English — متاح للجميع بدون تسجيل دخول

Unit 2 Exam

عدد الأسئلة

29 سؤال

الدرجة الكلية

55 درجة

مدة الامتحان

60 دقيقة

مدة الامتحان للعرض فقط — لا يوجد عد تنازلي في الامتحان العام. يمكنك البدء بالحل مباشرة بالأسفل.

تنبيه مهم

يمكنك حل الامتحان بشكل طبيعي ثم إنهاؤه بالضغط على «انهاء الامتحان»، وبعد إنهائه يمكنك كشف الإجابات. لن يتم حفظ الإجابات المكشوفة؛ ستظل ظاهرة لك فقط أثناء بقائك في هذه الصفحة، وإذا غادرت الصفحة أو أعدت تحميلها ستختفي الإجابات. بعد كشف الإجابات لن تتمكن من حل الامتحان أو كشف الإجابات مرة أخرى حتى انتهاء مدة الانتظار المحددة: 24 ساعة. (الانتظار يبدأ فقط بعد كشف الإجابات — مجرد فتح الامتحان أو قراءته لا يبدأه.)

Unit 2 Exam

تمت الإجابة على 0 من أصل 29 سؤال

Choose

20 questions · 20 points

Which security technology is most appropriate for: 'I want to verify that the communication partner is authentic'?

1 pts

Which combination of authentication factors is used in: 'Face recognition + smart card (IC card)'?

1 pts

Choose the option that is NOT an appropriate description of combinations of security technologies:

1 pts

What is the term for the process of establishing a secure connection and verifying server identity and domain name in HTTPS?

1 pts

Which option represents two factors from completely different categories (Knowledge and Possession) used in banking authentication?

1 pts

Which technology detects data tampering, prevents sender impersonation, and provides proof supporting non-repudiation?

1 pts

A pair of linked keys consisting of a public key and a private key used in cryptography to secure communication is called:

1 pts

Choose the option that is NOT an appropriate use of a VPN:

1 pts

What concept describes the traditional boundary that assumes everything inside an organization’s network is completely secure and everything outside it is unsafe, a boundary that has been blurred by cloud services and remote work?

1 pts

Which of the following “defense in depth” layers is directly associated with installing antivirus software and updating the operating system?

1 pts

Which of the following devices or systems monitors network traffic and allows or blocks it according to specific security rules?

1 pts

What is the term for a security approach that does not automatically trust a user or device simply because it is inside the network?

1 pts

Which of the following represents the main use of a Virtual Private Network (VPN) for connecting offices or employees?

1 pts

Which of the following represents the first layer (Network Entry Point) in a defense in depth strategy?

1 pts

Choose the option that is NOT an appropriate example of a security incident:

1 pts

Choose the option that most appropriately describes the concept of risk assessment:

1 pts

Reorder the risks (a–d) from highest priority to lowest priority based on the concept of risk assessment (Impact × Likelihood):

a. Impact: large (3), Likelihood: high (3) ➔ Score = 9

b. Impact: small (1), Likelihood: high (3) ➔ Score = 3

c. Impact: large (3), Likelihood: medium (2) ➔ Score = 6

d. Impact: small (1), Likelihood: low (1) ➔ Score = 1

1 pts

According to the Risk Assessment Matrix, which category is considered the highest priority and should be addressed first?

1 pts

Unauthorized modification of data within a system is a typical example of:

1 pts

Risks with high impact and low likelihood in a Risk Assessment Matrix are usually classified as:

1 pts

Essay

9 questions · 35 points

Explain in detail how HTTPS communications utilize different technologies to protect data from the handshake phase to data exchange.

6 pts

Distinguish between the roles of Symmetric cryptography and public-key cryptography during an HTTPS connection.

2 pts

What is meant by the term “Two-Factor Authentication (2FA),” and how does using a second independent factor reduce the risk of unauthorized access?

2 pts

Explain what is meant by the concept of “defense in depth” in network security, and why providing multiple layers of protection is more secure than relying on a single security measure.

6 pts

Compare traditional security and the “Zero Trust Approach” in detail, explaining why traditional designs alone are currently ineffective.

3 pts

Why is it safer to place a public web server in a DMZ rather than inside the internal network?

2 pts

List the six stages of incident response in sequence, and explain how overlap or a return to previous stages may occur during actual incident response.

6 pts

How is the level of risk estimated in the simplified model presented in the lesson? State its formula and the two main factors that make it up.

3 pts

What is meant by the term “security incident,” and what are the main typical examples of it?

5 pts

كل الامتحانات العامة