312-50v8

312-50v8 practice questions, page 6 of 14, with answer review and explanations.

Question 26

Which of the following is considered an acceptable option when managing a risk?

  1. Reject the risk.
  2. Deny the risk.
  3. Mitigate the risk.
  4. Initiate the risk.

Question 27

Which security control role does encryption meet?

  1. Preventative
  2. Detective
  3. Offensive
  4. Defensive

Question 28

A covert channel is a channel that

  1. transfers information over, within a computer system, or network that is outside of the security policy.
  2. transfers information over, within a computer system, or network that is within the security policy.
  3. transfers information via a communication path within a computer system, or network for transfer of data.
  4. transfers information over, within a computer system, or network that is encrypted.

Question 29

John the Ripper is a technical assessment tool used to test the weakness of which of the following?

  1. Usernames
  2. File permissions
  3. Firewall rulesets
  4. Passwords

Question 30

Least privilege is a security concept that requires that a user is

  1. limited to those functions required to do the job.
  2. given root or administrative privileges.
  3. trusted to keep all data and access to that data under their sole control.
  4. given privileges equal to everyone else in the department.