TMP Security & Risk Management 3

Question 1

What is a zero-day vulnerability in the context of telecommunications security?

Accepted Answer

A flaw that is unknown to the vendor and has no available patch at the time of discovery or exploitation

Answer

A vulnerability that has been patched within zero days of discovery

Answer

A network configuration error that causes zero downtime

Answer

A low-severity vulnerability that poses no immediate risk

Question 2

Which security standard specifically governs the protection of cardholder data and applies to telecommunications companies that process payment transactions?

Accepted Answer

PCI DSS (Payment Card Industry Data Security Standard)

Answer

ISO 27001

Answer

HIPAA

Answer

SOX (Sarbanes-Oxley Act)

Question 3

What is the primary security purpose of a DMZ (Demilitarized Zone) in a telecommunications network architecture?

Accepted Answer

To provide a buffer zone between the public internet and internal networks where publicly accessible services can be hosted securely

Answer

To increase network throughput by offloading routing from core routers

Answer

To store backup configurations for network devices

Answer

To isolate wireless access points from wired infrastructure

Question 4

In cybersecurity, what is social engineering and why is it particularly dangerous for telecommunications organizations?

Accepted Answer

Manipulating people through deception to divulge confidential information or perform insecure actions

Answer

Automating network configurations using scripts

Answer

Engineering social media platforms for customer engagement

Answer

Using machine learning to optimize network traffic patterns

Question 5

What does RBAC stand for, and how does it benefit access control in telecommunications management systems?

Accepted Answer

Role-Based Access Control; assigns permissions based on job roles rather than individual users

Answer

Remote Broadband Access Control; manages VPN connections

Answer

Risk-Based Authentication and Compliance; scores user risk before granting access

Answer

Redundant Backup and Continuity; ensures failover for critical systems

Question 6

What is the primary goal of an Incident Response Plan (IRP) for a telecommunications service provider?

Accepted Answer

To define structured procedures for detecting, containing, eradicating, and recovering from security incidents to minimize impact

Answer

To prevent all security incidents from occurring

Answer

To eliminate the need for a Security Operations Center (SOC)

Answer

To satisfy marketing requirements for security certifications

Question 7

Which encryption standard is most commonly used to secure wireless telecommunications networks (Wi-Fi) as of current best practices?

Accepted Answer

WPA3 (Wi-Fi Protected Access 3)

Answer

WEP (Wired Equivalent Privacy)

Answer

WPA (Wi-Fi Protected Access)

Answer

WPA2 with TKIP