Objective 4.1

Question 1

Which term describes converting readable data into a coded format to protect it from unauthorized access?
- Encryption
- Authentication
- Hashing
- Authorization

Answer 1

Encryption | Practical Use: Protecting credit card numbers during online purchases. | Explanation: Encryption secures data by transforming it into unreadable code unless decrypted with the proper key. | Objective: 4.1 – Logical security | Follow-up Question: What’s the difference between encryption and hashing?

Question 2

Which type of encryption protects information while it is being transferred across a network?
- Data archived
- Data in transit
- Data replicated
- Data at rest

Answer 2

Data in transit | Practical Use: HTTPS encrypting web traffic to prevent eavesdropping. | Explanation: Data in transit encryption protects data as it moves between endpoints. | Objective: 4.1 – Logical security | Follow-up Question: What protocol is commonly used to encrypt data in transit on websites?

Question 3

Which type of encryption protects stored files on a hard drive or USB stick?
- Data at rest
- Data in transit
- Data cached
- Data mirrored

Answer 3

Data at rest | Practical Use: Full Disk Encryption (BitLocker) securing a laptop hard drive. | Explanation: Encryption at rest prevents unauthorized access to stored information. | Objective: 4.1 – Logical security | Follow-up Question: Why is encrypting laptops especially important for organizations?

Question 4

What is the primary purpose of a digital certificate?
- Provide physical device authentication
- Encrypt stored files
- Generate hashing algorithms
- Verify identity and enable secure communication

Answer 4

Verify identity and enable secure communication | Practical Use: Websites using SSL/TLS certificates to prove legitimacy. | Explanation: Certificates bind a public key to an entity to ensure trust in communications. | Objective: 4.1 – Certificates | Follow-up Question: What’s the difference between a trusted CA certificate and a self-signed one?

Question 5

Which framework manages the creation, distribution, and revocation of digital certificates?
- SSL
- RADIUS
- Public Key Infrastructure (PKI)
- LDAP

Answer 5

Public Key Infrastructure (PKI) | Practical Use: PKI supports digital signatures and secure web browsing. | Explanation: PKI provides the structure for managing certificates and keys. | Objective: 4.1 – Certificates | Follow-up Question: What role does a Certificate Authority (CA) play in PKI?

Question 6

Which type of certificate is created and signed by the same organization using it?
- Domain certificate
- Self-signed certificate
- PKI certificate
- CA-issued certificate

Answer 6

Self-signed certificate | Practical Use: Internal testing environments. | Explanation: Self-signed certificates encrypt data but are not trusted by outside parties. | Objective: 4.1 – Certificates | Follow-up Question: Why are self-signed certificates not recommended for public websites?

Question 7

Which framework manages digital identities and controls user access to resources?
- IAM (Identity and Access Management)
- PKI
- LDAP
- MFA

Answer 7

IAM (Identity and Access Management) | Practical Use: Controlling employee access to corporate applications. | Explanation: IAM enforces policies to ensure the right people have the right access. | Objective: 4.1 – IAM | Follow-up Question: How does IAM help with regulatory compliance?

Question 8

Which process validates a user’s identity before allowing system access?
- Authentication
- Role assignment
- Encryption
- Authorization

Answer 8

Authentication | Practical Use: Entering a password to log in to an account. | Explanation: Authentication ensures a person is who they claim to be. | Objective: 4.1 – IAM | Follow-up Question: What’s the difference between authentication and authorization?

Question 9

Which security method requires multiple factors such as a password and a fingerprint?
- SSO
- Role-based access
- MFA
- PKI

Answer 9

MFA | Practical Use: Banking apps requiring a password + SMS code. | Explanation: MFA strengthens security by requiring two or more verification methods. | Objective: 4.1 – IAM | Follow-up Question: What are the three categories of authentication factors?

Question 10

Which method allows a user to log in once and access multiple applications without re-entering credentials?
- RADIUS
- LDAP
- SSO
- MFA

Answer 10

SSO (Single Sign-On) | Practical Use: Logging into Microsoft 365 and gaining access to Outlook, Teams, and SharePoint. | Explanation: SSO reduces login fatigue and improves security. | Objective: 4.1 – IAM | Follow-up Question: Why can SSO create a single point of failure if not secured?

Question 11

Which protocol provides centralized authentication, authorization, and accounting (AAA)?
- LDAP
- PKI
- TACACS+
- RADIUS

Answer 11

RADIUS | Practical Use: ISPs verifying customer logins. | Explanation: RADIUS authenticates users and tracks usage across networks. | Objective: 4.1 – IAM | Follow-up Question: How does RADIUS differ from TACACS+?

Question 12

Which protocol is designed to access and maintain distributed directory information services?
- SAML
- PKI
- RADIUS
- LDAP

Answer 12

LDAP | Practical Use: Managing user accounts in Active Directory. | Explanation: LDAP organizes and provides access to directory-based user info. | Objective: 4.1 – IAM | Follow-up Question: What port does LDAP typically use?

Question 13

Which open standard allows identity providers to share authentication data with service providers?
- MFA
- PKI
- SAML
- LDAP

Answer 13

SAML | Practical Use: Using Google to log into a third-party application. | Explanation: SAML exchanges authentication/authorization information between systems. | Objective: 4.1 – IAM | Follow-up Question: How does SAML help with federated identity management?

Question 14

Which protocol separates authentication, authorization, and accounting for granular access control?
- LDAP
- SAML
- TACACS+
- RADIUS

Answer 14

TACACS+ | Practical Use: Managing admin access to Cisco network devices. | Explanation: TACACS+ provides flexible, detailed access control. | Objective: 4.1 – IAM | Follow-up Question: Why might TACACS+ be preferred over RADIUS in device management?

Question 15

Which authentication method generates time-limited codes that expire after a short duration?
- RBAC
- Time-based authentication
- MFA
- SAML

Answer 15

Time-based authentication | Practical Use: Using Google Authenticator for one-time passcodes. | Explanation: Time-based codes reduce risk by limiting the window for unauthorized use. | Objective: 4.1 – IAM | Follow-up Question: How does time-based authentication strengthen MFA?

Question 16

Which concept determines what actions a user can take after login?
- MFA
- Authentication
- Encryption
- Authorization

Answer 16

Authorization | Practical Use: A user can view files but not delete them. | Explanation: Authorization assigns permissions to users after authentication. | Objective: 4.1 – IAM | Follow-up Question: How do authorization and least privilege relate?

Question 17

Which principle requires that users only have the minimum access needed to perform their jobs?
- Least privilege
- MFA
- SSO
- RBAC

Answer 17

Least privilege | Practical Use: A finance clerk can only access payroll, not HR or IT systems. | Explanation: Least privilege reduces accidental/malicious misuse of access. | Objective: 4.1 – IAM | Follow-up Question: What is a risk of not applying least privilege?

Question 18

Which method assigns permissions based on a person’s job responsibilities?
- MFA
- RBAC
- RADIUS
- SSO

Answer 18

RBAC (Role-Based Access Control) | Practical Use: HR staff can access HR systems, but not finance. | Explanation: RBAC groups permissions by role, simplifying admin. | Objective: 4.1 – IAM | Follow-up Question: How does RBAC simplify large organizations?

Question 19

Which technology uses GPS or Wi-Fi boundaries to control access or trigger actions?
- Geofencing
- RBAC
- PKI
- RADIUS

Answer 19

Geofencing | Practical Use: Banking app requiring login only within a country. | Explanation: Geofencing sets a virtual perimeter for access control. | Objective: 4.1 – Logical security | Follow-up Question: Why might geofencing be useful in BYOD policies?

Question 20

Which physical security tool provides real-time monitoring and acts as a deterrent to intruders?
- Locks
- Honeypots
- Geofencing
- Security cameras

Answer 20

Security cameras | Practical Use: CCTV in data centers. | Explanation: Cameras deter unauthorized entry and record evidence. | Objective: 4.1 – Physical security | Follow-up Question: What is a potential limitation of relying only on cameras?

Question 21

Which physical measure controls who can physically access rooms or devices?
- RBAC
- Cameras
- MFA
- Locks

Answer 21

Locks | Practical Use: Badge-controlled server room doors. | Explanation: Locks prevent unauthorized physical access to sensitive areas. | Objective: 4.1 – Physical security | Follow-up Question: How can electronic locks enhance security compared to traditional locks?

Question 22

Which decoy system is designed to attract attackers and study their methods?
- IDS
- Honeynet
- Honeypot
- Firewall

Answer 22

Honeypot | Practical Use: Fake server deployed to collect attacker behavior. | Explanation: Honeypots mislead attackers and gather intelligence. | Objective: 4.1 – Deception technologies | Follow-up Question: Why are honeypots risky if not isolated properly?

Question 23

Which decoy involves an entire network of honeypots to study coordinated attacks?
- DMZ
- VPN
- Honeynet
- IDS

Answer 23

Honeynet | Practical Use: Research environments studying attacker patterns. | Explanation: Honeynets expand deception with multiple fake systems. | Objective: 4.1 – Deception technologies | Follow-up Question: How can honeynets improve overall defense strategies?

Question 24

Which term describes the potential for loss if a threat exploits a vulnerability?
- Risk
- Exploit
- CIA
- Threat

Answer 24

Risk | Practical Use: Storing unencrypted data on laptops creates high risk. | Explanation: Risk = likelihood × impact of a security event. | Objective: 4.1 – Common terminology | Follow-up Question: How do organizations reduce risk?

Question 25

Which term refers to a weakness that could be exploited by a threat? - Risk - Threat - Vulnerability - Exploit

Answer 25

Vulnerability | Practical Use: An unpatched operating system. | Explanation: Vulnerabilities are flaws that attackers exploit. | Objective: 4.1 – Common terminology | Follow-up Question: What’s an example of a human vulnerability?

Question 26

Which term describes the method used to take advantage of a vulnerability? - Exploit - Risk - Vulnerability - Threat

Answer 26

Exploit | Practical Use: Malware exploiting an OS bug. | Explanation: Exploits are tools/techniques used against vulnerabilities. | Objective: 4.1 – Common terminology | Follow-up Question: How does patching help prevent exploits?

Question 27

Which term describes anything that can cause harm to data or systems? - Threat - CIA - Risk - Exploit

Answer 27

Threat | Practical Use: Hackers, insider misuse, or natural disasters. | Explanation: Threats can be intentional or accidental dangers. | Objective: 4.1 – Common terminology | Follow-up Question: How does threat differ from vulnerability?

Question 28

Which three principles form the CIA triad in cybersecurity? - Confidentiality, Integrity, Availability - Certification, Integrity, Access - Confidentiality, Information, Assets - Control, Isolation, Authentication

Answer 28

Confidentiality, Integrity, Availability | Practical Use: Ensuring sensitive data is private, accurate, and accessible. | Explanation: The CIA triad is the foundation of security goals. | Objective: 4.1 – Common terminology | Follow-up Question: Which part of CIA is impacted by a DoS attack?

Question 29

Which term refers to the geographic location where data is stored and processed? - GDPR - Data locality - PCI DSS - Risk

Answer 29

Data locality | Practical Use: EU laws requiring personal data to stay in EU servers. | Explanation: Data locality ensures compliance with regional storage laws. | Objective: 4.1 – Compliance | Follow-up Question: Why is data locality important for cloud providers?

Question 30

Which compliance framework protects credit card holder data? - GDPR - HIPAA - PCI DSS - Data locality

Answer 30

PCI DSS | Practical Use: Retailers securing card transactions. | Explanation: PCI DSS sets security standards for payment processing. | Objective: 4.1 – Compliance | Follow-up Question: What’s one PCI DSS control requirement?

Question 31

Which regulation governs personal data handling in the EU? - PCI DSS - GDPR - SOX - Data locality

Answer 31

GDPR | Practical Use: EU users must consent before data collection. | Explanation: GDPR protects personal data rights and regulates usage. | Objective: 4.1 – Compliance | Follow-up Question: What rights does GDPR give to individuals over their data?