CSX Protect and Secure Systems and Data 3

Question 1

An attacker exploits a software vulnerability before a patch is available. This type of attack is known as:

Accepted Answer

Zero-day exploit

Answer

A zero-day exploit targets a vulnerability that is unknown to the vendor or for which no patch yet exists.

Question 2

Which principle ensures that security controls applied to a system are proportional to the value and sensitivity of the data it holds?

Accepted Answer

Risk-based security

Answer

Risk-based security allocates controls according to the likelihood and impact of threats to a given asset, matching investment to actual risk.

Question 3

A server's SSL/TLS certificate expired and users receive browser warnings. Which PKI component should have triggered an alert BEFORE expiration?

Accepted Answer

Certificate lifecycle management system

Answer

A certificate lifecycle management system tracks expiration dates and sends renewal alerts, preventing unexpected certificate expirations.

Question 4

Which host-based control BEST prevents unauthorized software from executing on a corporate endpoint?

Accepted Answer

Application whitelisting

Answer

Application whitelisting permits only pre-approved executables to run, blocking unauthorized or malicious software by default.

Question 5

During a security assessment, a tester discovers that database credentials are stored in plaintext in a configuration file. Which control directly mitigates this?

Accepted Answer

Store credentials in a secrets management vault

Answer

A secrets management vault stores credentials encrypted and injects them at runtime, eliminating plaintext secrets in configuration files.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Protect and Secure Systems and Data 3