Question 1

Users should be given access only to resources required to do their job.

Accepted Answer

This principle is known as the Principle of Least Privilege (PoLP), which states that users should only have access to the resources necessary for their roles to minimize potential security risks.

Question 2

Separation of Duties is considered a detective administrative control.

Accepted Answer

Separation of Duties is considered a preventative administrative control.

Question 3

All default administrator passwords on the devices should be left in place.

Accepted Answer

You should change all default administrator passwords on the devices.

Question 4

RAID 1 is also called disk striping.

Accepted Answer

RAID 0 is also called disk striping.

Question 5

HSM is a type of backup management system that provides a continuous online backup.

Accepted Answer

The answer of HSM is a type of backup management...

Question 6

Data purging uses a method such as degaussing to make the old data unavailable even with forensics.

Accepted Answer

Data purging involves permanently erasing or destroying data from storage devices in such a way that it cannot be recovered, even with advanced forensic techniques. Degaussing, which demagnetizes the magnetic medium, is one method used in data purging to ensure the data is completely inaccessible.

Question 7

MTBF describes the average amount of time it takes to get a device fixed and back online.

Accepted Answer

Mean Time Between Failure (MTBF), which describes how often a component fails on average

Question 8

The first step in the incident response process is respond.

Accepted Answer

The first step is to detect the incident.

Question 9

All changes should be formally requested.

Accepted Answer

In project management and many business contexts, formal change requests are necessary to ensure that all changes are documented, evaluated, and approved before implementation, maintaining project scope and integrity.

Question 10

Trusted Recoveries set a baseline for normal user errors, and violations exceeding that threshold will be recorded for analysis of why the violations occurred.

Accepted Answer

Clipping levels set a baseline for normal user errors, and violations exceeding that threshold will be recorded for analysis of why the violations occurred.

Question 11

Which principle is valuable in deterring fraud?

Accepted Answer

Separation of Duties is a key principle in deterring fraud by ensuring that no single individual has control over all aspects of any critical task. This reduces the risk of fraudulent activities by requiring collaboration for critical tasks, making it harder for a single person to commit fraud.

Question 12

Which form of RAID requires at least three hard drives?

Accepted Answer

RAID 5 requires at least three hard drives because it uses block-level striping with distributed parity, which needs a minimum of three disks to store data and parity information.

Question 13

Which of the following is composed of high-capacity storage devices connected by a high-speed private network?

Accepted Answer

SAN (Storage Area Network) is composed of high-capacity storage devices that are connected by a high-speed private network, allowing for efficient data storage and access among multiple servers.

Question 14

Which of the following describes how often a component fails on average?

Accepted Answer

MTBF, or Mean Time Between Failures, describes the average time between failures of a system or component, indicating its reliability.

Question 15

What is the final step in the incident response process?

Accepted Answer

The final step in the incident response process is "Recover," which involves restoring systems and operations to normal after an incident has been resolved.

Question 16

Which of the following is NOT a part of system hardening?

Accepted Answer

Unnecessary services should be disabled.

Question 17

Which of the following protocols is recommended for remote management?

Accepted Answer

SSH (Secure Shell) is recommended for remote management because it provides a secure channel over an unsecured network by using encryption, which makes it much safer than Telnet, FTP, or ICMP for managing devices remotely.

Question 18

At what temperature does damage start occurring to magnetic media?

Accepted Answer

The answer of At what temperature does damage start occurring...

Question 19

Which of the following is an agreement about the capability of the support system to respond to problems within a certain time frame?

Accepted Answer

SLA (service-level agreement)

Quiz 8: Operations Security