Security Terminology N10-009 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a vulnerability in the context of network security?

   • AThe likelihood that a threat will occur
   • BA measure taken to reduce the impact of a threat
   • CA potential danger that could exploit a weakness
   • DA weakness in a system that could be exploited by a threat
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which security strategy involves implementing multiple layers of defense so that if one layer fails, others still provide protection?

   • ADefense in Depth
   • BRisk Management
   • CNon-repudiation
   • DLeast Privilege
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital network administrator is configuring access to the electronic health record (EHR) system. Nurses must view patient records during their shifts, but only the attending physician is permitted to modify a diagnosis. The administrator sets up smartcard logins for all clinical staff and then configures the EHR so that nurses have read-only access while physicians have read/write access. Which two security concepts are being implemented in this scenario?

   • AIntegrity and availability
   • BConfidentiality and non-repudiation
   • CAuthentication and authorization
   • DLeast privilege and defense in depth
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In network security, what is a threat?

   • AThe likelihood that a vulnerability will be exploited
   • BA measure taken to reduce the impact of an attack
   • CA weakness in a system that could be exploited
   • DA potential danger that could exploit a vulnerability
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A software vendor distributes updates to its customers. A customer is concerned that a downloaded update might have been tampered with by a third party and might not actually be from the vendor. The vendor wants to provide a way for customers to verify both the origin and the integrity of the update. Which solution should the vendor implement?

   • APost the update on a secure HTTPS website
   • BSign the update file with the vendor's private key and provide the corresponding public key to customers
   • CInclude a checksum in the download instructions
   • DEncrypt the update file with a symmetric key and share the key with all customers
   Reveal Solution Discussion Select an answer first