Fundamentals of Cybersecurity (EDU-102) Free Sample Questions

Ensuring that the banking application is always accessible to authorized users without downtime.

Guaranteeing that financial data is accurate, complete, and protected from unauthorized modification.

Restricting access to sensitive customer information strictly to users who have explicit permission.

Deploying firewalls and intrusion prevention systems to block malicious incoming traffic.

The use of unmanaged personal devices (BYOD) connecting to internal applications.

The physical security guards deployed at the corporate headquarters.

Employees connecting through unsecured public Wi-Fi networks.

The implementation of a Zero Trust network architecture.

The exposure of internal applications to the internet to facilitate remote access via legacy VPNs.

It decreases the physical attack surface by moving data to the cloud, reducing reliance on on-premises servers.

It increases the attack surface by introducing unmonitored digital assets, unauthorized data flows, and potential vulnerabilities outside the IT department's visibility.

It shifts the attack surface responsibility entirely to the SaaS provider, absolving Globex Corp of any data breach liability.

It limits the attack surface strictly to the endpoints used by the marketing team, as the cloud applications themselves are isolated.

True

False

Network security

Application security

Endpoint security

Cloud security

The cloud provider, as they own the physical infrastructure where the data resides.

The e-commerce startup, as configuring access controls for their data falls under their responsibility in the shared responsibility model.

The end-users whose data was breached, as they should have encrypted their data before uploading it.

Both the provider and the startup equally, as all cloud security incidents are treated as joint liabilities by default.