CSLB General Building (B) Trade Practice Test

Câu hỏi luyện tập mẫu

Một vài câu hỏi thực tế từ ngân hàng miễn phí này, kèm giải thích đầy đủ. Dùng công cụ luyện tập ở trên cho toàn bộ.

1. 1. Threats & Attacks

   An attacker sends an email that appears to come from the company CEO, urgently asking the finance team to wire funds to a new vendor. What type of social engineering attack is this?

   • a.Vishing
   • b.Business email compromise
   • c.Watering hole attack
   • d.Tailgating

   Đáp án: b

   Giải thích: Business email compromise (BEC) impersonates a trusted executive or partner to trick employees into transferring money or sensitive data. It relies on authority and urgency rather than malware. Because it uses legitimate-looking email, it often bypasses technical filters and targets human judgment.

2. 2. Threats & Attacks

   A malicious program spreads across a network automatically without any user interaction. What is it?

   • a.Trojan
   • b.Spyware
   • c.Worm
   • d.Rootkit

   Đáp án: c

   Giải thích: A worm self-replicates and propagates across networks by exploiting vulnerabilities, requiring no user action. This makes outbreaks spread rapidly. Timely patching and network segmentation slow worm propagation.

3. 3. Threats & Attacks

   Which term describes exploiting a time gap between checking a resource and using it?

   • a.Buffer overflow
   • b.Replay attack
   • c.Injection
   • d.Race condition

   Đáp án: d

   Giải thích: A race condition, or time-of-check to time-of-use flaw, exploits the interval between validating and using a resource. An attacker changes state in that window to bypass controls. Proper locking and atomic operations prevent it.

4. 4. Security Architecture

   Which technology allows multiple isolated operating systems to run on a single physical host?

   • a.Containerization
   • b.Clustering
   • c.Virtualization
   • d.Load balancing

   Đáp án: c

   Giải thích: Virtualization uses a hypervisor to run multiple guest operating systems on one physical machine, each isolated in a virtual machine. It improves resource use and isolation. Hardening the hypervisor is critical because it is a high-value target.

5. 5. Security Architecture

   Embedded systems in industrial equipment that monitor and control physical processes are collectively known as:

   • a.ICS/SCADA
   • b.IoT hubs
   • c.Thin clients
   • d.Edge routers

   Đáp án: a

   Giải thích: Industrial control systems (ICS), including SCADA, manage physical processes in utilities and manufacturing. They often run legacy software and prioritize availability over patching. Segmentation and strict access control are key because downtime and safety are critical.

6. 6. Implementation

   Requiring a password plus a one-time code from a phone app is an example of:

   • a.Multifactor authentication
   • b.Single sign-on
   • c.Federation
   • d.Role-based access

   Đáp án: a

   Giải thích: Multifactor authentication combines two or more independent factor categories, here something you know and something you have. This greatly reduces the risk from a stolen password alone. An attacker would need to defeat both factors.

7. 7. Implementation

   Which chip on a motherboard stores keys and supports features like full-disk encryption and secure boot?

   • a.HSM
   • b.Smart card
   • c.Trusted Platform Module
   • d.CPU cache

   Đáp án: c

   Giải thích: The Trusted Platform Module (TPM) is a chip integrated into a device that securely stores keys and measurements for boot integrity and disk encryption. It binds encryption to specific hardware. It underpins features like BitLocker and secure boot.

8. 8. Security Operations

   During forensic acquisition, why is a cryptographic hash taken of a disk image?

   • a.To prove the copy was not altered
   • b.To compress the image
   • c.To encrypt the evidence
   • d.To speed up analysis

   Đáp án: a

   Giải thích: Hashing the original and the forensic image proves they are identical and that the evidence was not modified. Matching hashes demonstrate integrity throughout the investigation. Any change to the data would produce a different hash.

9. 9. Security Operations

   A discussion-based session where a team walks through their response to a hypothetical incident is called a:

   • a.Penetration test
   • b.Full interruption test
   • c.Tabletop exercise
   • d.Vulnerability assessment

   Đáp án: c

   Giải thích: A tabletop exercise is a discussion-based walkthrough of a scenario to validate plans and roles without touching production. It reveals gaps in the incident response or continuity plan at low cost. It complements more disruptive technical tests.

10. 10. Governance & Compliance

    Which regulation governs the protection of personal data for individuals in the European Union?

    • a.GDPR
    • b.HIPAA
    • c.PCI DSS
    • d.SOX

    Đáp án: a

    Giải thích: The General Data Protection Regulation (GDPR) sets strict requirements for handling the personal data of EU residents. It mandates consent, breach notification, and data subject rights. Non-compliance can result in substantial fines.