Objective 3.1 Protect Data. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company's backup administrator is encrypting backups with a symmetric key. The key is stored on the backup server. A security audit reveals that the key could be compromised if the backup server is breached. The administrator wants to improve key security. Which change would be most effective?

   • AUse asymmetric encryption to encrypt the backups instead of symmetric encryption.
   • BMove the key to a hardware security module (HSM) and restrict access to the HSM to authorized personnel.
   • CEncrypt the key with a password and store the password in the backup configuration file.
   • DUse a longer symmetric key, such as AES-256 instead of AES-128.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a recommended security measure for MySQL data in transit?

   • AUsing plain HTTP for remote access
   • BUsing TLS/SSL encryption for client-server connections
   • CDisabling all encryption to improve performance
   • DStoring passwords in the database in plain text
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a key difference between symmetric and asymmetric encryption?

   • ASymmetric encryption requires a public key infrastructure (PKI)
   • BSymmetric encryption is always more secure than asymmetric encryption
   • CSymmetric encryption uses the same key for encryption and decryption, while asymmetric uses different keys
   • DAsymmetric encryption is faster than symmetric encryption for bulk data
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which data lifecycle state is most commonly associated with the need for encryption protocols such as TLS?

   • AData at backup
   • BData at rest
   • CData in transit
   • DData in use
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital's IT team is designing a backup solution for patient records. The records are stored in an on-premises database and must be backed up nightly. The backup files will be transferred over a VPN to a remote data center. Which combination of actions best protects the data in all three lifecycle states (at rest, in transit, and in use)?

   • AImplement role-based access control on the backup server and skip encryption because the VPN already secures the transfer.
   • BUse a symmetric key for encrypting the backup files and store the key on the same server as the backups for simplicity.
   • CEncrypt the backup files with AES-256 before transfer, use TLS for the VPN connection, and restrict database access to authorized personnel only.
   • DRely on the VPN's encryption to protect the backup files both during transfer and while stored at the remote site.
   Reveal Solution Discussion Select an answer first