CGRC Practice Test 6 — 10 Questions

Question 1

Which TWO factors contribute to the 'scope' of an information security audit?

Accepted Answer

Network boundaries. The audit scope is driven by the physical and logical boundaries of the system being reviewed.

Answer

External stock prices

Answer

Competitor market analysis

Answer

Employee home addresses

Question 2

Which type of control is an alarm system installed in a server room?

Accepted Answer

Detective. An alarm system is a detective control designed to alert staff of unauthorized presence.

Answer

Preventative

Answer

Corrective

Answer

Deterrent

Question 3

In VMware vSphere, what is the best practice for securing virtual machine consoles?

Accepted Answer

Use the VMRC (VMware Remote Console) with encrypted connections. Disabling the remote console access or enforcing authentication is vital to prevent unauthorized access.

Answer

Share the ESXi root password

Answer

Disable all logging

Answer

Leave the VNC port open

Question 4

Which of the following activities is a core component of the 'Ongoing Authorization' process?

Accepted Answer

Periodically reviewing security assessment results.. Maintaining the authorization requires continuous assessment of the system's security posture to ensure it remains within an acceptable risk level.

Answer

Performing a full system re-installation annually.

Answer

Changing the system administrator's password every month.

Answer

Increasing the budget for information security.

Question 5

You are setting up an IDS/IPS (e.g., Snort). Where should you place the sensor to monitor both internal and external traffic?

Accepted Answer

On a Span Port of the core distribution switch. Placing the sensor on the span port of the core switch allows visibility into internal traffic flows.

Answer

Directly on the public ISP router

Answer

Inside the isolated guest Wi-Fi network

Answer

On the WAN interface of the firewall

Question 6

Which TWO of the following are common challenges when implementing continuous monitoring in a legacy environment?

Accepted Answer

High risk of system instability during patch deployment.. Legacy systems often lack support for modern automation tools and are difficult to patch without downtime.

Answer

The system is too new for security researchers to find bugs.

Answer

The system automatically updates its own firmware daily.

Answer

Too much disk space available for logging.

Question 7

When implementing an 802.1X environment, what is the role of the RADIUS server?

Accepted Answer

Authenticating the supplicant. The RADIUS server acts as the Authentication Server, validating the credentials provided by the supplicant via the authenticator.

Answer

Encapsulating EAP frames

Answer

Providing the EAP method to the client

Answer

Enforcing the physical port state

Question 8

You are hardening a web server. You need to ensure that only secure ciphers are used for TLS connections. Where is this typically configured?

Accepted Answer

The server's TLS configuration file. The web server's SSL/TLS configuration file (e.g., httpd.conf or nginx.conf) defines the supported cipher suites.

Answer

The server's BIOS settings

Answer

The web application's root directory

Answer

The firewall access control list

Question 9

To ensure compliance with PCI-DSS for a database, you must implement FDE (Full Disk Encryption). Which tool is appropriate for a Linux-based server?

Accepted Answer

dm-crypt/LUKS. dm-crypt/LUKS is the industry-standard tool for transparent full disk encryption on Linux.

Answer

BitLocker

Answer

IPsec

Answer

VeraCrypt

Question 10

When performing vulnerability management, what is the purpose of a 'credentialed scan'?

Accepted Answer

To identify missing patches and misconfigurations. Credentialed scans allow the tool to look inside the OS and application configuration, providing more accurate results.

Answer

To perform penetration testing

Answer

To automate the patching process

Answer

To bypass the firewall