Which of the following is not part of the STRIDE model?
A Spoofing
B Tampering
C Resiliency
D Information disclosure
C
Which of the following is not one of the three types of training?
A Initial
B Recurring
C Refresher
D Integral
D
Which of the following has not been attributed as the cause of lost capabilities due to DoS?
A Changing regulatory motif
B Squirrels
C Hackers
D Construction equipment
A
What is the lowest tier of datacenter redundancy, according to the Uptime Institute?
AV
B1
C4
DC
B
Which of the following techniques for ensuring cloud datacenter storage resiliency uses parity bits and disk striping?
A Cloud-bursting
B RAID
C Data dispersion
D SAN
B
What is the amount of fuel that should be on hand to power generators for backup datacenter power, in all tiers,
according to the Uptime Institute?
A As much as needed to ensure all systems may be gracefully shut down and data securely stored
B1
C 1,000 gallons
D 12 hours
D
Which of the following is part of the STRIDE model?
A Redundancy
B Resiliency
C Rijndael
D Repudiation
D
What type of redundancy can we expect to find in a datacenter of any tier?
A Full power capabilities
B All operational components
C All infrastructure
D Emergency egress
D
,Which of the following is not a feature of SAST?
A Highly skilled, often expensive outside consultants
B "White-box" testing
C Team-building efforts
D Source code review
C
What is often a major challenge to getting both redundant power and communications utility connections?
A Expense
B Location of many datacenters
C Personnel deployment
D Carrying medium
B
Which kind of hypervisor would malicious actors prefer to attack, ostensibly because it offers a greater attack
surface?
A Cat IV
B Converged
C Bare metal
D Type II
D
Which of the following is not a feature of a secure KVM component?
A Keystroke logging
B Sealed exterior case
C Welded chipsets
D Push-button selectors
A
Which of the following is not a feature of DAST?
A Testing in runtime
B User teams performing executable testing
C "Black-box" testing
D Binary inspection
D
Which resiliency technique attenuates the possible loss of functional capabilities during contingency operations?
A Metered usage
B Cross-training
C Raised floors
D Proper placement of HVAC temperature measurements tools
B
The baseline should cover which of the following?
A All regulatory compliance requirements
B A process for version control
C Data breach alerting and reporting
D As many systems throughout the organization as possible
D
Which tool can reduce confusion and misunderstanding during a BC/DR response?
A Checklist
B Call tree
C Flashlight
D Controls matrix
A
In addition to battery backup, a UPS can offer which capability?
A Confidentiality
B Communication redundancy
, C Line conditioning
D Breach alert
C
Which characteristic of liquid propane increases its desirability as a fuel for backup generators?
A Does not spoil
B Flavor
C Burn rate
D Price
A
Which form of BC/DR testing has the most impact on operations?
A Full test
B Dry run
C Tabletop
D Structured test
A
Which characteristic of automated patching makes it attractive?
A Cost
B Capability to recognize problems quickly
C Noise reduction
D Speed
D
How often should the CMB meet?
A Every week
B Often enough to address organizational needs and attenuate frustration with delay
C Whenever regulations dictate
D Annually
B
The CMB should include representations from all of the following offices except:
A Regulators
B Management
C Security office
D IT department
A
Deviations from the baseline should be investigated and ________.
A Revealed
B Encouraged
C Documented
D Enforced
C
Maintenance mode requires all of these actions except:
A Remove all active production instances
B Initiate enhanced security controls
C Prevent new logins
D Ensure logging continues
B
For performance purposes, OS monitoring should include all of the following except:
A Print spooling
B Disk space
C Disk I/O usage
D CPU usage
A
Which form of BC/DR testing has the least impact on operations?
A Full test
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller ubuntu. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
