CSX Protect and Secure Systems and Data 1

Question 1

Which technology is essential for protecting data in transit?

Accepted Answer

Encryption

Answer

Encryption is the process of transforming data into a coded format to prevent unauthorized access. When data is in transit, such as over networks or the internet, encryption protocols like TLS/SSL ensure that even if intercepted, the data remains unreadable and secure. This technology is essential for protecting the confidentiality and integrity of information as it moves between systems.

Question 2

Which access control model uses roles to determine access permissions?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Role-Based Access Control (RBAC) is an access control model that assigns permissions to users based on their specific roles within an organization. Instead of granting individual access rights, RBAC groups users with similar job functions and provides them with the necessary access for their assigned roles. This simplifies access management, enhances security, and ensures users only have access relevant to their duties.

Question 3

What is the main purpose of a firewall in network security?

Accepted Answer

Filter network traffic

Answer

A firewall acts as a security barrier between a trusted internal network and untrusted external networks, such as the internet. Its main purpose is to monitor and control incoming and outgoing network traffic based on predefined security rules. By filtering traffic, firewalls prevent unauthorized access and block malicious data from entering or leaving the network.

Question 4

Which of the following is used to detect unauthorized changes in files?

Accepted Answer

FIM

Answer

File Integrity Monitoring (FIM) systems are designed to continuously monitor critical operating system, application, and configuration files for unauthorized or unexpected changes. By comparing current file states against a known baseline, FIM can detect modifications that might indicate a security breach, malware infection, or misconfiguration. This proactive detection helps maintain system integrity and security.

Question 5

Which term refers to limiting user access to only what is necessary for their job?

Accepted Answer

Least privilege

Answer

The principle of least privilege dictates that users, programs, or processes should be granted only the minimum necessary access rights to perform their legitimate functions. This security best practice minimizes the potential damage from a compromised account or system, as an attacker would have limited permissions even if they gained access. It significantly reduces the attack surface and potential impact of security incidents.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Protect and Secure Systems and Data 1