1.
Question 1
Which functions would fall under the category of operational security controls? Select two answers.

1 point

Providing security awareness training


Exchanging encrypted information


Establishing trust using digital certificates


Responding to an incident alert

2.
Question 2
An employee reports that they cannot log into the payroll system with their access credentials. The employee does not recall changing their username or password. As a security analyst, you are asked to review access logs to investigate whether a breach occurred. What information are you able to review as a data custodian in this situation? Select two answers.

1 point

Any coworkers' contact information


Any payroll access credentials the user has stored on the server


The time the user signed in and out


The IP address of the computer used to log in

3.
Question 3
You send an email to a friend. The service provider of your inbox encrypts all messages that you send. What happens to the information in your email when it’s encrypted?

1 point

It’s converted from plaintext to ciphertext.


It’s converted from ciphertext to plaintext.


It’s converted from Caesar’s cipher to plaintext.


It’s converted from a hash value to ciphertext.

4.
Question 4
What is the primary purpose of hash functions?

1 point

To decrypt sensitive data


To store data in the cloud


To make data quickly available


To determine data integrity

5.
Question 5
Which of the following steps are part of the public key infrastructure process? Select two answers.

1 point

Exchange of encrypted information


Establish trust using digital certificates


Transfer hash digests


Exchange of public and private keys

6.
Question 6
Fill in the blank: Knowledge, ownership, and characteristic are three factors of _____ systems.

1 point

authentication


administrative


accounting


authorization

7.
Question 7
What are some disadvantages of using single sign-on (SSO) technology for user authentication? Select two.

1 point

Customers, vendors, and business partners are less vulnerable to attack.


Stolen credentials can give attackers access to multiple resources.


Username and password management is more complicated for the end users.


Access to all connected resources stops when SSO is down.

8.
Question 8
The main responsibility of a receptionist at a healthcare company is to check-in visitors upon arrival. When visitors check-in, which kinds of information should the receptionist be able to access to complete their task? Select two answers.

1 point

Their medical history


A photo ID


Their billing information


The patient being visited

9.
Question 9
What are common authorization tools that are designed with the principle of least privilege and separation of duties in mind? Select three answers.

1 point

OAuth


Basic auth


SHA256


API Tokens

10.
Question 10
Which of the following are reasons why accounting in security is such an important function of effective access controls? Select two answers.

1 point

Record user activity for marketing purposes.


Detect session hijacking incidents.


Uncover threat actors who have accessed a system.


Identify ways to improve business operations.