Implement Security Controls CY0-001 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which step is typically performed FIRST in a patch management process?

   • ADocumenting the patch deployment
   • BTesting the patch in a staging environment
   • CIdentifying available patches and updates
   • DDeploying the patch to production systems
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company is designing a new AI system that will be accessible via the internet. The security team is performing threat modeling to identify potential threats. They have identified that the system could be vulnerable to denial-of-service (DoS) attacks and data poisoning. Which mitigation strategy is most appropriate for the DoS threat?

   • AImplement rate limiting and deploy a distributed denial-of-service (DDoS) protection service.
   • BUse input validation to prevent data poisoning.
   • CImplement strong authentication to prevent unauthorized access.
   • DEncrypt all data in transit to prevent interception.
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A government agency provides access to an AI system for its employees and contractors. The system contains sensitive data. The agency requires that all users verify their identity using a method that is resistant to phishing and replay attacks. Which authentication protocol should be deployed?

   • AImplement FIDO2/WebAuthn with hardware security keys.
   • BUse SMS-based one-time passwords (OTP) for all users.
   • CUse Kerberos authentication without additional factors.
   • DDeploy a simple username and password authentication.
   Reveal Solution Discussion Select an answer first