🌍 All Study Guides 📊 Dashboard 📰 Blog 💡 About

IBM Cybersecurity Analyst Professional Certificate • STUDY MODE

PRACTICE QUIZ

QUESTION 1 OF 35

True or False: If all of your organization's data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

a' True

b' FalseCorrect Answer

Correct, If all of your organization's data is centralized in a small number of data centers, than focusing security on perimiter defense is not adequate to assure your data is safe.

QUESTION 2 OF 35

Which two (2) of the following data source types are considered structured data?

a' Data warehousesCorrect Answer

b' Big data databases

c' Distributed databasesCorrect Answer

d' File Shares

Correct, this is considered structured.

QUESTION 3 OF 35

Data that has not been organized into a specialized repository, but does have associated information, such as metadata that makes it more amenable to processing than raw data, is an example of which data model type?

a' Raw data

b' Structured data

c' Unstructured data

d' Semi-structured dataCorrect Answer

QUESTION 4 OF 35

How are the tables in a relational database linked together?

a' Tables are organized in a hierarchical manner so Table 2 always follows Table 1 and so forth.

b' Through the use of primary and foreign keys.Correct Answer

c' Table connection diagrams are defined in the database configuration settings.

d' By adding a pointer as the last field of each record in a table that points to the first field in the next table.

Correct, through the use of primary and foreign keys.

SECURING DATABASES

QUESTION 5 OF 35

In the video Securing the Crown Jewels, the "Identification and Baseline" phase contains which three (3) of the following items?

a' Blocking & Quarantine

b' Activity Monitoring

c' Discovery & ClassificationCorrect Answer

d' Vulnerability AssessmentCorrect Answer

e' Entitlements ReportingCorrect Answer

Partially correct, this is one of the three.

QUESTION 6 OF 35

In the video Leveraging Security Industry Best Practices, which US Government agency is a co-publisher of the Database Security Requirements Guide (SRG)?

a' Federal Bureau of Investigation (FBI)

b' Central Intelligence Agency (CIA)

c' Department of Defense (DoD)Correct Answer

d' Center for Internet Security (CIS)

QUESTION 7 OF 35

For added security, a firewall is often placed between which of these?

a' The client and the application.

b' The database and the hardened data repository.Correct Answer

c' The database administrator and the database.

d' The application and the database.

Correct, the database and the hardened data repository.

QUESTION 8 OF 35

True or False: In a vulnerability assessment test, a new commercial database installed on a new instance of a major operating system should pass 80-90% of the vulnerability tests out-of-the-box unless there is a major flaw or breach.

a' True

b' FalseCorrect Answer

QUESTION 9 OF 35

Which of these hosting environments requires the enterprise to manage the largest number of different data sources?

a' PaaS

b' On PremisesCorrect Answer

c' SaaS

d' IaaS

QUESTION 10 OF 35

While data security is an ongoing process, what is the correct order to consider these steps?

a' Discover, Monitor & Protect, Harden, Repeat

b' Discover, Harden, Monitor & Protect, RepeatCorrect Answer

c' Harden, Discover, Monitor & Protect, Repeat

d' Monitor & Protect, Discover, Harden, Repeat

A DATA PROTECTION SOLUTION EXAMPLE, IBM SECURITY GUARDIUM USE CASES

QUESTION 11 OF 35

In setting up policy rules for data monitoring, what is the purpose of "exclude" rules?

a' To exclude certain commands from being executed.

b' To exclude individual accounts from accessing data.

c' To exclude certain applications or safe activities from being logged.Correct Answer

d' To exclude someone from accessing certain database tables.

Correct, To exclude certain applications or safe activities from being logged.

QUESTION 12 OF 35

True or False: Data monitoring products such as IBM Guardium can send access alerts to syslog for manual intervention by a security analyst but must be connected to addition applications if automated interventions are desired.

a' True

b' FalseCorrect Answer

QUESTION 13 OF 35

To created auditable reports of data access using the IBM Guardium product, the administrator would do which of the following?

a' All standard reports are considered auditable.

b' Develop a custom report and turn on Audit Locking to assure the results cannot be tampered with.

c' Use the Audit Process Builder feature to automate the reporting process.Correct Answer

d' Export standard access logs to Excel or another reporting tool for sorting and processing.

Correct, All standard reports are considered auditable.

QUESTION 14 OF 35

True or False: The IBM Guardium monitoring applications is capable of monitoring activities in non-relational databases such as Hadoop, Cognos, and Spark.

a' TrueCorrect Answer

b' False

QUESTION 15 OF 35

At a minimum, which 3 entities should be captured in any event log?

a' When the activity took place.Correct Answer

b' Which database tables were associated with the activity.

c' Who or what committed the activity.Correct Answer

d' Whether the attempted activity was completed successfully.

e' What activity took place.Correct Answer

Partially correct, you answered one of the three.

QUESTION 16 OF 35

True of False: In the IBM Guardium data monitoring tool, the number of failed login attempts that would trigger an alert are always counted since the last successful login.

a' True

b' FalseCorrect Answer

QUESTION 17 OF 35

Which activity should be considered suspicious and might indicate inappropriate activity is being attempted?

a' A known user attempts to run invalid SQL statements against data his ID is authorized to access.

b' A user routinely enters the incorrect password once or twice before entering the correct password for his account.

c' Data accessed by an accounting application dramatically increases in the last few days of every month.

d' Attempts are made to access data using nonstandard tools, such as MS Excel or MS Access, rather than through the application the data belongs to.Correct Answer

Correct, Attempts are made to access data using nonstandard tools, such as MS Excel or MS Access, rather than through the application the data belongs to.

QUESTION 18 OF 35

Which two (2) activities should be considered suspicious and warrant further investigation?

a' Use of an Application ID from an IP that is different from what has been specified by the application owner.Correct Answer

b' An authorized user attempts to run SQL statements with invalid syntax.

c' Use of an Application ID from a hostname that is different from what has been specified by the application owner.Correct Answer

d' It takes an authorized user 3 attempts to enter the correct password.

Partially correct, this is one of the correct answers.

INTRODUCTION TO DATABASES

QUESTION 19 OF 35

Distributed databases, data warehouses, big data, and File shares are all classified as what?

a' Data models

b' Database types

c' Data source typesCorrect Answer

d' Data center types

QUESTION 20 OF 35

Hadoop, MongoDB, and BigTable are all examples of which data source type?

a' Data warehouses

b' Big data databasesCorrect Answer

c' Distributed databases

d' File Shares

QUESTION 21 OF 35

Data that has been organized into a formatted repository, typically a database, so its elements can be made addressable, is an example of which data model type?

a' Structureless data

b' Semi-structured data

c' Unstructured data

d' Structured dataCorrect Answer

QUESTION 22 OF 35

Which of the following is the primary difference between a flat file database and a relational database?

a' All the data in a relational database is stored in a single table.

b' All the data in a flat file database is stored in a single table.Correct Answer

c' Flat file databases consist of a table that references internally stored files.

d' Flat file databases consist of a table that references externally stored files.

QUESTION 23 OF 35

In the video Leveraging Security Industry Best Practices, where would you turn to look for help on establishing security benchmarks for your database?

a' Common Vulnerability and Exposures (CVE).

b' Center for Internet Security (CIS).Correct Answer

c' Department of Defense/Defence Information Systems Agency (DoD/DISA).

d' Central Intelligence Agency (CIA).

QUESTION 24 OF 35

Most of the time, how do users access data?

a' Through an application.Correct Answer

b' Through a database client.

c' Directly from a hardened repository.

d' Directly from a database.

QUESTION 25 OF 35

True or False: In a vulnerability assessment test, it is not uncommon to fail more than 50% of the tests before the operating system and database are hardened.

a' TrueCorrect Answer

b' False

QUESTION 26 OF 35

What distinguishes structured data from unstructured data?

a' Structured data is associated with metadata, while unstructured data relies on specialized repositories such as databases.

b' Structured data is harder to access and process than unstructured data.

c' Structured data is data organized into a formatted repository, making it easily addressable, whereas unstructured data lacks any form of organization.Correct Answer

d' Structured data is the least organized and hardest to understand, while unstructured data is the most formatted.

QUESTION 27 OF 35

To automatically terminate a session if an attempt is made to access data in a sensitive table, such as Social Security (SSN) ID numbers, you would set up which type of rule?

a' An Aggregator rule.

b' An Access rule.Correct Answer

c' An Exception rule.

d' An Exclude rule.

QUESTION 28 OF 35

True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules.

a' TrueCorrect Answer

b' False

QUESTION 29 OF 35

True or False: Data monitoring tools such as IBM Guardium are designed to monitor activities within a database, but external products, such as a privileged identity management (PIM) tool would be required to monitor changes to the data monitoring tool itself, such as the addition of new users or the alteration of existing user accounts.

a' True

b' FalseCorrect Answer

QUESTION 30 OF 35

True or False: In the IBM Guardium data monitoring tool, it is possible to create a report that shows not only how many SQL unauthorized access attempts were made by an individual, but also exactly which SQL statements were disallowed.

a' TrueCorrect Answer

b' False

QUESTION 31 OF 35

True or False: If all of your organization’s data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

True 

FalseCorrect Answer

QUESTION 32 OF 35

In the video Securing the Crown Jewels, the “Identification and Baseline” phase contains which three (3) of the following items?

Blocking & Quarantine

Activity Monitoring

Discovery & ClassificationCorrect Answer

Vulnerability AssessmentCorrect Answer

Entitlements ReportingCorrect Answer

QUESTION 33 OF 35

In setting up policy rules for data monitoring, what is the purpose of “exclude” rules?

To exclude certain commands from being executed.

To exclude individual accounts from accessing data.

To exclude certain applications or safe activities from being logged.Correct Answer

To exclude someone from accessing certain database tables.

QUESTION 34 OF 35

What distinguishes structured data from unstructured data? 

Structured data is associated with metadata, while unstructured data relies on specialized repositories such as databases. 

Structured data is harder to access and process than unstructured data. 

Structured data is data organized into a formatted repository, making it easily addressable, whereas unstructured data lacks any form of organization.Correct Answer

Structured data is the least organized and hardest to understand, while unstructured data is the most formatted. 

QUESTION 35 OF 35

True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules. 

TrueCorrect Answer

False

Ready to test your recall?

True or False: If all of your organization's data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

a' True

b' False

Correct, If all of your organization's data is centralized in a small number of data centers, than focusing security on perimiter defense is not adequate to assure your data is safe.

How confident are you in this answer?

PRACTICE QUIZ

True or False: If all of your organization's data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

Which two (2) of the following data source types are considered structured data?

Data that has not been organized into a specialized repository, but does have associated information, such as metadata that makes it more amenable to processing than raw data, is an example of which data model type?

How are the tables in a relational database linked together?

In the video Securing the Crown Jewels, the "Identification and Baseline" phase contains which three (3) of the following items?

In the video Leveraging Security Industry Best Practices, which US Government agency is a co-publisher of the Database Security Requirements Guide (SRG)?

For added security, a firewall is often placed between which of these?

True or False: In a vulnerability assessment test, a new commercial database installed on a new instance of a major operating system should pass 80-90% of the vulnerability tests out-of-the-box unless there is a major flaw or breach.

Which of these hosting environments requires the enterprise to manage the largest number of different data sources?

While data security is an ongoing process, what is the correct order to consider these steps?

In setting up policy rules for data monitoring, what is the purpose of "exclude" rules?

True or False: Data monitoring products such as IBM Guardium can send access alerts to syslog for manual intervention by a security analyst but must be connected to addition applications if automated interventions are desired.

To created auditable reports of data access using the IBM Guardium product, the administrator would do which of the following?

True or False: The IBM Guardium monitoring applications is capable of monitoring activities in non-relational databases such as Hadoop, Cognos, and Spark.

At a minimum, which 3 entities should be captured in any event log?

True of False: In the IBM Guardium data monitoring tool, the number of failed login attempts that would trigger an alert are always counted since the last successful login.

Which activity should be considered suspicious and might indicate inappropriate activity is being attempted?

Which two (2) activities should be considered suspicious and warrant further investigation?

Distributed databases, data warehouses, big data, and File shares are all classified as what?

Hadoop, MongoDB, and BigTable are all examples of which data source type?

Data that has been organized into a formatted repository, typically a database, so its elements can be made addressable, is an example of which data model type?

Which of the following is the primary difference between a flat file database and a relational database?

In the video Leveraging Security Industry Best Practices, where would you turn to look for help on establishing security benchmarks for your database?

Most of the time, how do users access data?

True or False: In a vulnerability assessment test, it is not uncommon to fail more than 50% of the tests before the operating system and database are hardened.

What distinguishes structured data from unstructured data?

To automatically terminate a session if an attempt is made to access data in a sensitive table, such as Social Security (SSN) ID numbers, you would set up which type of rule?

True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules.

True or False: In the IBM Guardium data monitoring tool, it is possible to create a report that shows not only how many SQL unauthorized access attempts were made by an individual, but also exactly which SQL statements were disallowed.

True or False: If all of your organization&#8217;s data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

In the video Securing the Crown Jewels, the &#8220;Identification and Baseline&#8221; phase contains which three (3) of the following items?

In setting up policy rules for data monitoring, what is the purpose of &#8220;exclude&#8221; rules?

What distinguishes structured data from unstructured data?&nbsp;

True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules.&nbsp;

Ready to test your recall?

True or False: If all of your organization’s data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

In the video Securing the Crown Jewels, the “Identification and Baseline” phase contains which three (3) of the following items?

In setting up policy rules for data monitoring, what is the purpose of “exclude” rules?

What distinguishes structured data from unstructured data?

True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules.