D488 Cybersecurity Architecture and Engineering - Set 1 - Part 1

Test your knowledge of technical writing concepts with these practice questions. Each question includes detailed explanations to help you understand the correct answers.

Question 1: What is the purpose of ECDSA (Elliptic Curve Digital Signature Algorithm)?

To encrypt data securely

To verify the authenticity of digital signatures

To establish secure key exchanges

To manage user authentication

Question 2: Which algorithm is primarily used for securely exchanging cryptographic keys over an insecure channel?

RSA

Diffie-Hellman (DH)

AES

SHA-256

Question 3: What is the key characteristic of Cipher Block Chaining (CBC) mode?

It does not require an initialization vector.

Each plaintext block is encrypted independently.

The previous ciphertext block influences the encryption of the current plaintext block.

It is a synchronous stream cipher.

Question 4: What is the primary disadvantage of using Electronic Code Book (ECB) mode?

It requires an initialization vector.

It does not provide confidentiality.

Identical plaintexts result in identical ciphertexts.

It is more complex than other modes.

Question 5: How does Output Feedback (OFB) mode operate in cryptography?

It uses the previous ciphertext for encryption.

It turns a block cipher into a synchronous stream cipher.

It requires padding of the plaintext.

It does not allow for error propagation.

Question 6: What is the function of Counter (CTR) mode in encryption?

It produces a one-time pad.

It uses a counter value to generate ciphertext.

It relies on a previous ciphertext block for encryption.

It operates only on fixed-size blocks.

Question 7: Which authenticated encryption mode utilizes a one-time key for strong message authentication?

Cipher Block Chaining (CBC)

Electronic Code Book (ECB)

Poly1305

Output Feedback (OFB)

Question 8: What is the primary risk management strategy for securing sensitive data in an application?

Regular software updates

User training

Encryption of all sensitive data

Strong passwords

Question 9: What risk management strategy can effectively reduce the threat surface of a new web application?

Implementing strong passwords

Using hardening measures to remove unnecessary services

Regularly updating user access rights

Conducting user training sessions

Question 10: How does risk tolerance influence mobile application development in financial services?

It determines the acceptable level of risk based on potential impacts.

It sets the budget for application development.

It defines the technical specifications of the application.

It focuses solely on compliance with regulations.

Question 11: Which strategy can reduce the risk of a data breach in an SQL database?

Regular software updates

Limiting access to the SQL database

Increasing the database storage capacity

Conducting user training

Question 12: What Wi-Fi encryption standard is recommended for compliance with PCI DSS?

WEP

WPA

WPA2 with AES

TKIP

Question 13: What security control helps protect personal data in compliance with GDPR?

Data minimization

Strong authentication

Encryption

Regular audits

Question 14: Which control will secure a web-based credit monitoring service according to FCRA?

Encryption

Access controls

Regular software updates

Security training

Question 15: What is the primary purpose of application allowlisting in a financial institution?

To encrypt all transactions

To prevent unauthorized programs from running

To monitor user activities

To enhance network performance

Question 16: Which type of disaster recovery site allows a hospital to resume operations quickly?

Cold site

Warm site

Hot site

Virtual site

Question 17: What protocol ensures critical systems remain available during unexpected events?

Incident response protocol

Business continuity plan

Disaster recovery protocol

Network security protocol

Question 18: What term describes the maximum downtime a business can tolerate before significant harm occurs?

Recovery Point Objective (RPO)

Maximum Tolerable Downtime (MTD)

Business Impact Analysis (BIA)

Service Level Agreement (SLA)

Question 19: What does a Privacy Impact Assessment (PIA) evaluate?

The effectiveness of security controls

The impact of a disaster recovery plan

The effects of data protection measures on operations

The performance of network infrastructure

Question 20: Which solution can streamline a company's incident response process?

Firewalls

SIEM

SOAR

IDS

Need Guaranteed Results?

Our exam support service guarantees you'll pass your OA on the first attempt. Pay only after you pass!

Get Exam Support