Network, Endpoint, and Data Security CISA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of using a Mobile Device Management (MDM) solution in an enterprise?

   • ATo replace the need for a corporate email server
   • BTo centrally enforce security policies on mobile devices
   • CTo increase the battery life of employee devices
   • DTo provide free data plans for employees
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which cloud-specific security risk is primarily introduced by the use of virtualization?

   • ASocial engineering of employees
   • BPhysical theft of servers
   • CLoss of encryption keys
   • DHypervisor escape attacks
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security measure is most effective in mitigating the risk of VM escape attacks?

   • AKeeping the hypervisor patched and up to date
   • BUsing the same administrative credentials for all VMs
   • CStoring VM images on shared network storage
   • DDisabling the guest operating system firewall
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a PKI, what is the purpose of a digital certificate?

   • ATo encrypt data using the public key of the recipient
   • BTo provide a password for accessing secure websites
   • CTo bind a public key to an identity and enable verification of that binding
   • DTo store the user's private key securely
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which technology is specifically designed to detect and block the unauthorized transfer of sensitive data outside an organization?

   • AIntrusion Detection System (IDS)
   • BData Loss Prevention (DLP)
   • CVirtual Private Network (VPN)
   • DAntivirus software
   Reveal Solution Discussion Select an answer first