What is the primary purpose of configuration management in cybersecurity?

Identifying, controlling, auditing, and documenting every change made to systems against a secure baseline

Deleting all configuration files to reduce attack surface

Randomly changing system settings to confuse attackers

Allowing each administrator to configure systems however they prefer

What is a 'baseline configuration' in the context of configuration management?

A known-good, approved configuration state that serves as a security template for system deployment

The most complex security settings available on a system

The default factory settings that come with every new device

A random configuration generated by the operating system at boot

Which of the following is NOT a documented configuration resource that should be maintained?

Employee social media passwords

Application configuration specifications

What is the first step in operating system hardening?

Changing all default account names and passwords

Disabling the firewall to improve network performance

Sharing administrator credentials among all IT staff

Installing as many third-party applications as possible

Which OS hardening action involves removing unnecessary services, protocols, and ports?

Reducing the attack surface by eliminating what is not needed

Increasing system compatibility with all possible network devices

Enabling remote desktop access for all users

Installing additional browser toolbars and plugins

What is a log file in cybersecurity?

A timestamped, sequential record of events on a system, application, or network device

A backup copy of all user passwords stored in plaintext

A type of antivirus software that scans for malware

A physical notebook kept by the security guard at the front desk

Why must log transmission be secured?

To prevent tampering in transit and preserve the integrity of log data

To reduce the size of log files before storage

To automatically delete sensitive information from logs

To make logs easier to read by attackers

What is the primary risk of logging too many events?

It creates noise that buries important security events

It prevents all security incidents from occurring

It eliminates the need for a SIEM system

Which type of log would an analyst examine first when investigating a potentially compromised user account?

Operating system logs showing successful and failed login attempts

Weather forecast logs from the local news station

Social media trending topic logs

What does SIEM stand for in cybersecurity?

Security Information and Event Management

Software Installation and Error Management

Secure Internet Encryption Module

System Integration and Email Monitoring

What is the primary function of a protocol analyzer (packet sniffer)?

Intercepts and records actual network traffic at the packet level for analysis

Generates random passwords for network users

Blocks all incoming network traffic by default

Automatically patches vulnerabilities on remote servers

Which of the following is a primary use case for packet analyzers?

Detecting intrusion attempts by spotting scan patterns and exploit payloads in raw packet data

Creating 3D network topology diagrams

Automatically generating employee performance reviews

Replacing the need for firewalls entirely

Why is it illegal to capture network traffic on networks you do not own or have explicit authorization to monitor?

It violates privacy laws and wiretapping regulations in most jurisdictions

Because all network traffic is automatically encrypted anyway

Because packet analyzers only work on owned networks

Because it causes the network to slow down by 90%

Which of the following is an example of an application security log event?

A web application firewall blocking a SQL injection attempt

The operating system completing a scheduled backup

A user changing their desktop wallpaper

The network printer running out of toner

What does 'trend identification' in log analysis help security teams detect?

Emerging threat campaigns before they reach critical impact

The fastest network cables in the data center

Which employees are working the most overtime hours

The most popular websites visited by employees

Which compliance frameworks require organizations to demonstrate that security logging was in place and reviewed?

Only social media platform terms of service

No compliance frameworks require logging

What is the purpose of defining log retention periods?

To satisfy regulatory requirements and ensure sufficient historical data for investigations

To reduce the number of security incidents to zero

To delete all logs immediately after they are created

To prevent anyone from ever reading the logs

125.1 Part 2 quiz | Quizalize

125.1 Part 1 quiz

IT ENGLISH: Lesson Notes - Part 1 (25 October 2022)

Ch 4 test review part 1-25

IT ENGLISH: Lesson Notes - Part 1 (25 August 2023)

SDC American History Review Part 1 (25 Questions)

IT ENGLISH: GFN - Lesson Notes - Part 1 (25 Nov. 2021)

IT ENGLISH: GFN Heilbronn 3 - Lesson Notes - Part #1 (25 Feb. 2021)

Related quizzes

Related quizzes