Security+ (Sy0-401) Practice Test 5/12

Front 1

Which of the following terms is used to describe the loss of value to an asset based on a single security incident?

Back 1

SLE

Front 2

An estimate based on the historical data of how often a threat would be successful in exploiting a vulnerability is known as:

Back 2

ARO (Annualized Rate of Occurrence)

Front 3

What is the correct formula for calculating probable financial loss due to a risk over a one-year period?

Back 3

ALE = ARO x SLE

Annualized Loss Expectancy =

Annualized Rate of Occurrence x

Single Loss Expectancy

Front 4

Which of the following terms is used to describe the average time required to repair a failed component or device?

Back 4

MTTR (Mean Time To Recovery)

Front 5

High MTBF value indicates that a component or system provides low reliability and is more likely to fail. (True / False)

Back 5

False

Front 6

A calculation of the Single Loss Expectancy (SLE) is an example of:

Back 6

Quantitative risk assessment

Front 7

Assessment of risk probability and its impact based on subjective judgment falls into the category of:

Back 7

Qualitative risk assessment

Front 8

A path or tool allowing an attacker to gain unauthorized access to a system or network is known as:

Back 8

Threat vector

Front 9

In quantitative risk assessment, this term is used for estimating the likelihood of occurrence of a future threat.

Back 9

ARO (Annualized Rate of Occurrence)

Front 10

Contracting out a specialized technical component when the company's employees lack the necessary skills is an example of:

Back 10

Risk transference

Front 11

Disabling certain system functions or shutting down the system when risks are identified is an example of:

Back 11

Risk avoidance

Front 12

Which of the following answers exemplifies implementation of the risk transference methodology?

Back 12

Insurance policy

Front 13

Which of the following terms relates closely to the concept of residual risk?

Back 13

Risk acceptance

Front 14

What type of risk management strategy is in place when accessing the network involves a login banner warning designed to inform potential attacker of the likelihood of getting caught?

Back 14

Risk deterrence

Front 15

Which of the following security control types can be used in implementing a risk mitigation strategy? (Select three answers)

Back 15

Technical, Management, Operational

Front 16

Which of the following terms refers to one of the hardware-related disadvantages of the virtualization technology?

Back 16

Single point of failure

Front 17

Which of the following acronyms refers to a maximum tolerable period of time required for restoring business functions after a failure or disaster?

Back 17

RTO (Recovery time objective)

Front 18

Recovery time objective (RTO) specifies a point in time to which systems and data must be recovered after a disaster has occurred.

(True / False)

Back 18

False

Front 19

Which of the following answers refers to a key document governing the relationship between two business organisations?

Back 19

BPA

Front 20

A document established between two or more parties to define their respective responsibilities in accomplishing a particular goal or mission is known as:

Back 20

MOU (Memorandum of Understanding)

Front 21

Which of the following answers refers to an agreement established between the organizations that own and operate connected IT systems to document the technical requirements of the interconnection?

Back 21

ISA (Interconnection Security Agreement)

Front 22

Which of the following functionalities allows a DLP system to fulfil its role?

Back 22

Content inspection

Front 23

In forensic procedures, a sequence of steps in which different types of evidence should be collected is known as:

Back 23

Order of volatility

Front 24

In forensic procedures, a chronological record outlining persons in possession of an evidence is referred to as:

Back 24

Chain of custody