Security+ SY0-801
Security Concepts, Controls and Change Management
Security concepts
- Which security goal is violated when an attacker only reads payroll data but does not change it? Easy
- An online shop is unreachable for three hours because of a flooding attack. Which security goal is primarily affected? Easy
- What does the third A in AAA (authentication, authorization, accounting) stand for? Easy
- A user signs in successfully with a password and an app code. The system then decides whether she may open the personnel file. What is this second step called? Easy
- Which measure best ensures that a sender cannot credibly deny having sent a contract later on? Easy
- Which principle best describes Zero Trust? Easy
- An employee in purchasing only gets read access to the supplier list because she does not need to edit it. Which principle is being applied? Easy
- A company combines a firewall, endpoint protection, MFA and training so that the failure of one measure does not immediately lead to damage. What is this concept called? Easy
Change management
Change management
- On Friday evening, an admin applies an urgent security patch without a change request because the vendor reports active attacks. The patch works. How is this best assessed from a change management perspective? Hard
- A team wants to disable TLS 1.0 and 1.1 on the central load balancer. Which points belong in the impact analysis? Hard