D488 Cybersecurity Architecture and Engineering - Set 2 - Part 2

Correct Answer: Lack of standard security protocols

Many IoT devices lack consistent security measures, making them vulnerable to exploitation and attacks.

Correct Answer: Authentication

Authentication verifies the identity of users attempting to access a system, ensuring that only authorized individuals gain entry.

Correct Answer: Data stored on physical or virtual media

Data at rest refers to information that is stored in databases or storage systems and is not actively being accessed or processed.

Correct Answer: By encrypting internet traffic

A VPN encrypts data transmitted over the internet, helping to protect user privacy and sensitive information from interception.

Correct Answer: Input validation and parameterized queries

Input validation and using parameterized queries help prevent attackers from injecting malicious SQL code into database queries.

Correct Answer: Bring Your Own Device

BYOD refers to a policy that allows employees to use their personal devices for work-related tasks, raising security considerations for organizations.

Correct Answer: Establishing a communication plan

A communication plan ensures that stakeholders are informed and coordinated during an incident response, facilitating effective management.

Correct Answer: To evaluate the security of a system by simulating attacks

Penetration testing identifies vulnerabilities by mimicking the techniques of potential attackers to improve overall security.

Correct Answer: A security flaw that is exploited before it is known to the vendor

Zero-day vulnerabilities are critical because they can be exploited by attackers before developers have a chance to address them.

Correct Answer: Firewall

A firewall is a security device or software designed to prevent unauthorized access, while rootkits, worms, and spyware are types of malware.

Correct Answer: To encrypt data transmitted between a web server and browser

An SSL certificate secures data during transmission, ensuring that sensitive information remains confidential.

Correct Answer: Input sanitization

Input sanitization involves cleaning user inputs to remove potentially malicious scripts, protecting against XSS attacks.

Correct Answer: To identify, assess, and prioritize risks

Cybersecurity risk management aims to systematically address risks to minimize their impact on the organization.

Correct Answer: SMTP with TLS

SMTP with TLS encrypts email transmissions, enhancing the security of email communications.

Correct Answer: To filter incoming and outgoing network traffic

Firewalls control access to networks by allowing or blocking data packets based on defined security rules.

Correct Answer: To steal sensitive information

Phishing attempts to trick individuals into providing confidential data, such as usernames and passwords, often through deceptive emails.

Correct Answer: Reduced likelihood of security incidents caused by employees

Training employees on security best practices can significantly lower the risk of incidents caused by human error.

Correct Answer: Vulnerability Assessment and Penetration Testing

VAPT refers to the combined practice of identifying vulnerabilities and testing systems for security weaknesses.

Correct Answer: Insider threat

Insider threats arise when current or former employees exploit their access to compromise sensitive information or systems.

Correct Answer: They help protect against unauthorized access.

Strong passwords make it more difficult for attackers to gain unauthorized access to accounts and systems.