Mixed Deck — All COBRA Topics Flashcards

What is the role of de-escalation techniques in Console Operator Basic Requirements Assessment security protocols?

Answer: To reduce the intensity of a conflict situation and prevent escalation to violence

De-escalation techniques use communication skills, body language, and calm demeanor to reduce tension and aggression, resolving situations peacefully before they escalate to physical confrontation.

A COBRA operator witnesses a colleague falsifying a log entry. The correct action is to:

Answer: Report the falsification immediately to a supervisor or through the proper chain of command

Falsified log entries are a serious integrity breach that must be reported through the proper chain of command immediately.

Broadband is defined as

Answer: A very high speed 'always-on' service connection allowing large amounts of information to be conveyed quickly, such as data, graphics files or video

The answer is "A very high speed 'always-on' service connection allowing large amounts of information to be conveyed quickly, such as data, graphics files or video." This answer accurately describes broadband as a service that provides high-speed internet access that allows for the quick transmission of large amounts of data, graphics files, or video. It encompasses the other options mentioned in the question, such as a network with high bandwidth and any kind of fast internet access.

A COBRA operator notices a door that should be secured is propped open. The correct response is to:

Answer: Immediately notify security personnel to investigate and secure the door, then document the event

An unsecured door is a physical security breach that must be immediately reported, investigated, and documented.

What does the term 'layered security' mean in the context of physical security?

Answer: Using multiple overlapping security measures so that defeating one layer does not compromise overall security

Layered security means using multiple overlapping measures so that defeating one layer does not fully compromise the overall security posture.

What is the purpose of access controls in Console Operator Basic Requirements Assessment access control systems?

Answer: To ensure only authorized users can view or modify sensitive data and systems

Access controls restrict system and data access to authorized personnel, protecting sensitive information from unauthorized viewing, modification, or deletion.

Which of the following is a best practice for written communication in Console Operator Basic Requirements Assessment?

Answer: Using clear, concise language organized in a logical structure

Effective written communication uses clear, concise language with logical organization, appropriate formatting, and consideration of the audience to ensure the message is understood.

Which backup strategy in Console Operator Basic Requirements Assessment provides the most comprehensive data protection?

Answer: Regular incremental backups combined with periodic full backups

A combination of regular incremental backups (capturing changes) and periodic full backups provides comprehensive data protection, balancing storage efficiency with recovery capability.

In Console Operator Basic Requirements Assessment, what is the most effective approach to active listening during professional interactions?

Answer: Maintaining eye contact, paraphrasing, and asking clarifying questions

Active listening involves fully concentrating on the speaker, demonstrating engagement through eye contact and body language, paraphrasing to confirm understanding, and asking relevant questions.

What obligation does a COBRA operator have regarding personal conflicts of interest?

Answer: Disclose conflicts of interest to a supervisor and recuse themselves from related duties as required

Operators must disclose conflicts of interest to a supervisor and recuse themselves from affected duties to maintain impartiality.

Which of the following is a key component of professional appearance standards for a COBRA console operator?

Answer: Wearing uniforms or identification as required by facility policy at all times while on duty

COBRA operators must wear required uniforms or identification at all times while on duty as part of professional appearance standards.

When a COBRA operator identifies a blind spot in the facility's camera coverage, the appropriate action is to:

Answer: Document the coverage gap and report it to a supervisor so a physical patrol or additional camera can be assigned to that area

Coverage gaps must be documented and escalated to a supervisor so a patrol assignment or camera addition can address the physical security vulnerability.

In Console Operator Basic Requirements Assessment, why is incident reporting knowledge important for professional certification?

Answer: It demonstrates competence and ensures practitioners meet established standards

Professional certification in specific knowledge areas demonstrates that practitioners have met established competency standards, ensuring quality of service and public protection.

Lisa is enabling NTP on some servers within the DMZ. Which of the following use cases is she MOST likely supporting this action?

Answer: Provide time synchronization

The Network Time Protocol (NTP) provides time synchronization services, so enabling NTP on servers would meet this use case. The Real-time Transport Protocol (RTP) delivers audio and video over IP networks and Secure RTP (SRTP) provides encryption, message authentication, and integrity for RTP. Protocols such as Simple Mail Transfer Protocol (SMTP), Post Office Protocol v3 (POP3), and Internet Message Access Protocol version 4 (IMAP4) are used for email. Encrypting data isn’t relevant to time synchronization services provided by NTP.

What is the primary consideration when implementing new technology in Console Operator Basic Requirements Assessment?

Answer: Ensuring compatibility with existing systems and meeting user requirements

Successful technology implementation requires ensuring compatibility with existing infrastructure, meeting actual user needs, providing adequate training, and following a structured deployment plan.

What is the primary purpose of a security perimeter in a COBRA-monitored facility?

Answer: To define the outer boundary of protection and deter, detect, or delay unauthorized entry

A security perimeter defines the outer boundary of protection and is designed to deter, detect, or delay unauthorized entry.

What is the primary consideration when implementing new technology in Console Operator Basic Requirements Assessment?

Answer: Ensuring compatibility with existing systems and meeting user requirements

Successful technology implementation requires ensuring compatibility with existing infrastructure, meeting actual user needs, providing adequate training, and following a structured deployment plan.

Your organization hosts a web server and wants to increase its security. You need to separate all web-facing traffic from internal network traffic. Which of the following provides the BEST solution?

Answer: DMZ

A demilitarized zone (DMZ) is a buffered zone between a private network and the Internet, and it will separate the web server’s web-facing traffic from the internal network. You can use a virtual local area network (VLAN) to group computers together based on job function or some other administrative need, but it is created on switches in the internal network. A firewall does provide protection for the web server, but doesn’t necessarily separate the web-facing traffic from the internal network. A web application firewall (WAF) protects a web server from incoming attacks, but it does not necessarily separate Internet and internal network traffic.

Management within your organization wants to ensure that switches are not susceptible to switching loop problems. Which of the following protocols is the BEST choice to meet this need?

Answer: RSTP

Rapid STP (RSTP) prevents switching loop problems and should be enabled on the switches to meet this need. A flood guard on a switch helps prevent a media access control (MAC) flood attack. Simple Network Management Protocol version 3 (SNMPv3) is used to manage and monitor network devices. The Secure Real-time Transport Protocol (SRTP) provides encryption, message authentication, and integrity for video and voice data.

Your organization’s security policy requires that PII data-in-transit must be encrypted. Which of the following protocols would BEST meet this requirement?

Answer: SSH

You can use Secure Shell (SSH) to encrypt Personally Identifiable Information (PII) data when transmitting it over the network (data-in-transit). Secure File Transfer Protocol (SFTP) uses SSH to encrypt File Transfer Protocol (FTP) traffic. FTP, Simple Mail Transfer Protocol (SMTP), and Hypertext Transfer Protocol (HTTP) transmit data in cleartext unless they are combined with an encryption protocol.