TMP Security & Risk Management 2

Question 1

In telecommunications security, what distinguishes a 'threat' from a 'vulnerability'?

Accepted Answer

A threat is a potential harmful event or actor; a vulnerability is a weakness that could be exploited

Answer

A threat is any potential event or actor that could harm a system, while a vulnerability is a specific weakness or gap that a threat can exploit to cause damage.

Question 2

Which multi-factor authentication (MFA) method is generally considered the most secure for protecting telecommunications management systems?

Accepted Answer

Hardware security key (FIDO2/U2F)

Answer

Hardware security keys using FIDO2/U2F are resistant to phishing and man-in-the-middle attacks because they use cryptographic verification tied to the specific site, making them the strongest commonly available MFA option.

Question 3

What is the primary security benefit of network segmentation in a telecommunications environment?

Accepted Answer

It limits the lateral spread of an attack by isolating network zones

Answer

By dividing the network into isolated segments, network segmentation ensures that if one segment is compromised, attackers cannot freely move to other critical systems, containing the blast radius of a breach.

Question 4

What does SIEM stand for, and what is its role in telecommunications security?

Accepted Answer

Security Information and Event Management; aggregates and analyzes log data to detect threats

Answer

SIEM (Security Information and Event Management) collects and correlates log data from across the network to provide real-time analysis of security events and support threat detection and compliance reporting.

Question 5

Which type of firewall provides the deepest inspection by analyzing traffic at the application layer (Layer 7)?

Accepted Answer

Next-Generation Firewall (NGFW)

Answer

A Next-Generation Firewall (NGFW) performs deep packet inspection at the application layer, identifying applications and users rather than just ports and protocols, enabling more granular and effective security policies.

(TMP) Telecommunications Management Professional Practice Test

(TMP) Telecommunications Management Professional Practice Test

TMP Security & Risk Management 2