CCNA Cybersecurity Security Automation Basics

1. Which API type allows applications to communicate over HTTP/HTTPS using JSON or XML?

SOAP

REST

SNMP

Syslog

2. What is the primary advantage of using Infrastructure as Code (IaC) for security?

It allows security configurations to be version-controlled and reproducible

It eliminates all security risks

It requires no human oversight

It increases network latency

3. In a CI/CD pipeline, what role does security automation play?

It only monitors the final deployed application

It integrates security checks throughout the development and deployment process

It replaces manual code reviews

It eliminates the need for testing

4. What is the purpose of a security baseline in automation?

To establish a standard configuration that all systems should comply with

To monitor network bandwidth usage

To encrypt all network communications

To manually audit security logs

5. In security automation, what does idempotency mean?

Running a task multiple times produces the same result

Preventing unauthorized access to data

Encrypting sensitive information

Logging all user activities

6. What is the primary role of a security information and event management (SIEM) system in automation?

To block all network traffic

To collect, correlate, and respond to security events automatically

To replace antivirus software

To manage user passwords only

7. What is the purpose of a configuration management database (CMDB) in security automation?

To encrypt all data in transit

To maintain a centralized repository of IT assets and configurations

To monitor real-time network traffic

To replace firewall functionality

8. In Ansible playbooks, what is a 'task'?

A single unit of work to be executed on a host

A collection of playbooks

A network interface

A security policy document

9. What does SOAR stand for in the context of security operations?

Security Operations and Response

Security Orchestration, Automation and Response

Secure Online Audit Reporting

System Operations Automated Response

10. Which of the following best describes a webhook in security automation?

A firewall rule for blocking malicious sites

An automated callback from a system when an event occurs

A manual security audit process

A network monitoring tool

11. What is a key advantage of using Python in security automation?

It requires no learning curve

It has extensive libraries for security tasks and API integration

It is faster than compiled languages

It eliminates all security vulnerabilities

12. Which protocol is used for secure remote command execution in automation scripts?

Telnet

HTTP

SSH

FTP

13. In the context of security automation, what does orchestration mean?

Automating individual security tasks in a coordinated workflow

Manually configuring each security device

Encrypting all network traffic

Monitoring user activity logs

14. Which tool is commonly used for infrastructure as code (IaC) in security automation?

Ansible

Wireshark

Nessus

Burp Suite

15. What does YAML primarily serve as in security automation frameworks?

A network protocol

A data serialization and configuration language

An encryption algorithm

A firewall rule engine

16. What is the primary benefit of implementing security automation in enterprise networks?

Reduces response time to security incidents

Eliminates the need for security staff

Automatically detects all malware

Increases network bandwidth

17. Which authentication method is most secure for API-based security automation?

Basic authentication with plaintext credentials

OAuth 2.0 with token-based authentication

Storing passwords in configuration files

No authentication required

18. Which JSON Web Token (JWT) component contains the actual claims data?

Header

Signature

Payload

Encryption key

19. Which version control system is commonly used to manage security automation scripts and playbooks?

Git

FTP