Question 1

Which of the following is a key requirement for conducting a security compliance audit?

Options :

A : A comprehensive understanding of security compliance standards and regulations

B : A certified auditor with expertise in security compliance

C : Compliance monitoring tools and systems

D : A detailed audit plan and checklist

Answer: A

Question 2

Which of the following is a common security threat that uses social engineering techniques to deceive users into providing sensitive information?

Options :

A : Phishing

B : DDoS

C : XSS

D : Ransomware

Answer: A

Question 3

Which of the following is a best practice for securing sensitive data in transit?

Options :

A : Using HTTP over TLS (HTTPS)

B : Using FTP

C : Using Telnet

D : Using unencrypted HTTP

Answer: A

Question 4

What should you create to prevent spoofing of the internal network?

Options :

A : A NAT rule

B : An ACL

C : A record in the host file

D : A DNS record

Answer: B

Question 5

What is the purpose of a firewall?

Options :

A : To prevent unauthorized access to a network

B : To optimize network performance

C : To provide secure remote access

D : To detect and respond to security incidents

Answer: A

Free 100-160 Mock Exam – Practice Online Confidently