Domain Assessment Quiz (D4)

Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Domain Assessment Quiz (D4) Due Apr 28 at 11:59pm Points 30 Questions 30 Available until Apr 28 at 11:59pm Time Limit 30 Minutes Allowed Attempts 3 Take the Quiz Again Attempt History Attempt Time Score KEPT Attempt 2 28 minutes 30 out of 30 LATEST Attempt 2 28 minutes 30 out of 30 Attempt 1 26 minutes 29 out of 30 Score for this attempt: 30 out of 30 Submitted Apr 28 at 1:57pm This attempt took 28 minutes.  Question 1 1 / 1 pts Megan needs to conduct a forensic investigation of a virtual machine (VM) hosted in a VMware environment as part of an incident response effort. What is the best way for her to collect the VM? By using dd to copy the VM to an internal drive By using a forensic imaging device after removing the server's drives By using dd to copy the VM to an external drive Correct! As a snapshot using the VMware built-in tools  Question 2 1 / 1 pts Allison wants to aggregate her logs and have them automatically correlated and reported on. What sort of tool should she acquire for her organization? MDM SDN Correct! SIEM A jump server  1/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Question 3 1 / 1 pts What type of mitigation places a malicious file or application in a safe location for future review or study? Containment Correct! Quarantine Deletion Isolation  Question 4 1 / 1 pts Molly wants to harden embedded systems in her environment. Which of the following options is most likely to be available? Central management tools. Add-on security software. Correct! None; embedded systems have very limited hardening options. Hardening benchmarks.  Question 5 1 / 1 pts Patrick has subscribed to a commercial threat intelligence feed that is only provided to subscribers who have been vetted and who pay a monthly fee. What industry term is used to refer to this type of threat intelligence? ELINT OSINT Corporate threat intelligence Correct! Proprietary threat intelligence  Question 6 1 / 1 pts The organization that Chris works for has recently acquired another company. As part of the acquisition, Chris is preparing to address the data that the newly acquired company used, including setting up rules to handle it in his data loss prevention (DLP) system. What step is commonly required prior to data being protected by a DLP system? Correct! Classifying and tagging the data Applying a mandatory access control scheme to the data Encrypting the data 2/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Hashing the data and creating signatures  Question 7 1 / 1 pts What purpose do the password history and password minimum age settings have in Windows? Correct! To prevent password reuse To ensure proper password expiration To prevent brute-force attacks To prevent attackers from resetting passwords  Question 8 1 / 1 pts Michelle wants to check for authentication failures on a RedHat Linux-based system. Where should she look for these event logs? Correct! /var/log/secure /var/log/events /var/log/fail /var/log/auth.log  Question 9 1 / 1 pts Which of the following terms refers to the process of establishing a standard for security? Correct! Baselining Normalization Hardening Security evaluation  Question 10 1 / 1 pts Megan is reviewing her organization's datacenter network diagram as shown in the following image. What should she note for point A on the diagram? 3/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) A redundant connection A wired link A wireless link Correct! A single point of failure  Question 11 1 / 1 pts Ian wants to test embedded device web servers for potential security issues with the version of the web server software. What tool should he select to do this most effectively across his large organization's network of IoT devices? Pentesting A port scanner Correct! A vulnerability scanner A WAF  Question 12 1 / 1 pts Tools like PRTG and Cacti that monitor SNMP information are used to provide what type of information for an incident investigation? Correct! Bandwidth monitoring Authentication logs System log information Email metadata 4/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1)  Question 13 1 / 1 pts Bart is investigating an incident, and needs to identify the creator of a Microsoft Office document. Where would he find that type of information? In the Microsoft Office log files In the filename Correct! In the file metadata In the Windows application log  Question 14 1 / 1 pts Carl wants to test his organization's incident response process. He conducts a tabletop exercise for his security team. Which of the following best describes this type of exercise? Third-party penetration testers work with the security team to address issues they discovered during their penetration test. The organization's datacenter is manually forced to fail over to an alternate site to test the scenario's objectives. Correct! The security team meets to talk through what they would do in a given scenario and takes notes on what works and what doesn't. A scenario is introduced and each member of the team takes actions that they would use to respond to the scenario.  Question 15 1 / 1 pts Sharon wants to implement WPA3 Enterprise. What technology will she need to use for authorization after wireless devices associate with access points? Correct! 802.1X SAML LDAP Kerberos  Question 16 1 / 1 pts What phase of the incident response process should be placed at point A in the following image? 5/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Patching Review Correct! Recovery Simulations  Question 17 1 / 1 pts Isabelle wants to gather information about what systems a host is connecting to, how much traffic is sent, and similar details. Which of the following options would not allow her to perform that task? NetFlow sFlow Correct! NXLog IPFIX  Question 18 1 / 1 pts Lucca wants to ensure that his organization's mobile device connections are secure. Which of the following connectivity options is the most secure choice? WPA2 Personal Correct! WPA3 Enterprise WPA4 Enterprise WPA3 Personal  Question 19 1 / 1 pts 6/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Annie wants to implement a passwordless authentication system. Which of the following would not meet her needs? Correct! A PIN-based factor A FIDO2 security key A cell-phone authenticator application Windows Hello  Question 20 1 / 1 pts Natasha's staff have been complaining about repetitive tasks that must be manually accomplished to secure endpoint devices, then they are deployed. What could Natasha ask her team to do to address this? Move devices to the cloud. Deploy fewer devices. Leverage baselines. Correct! Leverage automation and scripting.  Question 21 1 / 1 pts A senior vice president in the organization that Chuck works in recently lost a phone that contained sensitive business plans and information about suppliers, designs, and other important materials. After interviewing the vice president, Chuck finds out that the phone did not have a passcode set and was not encrypted, and that it could not be remotely wiped. What type of control should Chuck recommend for his company to help prevent future issues like this? Use containment techniques on the impacted phones. Correct! Deploy an MDM system. Isolate the impacted phones. Deploy a DLP system.  Question 22 1 / 1 pts Adam has implemented a WPA3 Enterprise network. What type of encryption will be used to protect data sent across the Wi-Fi connection? SHA-256 SHA-1 Correct! AES 3DES 7/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1)  Question 23 1 / 1 pts Nathaniel wants to allow Chrome through the Windows Defender firewall. What type of firewall rule change will he need to permit this? All of the above. Correct! Add Chrome to the Windows Defender Firewall allowed applications. Allow TCP 80 and 443 traffic from the system to the Internet. Allow TCP 80 and 443 traffic from the Internet to the system.  Question 24 1 / 1 pts Quentin wants to decommission solid-state drives (SSDs). What process should he follow if he wants to be absolutely certain that the data cannot be recovered? Zero wiping Sanitation Correct! Destruction Reformatting  Question 25 1 / 1 pts Nelson has discovered malware on one of the systems he is responsible for and wants to test it in a safe environment. Which of the following tools is best suited to that testing? strings scanless Correct! Cuckoo Sn1per  Question 26 1 / 1 pts Geenah wants to identify where Wi-Fi signals are weakest in her building. What should she create to visually display signal coverage and strength throughout her building? An SSID plot A spectrum analysis A war walk Correct! A heatmap  8/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Question 27 1 / 1 pts Dana wants to ensure that her software acquisition process for open source software is as secure as possible. What should she to do validate the security of the open source software? Correct! Check dependencies for known vulnerabilities. Review the source code for the software. Ensure that the software source code is escrowed. Purchase the software from a software vendor.  Question 28 1 / 1 pts Brent wants to use a tool to help him analyze malware and attacks and wants to cover a broad range of tactics and tools that are used by adversaries. Which of the following is broadly implemented in technical tools and covers techniques and tactics without requiring a specific order of operations? The CIS Benchmark The Dark Web Analysis Project The CVSS standard Correct! The MITRE ATT&CK framework  Question 29 1 / 1 pts Frank is using the cloud hosting service's web publishing service rather than running his own web servers. Where will Frank need to look to review his logs to see what types of traffic his application is creating? Syslog None of the above Correct! The cloud service's web logs Apache logs  Question 30 1 / 1 pts What mobile device deployment model provides the least control for the organization and leaves the end user with the greatest choice? COBO COPE Correct! BYOD CYOD 9/10 4/28/25, 1:57 PM Domain Assessment Quiz (D4): BCIS 5740 Section 303 - Information Security Management (Spring 2025 1) Quiz Score: 30 out of 30 10/10