5.1 Describe Management Concepts 200-201 Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is a compensating control?

   • AAn alternative security measure that reduces the risk when a vulnerability cannot be directly fixed
   • BA control that completely eliminates the vulnerability
   • CA control that is only used for physical security
   • DA control that replaces the need for all other security measures
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is a configuration baseline?

   • AA documented set of standard settings and versions for a system or device
   • BA network diagram showing device connections
   • CA backup of the system's data
   • DA list of all software vulnerabilities found in a system
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a strategy for remediating a vulnerability?

   • AIncreasing the number of users with administrative access
   • BApplying a software patch that fixes the underlying flaw
   • CDisabling the vulnerability scanner
   • DIgnoring the vulnerability if it is not currently exploited
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company has a mix of corporate-owned and BYOD devices. The security team wants to enforce a policy that requires all devices to have a screen lock and encryption. However, some BYOD users are concerned about privacy. What is the BEST way to balance security and privacy?

   • ADo not enforce the policy on BYOD devices to respect privacy
   • BRequire BYOD users to sign a waiver accepting the risk
   • CEnroll all devices in MDM and apply the same security policy to all
   • DUse MDM with separate profiles for corporate-owned and BYOD devices, applying only necessary controls to BYOD
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary purpose of asset management in an organization?

   • ATo replace all legacy hardware and software with the latest versions available
   • BTo assign a monetary value to every asset for financial reporting purposes
   • CTo ensure that all assets are protected by the same security controls regardless of their type
   • DTo track and maintain an inventory of all organizational assets, including hardware, software, and data
   Reveal Solution Discussion Select an answer first