Question 31
Which of the following is considered an acceptable option when managing a risk?
- Reject the risk.
- Deny the risk.
- Mitigate the risk.
- Initiate the risk.
Question 32
Which security control role does encryption meet?
- Preventative
- Detective
- Offensive
- Defensive
Question 33
A covert channel is a channel that
- transfers information over, within a computer system, or network that is outside of the security policy.
- transfers information over, within a computer system, or network that is within the security policy.
- transfers information via a communication path within a computer system, or network for transfer of data.
- transfers information over, within a computer system, or network that is encrypted.
Question 34
John the Ripper is a technical assessment tool used to test the weakness of which of the following?
- Usernames
- File permissions
- Firewall rulesets
- Passwords
Question 35
Least privilege is a security concept that requires that a user is
- limited to those functions required to do the job.
- given root or administrative privileges.
- trusted to keep all data and access to that data under their sole control.
- given privileges equal to everyone else in the department.