1.3 Describe Security Terms 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is a sliding window in anomaly detection?

   • AA static baseline that never changes
   • BA fixed set of data points used to calculate a baseline that moves over time
   • CA type of firewall rule that adapts to new threats
   • DA method to block network traffic that appears suspicious
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is transitioning from a traditional security model to DevSecOps. The security team is concerned that adding security checks to the CI/CD pipeline will slow down deployments. The development team wants to maintain rapid release cycles. Which strategy best balances security and speed?

   • ARequire a manual security approval from a security engineer before every deployment.
   • BRun all security scans only on the final release build to minimize impact on the pipeline.
   • CDeploy code to production first and run security tests in the production environment.
   • DIntegrate automated security tests that run in parallel with existing CI/CD stages and fail the build only on critical issues.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which statement best describes how threat intelligence supports decision-making in an organization?

   • AIt ensures compliance with all regulatory requirements
   • BIt provides raw data logs from firewalls and intrusion detection systems
   • CIt eliminates the need for human analysis in security operations
   • DIt offers context about threats that helps prioritize security investments and actions
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which type of threat actor is typically motivated by financial gain through ransomware attacks?

   • ANation-state actors
   • BInsider threats
   • CHacktivists
   • DCybercriminals
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the goal of reverse engineering in the context of cybersecurity?

   • ATo improve the performance of the software
   • BTo legally distribute the software without a license
   • CTo uncover the functionality and potential vulnerabilities of software or malware
   • DTo create a new version of the software with added features
   Reveal Solution Discussion Select an answer first