TMP Security & Risk Management 3

Question 1

What is a zero-day vulnerability in the context of telecommunications security?

Accepted Answer

A flaw that is unknown to the vendor and has no available patch at the time of discovery or exploitation

Answer

A zero-day vulnerability is an unknown or unpatched flaw that attackers can exploit before the vendor or security community has had any time ('zero days') to develop and release a fix.

Question 2

Which security standard specifically governs the protection of cardholder data and applies to telecommunications companies that process payment transactions?

Accepted Answer

PCI DSS (Payment Card Industry Data Security Standard)

Answer

PCI DSS (Payment Card Industry Data Security Standard) defines security requirements for any organization that stores, processes, or transmits cardholder data, including telecommunications providers handling customer billing.

Question 3

What is the primary security purpose of a DMZ (Demilitarized Zone) in a telecommunications network architecture?

Accepted Answer

To provide a buffer zone between the public internet and internal networks where publicly accessible services can be hosted securely

Answer

A DMZ is a network segment that sits between the untrusted internet and the trusted internal network, allowing public-facing services (e.g., web portals, DNS) to be accessible while protecting internal resources from direct exposure.

Question 4

In cybersecurity, what is social engineering and why is it particularly dangerous for telecommunications organizations?

Accepted Answer

Manipulating people through deception to divulge confidential information or perform insecure actions

Answer

Social engineering exploits human psychology rather than technical vulnerabilities, making it dangerous because even the most technically secure telecommunications systems can be compromised by deceiving an employee.

Question 5

What does RBAC stand for, and how does it benefit access control in telecommunications management systems?

Accepted Answer

Role-Based Access Control; assigns permissions based on job roles rather than individual users

Answer

Role-Based Access Control (RBAC) simplifies permission management by assigning rights to predefined roles (e.g., network engineer, administrator), ensuring users only access resources relevant to their responsibilities.

(TMP) Telecommunications Management Professional Practice Test

(TMP) Telecommunications Management Professional Practice Test

TMP Security & Risk Management 3