CSX Protect and Secure Systems and Data 5

Question 1

Which security model states that access decisions must be based on need-to-know in addition to security clearance?

Accepted Answer

Bell-LaPadula model

Answer

The Bell-LaPadula model enforces confidentiality by requiring both a valid security clearance and a need-to-know before a subject can access an object.

Question 2

An incident responder finds that ransomware encrypted files on a file server. Which data protection control would have MOST reduced recovery time?

Accepted Answer

Immutable offline backups

Answer

Immutable offline backups cannot be modified or deleted by ransomware, allowing rapid recovery without paying a ransom.

Question 3

A developer implements input validation to prevent SQL injection. This control is an example of:

Accepted Answer

Preventive control

Answer

Input validation stops malicious data from reaching the database layer before harm occurs, making it a preventive control.

Question 4

Which protocol provides certificate status in real time without requiring clients to download a full CRL?

Accepted Answer

OCSP (Online Certificate Status Protocol)

Answer

OCSP allows a client to query a responder for the revocation status of a specific certificate in real time, without processing an entire CRL.

Question 5

An organization classifies data as Public, Internal, Confidential, and Restricted. Which classification level would MOST likely require encryption in transit and at rest?

Accepted Answer

Restricted

Answer

Restricted data carries the highest sensitivity and regulatory risk, requiring the strongest controls including encryption both in transit and at rest.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Protect and Secure Systems and Data 5