Security+ Acronyms Quiz: 100 Practice Questions and Answers (SY0-701)
100 questions for the Security+ SY0-701 exam, each answer explained. Watch it here, try the questions yourself, or read the transcript.
Questions in this video
Tap an answer to see why it is right or wrong. Tap it again to reset.
Question 1 Play from 00:00
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
AES stands for Advanced Encryption Standard. It is the standard symmetric block cipher.
Not this one. Try another answer.
Why B is wrong
DES stands for Data Encryption Standard.
Not this one. Try another answer.
Why C is wrong
SHA stands for Secure Hash Algorithm.
Not this one. Try another answer.
Why D is wrong
RSA stands for Rivest, Shamir, and Adleman.
Question 2 Play from 01:04
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
WAF stands for Web Application Firewall.
Not this one. Try another answer.
Why B is wrong
DLP stands for Data Loss Prevention.
Right, C is the answer.
Why C is right
NAC stands for Network Access Control. It checks a device's identity and health before letting it onto the network.
Not this one. Try another answer.
Why D is wrong
SWG stands for Secure Web Gateway.
Question 3 Play from 02:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RBAC stands for Role-Based Access Control.
Not this one. Try another answer.
Why B is wrong
DAC stands for Discretionary Access Control.
Right, C is the answer.
Why C is right
ABAC stands for Attribute-Based Access Control. It grants access based on attributes such as department, location and time.
Not this one. Try another answer.
Why D is wrong
SSO stands for Single Sign-On.
Question 4 Play from 03:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SHA stands for Secure Hash Algorithm.
Right, B is the answer.
Why B is right
HMAC stands for Hash-based Message Authentication Code. It combines a hash with a secret key to prove integrity and origin.
Not this one. Try another answer.
Why C is wrong
PKI stands for Public Key Infrastructure.
Not this one. Try another answer.
Why D is wrong
PBKDF2 stands for Password-Based Key Derivation Function 2.
Question 5 Play from 04:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
HIDS stands for Host-based Intrusion Detection System.
Not this one. Try another answer.
Why B is wrong
IPS stands for Intrusion Prevention System.
Right, C is the answer.
Why C is right
CASB stands for Cloud Access Security Broker. It enforces security policy between users and cloud services.
Not this one. Try another answer.
Why D is wrong
NAC stands for Network Access Control.
Question 6 Play from 05:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RAT stands for Remote Access Trojan.
Right, B is the answer.
Why B is right
CSRF stands for Cross-site Request Forgery. It tricks a logged-in user's browser into sending a request.
Not this one. Try another answer.
Why C is wrong
SSRF stands for Server-side Request Forgery.
Not this one. Try another answer.
Why D is wrong
XSS stands for Cross-site Scripting.
Question 7 Play from 06:52
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SSO stands for Single Sign-On.
Not this one. Try another answer.
Why B is wrong
IAM stands for Identity and Access Management.
Not this one. Try another answer.
Why C is wrong
MDM stands for Mobile Device Management.
Right, D is the answer.
Why D is right
PAM stands for Privileged Access Management. It controls, vaults and monitors administrator accounts.
Question 8 Play from 07:56
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
RPO stands for Recovery Point Objective. It is the maximum acceptable amount of data loss, measured in time.
Not this one. Try another answer.
Why B is wrong
ARO stands for Annualized Rate of Occurrence.
Not this one. Try another answer.
Why C is wrong
RTO stands for Recovery Time Objective.
Not this one. Try another answer.
Why D is wrong
MTTR stands for Mean Time to Repair.
Question 9 Play from 09:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
ACL stands for Access Control List.
Not this one. Try another answer.
Why B is wrong
OCSP stands for Online Certificate Status Protocol.
Right, C is the answer.
Why C is right
CRL stands for Certificate Revocation List. It lists certificates revoked before expiry.
Not this one. Try another answer.
Why D is wrong
CSR stands for Certificate Signing Request.
Question 10 Play from 10:10
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
HMAC stands for Hash-based Message Authentication Code.
Right, B is the answer.
Why B is right
SHA stands for Secure Hash Algorithm. It is a family of hashing algorithms.
Not this one. Try another answer.
Why C is wrong
RSA stands for Rivest, Shamir, and Adleman.
Not this one. Try another answer.
Why D is wrong
AES stands for Advanced Encryption Standard.
Show all 100 questionsShow fewer questions
Question 11 Play from 11:19
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
ECC stands for Elliptic Curve Cryptography. It is asymmetric cryptography with short keys.
Not this one. Try another answer.
Why B is wrong
RSA stands for Rivest, Shamir, and Adleman.
Not this one. Try another answer.
Why C is wrong
SHA stands for Secure Hash Algorithm.
Not this one. Try another answer.
Why D is wrong
DES stands for Data Encryption Standard.
Question 12 Play from 12:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
CSR stands for Certificate Signing Request.
Not this one. Try another answer.
Why B is wrong
KDC stands for Key Distribution Center.
Not this one. Try another answer.
Why C is wrong
CRL stands for Certificate Revocation List.
Right, D is the answer.
Why D is right
CA stands for Certificate Authority. It issues and signs digital certificates.
Question 13 Play from 13:28
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
NAT stands for Network Address Translation. It maps private addresses to public ones.
Not this one. Try another answer.
Why B is wrong
DNS stands for Domain Name System.
Not this one. Try another answer.
Why C is wrong
ARP stands for Address Resolution Protocol.
Not this one. Try another answer.
Why D is wrong
VLAN stands for Virtual Local Area Network.
Question 14 Play from 14:32
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
TLS stands for Transport Layer Security. It encrypts data in transit, for example in HTTPS.
Not this one. Try another answer.
Why B is wrong
IPSec stands for Internet Protocol Security.
Not this one. Try another answer.
Why C is wrong
SSH stands for Secure Shell.
Not this one. Try another answer.
Why D is wrong
PGP stands for Pretty Good Privacy.
Question 15 Play from 15:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PaaS stands for Platform as a Service.
Not this one. Try another answer.
Why B is wrong
IaaS stands for Infrastructure as a Service.
Not this one. Try another answer.
Why C is wrong
IaC stands for Infrastructure as Code.
Right, D is the answer.
Why D is right
SaaS stands for Software as a Service. It delivers complete applications over the internet.
Question 16 Play from 16:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SaaS stands for Software as a Service.
Right, B is the answer.
Why B is right
IaaS stands for Infrastructure as a Service. It rents out virtual machines, storage and networks.
Not this one. Try another answer.
Why C is wrong
PaaS stands for Platform as a Service.
Not this one. Try another answer.
Why D is wrong
IaC stands for Infrastructure as Code.
Question 17 Play from 17:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SAML stands for Security Assertion Markup Language.
Not this one. Try another answer.
Why B is wrong
SNMP stands for Simple Network Management Protocol.
Right, C is the answer.
Why C is right
EAP stands for Extensible Authentication Protocol. It is a framework for authentication methods, used with 802.1X.
Not this one. Try another answer.
Why D is wrong
IKE stands for Internet Key Exchange.
Question 18 Play from 18:52
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
BEC stands for Business Email Compromise.
Not this one. Try another answer.
Why B is wrong
DDoS stands for Distributed Denial of Service.
Right, C is the answer.
Why C is right
RAT stands for Remote Access Trojan. It gives an attacker hidden remote control of a system.
Not this one. Try another answer.
Why D is wrong
APT stands for Advanced Persistent Threat.
Question 19 Play from 19:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
KMS stands for Key Management System.
Not this one. Try another answer.
Why B is wrong
HSM stands for Hardware Security Module.
Not this one. Try another answer.
Why C is wrong
SED stands for Self-Encrypting Drive.
Right, D is the answer.
Why D is right
TPM stands for Trusted Platform Module. It is a chip on the motherboard that stores keys and supports secure boot.
Question 20 Play from 21:03
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
SNMP stands for Simple Network Management Protocol. It monitors and manages network devices.
Not this one. Try another answer.
Why B is wrong
SMB stands for Server Message Block.
Not this one. Try another answer.
Why C is wrong
SIP stands for Session Initiation Protocol.
Not this one. Try another answer.
Why D is wrong
SMTP stands for Simple Mail Transfer Protocol.
Question 21 Play from 22:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
IPSec stands for Internet Protocol Security.
Not this one. Try another answer.
Why B is wrong
DHCP stands for Dynamic Host Configuration Protocol.
Right, C is the answer.
Why C is right
DNSSEC stands for Domain Name System Security Extensions. It signs DNS records so they cannot be forged.
Not this one. Try another answer.
Why D is wrong
DNS stands for Domain Name System.
Question 22 Play from 23:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
UEBA stands for User and Entity Behavior Analytics.
Not this one. Try another answer.
Why B is wrong
CASB stands for Cloud Access Security Broker.
Not this one. Try another answer.
Why C is wrong
SIEM stands for Security Information and Event Management.
Right, D is the answer.
Why D is right
SOAR stands for Security Orchestration, Automation, and Response. It runs automated playbooks to respond to alerts.
Question 23 Play from 24:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
CVSS stands for Common Vulnerability Scoring System.
Right, B is the answer.
Why B is right
CVE stands for Common Vulnerabilities and Exposures. It gives each publicly known vulnerability a unique ID.
Not this one. Try another answer.
Why C is wrong
SCAP stands for Security Content Automation Protocol.
Not this one. Try another answer.
Why D is wrong
STIX stands for Structured Threat Information eXpression.
Question 24 Play from 25:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SASE stands for Secure Access Service Edge.
Right, B is the answer.
Why B is right
SCADA stands for Supervisory Control and Data Acquisition. It monitors and controls industrial systems across wide areas.
Not this one. Try another answer.
Why C is wrong
SDN stands for Software-Defined Networking.
Not this one. Try another answer.
Why D is wrong
RTOS stands for Real-Time Operating System.
Question 25 Play from 26:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
TTP stands for Tactics, Techniques, and Procedures.
Not this one. Try another answer.
Why B is wrong
IoC stands for Indicator of Compromise.
Not this one. Try another answer.
Why C is wrong
MSSP stands for Managed Security Service Provider.
Right, D is the answer.
Why D is right
APT stands for Advanced Persistent Threat. It is a skilled attacker who stays hidden in a network for a long time.
Question 26 Play from 27:53
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PBKDF2 stands for Password-Based Key Derivation Function 2.
Right, B is the answer.
Why B is right
PFS stands for Perfect Forward Secrecy. It keeps past sessions safe even if a long-term key is stolen.
Not this one. Try another answer.
Why C is wrong
HMAC stands for Hash-based Message Authentication Code.
Not this one. Try another answer.
Why D is wrong
OCSP stands for Online Certificate Status Protocol.
Question 27 Play from 29:05
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
IoC stands for Indicator of Compromise. It is evidence that a system may have been breached.
Not this one. Try another answer.
Why B is wrong
TTP stands for Tactics, Techniques, and Procedures.
Not this one. Try another answer.
Why C is wrong
CVE stands for Common Vulnerabilities and Exposures.
Not this one. Try another answer.
Why D is wrong
APT stands for Advanced Persistent Threat.
Question 28 Play from 30:09
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SAE stands for Simultaneous Authentication of Equals.
Not this one. Try another answer.
Why B is wrong
VLAN stands for Virtual Local Area Network.
Not this one. Try another answer.
Why C is wrong
WPS stands for Wi-Fi Protected Setup.
Right, D is the answer.
Why D is right
SSID stands for Service Set Identifier. It is the name of a wireless network.
Question 29 Play from 31:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
NAC stands for Network Access Control.
Not this one. Try another answer.
Why B is wrong
CRL stands for Certificate Revocation List.
Right, C is the answer.
Why C is right
ACL stands for Access Control List. It is a list of rules that permit or deny traffic or access.
Not this one. Try another answer.
Why D is wrong
AUP stands for Acceptable Use Policy.
Question 30 Play from 32:13
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
PKI stands for Public Key Infrastructure. It is the system of CAs, certificates and keys that builds trust.
Not this one. Try another answer.
Why B is wrong
CRL stands for Certificate Revocation List.
Not this one. Try another answer.
Why C is wrong
HSM stands for Hardware Security Module.
Not this one. Try another answer.
Why D is wrong
KMS stands for Key Management System.
Question 31 Play from 33:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DLP stands for Data Loss Prevention.
Right, B is the answer.
Why B is right
MDM stands for Mobile Device Management. It enforces policy on phones and tablets.
Not this one. Try another answer.
Why C is wrong
PAM stands for Privileged Access Management.
Not this one. Try another answer.
Why D is wrong
NAC stands for Network Access Control.
Question 32 Play from 34:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
AH stands for Authentication Header.
Not this one. Try another answer.
Why B is wrong
L2TP stands for Layer 2 Tunneling Protocol.
Right, C is the answer.
Why C is right
ESP stands for Encapsulating Security Payload. It is the IPSec protocol that encrypts the payload.
Not this one. Try another answer.
Why D is wrong
IKE stands for Internet Key Exchange.
Question 33 Play from 35:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
NDA stands for Non-Disclosure Agreement.
Not this one. Try another answer.
Why B is wrong
MOU stands for Memorandum of Understanding.
Not this one. Try another answer.
Why C is wrong
MSA stands for Master Service Agreement.
Right, D is the answer.
Why D is right
SLA stands for Service-Level Agreement. It sets measurable service targets such as uptime.
Question 34 Play from 36:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
NAC stands for Network Access Control.
Not this one. Try another answer.
Why B is wrong
UTM stands for Unified Threat Management.
Not this one. Try another answer.
Why C is wrong
SWG stands for Secure Web Gateway.
Right, D is the answer.
Why D is right
WAF stands for Web Application Firewall. It filters HTTP traffic to protect web apps from attacks like SQL injection.
Question 35 Play from 37:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SIP stands for Session Initiation Protocol.
Not this one. Try another answer.
Why B is wrong
SSH stands for Secure Shell.
Right, C is the answer.
Why C is right
RDP stands for Remote Desktop Protocol. It gives remote graphical access to Windows.
Not this one. Try another answer.
Why D is wrong
SMB stands for Server Message Block.
Question 36 Play from 38:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PCI DSS stands for Payment Card Industry Data Security Standard.
Not this one. Try another answer.
Why B is wrong
CVSS stands for Common Vulnerability Scoring System.
Not this one. Try another answer.
Why C is wrong
SCAP stands for Security Content Automation Protocol.
Right, D is the answer.
Why D is right
GDPR stands for General Data Protection Regulation. It is the European Union's data privacy law.
Question 37 Play from 39:53
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
NTP stands for Network Time Protocol. It keeps clocks in sync.
Not this one. Try another answer.
Why B is wrong
SNMP stands for Simple Network Management Protocol.
Not this one. Try another answer.
Why C is wrong
SIP stands for Session Initiation Protocol.
Not this one. Try another answer.
Why D is wrong
SMB stands for Server Message Block.
Question 38 Play from 40:56
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RADIUS stands for Remote Authentication Dial-In User Service.
Not this one. Try another answer.
Why B is wrong
OAuth stands for Open Authorization.
Not this one. Try another answer.
Why C is wrong
LDAP stands for Lightweight Directory Access Protocol.
Right, D is the answer.
Why D is right
SAML stands for Security Assertion Markup Language. It an XML standard that passes authentication assertions between an identity provider and a service.
Question 39 Play from 42:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
NAT stands for Network Address Translation.
Not this one. Try another answer.
Why B is wrong
DNS stands for Domain Name System.
Right, C is the answer.
Why C is right
ARP stands for Address Resolution Protocol. It maps IP addresses to MAC addresses.
Not this one. Try another answer.
Why D is wrong
DHCP stands for Dynamic Host Configuration Protocol.
Question 40 Play from 43:10
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
EDR stands for Endpoint Detection and Response. It watches endpoint behaviour and can isolate or roll back a host.
Not this one. Try another answer.
Why B is wrong
SWG stands for Secure Web Gateway.
Not this one. Try another answer.
Why C is wrong
NAC stands for Network Access Control.
Not this one. Try another answer.
Why D is wrong
WAF stands for Web Application Firewall.
Question 41 Play from 44:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SCAP stands for Security Content Automation Protocol.
Right, B is the answer.
Why B is right
PCI DSS stands for Payment Card Industry Data Security Standard. It is the security standard for handling card data.
Not this one. Try another answer.
Why C is wrong
GDPR stands for General Data Protection Regulation.
Not this one. Try another answer.
Why D is wrong
STIX stands for Structured Threat Information eXpression.
Question 42 Play from 45:27
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
TOTP stands for Time-based One-Time Password. It generates a code that changes every 30 seconds or so.
Not this one. Try another answer.
Why B is wrong
HOTP stands for HMAC-based One-Time Password.
Not this one. Try another answer.
Why C is wrong
PBKDF2 stands for Password-Based Key Derivation Function 2.
Not this one. Try another answer.
Why D is wrong
HMAC stands for Hash-based Message Authentication Code.
Question 43 Play from 46:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PHI stands for Protected Health Information.
Not this one. Try another answer.
Why B is wrong
CIA stands for Confidentiality, Integrity, and Availability.
Not this one. Try another answer.
Why C is wrong
IoC stands for Indicator of Compromise.
Right, D is the answer.
Why D is right
PII stands for Personally Identifiable Information. It is data that can identify a person.
Question 44 Play from 47:48
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DLP stands for Data Loss Prevention.
Not this one. Try another answer.
Why B is wrong
CASB stands for Cloud Access Security Broker.
Not this one. Try another answer.
Why C is wrong
NAC stands for Network Access Control.
Right, D is the answer.
Why D is right
FIM stands for File Integrity Monitoring. It alerts when important files change.
Question 45 Play from 48:49
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
KDC stands for Key Distribution Center.
Not this one. Try another answer.
Why B is wrong
CA stands for Certificate Authority.
Not this one. Try another answer.
Why C is wrong
IdP stands for Identity Provider.
Right, D is the answer.
Why D is right
SOC stands for Security Operations Center. It is the team and facility that monitors and responds around the clock.
Question 46 Play from 49:53
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RAID stands for Redundant Array of Inexpensive Disks.
Right, B is the answer.
Why B is right
UPS stands for Uninterruptible Power Supply. It provides battery power during short outages.
Not this one. Try another answer.
Why C is wrong
PDU stands for Power Distribution Unit.
Not this one. Try another answer.
Why D is wrong
HSM stands for Hardware Security Module.
Question 47 Play from 51:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DLP stands for Data Loss Prevention.
Not this one. Try another answer.
Why B is wrong
HMAC stands for Hash-based Message Authentication Code.
Right, C is the answer.
Why C is right
FDE stands for Full Disk Encryption. It encrypts an entire drive.
Not this one. Try another answer.
Why D is wrong
PKI stands for Public Key Infrastructure.
Question 48 Play from 52:06
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
IPS stands for Intrusion Prevention System. It sits inline and blocks attacks it detects.
Not this one. Try another answer.
Why B is wrong
FIM stands for File Integrity Monitoring.
Not this one. Try another answer.
Why C is wrong
SIEM stands for Security Information and Event Management.
Not this one. Try another answer.
Why D is wrong
IDS stands for Intrusion Detection System.
Question 49 Play from 53:10
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
RADIUS stands for Remote Authentication Dial-In User Service. It centralises network access authentication over UDP.
Not this one. Try another answer.
Why B is wrong
SAML stands for Security Assertion Markup Language.
Not this one. Try another answer.
Why C is wrong
LDAP stands for Lightweight Directory Access Protocol.
Not this one. Try another answer.
Why D is wrong
TACACS+ stands for Terminal Access Controller Access-Control System Plus.
Question 50 Play from 54:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PKI stands for Public Key Infrastructure.
Not this one. Try another answer.
Why B is wrong
HSM stands for Hardware Security Module.
Right, C is the answer.
Why C is right
KMS stands for Key Management System. It manages the key lifecycle centrally.
Not this one. Try another answer.
Why D is wrong
TPM stands for Trusted Platform Module.
Question 51 Play from 55:22
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
CIA stands for Confidentiality, Integrity, and Availability. It is the core triad of information security.
Not this one. Try another answer.
Why B is wrong
AAA stands for Authentication, Authorization, and Accounting.
Not this one. Try another answer.
Why C is wrong
BIA stands for Business Impact Analysis.
Not this one. Try another answer.
Why D is wrong
IAM stands for Identity and Access Management.
Question 52 Play from 56:31
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RTO stands for Recovery Time Objective.
Right, B is the answer.
Why B is right
ALE stands for Annualized Loss Expectancy. It is the expected loss per year, SLE times ARO.
Not this one. Try another answer.
Why C is wrong
ARO stands for Annualized Rate of Occurrence.
Not this one. Try another answer.
Why D is wrong
SLE stands for Single Loss Expectancy.
Question 53 Play from 57:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
WAF stands for Web Application Firewall.
Not this one. Try another answer.
Why B is wrong
HSM stands for Hardware Security Module.
Not this one. Try another answer.
Why C is wrong
FIM stands for File Integrity Monitoring.
Right, D is the answer.
Why D is right
SWG stands for Secure Web Gateway. It filters users' web traffic and blocks malicious sites.
Question 54 Play from 58:40
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
DHCP stands for Dynamic Host Configuration Protocol. It hands out IP addresses automatically.
Not this one. Try another answer.
Why B is wrong
ARP stands for Address Resolution Protocol.
Not this one. Try another answer.
Why C is wrong
NAT stands for Network Address Translation.
Not this one. Try another answer.
Why D is wrong
DNS stands for Domain Name System.
Question 55 Play from 59:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DRP stands for Disaster Recovery Plan.
Right, B is the answer.
Why B is right
BCP stands for Business Continuity Plan. It keeps the business running during a disruption.
Not this one. Try another answer.
Why C is wrong
BIA stands for Business Impact Analysis.
Not this one. Try another answer.
Why D is wrong
AUP stands for Acceptable Use Policy.
Question 56 Play from 1:00:43
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
MFA stands for Multifactor Authentication. It requires two or more different kinds of factor to log in.
Not this one. Try another answer.
Why B is wrong
RBAC stands for Role-Based Access Control.
Not this one. Try another answer.
Why C is wrong
SSO stands for Single Sign-On.
Not this one. Try another answer.
Why D is wrong
SAML stands for Security Assertion Markup Language.
Question 57 Play from 1:01:51
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
APT stands for Advanced Persistent Threat.
Right, B is the answer.
Why B is right
DDoS stands for Distributed Denial of Service. It floods a target from many sources.
Not this one. Try another answer.
Why C is wrong
RAT stands for Remote Access Trojan.
Not this one. Try another answer.
Why D is wrong
BEC stands for Business Email Compromise.
Question 58 Play from 1:02:56
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
DAC stands for Discretionary Access Control. It lets the data owner decide who gets access.
Not this one. Try another answer.
Why B is wrong
ABAC stands for Attribute-Based Access Control.
Not this one. Try another answer.
Why C is wrong
PAM stands for Privileged Access Management.
Not this one. Try another answer.
Why D is wrong
RBAC stands for Role-Based Access Control.
Question 59 Play from 1:03:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RTO stands for Recovery Time Objective.
Not this one. Try another answer.
Why B is wrong
RPO stands for Recovery Point Objective.
Right, C is the answer.
Why C is right
MTTR stands for Mean Time to Repair. It is the average time to fix a failed component.
Not this one. Try another answer.
Why D is wrong
MTBF stands for Mean Time Between Failures.
Question 60 Play from 1:05:04
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
SSRF stands for Server-side Request Forgery. It tricks a server into sending requests to internal systems.
Not this one. Try another answer.
Why B is wrong
BEC stands for Business Email Compromise.
Not this one. Try another answer.
Why C is wrong
XSS stands for Cross-site Scripting.
Not this one. Try another answer.
Why D is wrong
CSRF stands for Cross-site Request Forgery.
Question 61 Play from 1:06:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DDoS stands for Distributed Denial of Service.
Right, B is the answer.
Why B is right
XSS stands for Cross-site Scripting. It injects script that runs in other users' browsers.
Not this one. Try another answer.
Why C is wrong
CSRF stands for Cross-site Request Forgery.
Not this one. Try another answer.
Why D is wrong
SSRF stands for Server-side Request Forgery.
Question 62 Play from 1:07:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SAE stands for Simultaneous Authentication of Equals.
Right, B is the answer.
Why B is right
WPS stands for Wi-Fi Protected Setup. It is a push-button or PIN Wi-Fi setup feature with known weaknesses.
Not this one. Try another answer.
Why C is wrong
WPA3 stands for Wi-Fi Protected Access 3.
Not this one. Try another answer.
Why D is wrong
SSID stands for Service Set Identifier.
Question 63 Play from 1:08:31
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
IDS stands for Intrusion Detection System. It detects and alerts on attacks but does not block them.
Not this one. Try another answer.
Why B is wrong
NGFW stands for Next-Generation Firewall.
Not this one. Try another answer.
Why C is wrong
IPS stands for Intrusion Prevention System.
Not this one. Try another answer.
Why D is wrong
WAF stands for Web Application Firewall.
Question 64 Play from 1:09:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SNMP stands for Simple Network Management Protocol.
Not this one. Try another answer.
Why B is wrong
SMTP stands for Simple Mail Transfer Protocol.
Right, C is the answer.
Why C is right
IMAP stands for Internet Message Access Protocol. It reads email while keeping it on the server.
Not this one. Try another answer.
Why D is wrong
SIP stands for Session Initiation Protocol.
Question 65 Play from 1:10:48
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MTBF stands for Mean Time Between Failures.
Not this one. Try another answer.
Why B is wrong
ALE stands for Annualized Loss Expectancy.
Not this one. Try another answer.
Why C is wrong
SLE stands for Single Loss Expectancy.
Right, D is the answer.
Why D is right
ARO stands for Annualized Rate of Occurrence. It is how many times per year a risk is expected to happen.
Question 66 Play from 1:11:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MTTR stands for Mean Time to Repair.
Not this one. Try another answer.
Why B is wrong
RPO stands for Recovery Point Objective.
Right, C is the answer.
Why C is right
RTO stands for Recovery Time Objective. It is the maximum acceptable time to restore a system.
Not this one. Try another answer.
Why D is wrong
MTBF stands for Mean Time Between Failures.
Question 67 Play from 1:12:56
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
BIA stands for Business Impact Analysis. It identifies critical functions and the impact of losing them.
Not this one. Try another answer.
Why B is wrong
BCP stands for Business Continuity Plan.
Not this one. Try another answer.
Why C is wrong
DRP stands for Disaster Recovery Plan.
Not this one. Try another answer.
Why D is wrong
SLA stands for Service-Level Agreement.
Question 68 Play from 1:14:02
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DDoS stands for Distributed Denial of Service.
Not this one. Try another answer.
Why B is wrong
RAT stands for Remote Access Trojan.
Not this one. Try another answer.
Why C is wrong
XSS stands for Cross-site Scripting.
Right, D is the answer.
Why D is right
BEC stands for Business Email Compromise. It uses a taken-over business mailbox to request payments.
Question 69 Play from 1:15:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DMZ stands for Demilitarized Zone.
Not this one. Try another answer.
Why B is wrong
VPN stands for Virtual Private Network.
Right, C is the answer.
Why C is right
VLAN stands for Virtual Local Area Network. It splits one switch into separate logical networks.
Not this one. Try another answer.
Why D is wrong
NAT stands for Network Address Translation.
Question 70 Play from 1:16:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
CRL stands for Certificate Revocation List.
Not this one. Try another answer.
Why B is wrong
SCAP stands for Security Content Automation Protocol.
Right, C is the answer.
Why C is right
OCSP stands for Online Certificate Status Protocol. It checks one certificate's status in real time.
Not this one. Try another answer.
Why D is wrong
CSR stands for Certificate Signing Request.
Question 71 Play from 1:17:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
TAXII stands for Trusted Automated eXchange of Indicator Information.
Right, B is the answer.
Why B is right
CVSS stands for Common Vulnerability Scoring System. It rates a vulnerability's severity from 0 to 10.
Not this one. Try another answer.
Why C is wrong
CVE stands for Common Vulnerabilities and Exposures.
Not this one. Try another answer.
Why D is wrong
SCAP stands for Security Content Automation Protocol.
Question 72 Play from 1:18:23
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
HSM stands for Hardware Security Module. It is a dedicated tamper-resistant device for generating and storing keys.
Not this one. Try another answer.
Why B is wrong
TPM stands for Trusted Platform Module.
Not this one. Try another answer.
Why C is wrong
FDE stands for Full Disk Encryption.
Not this one. Try another answer.
Why D is wrong
KMS stands for Key Management System.
Question 73 Play from 1:19:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RPO stands for Recovery Point Objective.
Not this one. Try another answer.
Why B is wrong
ALE stands for Annualized Loss Expectancy.
Right, C is the answer.
Why C is right
SLE stands for Single Loss Expectancy. It is the loss from one occurrence, asset value times exposure factor.
Not this one. Try another answer.
Why D is wrong
ARO stands for Annualized Rate of Occurrence.
Question 74 Play from 1:20:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MDM stands for Mobile Device Management.
Not this one. Try another answer.
Why B is wrong
CYOD stands for Choose Your Own Device.
Not this one. Try another answer.
Why C is wrong
COPE stands for Corporate-Owned, Personally Enabled.
Right, D is the answer.
Why D is right
BYOD stands for Bring Your Own Device. It lets staff use personal devices for work.
Question 75 Play from 1:21:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RDP stands for Remote Desktop Protocol.
Not this one. Try another answer.
Why B is wrong
SMTP stands for Simple Mail Transfer Protocol.
Right, C is the answer.
Why C is right
SMB stands for Server Message Block. It shares files and printers on Windows networks.
Not this one. Try another answer.
Why D is wrong
SNMP stands for Simple Network Management Protocol.
Question 76 Play from 1:22:43
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
SOW stands for Statement of Work. It describes the specific tasks, deliverables and timeline of a project.
Not this one. Try another answer.
Why B is wrong
MSA stands for Master Service Agreement.
Not this one. Try another answer.
Why C is wrong
MOU stands for Memorandum of Understanding.
Not this one. Try another answer.
Why D is wrong
BPA stands for Business Partners Agreement.
Question 77 Play from 1:23:49
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
TACACS+ stands for Terminal Access Controller Access-Control System Plus. It centralises device admin authentication over TCP and encrypts the whole payload.
Not this one. Try another answer.
Why B is wrong
OAuth stands for Open Authorization.
Not this one. Try another answer.
Why C is wrong
RADIUS stands for Remote Authentication Dial-In User Service.
Not this one. Try another answer.
Why D is wrong
LDAP stands for Lightweight Directory Access Protocol.
Question 78 Play from 1:25:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SDN stands for Software-Defined Networking.
Not this one. Try another answer.
Why B is wrong
UTM stands for Unified Threat Management.
Right, C is the answer.
Why C is right
SASE stands for Secure Access Service Edge. It delivers networking and security as a cloud service close to users.
Not this one. Try another answer.
Why D is wrong
NAC stands for Network Access Control.
Question 79 Play from 1:26:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
VPN stands for Virtual Private Network.
Not this one. Try another answer.
Why B is wrong
VLAN stands for Virtual Local Area Network.
Not this one. Try another answer.
Why C is wrong
NAT stands for Network Address Translation.
Right, D is the answer.
Why D is right
DMZ stands for Demilitarized Zone. It is a screened subnet for public-facing servers.
Question 80 Play from 1:27:18
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
TTP stands for Tactics, Techniques, and Procedures.
Right, B is the answer.
Why B is right
OSINT stands for Open-Source Intelligence. It is intelligence gathered from public sources.
Not this one. Try another answer.
Why C is wrong
IoC stands for Indicator of Compromise.
Not this one. Try another answer.
Why D is wrong
APT stands for Advanced Persistent Threat.
Question 81 Play from 1:28:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
IaaS stands for Infrastructure as a Service.
Not this one. Try another answer.
Why B is wrong
SDLC stands for Software Development Life Cycle.
Not this one. Try another answer.
Why C is wrong
SDN stands for Software-Defined Networking.
Right, D is the answer.
Why D is right
IaC stands for Infrastructure as Code. It defines infrastructure in configuration files.
Question 82 Play from 1:29:37
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
ACL stands for Access Control List.
Right, B is the answer.
Why B is right
NGFW stands for Next-Generation Firewall. It adds application awareness and intrusion prevention to a firewall.
Not this one. Try another answer.
Why C is wrong
NAT stands for Network Address Translation.
Not this one. Try another answer.
Why D is wrong
WAF stands for Web Application Firewall.
Question 83 Play from 1:30:45
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
AUP stands for Acceptable Use Policy. It sets the rules for using company systems.
Not this one. Try another answer.
Why B is wrong
BPA stands for Business Partners Agreement.
Not this one. Try another answer.
Why C is wrong
NDA stands for Non-Disclosure Agreement.
Not this one. Try another answer.
Why D is wrong
SLA stands for Service-Level Agreement.
Question 84 Play from 1:31:50
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
CVE stands for Common Vulnerabilities and Exposures.
Right, B is the answer.
Why B is right
PHI stands for Protected Health Information. It is health data linked to a person.
Not this one. Try another answer.
Why C is wrong
TTP stands for Tactics, Techniques, and Procedures.
Not this one. Try another answer.
Why D is wrong
IoC stands for Indicator of Compromise.
Question 85 Play from 1:32:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
AES stands for Advanced Encryption Standard.
Not this one. Try another answer.
Why B is wrong
ECC stands for Elliptic Curve Cryptography.
Not this one. Try another answer.
Why C is wrong
HMAC stands for Hash-based Message Authentication Code.
Right, D is the answer.
Why D is right
MD5 stands for Message Digest 5. It is an old hash with known collisions.
Question 86 Play from 1:33:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
TACACS+ stands for Terminal Access Controller Access-Control System Plus.
Not this one. Try another answer.
Why B is wrong
SAML stands for Security Assertion Markup Language.
Right, C is the answer.
Why C is right
OAuth stands for Open Authorization. It lets an app access resources on a user's behalf without seeing their password.
Not this one. Try another answer.
Why D is wrong
LDAP stands for Lightweight Directory Access Protocol.
Question 87 Play from 1:35:10
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RADIUS stands for Remote Authentication Dial-In User Service.
Not this one. Try another answer.
Why B is wrong
SNMP stands for Simple Network Management Protocol.
Right, C is the answer.
Why C is right
LDAP stands for Lightweight Directory Access Protocol. It queries and updates directory services such as Active Directory.
Not this one. Try another answer.
Why D is wrong
SAML stands for Security Assertion Markup Language.
Question 88 Play from 1:36:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
FIM stands for File Integrity Monitoring.
Not this one. Try another answer.
Why B is wrong
SCAP stands for Security Content Automation Protocol.
Not this one. Try another answer.
Why C is wrong
CVSS stands for Common Vulnerability Scoring System.
Right, D is the answer.
Why D is right
UEBA stands for User and Entity Behavior Analytics. It baselines normal behaviour and flags anomalies.
Question 89 Play from 1:37:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
OSINT stands for Open-Source Intelligence.
Not this one. Try another answer.
Why B is wrong
IoC stands for Indicator of Compromise.
Not this one. Try another answer.
Why C is wrong
CVSS stands for Common Vulnerability Scoring System.
Right, D is the answer.
Why D is right
TTP stands for Tactics, Techniques, and Procedures. It describes how a threat actor operates.
Question 90 Play from 1:38:37
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
BIA stands for Business Impact Analysis.
Right, B is the answer.
Why B is right
DRP stands for Disaster Recovery Plan. It restores IT systems after a disaster.
Not this one. Try another answer.
Why C is wrong
BCP stands for Business Continuity Plan.
Not this one. Try another answer.
Why D is wrong
SOW stands for Statement of Work.
Question 91 Play from 1:39:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
EDR stands for Endpoint Detection and Response.
Right, B is the answer.
Why B is right
SIEM stands for Security Information and Event Management. It collects and correlates logs from many sources into alerts.
Not this one. Try another answer.
Why C is wrong
SOAR stands for Security Orchestration, Automation, and Response.
Not this one. Try another answer.
Why D is wrong
DLP stands for Data Loss Prevention.
Question 92 Play from 1:40:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SED stands for Self-Encrypting Drive.
Right, B is the answer.
Why B is right
RAID stands for Redundant Array of Inexpensive Disks. It combines disks for redundancy or speed.
Not this one. Try another answer.
Why C is wrong
UPS stands for Uninterruptible Power Supply.
Not this one. Try another answer.
Why D is wrong
FDE stands for Full Disk Encryption.
Question 93 Play from 1:42:00
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
IAM stands for Identity and Access Management. It manages user identities and what they can access.
Not this one. Try another answer.
Why B is wrong
PAM stands for Privileged Access Management.
Not this one. Try another answer.
Why C is wrong
DLP stands for Data Loss Prevention.
Not this one. Try another answer.
Why D is wrong
NAC stands for Network Access Control.
Question 94 Play from 1:43:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
DAC stands for Discretionary Access Control.
Right, B is the answer.
Why B is right
RBAC stands for Role-Based Access Control. It grants permissions based on job role.
Not this one. Try another answer.
Why C is wrong
ABAC stands for Attribute-Based Access Control.
Not this one. Try another answer.
Why D is wrong
ACL stands for Access Control List.
Question 95 Play from 1:44:09
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
FIM stands for File Integrity Monitoring.
Right, B is the answer.
Why B is right
DLP stands for Data Loss Prevention. It detects and blocks sensitive data leaving the organisation.
Not this one. Try another answer.
Why C is wrong
NAC stands for Network Access Control.
Not this one. Try another answer.
Why D is wrong
SWG stands for Secure Web Gateway.
Question 96 Play from 1:45:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MFA stands for Multifactor Authentication.
Not this one. Try another answer.
Why B is wrong
DAC stands for Discretionary Access Control.
Right, C is the answer.
Why C is right
SSO stands for Single Sign-On. It lets one login give access to many applications.
Not this one. Try another answer.
Why D is wrong
PAM stands for Privileged Access Management.
Question 97 Play from 1:46:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
AES stands for Advanced Encryption Standard.
Not this one. Try another answer.
Why B is wrong
ECC stands for Elliptic Curve Cryptography.
Not this one. Try another answer.
Why C is wrong
DHE stands for Diffie-Hellman Ephemeral.
Right, D is the answer.
Why D is right
RSA stands for Rivest, Shamir, and Adleman. It is an asymmetric algorithm used for encryption and signatures.
Question 98 Play from 1:47:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MOU stands for Memorandum of Understanding.
Not this one. Try another answer.
Why B is wrong
SLA stands for Service-Level Agreement.
Right, C is the answer.
Why C is right
NDA stands for Non-Disclosure Agreement. It legally binds a party to keep information confidential.
Not this one. Try another answer.
Why D is wrong
AUP stands for Acceptable Use Policy.
Question 99 Play from 1:48:24
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PFS stands for Perfect Forward Secrecy.
Right, B is the answer.
Why B is right
CSR stands for Certificate Signing Request. It is sent to a CA to request a certificate.
Not this one. Try another answer.
Why C is wrong
OCSP stands for Online Certificate Status Protocol.
Not this one. Try another answer.
Why D is wrong
CRL stands for Certificate Revocation List.
Question 100 Play from 1:49:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
IaaS stands for Infrastructure as a Service.
Not this one. Try another answer.
Why B is wrong
SASE stands for Secure Access Service Edge.
Not this one. Try another answer.
Why C is wrong
SaaS stands for Software as a Service.
Right, D is the answer.
Why D is right
PaaS stands for Platform as a Service. It provides a managed platform to build and run apps.
Transcript
Play from 00:00 Question 1. Which symmetric block cipher is the current standard for encrypting data? Here are the options. Option A. AES. Option B. DES. Option C. SHA. Option D. RSA. Pause the video now if you want time to think about the answer.
The correct answer is A. AES. AES stands for Advanced Encryption Standard. It is the standard symmetric block cipher. Now, why are the other options incorrect? Option B is incorrect. DES stands for Data Encryption Standard. Option C is incorrect. SHA stands for Secure Hash Algorithm. Option D is incorrect. RSA stands for Rivest, Shamir, and Adleman. Therefore, A, AES, is the correct answer.
Play from 01:04 Question 2. Which control checks a laptop's patch level and antivirus before letting it join the network? Here are the options. Option A. WAF. Option B. DLP. Option C. NAC. Option D. SWG. Pause the video now if you want time to think about the answer.
The correct answer is C. NAC. NAC stands for Network Access Control. It checks a device's identity and health before letting it onto the network. Now, why are the other options incorrect? Option A is incorrect. WAF stands for Web Application Firewall. Option B is incorrect. DLP stands for Data Loss Prevention. Option D is incorrect. SWG stands for Secure Web Gateway. Therefore, C, NAC, is the correct answer.
Play from 02:11 Question 3. Which access model can allow access only during office hours from a company laptop in the finance department? Here are the options. Option A. RBAC. Option B. DAC. Option C. ABAC. Option D. SSO. Pause the video now if you want time to think about the answer.
The correct answer is C. ABAC. ABAC stands for Attribute-Based Access Control. It grants access based on attributes such as department, location and time. Now, why are the other options incorrect? Option A is incorrect. RBAC stands for Role-Based Access Control. Option B is incorrect. DAC stands for Discretionary Access Control. Option D is incorrect. SSO stands for Single Sign-On. Therefore, C, ABAC, is the correct answer.
Show full transcriptShow less
Play from 03:22 Question 4. Which uses a hash plus a secret key to prove a message was not altered and came from a key holder? Here are the options. Option A. SHA. Option B. HMAC. Option C. PKI. Option D. PBKDF2. Pause the video now if you want time to think about the answer.
The correct answer is B. HMAC. HMAC stands for Hash-based Message Authentication Code. It combines a hash with a secret key to prove integrity and origin. Now, why are the other options incorrect? Option A is incorrect. SHA stands for Secure Hash Algorithm. Option C is incorrect. PKI stands for Public Key Infrastructure. Option D is incorrect. PBKDF2 stands for Password-Based Key Derivation Function 2. Therefore, B, HMAC, is the correct answer.
Play from 04:34 Question 5. Which tool sits between users and cloud apps to enforce company policy and spot shadow IT? Here are the options. Option A. HIDS. Option B. IPS. Option C. CASB. Option D. NAC. Pause the video now if you want time to think about the answer.
The correct answer is C. CASB. CASB stands for Cloud Access Security Broker. It enforces security policy between users and cloud services. Now, why are the other options incorrect? Option A is incorrect. HIDS stands for Host-based Intrusion Detection System. Option B is incorrect. IPS stands for Intrusion Prevention System. Option D is incorrect. NAC stands for Network Access Control. Therefore, C, CASB, is the correct answer.
Play from 05:44 Question 6. Which attack tricks a logged-in user's browser into sending a request they did not intend? Here are the options. Option A. RAT. Option B. CSRF. Option C. SSRF. Option D. XSS. Pause the video now if you want time to think about the answer.
The correct answer is B. CSRF. CSRF stands for Cross-site Request Forgery. It tricks a logged-in user's browser into sending a request. Now, why are the other options incorrect? Option A is incorrect. RAT stands for Remote Access Trojan. Option C is incorrect. SSRF stands for Server-side Request Forgery. Option D is incorrect. XSS stands for Cross-site Scripting. Therefore, B, CSRF, is the correct answer.
Play from 06:52 Question 7. Which solution vaults, rotates and records the use of administrator passwords? Here are the options. Option A. SSO. Option B. IAM. Option C. MDM. Option D. PAM. Pause the video now if you want time to think about the answer.
The correct answer is D. PAM. PAM stands for Privileged Access Management. It controls, vaults and monitors administrator accounts. Now, why are the other options incorrect? Option A is incorrect. SSO stands for Single Sign-On. Option B is incorrect. IAM stands for Identity and Access Management. Option C is incorrect. MDM stands for Mobile Device Management. Therefore, D, PAM, is the correct answer.
Play from 07:56 Question 8. Which target sets how much data, measured in time, the business can afford to lose? Here are the options. Option A. RPO. Option B. ARO. Option C. RTO. Option D. MTTR. Pause the video now if you want time to think about the answer.
The correct answer is A. RPO. RPO stands for Recovery Point Objective. It is the maximum acceptable amount of data loss, measured in time. Now, why are the other options incorrect? Option B is incorrect. ARO stands for Annualized Rate of Occurrence. Option C is incorrect. RTO stands for Recovery Time Objective. Option D is incorrect. MTTR stands for Mean Time to Repair. Therefore, A, RPO, is the correct answer.
Play from 09:07 Question 9. Which published list names certificates revoked before they expired? Here are the options. Option A. ACL. Option B. OCSP. Option C. CRL. Option D. CSR. Pause the video now if you want time to think about the answer.
The correct answer is C. CRL. CRL stands for Certificate Revocation List. It lists certificates revoked before expiry. Now, why are the other options incorrect? Option A is incorrect. ACL stands for Access Control List. Option B is incorrect. OCSP stands for Online Certificate Status Protocol. Option D is incorrect. CSR stands for Certificate Signing Request. Therefore, C, CRL, is the correct answer.
Play from 10:10 Question 10. Which family of algorithms produces hashes such as 256-bit digests? Here are the options. Option A. HMAC. Option B. SHA. Option C. RSA. Option D. AES. Pause the video now if you want time to think about the answer.
The correct answer is B. SHA. SHA stands for Secure Hash Algorithm. It is a family of hashing algorithms. Now, why are the other options incorrect? Option A is incorrect. HMAC stands for Hash-based Message Authentication Code. Option C is incorrect. RSA stands for Rivest, Shamir, and Adleman. Option D is incorrect. AES stands for Advanced Encryption Standard. Therefore, B, SHA, is the correct answer.
Play from 11:19 Question 11. Which asymmetric method gives strong security with short keys, which suits phones and IoT? Here are the options. Option A. ECC. Option B. RSA. Option C. SHA. Option D. DES. Pause the video now if you want time to think about the answer.
The correct answer is A. ECC. ECC stands for Elliptic Curve Cryptography. It is asymmetric cryptography with short keys. Now, why are the other options incorrect? Option B is incorrect. RSA stands for Rivest, Shamir, and Adleman. Option C is incorrect. SHA stands for Secure Hash Algorithm. Option D is incorrect. DES stands for Data Encryption Standard. Therefore, A, ECC, is the correct answer.
Play from 12:27 Question 12. Which entity issues and signs digital certificates? Here are the options. Option A. CSR. Option B. KDC. Option C. CRL. Option D. CA. Pause the video now if you want time to think about the answer.
The correct answer is D. CA. CA stands for Certificate Authority. It issues and signs digital certificates. Now, why are the other options incorrect? Option A is incorrect. CSR stands for Certificate Signing Request. Option B is incorrect. KDC stands for Key Distribution Center. Option C is incorrect. CRL stands for Certificate Revocation List. Therefore, D, CA, is the correct answer.
Play from 13:28 Question 13. Which technology lets many devices with private addresses share one public IP? Here are the options. Option A. NAT. Option B. DNS. Option C. ARP. Option D. VLAN. Pause the video now if you want time to think about the answer.
The correct answer is A. NAT. NAT stands for Network Address Translation. It maps private addresses to public ones. Now, why are the other options incorrect? Option B is incorrect. DNS stands for Domain Name System. Option C is incorrect. ARP stands for Address Resolution Protocol. Option D is incorrect. VLAN stands for Virtual Local Area Network. Therefore, A, NAT, is the correct answer.
Play from 14:32 Question 14. Which protocol encrypts web traffic in HTTPS? Here are the options. Option A. TLS. Option B. IPSec. Option C. SSH. Option D. PGP. Pause the video now if you want time to think about the answer.
The correct answer is A. TLS. TLS stands for Transport Layer Security. It encrypts data in transit, for example in HTTPS. Now, why are the other options incorrect? Option B is incorrect. IPSec stands for Internet Protocol Security. Option C is incorrect. SSH stands for Secure Shell. Option D is incorrect. PGP stands for Pretty Good Privacy. Therefore, A, TLS, is the correct answer.
Play from 15:36 Question 15. Using a complete email application through a web browser from a provider is which service model? Here are the options. Option A. PaaS. Option B. IaaS. Option C. IaC. Option D. SaaS. Pause the video now if you want time to think about the answer.
The correct answer is D. SaaS. SaaS stands for Software as a Service. It delivers complete applications over the internet. Now, why are the other options incorrect? Option A is incorrect. PaaS stands for Platform as a Service. Option B is incorrect. IaaS stands for Infrastructure as a Service. Option C is incorrect. IaC stands for Infrastructure as Code. Therefore, D, SaaS, is the correct answer.
Play from 16:40 Question 16. Renting virtual machines, storage and networks from a cloud provider is which service model? Here are the options. Option A. SaaS. Option B. IaaS. Option C. PaaS. Option D. IaC. Pause the video now if you want time to think about the answer.
The correct answer is B. IaaS. IaaS stands for Infrastructure as a Service. It rents out virtual machines, storage and networks. Now, why are the other options incorrect? Option A is incorrect. SaaS stands for Software as a Service. Option C is incorrect. PaaS stands for Platform as a Service. Option D is incorrect. IaC stands for Infrastructure as Code. Therefore, B, IaaS, is the correct answer.
Play from 17:43 Question 17. Which authentication framework does 802.1X use to carry different login methods? Here are the options. Option A. SAML. Option B. SNMP. Option C. EAP. Option D. IKE. Pause the video now if you want time to think about the answer.
The correct answer is C. EAP. EAP stands for Extensible Authentication Protocol. It is a framework for authentication methods, used with 802.1X. Now, why are the other options incorrect? Option A is incorrect. SAML stands for Security Assertion Markup Language. Option B is incorrect. SNMP stands for Simple Network Management Protocol. Option D is incorrect. IKE stands for Internet Key Exchange. Therefore, C, EAP, is the correct answer.
Play from 18:52 Question 18. Which malware gives an attacker hidden remote control of a computer? Here are the options. Option A. BEC. Option B. DDoS. Option C. RAT. Option D. APT. Pause the video now if you want time to think about the answer.
The correct answer is C. RAT. RAT stands for Remote Access Trojan. It gives an attacker hidden remote control of a system. Now, why are the other options incorrect? Option A is incorrect. BEC stands for Business Email Compromise. Option B is incorrect. DDoS stands for Distributed Denial of Service. Option D is incorrect. APT stands for Advanced Persistent Threat. Therefore, C, RAT, is the correct answer.
Play from 19:57 Question 19. Which chip on a laptop motherboard stores encryption keys and supports secure boot? Here are the options. Option A. KMS. Option B. HSM. Option C. SED. Option D. TPM. Pause the video now if you want time to think about the answer.
The correct answer is D. TPM. TPM stands for Trusted Platform Module. It is a chip on the motherboard that stores keys and supports secure boot. Now, why are the other options incorrect? Option A is incorrect. KMS stands for Key Management System. Option B is incorrect. HSM stands for Hardware Security Module. Option C is incorrect. SED stands for Self-Encrypting Drive. Therefore, D, TPM, is the correct answer.
Play from 21:03 Question 20. Which protocol is used to monitor and manage routers and switches? Here are the options. Option A. SNMP. Option B. SMB. Option C. SIP. Option D. SMTP. Pause the video now if you want time to think about the answer.
The correct answer is A. SNMP. SNMP stands for Simple Network Management Protocol. It monitors and manages network devices. Now, why are the other options incorrect? Option B is incorrect. SMB stands for Server Message Block. Option C is incorrect. SIP stands for Session Initiation Protocol. Option D is incorrect. SMTP stands for Simple Mail Transfer Protocol. Therefore, A, SNMP, is the correct answer.
Play from 22:06 Question 21. Which extension digitally signs DNS records so they cannot be forged? Here are the options. Option A. IPSec. Option B. DHCP. Option C. DNSSEC. Option D. DNS. Pause the video now if you want time to think about the answer.
The correct answer is C. DNSSEC. DNSSEC stands for Domain Name System Security Extensions. It signs DNS records so they cannot be forged. Now, why are the other options incorrect? Option A is incorrect. IPSec stands for Internet Protocol Security. Option B is incorrect. DHCP stands for Dynamic Host Configuration Protocol. Option D is incorrect. DNS stands for Domain Name System. Therefore, C, DNSSEC, is the correct answer.
Play from 23:14 Question 22. Which platform runs automated playbooks to respond to security alerts? Here are the options. Option A. UEBA. Option B. CASB. Option C. SIEM. Option D. SOAR. Pause the video now if you want time to think about the answer.
The correct answer is D. SOAR. SOAR stands for Security Orchestration, Automation, and Response. It runs automated playbooks to respond to alerts. Now, why are the other options incorrect? Option A is incorrect. UEBA stands for User and Entity Behavior Analytics. Option B is incorrect. CASB stands for Cloud Access Security Broker. Option C is incorrect. SIEM stands for Security Information and Event Management. Therefore, D, SOAR, is the correct answer.
Play from 24:27 Question 23. Which system gives each publicly known vulnerability a unique ID? Here are the options. Option A. CVSS. Option B. CVE. Option C. SCAP. Option D. STIX. Pause the video now if you want time to think about the answer.
The correct answer is B. CVE. CVE stands for Common Vulnerabilities and Exposures. It gives each publicly known vulnerability a unique ID. Now, why are the other options incorrect? Option A is incorrect. CVSS stands for Common Vulnerability Scoring System. Option C is incorrect. SCAP stands for Security Content Automation Protocol. Option D is incorrect. STIX stands for Structured Threat Information eXpression. Therefore, B, CVE, is the correct answer.
Play from 25:35 Question 24. Which type of system monitors and controls a power grid across a wide area? Here are the options. Option A. SASE. Option B. SCADA. Option C. SDN. Option D. RTOS. Pause the video now if you want time to think about the answer.
The correct answer is B. SCADA. SCADA stands for Supervisory Control and Data Acquisition. It monitors and controls industrial systems across wide areas. Now, why are the other options incorrect? Option A is incorrect. SASE stands for Secure Access Service Edge. Option C is incorrect. SDN stands for Software-Defined Networking. Option D is incorrect. RTOS stands for Real-Time Operating System. Therefore, B, SCADA, is the correct answer.
Play from 26:46 Question 25. A well-funded group that stays hidden inside a network for months is known as what? Here are the options. Option A. TTP. Option B. IoC. Option C. MSSP. Option D. APT. Pause the video now if you want time to think about the answer.
The correct answer is D. APT. APT stands for Advanced Persistent Threat. It is a skilled attacker who stays hidden in a network for a long time. Now, why are the other options incorrect? Option A is incorrect. TTP stands for Tactics, Techniques, and Procedures. Option B is incorrect. IoC stands for Indicator of Compromise. Option C is incorrect. MSSP stands for Managed Security Service Provider. Therefore, D, APT, is the correct answer.
Play from 27:53 Question 26. Which feature keeps recorded past sessions safe even if a server's private key is later stolen? Here are the options. Option A. PBKDF2. Option B. PFS. Option C. HMAC. Option D. OCSP. Pause the video now if you want time to think about the answer.
The correct answer is B. PFS. PFS stands for Perfect Forward Secrecy. It keeps past sessions safe even if a long-term key is stolen. Now, why are the other options incorrect? Option A is incorrect. PBKDF2 stands for Password-Based Key Derivation Function 2. Option C is incorrect. HMAC stands for Hash-based Message Authentication Code. Option D is incorrect. OCSP stands for Online Certificate Status Protocol. Therefore, B, PFS, is the correct answer.
Play from 29:05 Question 27. An unusual outbound connection to a known malicious IP is an example of what? Here are the options. Option A. IoC. Option B. TTP. Option C. CVE. Option D. APT. Pause the video now if you want time to think about the answer.
The correct answer is A. IoC. IoC stands for Indicator of Compromise. It is evidence that a system may have been breached. Now, why are the other options incorrect? Option B is incorrect. TTP stands for Tactics, Techniques, and Procedures. Option C is incorrect. CVE stands for Common Vulnerabilities and Exposures. Option D is incorrect. APT stands for Advanced Persistent Threat. Therefore, A, IoC, is the correct answer.
Play from 30:09 Question 28. What is the name that a wireless network broadcasts called? Here are the options. Option A. SAE. Option B. VLAN. Option C. WPS. Option D. SSID. Pause the video now if you want time to think about the answer.
The correct answer is D. SSID. SSID stands for Service Set Identifier. It is the name of a wireless network. Now, why are the other options incorrect? Option A is incorrect. SAE stands for Simultaneous Authentication of Equals. Option B is incorrect. VLAN stands for Virtual Local Area Network. Option C is incorrect. WPS stands for Wi-Fi Protected Setup. Therefore, D, SSID, is the correct answer.
Play from 31:11 Question 29. On a router, which list of rules permits or denies traffic? Here are the options. Option A. NAC. Option B. CRL. Option C. ACL. Option D. AUP. Pause the video now if you want time to think about the answer.
The correct answer is C. ACL. ACL stands for Access Control List. It is a list of rules that permit or deny traffic or access. Now, why are the other options incorrect? Option A is incorrect. NAC stands for Network Access Control. Option B is incorrect. CRL stands for Certificate Revocation List. Option D is incorrect. AUP stands for Acceptable Use Policy. Therefore, C, ACL, is the correct answer.
Play from 32:13 Question 30. What is the whole system of certificate authorities, certificates and key pairs called? Here are the options. Option A. PKI. Option B. CRL. Option C. HSM. Option D. KMS. Pause the video now if you want time to think about the answer.
The correct answer is A. PKI. PKI stands for Public Key Infrastructure. It is the system of CAs, certificates and keys that builds trust. Now, why are the other options incorrect? Option B is incorrect. CRL stands for Certificate Revocation List. Option C is incorrect. HSM stands for Hardware Security Module. Option D is incorrect. KMS stands for Key Management System. Therefore, A, PKI, is the correct answer.
Play from 33:20 Question 31. Which tool lets IT enforce passcodes and remotely wipe company phones? Here are the options. Option A. DLP. Option B. MDM. Option C. PAM. Option D. NAC. Pause the video now if you want time to think about the answer.
The correct answer is B. MDM. MDM stands for Mobile Device Management. It enforces policy on phones and tablets. Now, why are the other options incorrect? Option A is incorrect. DLP stands for Data Loss Prevention. Option C is incorrect. PAM stands for Privileged Access Management. Option D is incorrect. NAC stands for Network Access Control. Therefore, B, MDM, is the correct answer.
Play from 34:22 Question 32. Which IPSec protocol encrypts the packet payload? Here are the options. Option A. AH. Option B. L2TP. Option C. ESP. Option D. IKE. Pause the video now if you want time to think about the answer.
The correct answer is C. ESP. ESP stands for Encapsulating Security Payload. It is the IPSec protocol that encrypts the payload. Now, why are the other options incorrect? Option A is incorrect. AH stands for Authentication Header. Option B is incorrect. L2TP stands for Layer 2 Tunneling Protocol. Option D is incorrect. IKE stands for Internet Key Exchange. Therefore, C, ESP, is the correct answer.
Play from 35:25 Question 33. Which agreement commits a provider to measurable targets such as 99.9 percent uptime? Here are the options. Option A. NDA. Option B. MOU. Option C. MSA. Option D. SLA. Pause the video now if you want time to think about the answer.
The correct answer is D. SLA. SLA stands for Service-Level Agreement. It sets measurable service targets such as uptime. Now, why are the other options incorrect? Option A is incorrect. NDA stands for Non-Disclosure Agreement. Option B is incorrect. MOU stands for Memorandum of Understanding. Option C is incorrect. MSA stands for Master Service Agreement. Therefore, D, SLA, is the correct answer.
Play from 36:28 Question 34. Which device protects a web application from SQL injection and cross-site scripting? Here are the options. Option A. NAC. Option B. UTM. Option C. SWG. Option D. WAF. Pause the video now if you want time to think about the answer.
The correct answer is D. WAF. WAF stands for Web Application Firewall. It filters HTTP traffic to protect web apps from attacks like SQL injection. Now, why are the other options incorrect? Option A is incorrect. NAC stands for Network Access Control. Option B is incorrect. UTM stands for Unified Threat Management. Option C is incorrect. SWG stands for Secure Web Gateway. Therefore, D, WAF, is the correct answer.
Play from 37:40 Question 35. Which protocol gives remote graphical access to a Windows desktop? Here are the options. Option A. SIP. Option B. SSH. Option C. RDP. Option D. SMB. Pause the video now if you want time to think about the answer.
The correct answer is C. RDP. RDP stands for Remote Desktop Protocol. It gives remote graphical access to Windows. Now, why are the other options incorrect? Option A is incorrect. SIP stands for Session Initiation Protocol. Option B is incorrect. SSH stands for Secure Shell. Option D is incorrect. SMB stands for Server Message Block. Therefore, C, RDP, is the correct answer.
Play from 38:44 Question 36. Which European Union regulation governs personal data privacy? Here are the options. Option A. PCI DSS. Option B. CVSS. Option C. SCAP. Option D. GDPR. Pause the video now if you want time to think about the answer.
The correct answer is D. GDPR. GDPR stands for General Data Protection Regulation. It is the European Union's data privacy law. Now, why are the other options incorrect? Option A is incorrect. PCI DSS stands for Payment Card Industry Data Security Standard. Option B is incorrect. CVSS stands for Common Vulnerability Scoring System. Option C is incorrect. SCAP stands for Security Content Automation Protocol. Therefore, D, GDPR, is the correct answer.
Play from 39:53 Question 37. Which protocol keeps system clocks in sync so logs line up and Kerberos works? Here are the options. Option A. NTP. Option B. SNMP. Option C. SIP. Option D. SMB. Pause the video now if you want time to think about the answer.
The correct answer is A. NTP. NTP stands for Network Time Protocol. It keeps clocks in sync. Now, why are the other options incorrect? Option B is incorrect. SNMP stands for Simple Network Management Protocol. Option C is incorrect. SIP stands for Session Initiation Protocol. Option D is incorrect. SMB stands for Server Message Block. Therefore, A, NTP, is the correct answer.
Play from 40:56 Question 38. Which XML-based standard passes authentication assertions from an identity provider to a web app? Here are the options. Option A. RADIUS. Option B. OAuth. Option C. LDAP. Option D. SAML. Pause the video now if you want time to think about the answer.
The correct answer is D. SAML. SAML stands for Security Assertion Markup Language. It an XML standard that passes authentication assertions between an identity provider and a service. Now, why are the other options incorrect? Option A is incorrect. RADIUS stands for Remote Authentication Dial-In User Service. Option B is incorrect. OAuth stands for Open Authorization. Option C is incorrect. LDAP stands for Lightweight Directory Access Protocol. Therefore, D, SAML, is the correct answer.
Play from 42:05 Question 39. Which protocol maps an IP address to a MAC address on a local network? Here are the options. Option A. NAT. Option B. DNS. Option C. ARP. Option D. DHCP. Pause the video now if you want time to think about the answer.
The correct answer is C. ARP. ARP stands for Address Resolution Protocol. It maps IP addresses to MAC addresses. Now, why are the other options incorrect? Option A is incorrect. NAT stands for Network Address Translation. Option B is incorrect. DNS stands for Domain Name System. Option D is incorrect. DHCP stands for Dynamic Host Configuration Protocol. Therefore, C, ARP, is the correct answer.
Play from 43:10 Question 40. Which tool watches behaviour on laptops and servers and can isolate an infected host? Here are the options. Option A. EDR. Option B. SWG. Option C. NAC. Option D. WAF. Pause the video now if you want time to think about the answer.
The correct answer is A. EDR. EDR stands for Endpoint Detection and Response. It watches endpoint behaviour and can isolate or roll back a host. Now, why are the other options incorrect? Option B is incorrect. SWG stands for Secure Web Gateway. Option C is incorrect. NAC stands for Network Access Control. Option D is incorrect. WAF stands for Web Application Firewall. Therefore, A, EDR, is the correct answer.
Play from 44:15 Question 41. Which standard must a business follow when it stores or processes payment card data? Here are the options. Option A. SCAP. Option B. PCI DSS. Option C. GDPR. Option D. STIX. Pause the video now if you want time to think about the answer.
The correct answer is B. PCI DSS. PCI DSS stands for Payment Card Industry Data Security Standard. It is the security standard for handling card data. Now, why are the other options incorrect? Option A is incorrect. SCAP stands for Security Content Automation Protocol. Option C is incorrect. GDPR stands for General Data Protection Regulation. Option D is incorrect. STIX stands for Structured Threat Information eXpression. Therefore, B, PCI DSS, is the correct answer.
Play from 45:27 Question 42. An authenticator app shows a six-digit code that changes every 30 seconds. What is this? Here are the options. Option A. TOTP. Option B. HOTP. Option C. PBKDF2. Option D. HMAC. Pause the video now if you want time to think about the answer.
The correct answer is A. TOTP. TOTP stands for Time-based One-Time Password. It generates a code that changes every 30 seconds or so. Now, why are the other options incorrect? Option B is incorrect. HOTP stands for HMAC-based One-Time Password. Option C is incorrect. PBKDF2 stands for Password-Based Key Derivation Function 2. Option D is incorrect. HMAC stands for Hash-based Message Authentication Code. Therefore, A, TOTP, is the correct answer.
Play from 46:43 Question 43. A person's name together with their passport number is an example of what? Here are the options. Option A. PHI. Option B. CIA. Option C. IoC. Option D. PII. Pause the video now if you want time to think about the answer.
The correct answer is D. PII. PII stands for Personally Identifiable Information. It is data that can identify a person. Now, why are the other options incorrect? Option A is incorrect. PHI stands for Protected Health Information. Option B is incorrect. CIA stands for Confidentiality, Integrity, and Availability. Option C is incorrect. IoC stands for Indicator of Compromise. Therefore, D, PII, is the correct answer.
Play from 47:48 Question 44. Which control alerts when critical system files are changed? Here are the options. Option A. DLP. Option B. CASB. Option C. NAC. Option D. FIM. Pause the video now if you want time to think about the answer.
The correct answer is D. FIM. FIM stands for File Integrity Monitoring. It alerts when important files change. Now, why are the other options incorrect? Option A is incorrect. DLP stands for Data Loss Prevention. Option B is incorrect. CASB stands for Cloud Access Security Broker. Option C is incorrect. NAC stands for Network Access Control. Therefore, D, FIM, is the correct answer.
Play from 48:49 Question 45. What is the team that monitors and responds to security events around the clock usually called? Here are the options. Option A. KDC. Option B. CA. Option C. IdP. Option D. SOC. Pause the video now if you want time to think about the answer.
The correct answer is D. SOC. SOC stands for Security Operations Center. It is the team and facility that monitors and responds around the clock. Now, why are the other options incorrect? Option A is incorrect. KDC stands for Key Distribution Center. Option B is incorrect. CA stands for Certificate Authority. Option C is incorrect. IdP stands for Identity Provider. Therefore, D, SOC, is the correct answer.
Play from 49:53 Question 46. Which device keeps servers running on battery during a short power cut? Here are the options. Option A. RAID. Option B. UPS. Option C. PDU. Option D. HSM. Pause the video now if you want time to think about the answer.
The correct answer is B. UPS. UPS stands for Uninterruptible Power Supply. It provides battery power during short outages. Now, why are the other options incorrect? Option A is incorrect. RAID stands for Redundant Array of Inexpensive Disks. Option C is incorrect. PDU stands for Power Distribution Unit. Option D is incorrect. HSM stands for Hardware Security Module. Therefore, B, UPS, is the correct answer.
Play from 51:00 Question 47. Which term describes encrypting a laptop's entire drive so a stolen device reveals nothing? Here are the options. Option A. DLP. Option B. HMAC. Option C. FDE. Option D. PKI. Pause the video now if you want time to think about the answer.
The correct answer is C. FDE. FDE stands for Full Disk Encryption. It encrypts an entire drive. Now, why are the other options incorrect? Option A is incorrect. DLP stands for Data Loss Prevention. Option B is incorrect. HMAC stands for Hash-based Message Authentication Code. Option D is incorrect. PKI stands for Public Key Infrastructure. Therefore, C, FDE, is the correct answer.
Play from 52:06 Question 48. Which system sits inline and blocks the attacks it detects? Here are the options. Option A. IPS. Option B. FIM. Option C. SIEM. Option D. IDS. Pause the video now if you want time to think about the answer.
The correct answer is A. IPS. IPS stands for Intrusion Prevention System. It sits inline and blocks attacks it detects. Now, why are the other options incorrect? Option B is incorrect. FIM stands for File Integrity Monitoring. Option C is incorrect. SIEM stands for Security Information and Event Management. Option D is incorrect. IDS stands for Intrusion Detection System. Therefore, A, IPS, is the correct answer.
Play from 53:10 Question 49. Which protocol centralises Wi-Fi and VPN login authentication using UDP? Here are the options. Option A. RADIUS. Option B. SAML. Option C. LDAP. Option D. TACACS+. Pause the video now if you want time to think about the answer.
The correct answer is A. RADIUS. RADIUS stands for Remote Authentication Dial-In User Service. It centralises network access authentication over UDP. Now, why are the other options incorrect? Option B is incorrect. SAML stands for Security Assertion Markup Language. Option C is incorrect. LDAP stands for Lightweight Directory Access Protocol. Option D is incorrect. TACACS+ stands for Terminal Access Controller Access-Control System Plus. Therefore, A, RADIUS, is the correct answer.
Play from 54:19 Question 50. Which service manages creating, rotating and retiring encryption keys centrally? Here are the options. Option A. PKI. Option B. HSM. Option C. KMS. Option D. TPM. Pause the video now if you want time to think about the answer.
The correct answer is C. KMS. KMS stands for Key Management System. It manages the key lifecycle centrally. Now, why are the other options incorrect? Option A is incorrect. PKI stands for Public Key Infrastructure. Option B is incorrect. HSM stands for Hardware Security Module. Option D is incorrect. TPM stands for Trusted Platform Module. Therefore, C, KMS, is the correct answer.
Play from 55:22 Question 51. Which triad sums up the core goals of information security? Here are the options. Option A. CIA. Option B. AAA. Option C. BIA. Option D. IAM. Pause the video now if you want time to think about the answer.
The correct answer is A. CIA. CIA stands for Confidentiality, Integrity, and Availability. It is the core triad of information security. Now, why are the other options incorrect? Option B is incorrect. AAA stands for Authentication, Authorization, and Accounting. Option C is incorrect. BIA stands for Business Impact Analysis. Option D is incorrect. IAM stands for Identity and Access Management. Therefore, A, CIA, is the correct answer.
Play from 56:31 Question 52. Which value is single loss expectancy multiplied by the annualized rate of occurrence? Here are the options. Option A. RTO. Option B. ALE. Option C. ARO. Option D. SLE. Pause the video now if you want time to think about the answer.
The correct answer is B. ALE. ALE stands for Annualized Loss Expectancy. It is the expected loss per year, SLE times ARO. Now, why are the other options incorrect? Option A is incorrect. RTO stands for Recovery Time Objective. Option C is incorrect. ARO stands for Annualized Rate of Occurrence. Option D is incorrect. SLE stands for Single Loss Expectancy. Therefore, B, ALE, is the correct answer.
Play from 57:35 Question 53. Which service filters users' outbound web browsing and blocks malicious sites? Here are the options. Option A. WAF. Option B. HSM. Option C. FIM. Option D. SWG. Pause the video now if you want time to think about the answer.
The correct answer is D. SWG. SWG stands for Secure Web Gateway. It filters users' web traffic and blocks malicious sites. Now, why are the other options incorrect? Option A is incorrect. WAF stands for Web Application Firewall. Option B is incorrect. HSM stands for Hardware Security Module. Option C is incorrect. FIM stands for File Integrity Monitoring. Therefore, D, SWG, is the correct answer.
Play from 58:40 Question 54. Which protocol hands out IP addresses to clients automatically? Here are the options. Option A. DHCP. Option B. ARP. Option C. NAT. Option D. DNS. Pause the video now if you want time to think about the answer.
The correct answer is A. DHCP. DHCP stands for Dynamic Host Configuration Protocol. It hands out IP addresses automatically. Now, why are the other options incorrect? Option B is incorrect. ARP stands for Address Resolution Protocol. Option C is incorrect. NAT stands for Network Address Translation. Option D is incorrect. DNS stands for Domain Name System. Therefore, A, DHCP, is the correct answer.
Play from 59:42 Question 55. Which plan keeps the whole business operating during a disruption? Here are the options. Option A. DRP. Option B. BCP. Option C. BIA. Option D. AUP. Pause the video now if you want time to think about the answer.
The correct answer is B. BCP. BCP stands for Business Continuity Plan. It keeps the business running during a disruption. Now, why are the other options incorrect? Option A is incorrect. DRP stands for Disaster Recovery Plan. Option C is incorrect. BIA stands for Business Impact Analysis. Option D is incorrect. AUP stands for Acceptable Use Policy. Therefore, B, BCP, is the correct answer.
Play from 1:00:43 Question 56. Requiring a password and a code from a phone app is an example of what? Here are the options. Option A. MFA. Option B. RBAC. Option C. SSO. Option D. SAML. Pause the video now if you want time to think about the answer.
The correct answer is A. MFA. MFA stands for Multifactor Authentication. It requires two or more different kinds of factor to log in. Now, why are the other options incorrect? Option B is incorrect. RBAC stands for Role-Based Access Control. Option C is incorrect. SSO stands for Single Sign-On. Option D is incorrect. SAML stands for Security Assertion Markup Language. Therefore, A, MFA, is the correct answer.
Play from 1:01:51 Question 57. Which attack floods a target with traffic from many machines at once? Here are the options. Option A. APT. Option B. DDoS. Option C. RAT. Option D. BEC. Pause the video now if you want time to think about the answer.
The correct answer is B. DDoS. DDoS stands for Distributed Denial of Service. It floods a target from many sources. Now, why are the other options incorrect? Option A is incorrect. APT stands for Advanced Persistent Threat. Option C is incorrect. RAT stands for Remote Access Trojan. Option D is incorrect. BEC stands for Business Email Compromise. Therefore, B, DDoS, is the correct answer.
Play from 1:02:56 Question 58. Which access model lets the owner of a file decide who can open it? Here are the options. Option A. DAC. Option B. ABAC. Option C. PAM. Option D. RBAC. Pause the video now if you want time to think about the answer.
The correct answer is A. DAC. DAC stands for Discretionary Access Control. It lets the data owner decide who gets access. Now, why are the other options incorrect? Option B is incorrect. ABAC stands for Attribute-Based Access Control. Option C is incorrect. PAM stands for Privileged Access Management. Option D is incorrect. RBAC stands for Role-Based Access Control. Therefore, A, DAC, is the correct answer.
Play from 1:03:57 Question 59. Which metric is the average time it takes to fix a failed component? Here are the options. Option A. RTO. Option B. RPO. Option C. MTTR. Option D. MTBF. Pause the video now if you want time to think about the answer.
The correct answer is C. MTTR. MTTR stands for Mean Time to Repair. It is the average time to fix a failed component. Now, why are the other options incorrect? Option A is incorrect. RTO stands for Recovery Time Objective. Option B is incorrect. RPO stands for Recovery Point Objective. Option D is incorrect. MTBF stands for Mean Time Between Failures. Therefore, C, MTTR, is the correct answer.
Play from 1:05:04 Question 60. Which attack makes a web server send requests to internal systems for the attacker? Here are the options. Option A. SSRF. Option B. BEC. Option C. XSS. Option D. CSRF. Pause the video now if you want time to think about the answer.
The correct answer is A. SSRF. SSRF stands for Server-side Request Forgery. It tricks a server into sending requests to internal systems. Now, why are the other options incorrect? Option B is incorrect. BEC stands for Business Email Compromise. Option C is incorrect. XSS stands for Cross-site Scripting. Option D is incorrect. CSRF stands for Cross-site Request Forgery. Therefore, A, SSRF, is the correct answer.
Play from 1:06:16 Question 61. Which attack injects script that runs in other visitors' browsers? Here are the options. Option A. DDoS. Option B. XSS. Option C. CSRF. Option D. SSRF. Pause the video now if you want time to think about the answer.
The correct answer is B. XSS. XSS stands for Cross-site Scripting. It injects script that runs in other users' browsers. Now, why are the other options incorrect? Option A is incorrect. DDoS stands for Distributed Denial of Service. Option C is incorrect. CSRF stands for Cross-site Request Forgery. Option D is incorrect. SSRF stands for Server-side Request Forgery. Therefore, B, XSS, is the correct answer.
Play from 1:07:21 Question 62. Which push-button or PIN Wi-Fi setup feature should be disabled because of known weaknesses? Here are the options. Option A. SAE. Option B. WPS. Option C. WPA3. Option D. SSID. Pause the video now if you want time to think about the answer.
The correct answer is B. WPS. WPS stands for Wi-Fi Protected Setup. It is a push-button or PIN Wi-Fi setup feature with known weaknesses. Now, why are the other options incorrect? Option A is incorrect. SAE stands for Simultaneous Authentication of Equals. Option C is incorrect. WPA3 stands for Wi-Fi Protected Access 3. Option D is incorrect. SSID stands for Service Set Identifier. Therefore, B, WPS, is the correct answer.
Play from 1:08:31 Question 63. Which system detects attacks and raises alerts, but does not block traffic? Here are the options. Option A. IDS. Option B. NGFW. Option C. IPS. Option D. WAF. Pause the video now if you want time to think about the answer.
The correct answer is A. IDS. IDS stands for Intrusion Detection System. It detects and alerts on attacks but does not block them. Now, why are the other options incorrect? Option B is incorrect. NGFW stands for Next-Generation Firewall. Option C is incorrect. IPS stands for Intrusion Prevention System. Option D is incorrect. WAF stands for Web Application Firewall. Therefore, A, IDS, is the correct answer.
Play from 1:09:38 Question 64. Which protocol lets users read email while keeping it stored on the server? Here are the options. Option A. SNMP. Option B. SMTP. Option C. IMAP. Option D. SIP. Pause the video now if you want time to think about the answer.
The correct answer is C. IMAP. IMAP stands for Internet Message Access Protocol. It reads email while keeping it on the server. Now, why are the other options incorrect? Option A is incorrect. SNMP stands for Simple Network Management Protocol. Option B is incorrect. SMTP stands for Simple Mail Transfer Protocol. Option D is incorrect. SIP stands for Session Initiation Protocol. Therefore, C, IMAP, is the correct answer.
Play from 1:10:48 Question 65. Which value estimates how many times per year a risk will happen? Here are the options. Option A. MTBF. Option B. ALE. Option C. SLE. Option D. ARO. Pause the video now if you want time to think about the answer.
The correct answer is D. ARO. ARO stands for Annualized Rate of Occurrence. It is how many times per year a risk is expected to happen. Now, why are the other options incorrect? Option A is incorrect. MTBF stands for Mean Time Between Failures. Option B is incorrect. ALE stands for Annualized Loss Expectancy. Option C is incorrect. SLE stands for Single Loss Expectancy. Therefore, D, ARO, is the correct answer.
Play from 1:11:55 Question 66. What is the maximum acceptable time to get a system running again after an outage? Here are the options. Option A. MTTR. Option B. RPO. Option C. RTO. Option D. MTBF. Pause the video now if you want time to think about the answer.
The correct answer is C. RTO. RTO stands for Recovery Time Objective. It is the maximum acceptable time to restore a system. Now, why are the other options incorrect? Option A is incorrect. MTTR stands for Mean Time to Repair. Option B is incorrect. RPO stands for Recovery Point Objective. Option D is incorrect. MTBF stands for Mean Time Between Failures. Therefore, C, RTO, is the correct answer.
Play from 1:12:56 Question 67. Which analysis identifies critical business functions and the impact of losing them? Here are the options. Option A. BIA. Option B. BCP. Option C. DRP. Option D. SLA. Pause the video now if you want time to think about the answer.
The correct answer is A. BIA. BIA stands for Business Impact Analysis. It identifies critical functions and the impact of losing them. Now, why are the other options incorrect? Option B is incorrect. BCP stands for Business Continuity Plan. Option C is incorrect. DRP stands for Disaster Recovery Plan. Option D is incorrect. SLA stands for Service-Level Agreement. Therefore, A, BIA, is the correct answer.
Play from 1:14:02 Question 68. Which attack uses a taken-over company mailbox to request a fraudulent wire transfer? Here are the options. Option A. DDoS. Option B. RAT. Option C. XSS. Option D. BEC. Pause the video now if you want time to think about the answer.
The correct answer is D. BEC. BEC stands for Business Email Compromise. It uses a taken-over business mailbox to request payments. Now, why are the other options incorrect? Option A is incorrect. DDoS stands for Distributed Denial of Service. Option B is incorrect. RAT stands for Remote Access Trojan. Option C is incorrect. XSS stands for Cross-site Scripting. Therefore, D, BEC, is the correct answer.
Play from 1:15:07 Question 69. Which technology splits one physical switch into separate logical networks? Here are the options. Option A. DMZ. Option B. VPN. Option C. VLAN. Option D. NAT. Pause the video now if you want time to think about the answer.
The correct answer is C. VLAN. VLAN stands for Virtual Local Area Network. It splits one switch into separate logical networks. Now, why are the other options incorrect? Option A is incorrect. DMZ stands for Demilitarized Zone. Option B is incorrect. VPN stands for Virtual Private Network. Option D is incorrect. NAT stands for Network Address Translation. Therefore, C, VLAN, is the correct answer.
Play from 1:16:06 Question 70. Which protocol checks the status of one certificate in real time? Here are the options. Option A. CRL. Option B. SCAP. Option C. OCSP. Option D. CSR. Pause the video now if you want time to think about the answer.
The correct answer is C. OCSP. OCSP stands for Online Certificate Status Protocol. It checks one certificate's status in real time. Now, why are the other options incorrect? Option A is incorrect. CRL stands for Certificate Revocation List. Option B is incorrect. SCAP stands for Security Content Automation Protocol. Option D is incorrect. CSR stands for Certificate Signing Request. Therefore, C, OCSP, is the correct answer.
Play from 1:17:11 Question 71. Which system rates a vulnerability's severity on a scale from 0 to 10? Here are the options. Option A. TAXII. Option B. CVSS. Option C. CVE. Option D. SCAP. Pause the video now if you want time to think about the answer.
The correct answer is B. CVSS. CVSS stands for Common Vulnerability Scoring System. It rates a vulnerability's severity from 0 to 10. Now, why are the other options incorrect? Option A is incorrect. TAXII stands for Trusted Automated eXchange of Indicator Information. Option C is incorrect. CVE stands for Common Vulnerabilities and Exposures. Option D is incorrect. SCAP stands for Security Content Automation Protocol. Therefore, B, CVSS, is the correct answer.
Play from 1:18:23 Question 72. Which dedicated, tamper-resistant appliance generates and stores keys for many servers? Here are the options. Option A. HSM. Option B. TPM. Option C. FDE. Option D. KMS. Pause the video now if you want time to think about the answer.
The correct answer is A. HSM. HSM stands for Hardware Security Module. It is a dedicated tamper-resistant device for generating and storing keys. Now, why are the other options incorrect? Option B is incorrect. TPM stands for Trusted Platform Module. Option C is incorrect. FDE stands for Full Disk Encryption. Option D is incorrect. KMS stands for Key Management System. Therefore, A, HSM, is the correct answer.
Play from 1:19:29 Question 73. Which value is asset value multiplied by exposure factor? Here are the options. Option A. RPO. Option B. ALE. Option C. SLE. Option D. ARO. Pause the video now if you want time to think about the answer.
The correct answer is C. SLE. SLE stands for Single Loss Expectancy. It is the loss from one occurrence, asset value times exposure factor. Now, why are the other options incorrect? Option A is incorrect. RPO stands for Recovery Point Objective. Option B is incorrect. ALE stands for Annualized Loss Expectancy. Option D is incorrect. ARO stands for Annualized Rate of Occurrence. Therefore, C, SLE, is the correct answer.
Play from 1:20:30 Question 74. Which deployment model lets employees use their own phones for work? Here are the options. Option A. MDM. Option B. CYOD. Option C. COPE. Option D. BYOD. Pause the video now if you want time to think about the answer.
The correct answer is D. BYOD. BYOD stands for Bring Your Own Device. It lets staff use personal devices for work. Now, why are the other options incorrect? Option A is incorrect. MDM stands for Mobile Device Management. Option B is incorrect. CYOD stands for Choose Your Own Device. Option C is incorrect. COPE stands for Corporate-Owned, Personally Enabled. Therefore, D, BYOD, is the correct answer.
Play from 1:21:38 Question 75. Which protocol shares files and printers on Windows networks? Here are the options. Option A. RDP. Option B. SMTP. Option C. SMB. Option D. SNMP. Pause the video now if you want time to think about the answer.
The correct answer is C. SMB. SMB stands for Server Message Block. It shares files and printers on Windows networks. Now, why are the other options incorrect? Option A is incorrect. RDP stands for Remote Desktop Protocol. Option B is incorrect. SMTP stands for Simple Mail Transfer Protocol. Option D is incorrect. SNMP stands for Simple Network Management Protocol. Therefore, C, SMB, is the correct answer.
Play from 1:22:43 Question 76. Which document lists a project's specific tasks, deliverables and timeline? Here are the options. Option A. SOW. Option B. MSA. Option C. MOU. Option D. BPA. Pause the video now if you want time to think about the answer.
The correct answer is A. SOW. SOW stands for Statement of Work. It describes the specific tasks, deliverables and timeline of a project. Now, why are the other options incorrect? Option B is incorrect. MSA stands for Master Service Agreement. Option C is incorrect. MOU stands for Memorandum of Understanding. Option D is incorrect. BPA stands for Business Partners Agreement. Therefore, A, SOW, is the correct answer.
Play from 1:23:49 Question 77. Which protocol is used to authenticate network device admins over TCP and encrypts the whole payload? Here are the options. Option A. TACACS+. Option B. OAuth. Option C. RADIUS. Option D. LDAP. Pause the video now if you want time to think about the answer.
The correct answer is A. TACACS+. TACACS+ stands for Terminal Access Controller Access-Control System Plus. It centralises device admin authentication over TCP and encrypts the whole payload. Now, why are the other options incorrect? Option B is incorrect. OAuth stands for Open Authorization. Option C is incorrect. RADIUS stands for Remote Authentication Dial-In User Service. Option D is incorrect. LDAP stands for Lightweight Directory Access Protocol. Therefore, A, TACACS+, is the correct answer.
Play from 1:25:07 Question 78. Which model delivers networking and security together as a cloud service near the user? Here are the options. Option A. SDN. Option B. UTM. Option C. SASE. Option D. NAC. Pause the video now if you want time to think about the answer.
The correct answer is C. SASE. SASE stands for Secure Access Service Edge. It delivers networking and security as a cloud service close to users. Now, why are the other options incorrect? Option A is incorrect. SDN stands for Software-Defined Networking. Option B is incorrect. UTM stands for Unified Threat Management. Option D is incorrect. NAC stands for Network Access Control. Therefore, C, SASE, is the correct answer.
Play from 1:26:16 Question 79. What is the screened subnet that holds public-facing servers, such as a web server? Here are the options. Option A. VPN. Option B. VLAN. Option C. NAT. Option D. DMZ. Pause the video now if you want time to think about the answer.
The correct answer is D. DMZ. DMZ stands for Demilitarized Zone. It is a screened subnet for public-facing servers. Now, why are the other options incorrect? Option A is incorrect. VPN stands for Virtual Private Network. Option B is incorrect. VLAN stands for Virtual Local Area Network. Option C is incorrect. NAT stands for Network Address Translation. Therefore, D, DMZ, is the correct answer.
Play from 1:27:18 Question 80. Gathering information about a target from public websites and social media is called what? Here are the options. Option A. TTP. Option B. OSINT. Option C. IoC. Option D. APT. Pause the video now if you want time to think about the answer.
The correct answer is B. OSINT. OSINT stands for Open-Source Intelligence. It is intelligence gathered from public sources. Now, why are the other options incorrect? Option A is incorrect. TTP stands for Tactics, Techniques, and Procedures. Option C is incorrect. IoC stands for Indicator of Compromise. Option D is incorrect. APT stands for Advanced Persistent Threat. Therefore, B, OSINT, is the correct answer.
Play from 1:28:25 Question 81. Defining servers and networks in version-controlled configuration files is called what? Here are the options. Option A. IaaS. Option B. SDLC. Option C. SDN. Option D. IaC. Pause the video now if you want time to think about the answer.
The correct answer is D. IaC. IaC stands for Infrastructure as Code. It defines infrastructure in configuration files. Now, why are the other options incorrect? Option A is incorrect. IaaS stands for Infrastructure as a Service. Option B is incorrect. SDLC stands for Software Development Life Cycle. Option C is incorrect. SDN stands for Software-Defined Networking. Therefore, D, IaC, is the correct answer.
Play from 1:29:37 Question 82. Which firewall can identify applications and includes intrusion prevention? Here are the options. Option A. ACL. Option B. NGFW. Option C. NAT. Option D. WAF. Pause the video now if you want time to think about the answer.
The correct answer is B. NGFW. NGFW stands for Next-Generation Firewall. It adds application awareness and intrusion prevention to a firewall. Now, why are the other options incorrect? Option A is incorrect. ACL stands for Access Control List. Option C is incorrect. NAT stands for Network Address Translation. Option D is incorrect. WAF stands for Web Application Firewall. Therefore, B, NGFW, is the correct answer.
Play from 1:30:45 Question 83. Which policy sets the rules employees agree to for using company systems? Here are the options. Option A. AUP. Option B. BPA. Option C. NDA. Option D. SLA. Pause the video now if you want time to think about the answer.
The correct answer is A. AUP. AUP stands for Acceptable Use Policy. It sets the rules for using company systems. Now, why are the other options incorrect? Option B is incorrect. BPA stands for Business Partners Agreement. Option C is incorrect. NDA stands for Non-Disclosure Agreement. Option D is incorrect. SLA stands for Service-Level Agreement. Therefore, A, AUP, is the correct answer.
Play from 1:31:50 Question 84. A patient's diagnosis linked to their name is an example of which specific type of data? Here are the options. Option A. CVE. Option B. PHI. Option C. TTP. Option D. IoC. Pause the video now if you want time to think about the answer.
The correct answer is B. PHI. PHI stands for Protected Health Information. It is health data linked to a person. Now, why are the other options incorrect? Option A is incorrect. CVE stands for Common Vulnerabilities and Exposures. Option C is incorrect. TTP stands for Tactics, Techniques, and Procedures. Option D is incorrect. IoC stands for Indicator of Compromise. Therefore, B, PHI, is the correct answer.
Play from 1:32:54 Question 85. Which old hashing algorithm is broken by practical collisions? Here are the options. Option A. AES. Option B. ECC. Option C. HMAC. Option D. MD5. Pause the video now if you want time to think about the answer.
The correct answer is D. MD5. MD5 stands for Message Digest 5. It is an old hash with known collisions. Now, why are the other options incorrect? Option A is incorrect. AES stands for Advanced Encryption Standard. Option B is incorrect. ECC stands for Elliptic Curve Cryptography. Option C is incorrect. HMAC stands for Hash-based Message Authentication Code. Therefore, D, MD5, is the correct answer.
Play from 1:33:57 Question 86. Which standard lets an app access your photos on another service without ever seeing your password? Here are the options. Option A. TACACS+. Option B. SAML. Option C. OAuth. Option D. LDAP. Pause the video now if you want time to think about the answer.
The correct answer is C. OAuth. OAuth stands for Open Authorization. It lets an app access resources on a user's behalf without seeing their password. Now, why are the other options incorrect? Option A is incorrect. TACACS+ stands for Terminal Access Controller Access-Control System Plus. Option B is incorrect. SAML stands for Security Assertion Markup Language. Option D is incorrect. LDAP stands for Lightweight Directory Access Protocol. Therefore, C, OAuth, is the correct answer.
Play from 1:35:10 Question 87. Which protocol is used to query a directory such as Active Directory? Here are the options. Option A. RADIUS. Option B. SNMP. Option C. LDAP. Option D. SAML. Pause the video now if you want time to think about the answer.
The correct answer is C. LDAP. LDAP stands for Lightweight Directory Access Protocol. It queries and updates directory services such as Active Directory. Now, why are the other options incorrect? Option A is incorrect. RADIUS stands for Remote Authentication Dial-In User Service. Option B is incorrect. SNMP stands for Simple Network Management Protocol. Option D is incorrect. SAML stands for Security Assertion Markup Language. Therefore, C, LDAP, is the correct answer.
Play from 1:36:22 Question 88. Which tool learns normal user behaviour and flags an account that suddenly downloads gigabytes at 3 a.m.? Here are the options. Option A. FIM. Option B. SCAP. Option C. CVSS. Option D. UEBA. Pause the video now if you want time to think about the answer.
The correct answer is D. UEBA. UEBA stands for User and Entity Behavior Analytics. It baselines normal behaviour and flags anomalies. Now, why are the other options incorrect? Option A is incorrect. FIM stands for File Integrity Monitoring. Option B is incorrect. SCAP stands for Security Content Automation Protocol. Option C is incorrect. CVSS stands for Common Vulnerability Scoring System. Therefore, D, UEBA, is the correct answer.
Play from 1:37:30 Question 89. Which term describes how a threat actor typically operates? Here are the options. Option A. OSINT. Option B. IoC. Option C. CVSS. Option D. TTP. Pause the video now if you want time to think about the answer.
The correct answer is D. TTP. TTP stands for Tactics, Techniques, and Procedures. It describes how a threat actor operates. Now, why are the other options incorrect? Option A is incorrect. OSINT stands for Open-Source Intelligence. Option B is incorrect. IoC stands for Indicator of Compromise. Option C is incorrect. CVSS stands for Common Vulnerability Scoring System. Therefore, D, TTP, is the correct answer.
Play from 1:38:37 Question 90. Which plan focuses on restoring IT systems after a disaster? Here are the options. Option A. BIA. Option B. DRP. Option C. BCP. Option D. SOW. Pause the video now if you want time to think about the answer.
The correct answer is B. DRP. DRP stands for Disaster Recovery Plan. It restores IT systems after a disaster. Now, why are the other options incorrect? Option A is incorrect. BIA stands for Business Impact Analysis. Option C is incorrect. BCP stands for Business Continuity Plan. Option D is incorrect. SOW stands for Statement of Work. Therefore, B, DRP, is the correct answer.
Play from 1:39:45 Question 91. Which tool collects logs from across the network and correlates them into security alerts? Here are the options. Option A. EDR. Option B. SIEM. Option C. SOAR. Option D. DLP. Pause the video now if you want time to think about the answer.
The correct answer is B. SIEM. SIEM stands for Security Information and Event Management. It collects and correlates logs from many sources into alerts. Now, why are the other options incorrect? Option A is incorrect. EDR stands for Endpoint Detection and Response. Option C is incorrect. SOAR stands for Security Orchestration, Automation, and Response. Option D is incorrect. DLP stands for Data Loss Prevention. Therefore, B, SIEM, is the correct answer.
Play from 1:40:55 Question 92. Which technology combines several disks so the data survives one disk failing? Here are the options. Option A. SED. Option B. RAID. Option C. UPS. Option D. FDE. Pause the video now if you want time to think about the answer.
The correct answer is B. RAID. RAID stands for Redundant Array of Inexpensive Disks. It combines disks for redundancy or speed. Now, why are the other options incorrect? Option A is incorrect. SED stands for Self-Encrypting Drive. Option C is incorrect. UPS stands for Uninterruptible Power Supply. Option D is incorrect. FDE stands for Full Disk Encryption. Therefore, B, RAID, is the correct answer.
Play from 1:42:00 Question 93. Which broad discipline manages user identities and what each user can access? Here are the options. Option A. IAM. Option B. PAM. Option C. DLP. Option D. NAC. Pause the video now if you want time to think about the answer.
The correct answer is A. IAM. IAM stands for Identity and Access Management. It manages user identities and what they can access. Now, why are the other options incorrect? Option B is incorrect. PAM stands for Privileged Access Management. Option C is incorrect. DLP stands for Data Loss Prevention. Option D is incorrect. NAC stands for Network Access Control. Therefore, A, IAM, is the correct answer.
Play from 1:43:05 Question 94. Which access model gives permissions based on a person's job role? Here are the options. Option A. DAC. Option B. RBAC. Option C. ABAC. Option D. ACL. Pause the video now if you want time to think about the answer.
The correct answer is B. RBAC. RBAC stands for Role-Based Access Control. It grants permissions based on job role. Now, why are the other options incorrect? Option A is incorrect. DAC stands for Discretionary Access Control. Option C is incorrect. ABAC stands for Attribute-Based Access Control. Option D is incorrect. ACL stands for Access Control List. Therefore, B, RBAC, is the correct answer.
Play from 1:44:09 Question 95. Which control stops staff emailing customer card numbers outside the company? Here are the options. Option A. FIM. Option B. DLP. Option C. NAC. Option D. SWG. Pause the video now if you want time to think about the answer.
The correct answer is B. DLP. DLP stands for Data Loss Prevention. It detects and blocks sensitive data leaving the organisation. Now, why are the other options incorrect? Option A is incorrect. FIM stands for File Integrity Monitoring. Option C is incorrect. NAC stands for Network Access Control. Option D is incorrect. SWG stands for Secure Web Gateway. Therefore, B, DLP, is the correct answer.
Play from 1:45:14 Question 96. Which feature lets a user log in once and reach many applications? Here are the options. Option A. MFA. Option B. DAC. Option C. SSO. Option D. PAM. Pause the video now if you want time to think about the answer.
The correct answer is C. SSO. SSO stands for Single Sign-On. It lets one login give access to many applications. Now, why are the other options incorrect? Option A is incorrect. MFA stands for Multifactor Authentication. Option B is incorrect. DAC stands for Discretionary Access Control. Option D is incorrect. PAM stands for Privileged Access Management. Therefore, C, SSO, is the correct answer.
Play from 1:46:15 Question 97. Which asymmetric algorithm is named after its three inventors? Here are the options. Option A. AES. Option B. ECC. Option C. DHE. Option D. RSA. Pause the video now if you want time to think about the answer.
The correct answer is D. RSA. RSA stands for Rivest, Shamir, and Adleman. It is an asymmetric algorithm used for encryption and signatures. Now, why are the other options incorrect? Option A is incorrect. AES stands for Advanced Encryption Standard. Option B is incorrect. ECC stands for Elliptic Curve Cryptography. Option C is incorrect. DHE stands for Diffie-Hellman Ephemeral. Therefore, D, RSA, is the correct answer.
Play from 1:47:19 Question 98. Which agreement legally binds a contractor to keep company information confidential? Here are the options. Option A. MOU. Option B. SLA. Option C. NDA. Option D. AUP. Pause the video now if you want time to think about the answer.
The correct answer is C. NDA. NDA stands for Non-Disclosure Agreement. It legally binds a party to keep information confidential. Now, why are the other options incorrect? Option A is incorrect. MOU stands for Memorandum of Understanding. Option B is incorrect. SLA stands for Service-Level Agreement. Option D is incorrect. AUP stands for Acceptable Use Policy. Therefore, C, NDA, is the correct answer.
Play from 1:48:24 Question 99. What does a server administrator send to a CA to get a certificate? Here are the options. Option A. PFS. Option B. CSR. Option C. OCSP. Option D. CRL. Pause the video now if you want time to think about the answer.
The correct answer is B. CSR. CSR stands for Certificate Signing Request. It is sent to a CA to request a certificate. Now, why are the other options incorrect? Option A is incorrect. PFS stands for Perfect Forward Secrecy. Option C is incorrect. OCSP stands for Online Certificate Status Protocol. Option D is incorrect. CRL stands for Certificate Revocation List. Therefore, B, CSR, is the correct answer.
Play from 1:49:30 Question 100. Which cloud model gives developers a managed platform to run their code without managing servers? Here are the options. Option A. IaaS. Option B. SASE. Option C. SaaS. Option D. PaaS. Pause the video now if you want time to think about the answer.
The correct answer is D. PaaS. PaaS stands for Platform as a Service. It provides a managed platform to build and run apps. Now, why are the other options incorrect? Option A is incorrect. IaaS stands for Infrastructure as a Service. Option B is incorrect. SASE stands for Secure Access Service Edge. Option C is incorrect. SaaS stands for Software as a Service. Therefore, D, PaaS, is the correct answer.
