon
Volatility - Susceptible to tampering
Memory

12. Recommended fire suppression methods for common combustibles
as well as security consultants
Cold site
Water - Soda acid
incident response policy

13. An ideal facility would have a secure perimeter and secure access points. What is the recommended number of access points?
Hot site
not to duplicate
One
Hard drive

14. System security scans should be performed by in-house staff...
Computer forensics
as well as security consultants
Logging
Incident response policy

15. The practice of an unauthorized individual gaining access to a facility by following closely behind an authorized employee is known as...
Logging
Piggybacking
technical access control
Biometric lock

16. The recommended fire suppression method for an electrical fire
Argon
Piggybacking
Volatility - Susceptible to tampering
The process of seizing - accessing - storing - or transferring digital evidence should be fully documented and made available for review - Only copies of evidence should be manipulated or analyzed whenever possible - Any investigation and analysis p

17. The process of distributing tasks among a number of individuals in order to minimize the effect of employee attrition while also creating a manageable learning curve for new employees is known as...
Natural - External - Human induced accidents - Armed conflict
delegating
Hard drive
Device lock

18. Addresses the use of computer equipment and network resources for use that is non-beneficial to the company
Acceptable use policy
a regular backup strategy
Argon
accuracy of the information maintained by the security department

19. The process of writing information to the security log is known as...
shutting down the affected system
Logging
One
Security policy

20. A general statement produced by senior management and the technology department to dictate what security means to the organization?
Memory
Computer forensics
Security policy
lightning rods

21. It is extremely important to have your disaster recovery plan including __________ stored in a safe place.
RBAC
due care
well documented paper records
One

22. This represents a backup site that is partially configured with some equipment
Warm site
as well as security consultants
Acceptable use policy
Piggybacking

23. With respect to the volatility of evidence - the least volatile area of the system.
validate the authenticity of their evidence
Argon
Hard drive
shutting down the affected system

24. Once an incident has been contained it will be necessary to...
Biometric lock
Risk management
Acceptable use policy
eradicate any causes of the incident

25. The process of identifying assets - determining their value - and then determining possible threats to those assets is referred to as...
technical access control
Risk management
Device lock
Memory

26. Necessary when handling digital evidence in order for it to be admissible in court?
Security policy
It must be handled properly
due care
high in cost - and hard to implement

27. Ventilation can be considered a category of...
Preset lock
technical access control
One
It must be handled properly

28. This identifies a device lock that prevents unauthorized removal of cables from computer devices?
Slot lock
Risk management
Cable trap
The process of seizing - accessing - storing - or transferring digital evidence should be fully documented and made available for review - Only copies of evidence should be manipulated or analyzed whenever possible - Any investigation and analysis p

29. When access to services or resources are organized by using rules - which access control model is being used?
legitimate use of system accounts
RBAC
physical surveillance methods
technical access control

30. With respect to the volatility of evidence - represents the most volatile area of the system?
a regular backup strategy
Memory
Risk management
Piggybacking

31. Locks that use a physical lock and key
Biometric lock
Preset lock
shutting down the affected system
Device lock

32. Disasters can be broadly classified into these categories...
Natural - External - Human induced accidents - Armed conflict
accuracy of the information maintained by the security department
physical surveillance methods
well documented paper records

33. When any incident is detected - _____________ is not onsidered a best practice in order to maintain security.
shutting down the affected system
Device lock
Loss of power - Tornado - Terrorism - Hijacking
Computer forensics

34. The process of keeping track of all individuals that have accessed the evidence is referred to as...
Preset lock
Chain of custody
Cable trap
It must be handled properly

35. Educating users about the ___________ should be part of any user security training package.
due care
incident response policy
legitimate use of system accounts
not to duplicate

36. This identifies a policy that addresses how to deal with a security incident after that incident has happened?
Cold site
Incident response policy
Risk management
One

37. A backup site that contains only basic computing environments such as wiring - ventilation - and flooring.
Security policy
validate the authenticity of their evidence
Cold site
Acceptable use policy

38. A lock that covers the expansion slots on computer devices
Incident response policy
incident response policy
Slot lock
Loss of power - Tornado - Terrorism - Hijacking

39. Example of the concept of a reciprocal backup agreement?
the data and memory on the system
Cold site
Memory
An agreement between two companies to store each others data

40. The least expensive solution for an alternative backup site?
Hard drive
Cable trap
Cold site
well documented paper records

41. When choosing a site that will be used for storage it is important ________ the environment found at the site used for your daily operations.
Risk management
not to duplicate
Logging
Incident response policy

42. A security guard is instrumental in deploying...
physical surveillance methods
due care
Slot lock
Piggybacking

43. Biometric security systems are...
Water - Soda acid
high in cost - and hard to implement
Argon
Slot lock

44. Examples of events that could be classified as potential threats to your network
Memory
Loss of power - Tornado - Terrorism - Hijacking
Hot site
Water - Soda acid

45. A lock that secures computer hardware and network devices?
incident response policy
Logging
Device lock
eradicate any causes of the incident

46. The accuracy of biometric security systems is dependent in large part on the...
accuracy of the information maintained by the security department
Computer forensics
Device lock
Volatility - Susceptible to tampering

47. Which door lock type is considered most secure?
legitimate use of system accounts
Biometric lock
eradicate any causes of the incident
due care