Correct answer:

A certificate authority (CA) issues and manages certificates through their lifetime.

Incorrect answers:

A CA does validate certificates but it does much more.

A CA is not an encryption algorithm.

Correct answer:

One of the first steps in protecting data is identifying which data needs protection by classifying it. A common classification scheme used in private organizations is to label data Confidential, Private, Sensitive, and Public.

Incorrect answers:

Although encrypting, backing up, and protecting the data are all important, if data is not classified, users will make their own determinations on the importance of data, which may be different from the data’s actual importance.

Correct answer:

The Role-based Access Control (Role-BAC) model uses roles (or groups) to determine access. Subjects are placed into specific roles and object permissions are granted to the roles. Although the Role-BAC model doesn’t provide the granularity offered by Discretionary Access Control (DAC), it is easier to implement for large groups of people.

Incorrect answers:

Biba uses two primary rules to enforce integrity, not groups.

DAC assigns permissions to individuals.

The Mandatory Access Control (MAC) model uses labels to identify subjects and objects.

Correct answer:

Risk transference (sometimes called risk sharing) transfers the risk to another party (such as through insurance) so that the other party (such as the insurance company) has responsibility for the risk.

Incorrect answers:

Risk mitigation reduces risk.

Risk avoidance avoids the activity that introduces the risk.

Risk acceptance accepts the risk and its potential losses and is commonly done when the asset value is low or if the cost to reduce the risk is higher than the value of the asset.

Correct answer:

The primary goal of change management is to reduce unintended outages from unauthorized changes.

Incorrect answers:

The goal of change management is not related to the speed of the change, but is instead to ensure that changes are examined before they are implemented. A change will modify something, including a system configuration.

Correct answer:

Fiber-optic cable provides the best protection against sniffing attacks. It is the most difficult to splice of the available cable choices, so it also makes intercepting traffic the most difficult.

Incorrect answers:

Wireless transmissions are the easiest to intercept because they are transmitted over the air.

Twisted pair and coaxial cables are easier to splice into than fiber-optic cable.

Correct answer:

A view is a virtual table that provides access to specific columns in one or more tables. It doesn’t actually hold any data but presents the data in the underlying table or tables. A database administrator can grant access to a view without granting access to a table to limit what a user can see and manipulate.

Incorrect answers:

A tuple is a row of data within a table. Each row or tuple contains a unique data element.

A column (or attribute) provides additional details on the data.

A primary key is used to identify each row or tuple uniquely and ensures that each item has only a single row in a table.

Correct answers:

Malicious software that joins a computer to a botnet often comes from clicking a link in a phishing e-mail, receiving a drive-by download from a malicious website, or taking an additional action after another type of malware is installed on a system.

Incorrect answer:

Because botnets are malicious, it is unlikely that an administrator would join a computer to a botnet.

Correct answer:

Organizations are expected to take due care to protect the integrity and confidentiality of data, especially private data.

Incorrect answers:

Due diligence refers to the investigative steps that an organization takes prior to taking on a new obligation to discover associated risks.

Due process refers to legal searches and prohibits searches and seizures without cause.

Due privilege isn’t a common security term.

Correct answer:

Many heuristic scanners use a sandbox technique. When an application is started, it is run within a confined area of memory commonly called a sandbox.

Incorrect answers:

Signature-based scans use a database of signatures for known viruses.

A honeypot is used to attract attackers, but it is not used for heuristics-based scans.

Whitelisting (not heuristics) prevents unknown software from running.