Mixed Deck — All ALISON Topics Flashcards
100 cards from real ALISON practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 20 Mixed Deck — All ALISON Topics flashcards as text
What is the primary purpose of industry regulations in this field?
Answer: To protect the public and ensure consistent professional standards
Industry regulations are primarily designed to protect the public by ensuring professionals meet consistent standards of competence and conduct.
What common challenge do professionals face when applying Cloud Computing & Virtualization principles?
Answer: Balancing theoretical best practices with practical constraints and real-world conditions
Professionals commonly face the challenge of adapting theoretical best practices in Cloud Computing & Virtualization to the practical constraints and varying conditions encountered in real-world settings.
Which term describes a highly targeted phishing attack aimed at a specific individual or organization?
Answer: Spear phishing
Spear phishing targets specific individuals using personalized information to make the attack more convincing than generic phishing campaigns.
What is 'network forensics' focused on?
Answer: Capturing and analyzing network traffic to reconstruct events and identify attackers
Network forensics involves monitoring and analyzing network packets, flows, and logs to reconstruct attack timelines and identify malicious activity.
What is the most important competency assessed in Database Management & Security for professionals in this field?
Answer: Applied knowledge and practical problem-solving ability
Database Management & Security assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.
What countermeasure best protects against phishing attacks in an organization?
Answer: Implementing multi-factor authentication and employee phishing simulations
Combining MFA (to limit damage if credentials are stolen) with simulated phishing training significantly reduces organizational phishing risk.
What is 'jailbreaking' a mobile device?
Answer: Exploiting OS vulnerabilities to remove manufacturer/carrier restrictions and gain root access
Jailbreaking (iOS) or rooting (Android) involves exploiting OS vulnerabilities to gain privileged root access, bypassing built-in security controls and vetting mechanisms.
Which principle of influence do attackers exploit when they create a sense of urgency in phishing emails?
Answer: Scarcity
Scarcity and urgency pressure victims into acting quickly without thinking critically, a common manipulation tactic in social engineering.
What is the correct order of volatility in digital evidence collection?
Answer: CPU registers → RAM → Network → Disk
Evidence should be collected from most volatile (CPU registers, cache) to least volatile (disk) to preserve the most transient data first.
What is the most important competency assessed in Application Security & Development for professionals in this field?
Answer: Applied knowledge and practical problem-solving ability
Application Security & Development assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.
Which best describes the scope of Access Control & Identity Management in professional practice?
Answer: A comprehensive area covering both theoretical foundations and practical applications
Access Control & Identity Management encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.
What is the relationship between Vulnerability Assessment & Penetration Testing and ethical professional conduct?
Answer: Ethical considerations are integrated into all aspects of professional practice in this area
Ethical considerations are deeply integrated into Vulnerability Assessment & Penetration Testing, as professional conduct and integrity underpin all aspects of practice in this field.
What does a VPN provide in terms of network security?
Answer: Encrypted communication tunnels over public networks
A VPN (Virtual Private Network) creates encrypted communication tunnels over public networks, protecting data confidentiality during transmission.
What is 'shoulder surfing' as a social engineering technique?
Answer: Observing someone entering passwords or PINs by looking over their shoulder
Shoulder surfing involves physically observing a target as they input sensitive data such as passwords, PINs, or credit card numbers.
What is a DMZ (Demilitarized Zone) in network architecture?
Answer: A network segment between internal and external networks that hosts public-facing services
A DMZ is a network segment that sits between the internal network and external networks, hosting public-facing services while protecting the internal network from direct exposure.
What is 'anti-forensics' and what challenge does it present to investigators?
Answer: Techniques used by attackers to destroy, hide, or alter digital evidence to impede investigations
Anti-forensics includes wiping tools, timestamp manipulation, and encryption to make evidence collection harder or impossible for investigators.
What is the recommended approach to staying current in Access Control & Identity Management?
Answer: Regular professional development, industry publications, and peer collaboration
Staying current in Access Control & Identity Management requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.
What is a 'forensic image' in digital forensics?
Answer: A bit-for-bit copy of a storage device including unallocated space
A forensic image is an exact sector-by-sector copy of a storage medium that captures all data including deleted files and unallocated space.
What is the relationship between Cloud Computing & Virtualization and ethical professional conduct?
Answer: Ethical considerations are integrated into all aspects of professional practice in this area
Ethical considerations are deeply integrated into Cloud Computing & Virtualization, as professional conduct and integrity underpin all aspects of practice in this field.
What is the relationship between Threat Detection & Incident Response and ethical professional conduct?
Answer: Ethical considerations are integrated into all aspects of professional practice in this area
Ethical considerations are deeply integrated into Threat Detection & Incident Response, as professional conduct and integrity underpin all aspects of practice in this field.