Defense Planning
What is a security approach that combines multiple security controls and defenses and is sometime called defense in depth?
Layered security
Which of the following principles is implemented in a mandatory access control model to determine object access by classification level?
what is Need to know
Which type of cipher changes the position of the characters in a plain text message?
What is transposition.
After an intrusion has occurred and the intruder has been removed from the system, which of the following is the best next step or action to take?
what is Back up all logs and audits regarding the incident
What is the most important thing to do to prevent console access to the router?
what is Keep the router in a locked room
What is the single greatest threat to network security?
what is employees.
What is the primary purpose of separation of duties?
Prevent conflicts of interest.
Which is the cryptography mechanism that hides secret communications within various forms of data?
What is teganography.
What is an important aspect of evidence gathering?
what is Backing up all log files and audit trails
what is NOT a benefit of physical security?
what is Employee passwords are stronger.
What Includes OS hardening, patch management, malware, and password attacks?
What is host.
What separation of duties is an example of which type of access control?
What is Preventive
What is not a valid example of steganography?
Encrypting a data file with an encryption key
Which method can you use to verify that a bit-level image copy of a hard drive is an exact clone of the original hard drive collected as evidence?
what is Hashing
what measures will NOT improve physical security in the data center?
what is Implement a checkout policy.
What Includes firewalls using ACLs and securing the wireless network
What is Perimeter.
An access control list (ACL) contains a list of users and allowed permissions. What is it called if the ACL automatically prevents access to anyone who is not on the list?
Implicit deny
Which of the following algorithms combines a random value with plain text to produce cipher text?
One-time pad
When duplicating a drive for forensic investigation purposes, which of the following copying methods is most appropriate?
what is Bit-level cloning
You walk by the server room and notice that a fire has started. What should you do first?
what is Make sure everyone has cleared the area.