A security analyst is reviewing the encryption settings for a database that stores credit card numbers. The database uses AES in ECB mode. The analyst notices that identical credit card numbers produce identical ciphertext. What is the primary security concern with using ECB mode in this scenario?

ECB mode uses a weak key schedule that can be brute-forced.

ECB mode leaks patterns in the data because identical plaintext blocks produce identical ciphertext blocks.

ECB mode does not provide authentication, allowing an attacker to modify ciphertext undetected.

ECB mode is vulnerable to padding oracle attacks.

How does partitioning backups by data type (e.g., databases vs. file shares) improve manageability?

It allows different backup policies to be applied to different data types

It eliminates the need for regular backup testing

It ensures that all backups are stored on the same physical media

It automatically encrypts each partition with a different key

What is a common regulatory requirement that affects backup and recovery processes?

Storing all backups on the same server as production data

Backing up data only once per year

Retaining backup data for a specified period of time

Using only open-source backup software

What is the primary purpose of defining a backup schedule in a backup and recovery process?

To restrict access to backup files to authorized personnel only

To test the backup process only once per year

To ensure backups are taken at regular intervals to minimize data loss

To encrypt backup data during transfer

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 1

Objective 3.1 Protect Data. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

41questions here

9free pages

12concepts

28%of the exam

Questions 21–25

21expert · hard
A security analyst is reviewing the encryption settings for a database that stores credit card numbers. The database uses AES in ECB mode. The analyst notices that identical credit card numbers produce identical ciphertext. What is the primary security concern with using ECB mode in this scenario?
Select an answer first
22foundation · easy
How does partitioning backups by data type (e.g., databases vs. file shares) improve manageability?
Select an answer first
23foundation · easy
Which encryption type is commonly used to securely exchange symmetric keys over an insecure network?
Select an answer first
24foundation · easy
What is a common regulatory requirement that affects backup and recovery processes?
Select an answer first
25foundation · easy
What is the primary purpose of defining a backup schedule in a backup and recovery process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.