Question 1

What is the purpose of "Risk Mitigation"?

Options :

A : To completely eliminate all risks

B : To reduce the impact of identified risks through various controls and measures

C : To ignore risks in favor of focusing on performance

D : To increase the number of vulnerabilities in a system

Answer: B

Question 2

Which type of malware disguises itself as legitimate software to trick users into installing it?

Options :

A : Worm

B : Adware

C : Virus

D : Trojan horse

Answer: D

Question 3

How does a Distributed Denial-of-Service (DDoS) attack typically impact a network?

Options :

A : By stealing sensitive data through phishing attacks

B : By exploiting software vulnerabilities to gain unauthorized access

C : By encrypting data and demanding a ransom for decryption

D : By overwhelming network resources with excessive traffic

Answer: D

Question 4

ISO/IEC 27001 is part of a family of standards known as the ISO/IEC 27000 series. What is the purpose of this series?

Options :

A : To provide guidelines for network security

B : To establish best practices for physical security

C : To provide standards for information security management systems (ISMS)

D : To outline procedures for data backup and recovery

Answer: C

Question 5

How can "Instance Metadata" be exploited in cloud environments?

Options :

A : By using it to monitor and log user activities

B : By using it to gain access to sensitive data stored on the cloud instances

C : By encrypting metadata to prevent unauthorized access

D : By leveraging it to optimize cloud resource performance

Answer: B

Free SEC-100 Mock Exam – Practice Online Confidently