Question 1

Which of the following is an example of a security compliance best practice in the context of auditing network devices?

Options :

A : Configuring strong passwords for device access

B : Disabling all logging on network devices

C : Allowing all traffic to pass through the network devices

D : Using default configurations for network devices

Answer: A

Question 2

Which two basic metrics should be taken into consideration when assigning a severity to a vulnerability during an assessment? (Choose 2.)

Options :

A : The likelihood that an adversary can and will exploit the vulnerability

B : The impacts that an exploit of the vulnerability will have on the organization

C : The time involved in choosing replacement software to replace older systems

D : The age of the hardware running the software that contains the vulnerability

Answer: A,B

Question 3

Which of the following is the most effective way to mitigate the risk of a malicious insider threat?

Options :

A : Implementing strict access controls and permissions

B : Conducting regular security awareness training for all employees

C : Implementing intrusion detection systems

D : Implementing strong encryption for sensitive data

Answer: A

Question 4

Which of the following is a reliable method for authenticating users in an Identity and Access Management system?

Options :

A : Password-based authentication

B : Captcha-based authentication

C : Biometric authentication

D : IP-based authentication

Answer: A

Question 5

Which of the following security compliance frameworks is specifically designed to provide guidelines for the protection of sensitive cardholder data?

Options :

A : Payment Card Industry Data Security Standard (PCI DSS)

B : Control Objectives for Information and Related Technology (COBIT)

C : International Organization for Standardization (ISO) 27001

D : National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)

Answer: A

Free CCST-Cybersecurity Mock Exam – Practice Online Confidently