Define Essential Security Principles 100-160 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an ethical responsibility of a cybersecurity professional?

   • AMaximizing system uptime at the expense of security
   • BProtecting the privacy of individuals' data
   • CSharing confidential information with colleagues for convenience
   • DUsing hacking tools to test personal systems without permission
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team is reviewing a server that runs an old version of a database application. The vendor has released a patch, but the team has not applied it. An attacker could use a known exploit to gain unauthorized access. In this scenario, what is the vulnerability?

   • AThe risk of unauthorized access
   • BThe attacker
   • CThe outdated database application
   • DThe known exploit
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A group of attackers defaces a government website to protest a new law. What is their likely motivation?

   • AEspionage
   • BRecreation
   • CFinancial gain
   • DActivism
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst discovers that a colleague has been accessing patient health records without a legitimate business need. The analyst is unsure whether to report the colleague. Which action best aligns with the cybersecurity code of ethics?

   • AReport the unauthorized access to the appropriate supervisor or security team.
   • BConfront the colleague directly and ask them to stop.
   • CIgnore the behavior because it is not the analyst's responsibility.
   • DAccess the same records to see if the colleague's actions are justified.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to protect its customer database from unauthorized access. They have implemented a firewall, an intrusion detection system, and strong password policies. The security team is now considering adding full-disk encryption on the database server. Which security principle does adding encryption primarily support?

   • ADefense-in-depth
   • BRisk avoidance
   • CHardening
   • DThreat identification
   Reveal Solution Discussion Select an answer first