- (Exam Topic 2)
What concept does the "T" represent in the STRIDE threat model?

1. A. TLS
2. B. Testing
3. C. Tampering with data
4. D. Transport

Correct Answer: C

Any application that sends data to the user will face the potential that the user could manipulate or alter the data, whether it resides in cookies, GET or POST commands, or headers, or manipulates client-side validations. If the user receives data from the application, it is crucial that the application validate and verify any data that is received back from the user.

- (Exam Topic 4)
Best practices for key management include all of the following, except:

1. A. Ensure multifactor authentication
2. B. Pass keys out of band
3. C. Have key recovery processes
4. D. Maintain key security

Correct Answer: A
We should do all of these except for requiring multifactor authentication, which is pointless in key management.

- (Exam Topic 3)
Where is a DLP solution generally installed when utilized for monitoring data at rest?

1. A. Network firewall
2. B. Host system
3. C. Application server
4. D. Database server

Correct Answer: B
To monitor data at rest appropriately, the DLP solution would be installed on the host system where the data resides. A database server, in some situations, may be an appropriate answer, but the host system is the best answer because a database server is only one example of where data could reside. An application server processes data and typically sits between the data and presentation zones, and as such, does not store data at rest. A network firewall would be more appropriate for data in transit because it is not a place where data would reside.

- (Exam Topic 4)
DLP solutions can aid in deterring loss due to which of the following?

1. A. Inadvertent disclosure
2. B. Natural disaster
3. C. Randomization
4. D. Device failure

Correct Answer: A
DLP solutions may protect against inadvertent disclosure. Randomization is a technique for obscuring data, not a risk to data. DLP tools will not protect against risks from natural disasters, or against impacts due to device failure.

- (Exam Topic 1)
Why does a Type 1 hypervisor typically offer tighter security controls than a Type 2 hypervisor?

1. A. A Type 1 hypervisor also controls patching of its hosted virtual machines ensure they are always secure.
2. B. A Type 1 hypervisor is tied directly to the bare metal and only runs with code necessary to perform its specific mission.
3. C. A Type 1 hypervisor performs hardware-level encryption for tighter security and efficiency.
4. D. A Type 1 hypervisor only hosts virtual machines with the same operating systems as the hypervisor.

Correct Answer: B
Type 1 hypervisors run directly on top of the bare metal and only contain the code and functions required to perform their purpose. They do not rely on any other systems or contain extra features to secure.