Correct answer;

The SLE (Single Loss Expectancy) expresses how much a single occurrence of a risk would cost, meaning how much it would cost the business each time a risk materializes. In this case, there’s a cybersecurity insurance policy in place that covers 60 percent of the total cost of recovery. That means that the EF (exposure factor) (which is used to describe the amount of loss and is expressed as a percentage of the asset’s value) is 40 percent. That makes the SLE = initial SLE (with no EF) × EF = $120,000 × 40% = $48,000.

Incorrect answers:

All other figures are distractors.

Correct answer:

A “one-to-many” search method is a term used in biometric systems. That is derived from the fact that the user provides one biometric value and a database of various values is queried so a match can be identified.

Incorrect answers:

Passwords are used for authentication.

OTP (one-time password) is used for authenticating a user.

A “one-to-one” search method is used in biometric systems for authentication and not identification. In such systems, a user claims an identity by providing a value, and the system reviews if that matches what is stored within the user’s account.

Correct answer:

In a token ring topology, devices are connected with each other and a token circulates through the network. For a machine to transmit, it must be in possession of the token. Once the transmission takes place, the token is released to circulate again within the network so the next machine that wants to transmit can get it.

Incorrect answers:

A mesh network uses multiple connections to connect all devices.

A bus topology uses one shared cable to connect all devices and has terminators at each end so that the signal will stop once it reaches the end of the cable.

Star networks commonly use a switch (some may also use a hub, but that was mostly the case in the past) to connect devices and allow for data transmission.

Correct answer:

There are three primary types of factors. Those are “something you know,” “something you have,” and “something you are.” Given that, any other answer included in the question is bound to be false.

Incorrect answers:

They are all incorrect because they constitute the three primary authentication factors.

Correct answer:

Identification occurs when a user professes an identity, and a username is an identity.

Incorrect answers:

Authentication occurs when a user proves the claimed identity (such as with a password).

Authorization provides a user access to a resource but only after authentication.

Correct answer:

Secure Shell (SSH) uses port 22, so by opening port 22 in the firewall, SSH traffic will be allowed.

Incorrect answers:

FTP uses ports 20 and 21.

Simple Mail Transfer Protocol (SMTP) uses port 25.

Correct answer:

The hacktivist is the threat source, as he is the one initiating the threat event.

Incorrect answers:

The threat event is the attacker’s attempt to sabotage the building, targeting to disrupt the power.

The lack of physical security at night is the vulnerability.

Risk is related to how probable it is for a vulnerability to be exploited by a threat.

Correct answer:

In order to perform a query that will provide the IPv6 address of a specific domain, DNS has to be used, as that’s the protocol responsible for domain name resolution services. Two main types of records relate to IP addresses: A and AAAA records. An A record allows resolution of a particular domain to an IPv4 IP address. An AAAA record allows resolution of a domain to an IPv6 address. Even if you don’t know the correct command (which in this case is nslookup), the only related command that includes “aaaa” is nslookup -type=aaaa <domain>.

Incorrect answers:

Ping is used to check if there’s connectivity between two hosts.

Although nslookup is the right command, the “a” parameter will yield IPv4 records, and the question requires IPv6.

Traceroute is mostly used for checking the route of the traffic towards a destination.

Correct answer:

CSMA/CD (Carrier Sense Multiple Access/Collision Detection) has the ability to allow any device using it to detect a collision in the transmission media. It operates by sending a signal over the wire to alert all the connected devices that a collision is present and that they need to stop transmitting for a random time interval before being able to commence again.

Incorrect answers:

CSMA/CD doesn’t have the ability to avoid collisions; it can only notify devices once a collision occurs. CSMA/CA (Carrier Sense Multiple Access/Collision Avoidance) is a protocol that prevents collision avoidance, as devices using it listen before attempting to send any data.

CSMA/CD is not used at all in wireless networks but is limited to Ethernet networks.

When two devices are connected using a full-duplex connection, there’s no possibility of collision, as two different wires are used for data transmission: one for sending information and one for receiving it. However, please note that devices connected in half-duplex do use CSMA/CD, as that type of connection only uses one set of wires, so the possibility of collisions is present.

Correct answer

A qualitative analysis is subjective and determines overall risk by comparing impact and likelihood.

Incorrect answers:

A quantitative analysis uses numerical-based data such as monetary figures to identify the actual cost associated with a risk. It includes single loss expectancy (SLE), annual rate of occurrence (ARO), and annual loss expectancy (ALE) and uses these values to compare against the cost of the control.