Week 6 Science Cloud Provider Practice Quiz

Central Washington University Week 6 Science Cloud Provider Practice Quiz

1) With ______, all hardware, software, and other supporting infrastructure are owned and managed by the cloud provider. 

1. Private Cloud 

1. Hybrid cloud 

1. Public cloud 

1. Community cloud 

2) This is a software tool or service that sits between an organization’s on-premises infrastructure and a cloud provider’s infrastructure allowing the organization to extend the reach of the security policies beyond their own infrastructure. 

1. Cloud Access Security Broker (CASB) 

1. Web application Firewall (WAF) 

1. DNS Server  

1. Intrusion Detection System (IDS) 

3) This defines the process of granting permission to a user or object to perform or obtain something? 

1. Authentication 

1. Access Control Restrictions 

1. Auditing  

1. Authorization 

4) This access control model permits the user to decide how to protects the information level of sharing. 

1. Role-based Access Control 

1. Discretionary Access Control 

1. Mandatory Access Control 

1. Attribute-based Access Control 

5) This defines the process used by a system to verify the identity of a user, process, or service before granting access. 

1. Authentication 

1. Naone of the listed choices are correct 

1. Authorization 

1. Auditing 

6) What is the most difficult aspect of security in a virtualized environment? 

1. VM sprawl 

1. Securing the hardware 

1. Data confidentiality 

1. Lack of visibility into the virtual network 

7) ______ is an integrity control. 

1. None of the listed choices are correct 

1. Hashing 

1. Public Key infrastructure 

1. Encryption 

8) A ______ typically establishes a barrier between a trusted, secure Internal network and another outside network, such as the internet, that is assumed not to be secure or trusted. 

1. Firewall 

1. Edge Router 

1. Virtual private Network (VPN) 

1. Network Intrusion Detection system 

9) What is the most important data security measure you can take for mobile devices?  

1. Use of a VPN 

1. Full hard drive encryption 

1. Data backup 

1. Two factor authentications 

10) This is a mechanism to verify that a message came from the sender, providing nonrepudiation. 

1. Digital Signatures and Certificates 

1. Authentication 

1. Role-based Access Control 

1. Attribute-based Access Control 

11) Which access control model provides access control based on the position or responsibility an individual fills within an organization?  

1. Role-based Access Control 

1. Attribute-based Access control 

1. Mandatory Access Control 

1. Discretionary Access Control 

12) A cryptosystem is a suite of cryptographic algorithms needed to implement a security service, most commonly for achieving confidentiality (encryption). Typically, a cryptosystem consists of three algorithms: one for decryption, one for encryption and one for:  

1. Nonrepudiation 

1. General ciphertext 

1. Digital Signatures and Certificates 

1. Key generation 

13) Which access control model is the least restrictive model, popular in situations where resources owners need to allow access ad privileges OnDemand?  

1. Role-based Access Control 

1. Attribute-based Access Control 

1. Mandatory Access Control 

1. Discretionary Access Control 

14) Which access control model is the most restrictive model typically used in defense or military organizations where data classification and confidentiality are of prime importance?  

1. Role-based Access control 

1. Discretionary Access control 

1. Mandatory Access control 

1. Attribute-based Access Control 

15) Which of the following security controls is used to extend the network perimeter with the use of encapsulation and encryption?  

1. Web proxy 

1. Network Intrusion detection systems (NIDS) 

1. Virtual Private Network (VPN) 

1. Network Address translation (NAT)  

16) VPNs operate at which layer of the OSI Model? 

1. Layer 3: Network Layer 

1. Layer 4: Translation Layer 

1. Layer 2: Data-like layer 

1. Layer 5: Session layer 

17) Of the following, which is least important for a CISO to be knowledgeable in?  

1. Digital forensics 

1. Network Security Controls 

1. Security Standards 

1. Networking Protocols 

18) You are analyzing a packet and see that it was being routed using a media access control (MAC) address. AT which layer of the OSI model was the packet captured?  

1. Network layer 

1. Trasport layer 

1. Data-link layer 

1. Session layer