CSX Protect and Secure Systems and Data 4

Question 1

An organization needs to ensure users accessing a VPN from personal devices meet minimum security posture requirements. Which technology BEST enforces this?

Accepted Answer

Network Access Control (NAC)

Answer

NAC evaluates device health and compliance posture before granting network access, allowing or quarantining devices based on policy.

Question 2

Which cryptographic property ensures that a sender cannot later deny having sent a message?

Accepted Answer

Non-repudiation

Answer

Non-repudiation, typically achieved via digital signatures, provides proof of origin so the sender cannot credibly deny authorship.

Question 3

A company stores customer PII in a cloud database. Which control ensures that even the cloud provider cannot read the data?

Accepted Answer

Implement client-side encryption with customer-managed keys

Answer

Client-side encryption with customer-managed keys means data is encrypted before reaching the cloud provider, so the provider never holds the plaintext or the keys.

Question 4

What is the MAIN security benefit of network micro-segmentation?

Accepted Answer

It reduces the attack surface by limiting lateral movement between workloads

Answer

Micro-segmentation enforces granular traffic policies between workloads, containing breaches and preventing attackers from moving laterally through the network.

Question 5

An administrator enables 'audit success and failure' for logon events on all Windows servers. What security function does this PRIMARILY support?

Accepted Answer

Detecting and investigating unauthorized access attempts

Answer

Auditing logon events creates a record of authentication attempts, enabling detection of unauthorized access and forensic investigation after an incident.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Protect and Secure Systems and Data 4