Information Security

221. Two parties, Party A and Party B, regularly exchange messages using public key cryptography. One party, Party A, believes that its private encryption key has been compromised. What action should Party B take?

1. Request a new public key from Party A.
2. Request a new private key from Party A.
3. Send a new public key to Party A.
4. Send a new private key to Party A.

View answer

222. Two separate employees are required to open a safe containing sensitive information. One employee has part of the safe combination, and a second employee has another part of the safe combination. This arrangement follows the principle of:

1. Split custody
2. Segregation of duties
3. Need to know
4. Least privilege

View answer

223. Video surveillance is an example of what type(s) of control:

1. Detective and deterrent
2. Detective only
3. Deterrent only
4. Preventive

View answer

224. Voice recognition as a biometric authentication method is difficult to measure because:

1. Many factors, including current health and respiration rate, make sampling difficult
2. Computers are not yet fast enough to adequately sample a voice print
3. Voice recognition does not handle accents well
4. Impatience changes voice patterns, which leads to increased False Reject Rates

View answer

225. What controls can be used in combination with fences and walls to detect intruders?

1. Video surveillance
2. Motion detectors
3. Video surveillance and motion detectors
4. Visible notices

View answer

226. What is the best defense against social engineering?

1. Spyware filters
2. Firewalls
3. Data leakage protection (DLP)
4. Security awareness training

View answer

227. What is the correct approach for addressing security and organization objectives?

1. Security and organization objectives should be developed separately.
2. Security should drive organization objectives.
3. Security should support organization objectives.
4. The site security officer should approve or reject organization objectives.

View answer

228. What is the difference between split tunneling and inverse split tunneling:

1. Only inverse split tunneling can utilize a firewall
2. Only split tunneling can utilize a firewall
3. Split tunneling uses IPsec and SSL, while inverse split tunneling uses L2TP
4. In split tunneling, the default network is the LAN; in inverse split tunneling, the default network is the VPN

View answer

229. What is the minimum amount of lighting required to illuminate critical areas?

1. 6-foot-candles at a height of 12 feet
2. 2-foot-candles at a height of 12 feet
3. 4-foot-candles at a height of 8 feet
4. 2-foot-candles at a height of 8 feet

View answer

230. What is the minimum key length for a one-time pad?

1. 128 bits
2. 64 bits
3. 56 bits
4. The length of the plaintext message

View answer