System & Network Architecture (CySA+) Logging & Identity Quiz

Submit

2. Which identity verification method is considered the most secure for high-risk transactions?

Single-factor authentication

Two-factor authentication

Multi-factor authentication with biometrics

Security questions alone

Submit

4. What is the relationship between logging and compliance in organizational security?

Logging is optional for compliance

Comprehensive logging is required to demonstrate compliance with regulations

Compliance eliminates the need for logging

Logging only applies to financial institutions

Submit

6. Which type of attack is primarily mitigated through strong identity management and MFA?

DDoS attacks

Credential compromise

DNS poisoning

Physical theft of hardware

7. In system architecture, what does 'non-repudiation' in logging ensure?

Users cannot deny their actions are recorded

All logs are automatically deleted

Passwords are never logged

All network traffic is visible to everyone

8. What is the primary purpose of identity federation in a distributed network?

To eliminate all passwords

To allow users to authenticate across multiple independent systems

To increase network bandwidth

To replace encryption protocols

Submit

10. Which of the following is a characteristic of effective logging in a secure architecture?

Logs are stored on the source system only

Logs include timestamps and user identifiers

Logs are never reviewed or analyzed

Logs are transmitted in plain text for efficiency

11. What is the primary purpose of centralized logging in a network architecture?

To reduce bandwidth consumption on the network

To collect and aggregate logs from multiple sources for analysis and compliance

To encrypt all network traffic automatically

To replace the need for firewalls

12. What is the primary benefit of implementing directory services like Active Directory?

To increase network speed

To centrally manage user identities and access policies

To replace firewalls

To encrypt all data at rest

13. Which framework provides guidelines for identity governance and administration?

NIST Cybersecurity Framework

ISO/IEC 27001

COBIT

All of the above

14. In log management, what does the term 'log retention' refer to?

Deleting logs immediately after creation

The period for which logs are stored before deletion

Encrypting logs to prevent access

Sending logs to multiple servers simultaneously

15. Which of the following is a multi-factor authentication method?

Username and password only

Password and security question

Password and hardware token

Username alone

16. What is the key difference between authentication and authorization?

Authentication verifies identity; authorization grants permissions

They are identical concepts used interchangeably

Authorization happens before authentication

Authentication is only for network access

17. Which identity and access management (IAM) component verifies that a user is who they claim to be?

Authorization

Authentication

Accounting

Auditing

Submit

19. In the context of identity management, what does the principle of least privilege (PoLP) ensure?

Users have maximum access to all resources

Users receive only the minimum permissions needed for their role

All users have identical access rights

Administrative privileges are shared among all staff

20. Which protocol is most commonly used for sending syslog messages to a centralized server?

HTTP

SNMP

UDP port 514

TCP port 443

CySA+ Architecture Quiz: Can You Master Logging & Identity?

1. Log correlation in a SIEM environment helps to____.

2.

What first name or nickname would you like us to use?

2. Which identity verification method is considered the most secure for high-risk transactions?

3. In a centralized logging architecture, the log aggregator typically uses____to parse and normalize incoming logs.

4. What is the relationship between logging and compliance in organizational security?

5. Privileged Access Management (PAM) solutions are designed to____.

6. Which type of attack is primarily mitigated through strong identity management and MFA?

7. In system architecture, what does 'non-repudiation' in logging ensure?

8. What is the primary purpose of identity federation in a distributed network?

9. Role-Based Access Control (RBAC) assigns permissions based on____.

10. Which of the following is a characteristic of effective logging in a secure architecture?

11. What is the primary purpose of centralized logging in a network architecture?

12. What is the primary benefit of implementing directory services like Active Directory?

13. Which framework provides guidelines for identity governance and administration?

14. In log management, what does the term 'log retention' refer to?

15. Which of the following is a multi-factor authentication method?

16. What is the key difference between authentication and authorization?

17. Which identity and access management (IAM) component verifies that a user is who they claim to be?

18. A SIEM system primarily functions to____.

19. In the context of identity management, what does the principle of least privilege (PoLP) ensure?

20. Which protocol is most commonly used for sending syslog messages to a centralized server?