DSAC-11 Annex B Practice Test

These questions are part of the practice quiz. Start practicing

• How can administrators verify DNS hostname resolution and reverse lookup resolution using Command Prompt or PowerShell?
• What are the two types of user interfaces mentioned?
• Which operating system family is noted for open source and extensive customization options?
• What is the effect of applying a Local GPO to a computer and the users who log on to it?
• What is the SBOM and its significance in Annex B supply chain risk management?
• What is the primary function of Active Directory Domain Services (AD DS)?
• Which administrative tool provides administrators the ability to manage users and computers?
• In Group Policy processing, which phase is likely to cause logon delays if many policies are applied?
• Which of the following is NOT a mode of Group Policy application?
• What is critical for incident communications management in Annex B?
• Which measures protect logging integrity in Annex B?
• Which statement accurately describes a directory in a computer network?
• What does the User Interface (UI) of an operating system allow?
• Which two methods are commonly used to install DNS on Windows Server?
• In STRIDE threat modeling, what does the letter 'T' stand for?
• Which component of an OS provides basic control over computer peripherals?
• How does AD DS simplify administrative tasks?
• A ____________ is an optional set of folders that contain custom scripts, images, branding, applications, drivers, and other files.
• In a client-server architecture, which operating system type provides services to connected clients?
• What is the purpose of logging and what should be included in logs for Annex B?
• What is the main benefit of Active Directory Domain Services (AD DS)?
• Which storage device is described as an electro-mechanical device that uses magnetic storage on rapidly rotating platters?
• What is a common risk when applying software installation restrictions via GPOs?
• In network segmentation and zoning, what is the primary objective?
• Which option would you choose to obtain Annex B topics if they were available?
• Which DSAC domain listed deals with access rights management?
• Which elements constitute a security metric program in Annex B?
• Which interface type is defined by text commands and a command prompt?
• What best describes a data loss prevention strategy in Annex B?
• What did the assistant say about confirming DSAC-11 Annex B sections?
• What is the purpose of an Operating System?
• During PKI operations, which step verifies that a presented certificate chains to a trusted authority?
• What number of flash cards was proposed in the alternative plan?
• This type of storage device uses flash memory as opposed to writing data to platters.
• A _____ is an application or device that performs service for connected clients as part of client-server architecture.
• Which feature allows an operator to execute one or more computer tasks at a time?
• Which DSAC certification domain is about managing permissions and access to resources?
• What is the primary purpose of an operating system?
• What is the purpose of the File and Storage Service roles in a server environment?
• Which operating system type is known for ease of customization and open-source variants?
• In a quantitative risk assessment, what is the standard approach?
• Group policy can prevent users from accessing certain resources.
• How do privacy impact assessments relate to processing personal data?
• Which practice is central to assessing and managing insider threat risk in Annex B?
• Which statement about a directory is true?
• Which statement best describes a benefit of using GPOs alongside security controls?
• What is a limitation of GPO processing?
• Which DNS record maps a hostname to an IPv4 address?
• Which combination of access control practices is recommended to mitigate insider risk?
• GPOs are stored in the Active Directory Data Store. This store is part of which directory service?
• In STRIDE threat modeling, which category covers risks where an attacker can perform actions with more privileges than allowed?
• Which of the following is part of the TLS handshake?
• Which statement about cloud responsibility is true?
• Which best explains the primary role of an operating system for users?
• Which statement correctly characterizes the relationship between an operating system and hardware?
• What is a Group Policy Object (GPO) in Microsoft?
• In an incident response plan, which phase focuses on analyzing the incident after recovery to improve future responses?
• AD DS stands for which directory service in Windows Server?
• Which option is a Windows installation method among the commonly used methods?
• Which is a stage in the cryptographic keys lifecycle in DSAC-11 Annex B?
• Which of the following best describes how Group Policy Objects contribute to security administration?
• Which DSAC domain would you study to respond to cyber incidents efficiently?
• In which type of zone can a PTR record be stored?
• Which SDLC principle is applied to Annex B?
• What is the function of the DNS Client service in Windows operating systems?
• What is the purpose of a threat intelligence program in Annex B?
• What does multitasking allow in an OS?
• What is the role of incident post-mortems and lessons learned in Annex B?
• In an Active Directory forest, which role is responsible for managing domains and application partitions?
• What distinguishes Linux from Windows and macOS?
• What term describes the interaction between processors through communication lines?
• Adding comments to GPOs is considered a best practice to ensure future administrators understand why it was created, what its purpose is and what its settings are.
• What is the most significant program in a computer or server that enables all devices to run programs and applications?
• Which statement best describes data minimization under Annex B data protection?
• A personal computer designed for graphic design, video editing, CAD, and other CPU and RAM intensive tasks is called a?
• The _______ performs basic arithmetic, logic, controlling, and input/output (I/O) operations specified by the instructions in the program.
• Differentiate SIEM and EDR in security operations relevant to Annex B.
• What is a benefit of implementing Group Policy Objects (GPOs) in addition to security?
• What does Rights Management in Active Directory control?
• Which of the following is true about a security metric program's measurement method?
• Which statement best describes the primary role of an operating system?
• What is the name of the centralized or remote computer that holds e-mail messages for clients on a network?
• Group Policy Objects are primarily used to manage which of the following?
• What is the difference between vulnerability assessment and penetration testing in the Annex B context?
• What is the hierarchical structure used by Active Directory?
• Which mobile operating system is used exclusively for iPhones?
• Which of the following is an example of a directory service?
• Which DSAC domain covers ensuring software quality and safety across development and deployment?
• What is the concept of defensible architecture and its significance for Annex B?
• What is the purpose of limiting access to Control Panel through Group Policy?
• What type of computer is typically used for high-end applications like graphic design and video editing?
• A server can have up to how many roles?
• Which type of GPO applies only to the local computer and the users who log on to it?
• Which administrative tool allows administrators to manage server roles from a Windows workstation?
• What is the function of an interrupt in an operating system?
• Which acronym stands for Domain Name Services?
• How does the DNS Client service assist in the authentication process for Active Directory domains?
• Which service enables single sign-on across trusted domains?
• Select the main benefits of a well-designed site topology.
• Which statement is true about symmetric encryption?
• What is the correct order for Group Policy processing from first to last?
• Which of the following is a Windows installation method mentioned as common?
• In a shared responsibility model for cloud services, which statement is true?
• Which mobile operating system is the primary platform for Google mobile devices?
• Which of the following describes a GPO's password policy capability?
• Which approach provides confidentiality and integrity when selecting cryptographic modes?
• In PKI, what does a certificate primarily do?
• What does the Group Policy Management Console (GPMC) allow an administrator to do?
• Which of the following is not an example of application software?
• The process of resolving human-friendly hostnames to IP addresses is performed by which service?
• The default configuration file contains all the configuration definitions that a program needs to function.
• In DSAC-11 Annex B risk management, an asset is defined as what?
• Which of the following is NOT listed as a type of operating system in the material?
• Which aspect of security does an operating system provide?
• Which Active Directory role is described as a single DC responsible for processing RID pool requests from all DCs within a domain?
• Which term refers to a system running a version of Windows Server with the Active Directory Domain Services role installed?
• Which statement correctly distinguishes a backup strategy from a restore test?
• The two modes of Group Policy application are which of the following?
• Which are the three types of GPOs?
• Which operating system is proprietary and runs on Apple and Macintosh computers?
• Which definition correctly describes RBAC?
• What is a personal computer used for high-end applications such as graphic design, video editing, CAD, or 3-D design?
• Why might a company choose to prevent software installations through Group Policy?
• What is the primary purpose of a disaster recovery plan (DRP) in Annex B context?
• Which technology is best suited to securing end-to-end communications for remote workers by establishing a secure tunnel across the network?
• What is a limitation of GPOs related to their processing?
• What is a secure key management practice for cryptographic keys?
• Which type of UI displays text commands typed at a prompt?
• Which device caches web pages to speed up loading times and reduce network bandwidth?
• What is a trust anchor in PKI?
• What is the primary purpose of an SBOM and vendor risk management in Annex B?
• Which layer of the TCP/IP reference model does DNS belong to?
• What distinguishes a static DNS record from a dynamic one?
• Which service enables single sign-on authentication in Active Directory?
• Which network device caches pages accessed through the network to load faster and reduce bandwidth usage?
• True or False: An operating system is a system software that works as the interface between the user and the hardware.
• What alternative did the user propose when confirmation was not possible?
• Which component of Active Directory is responsible for managing information about users and resources?
• An operating system is system software that works as the interface between the user and the hardware.
• What is the role of logging integrity measures?
• Which of the following is not a type of operating system?
• What is the primary purpose of Transport Layer Security (TLS)?
• What does CLI stand for?
• Which statement best describes continuous monitoring vs periodic assessment in Annex B?
• How should you approach business continuity planning (BCP) in Annex B?
• Which DSAC domain focuses on responding to security incidents?
• Which of the following statements about Windows installation methods is true according to the commonly used methods?
• What should incident communications plans include?
• Which of the following is an example of application software?
• Which statement correctly defines RTO?
• Which statement accurately describes ECB, CBC, and GCM modes and their security implications?
• Which statement differentiates data at rest vs data in transit protections?
• What is the role of configuration hardening baselines in Annex B?
• What is the purpose of segmentation and zoning in network architecture?
• What is the principle of least privilege and how is it applied in DSAC-11 Annex B?
• Which DNS record type can be updated automatically?
• Which operating system is described as popular due to its broad software compatibility?
• How many types of GPOs are there?
• Which operating system is commonly used in network devices such as Cisco Call Manager and remote administration servers?
• How do GPOs determine password policies?
• Which storage option is defined by having no moving parts and using flash memory?
• Which administrative tool is described as the newest tool for performing day-to-day tasks since Windows Server 2008?
• Explain patch management lifecycle and why timely patching matters in Annex B?
• In an incident response plan, which phase focuses on restoring services and operations to normal after containment and eradication?
• What is an incident response plan and its typical phases for Annex B?
• Which term denotes partitions within a forest that provide data and service autonomy?
• What role does DNS play in TCP/IP?
• Which DSAC domain would involve ensuring the software development life cycle is secure?
• How can administrators balance traffic load between multiple instances of an application?
• If a domain controller fails in an Active Directory environment, what happens next?
• The AD DS feature that improves interoperability across operating systems is described as:
• Which statement best describes data in transit protection?
• Which statement best describes a defensible architecture requirement?
• What is the concept of defense in depth and how is it implemented?
• Which statement correctly maps the three security properties Confidentiality, Integrity, and Availability?
• In which environments is Microsoft Azure AD DS typically used?
• How do you perform risk treatment and choose mitigations in Annex B?
• Which part of the operating system permits an operator to get information?
• Which operating system is primarily used in the USMC Mobility Infrastructure to support end users?
• Which term is described as a type of indexing for grouping resources?
• Which statement best describes red team and blue team activities in security testing?
• Active Directory Domain Services uses DNS to locate domain controllers for various operations.
• Which of the following log elements is NOT typically included to support investigations?
• Which outcome is commonly associated with implementing restrictions on software installations via Group Policy?
• Which statement about Group Policy Objects is true?
• What is the Domain Naming Master responsible for?
• DNS stands for Domain Name Services. It enables domain joined computers to search Active Directory and locate Domain Controllers.
• Which access control model uses attributes such as user role, resource type, and environmental conditions to grant access?
• What is the combined purpose of SBOM and vendor risk management in Annex B?
• Which command-line utility is commonly used to verify DNS name resolution from Windows?
• Which term best describes software designed to help a user perform tasks such as word processing or data analysis?
• What is the purpose of a PTR record?
• What is the PDC Emulator in Active Directory?
• Highly distributed, massive storage and high-end processing power servers describe which type of server?
• Name one DSAC certification domain mentioned as an example.
• How does Active Directory Domain Services (ADDS) utilize DNS?
• Which term matches the definition: 'A DC that stores all domain object data in the forest'?
• Which statement about the Group Policy Management Console (GPMC) is true?
• Which DSAC domain deals with encryption and data protection methods?
• Which operating system is commonly deployed on devices for network management and remote administration?
• Which of the following is not a component of an operating system?
• What is chain of custody in digital forensics and why is it crucial in Annex B investigations?
• Which practice most directly validates the ongoing effectiveness of security controls after deployment?
• In Annex B's security model, which statement about cloud services is true?
• How can administrators install DNS in Windows Server?
• What is the primary purpose of physical security controls in Annex B?
• Which statement best describes the purpose of an operating system?
• Which DSAC domain is primarily about setting organizational policies and risk tolerance?
• Define data classification and its impact on security controls in Annex B.
• Which operating system type is often preloaded on most new PC hardware and offers compatibility with various software?
• Which statement correctly describes VPNs, IPsec, and TLS with respect to the layers they secure?
• What is the primary objective of risk assessment in DSAC-11 Annex B?
• A ______ is the electronic circuitry that executes instructions comprising a computer program.
• Which of the following describes a secure key management practice?
• What is the main service provided by Active Directory Domain Services?
• In a BCP, what do RTO and RPO stand for?
• What is the RID Master role?
• In a TCP/IP network, the service most associated with domain name resolution is:
• In an operating system, which of the following are essential because they give a reliable technique for the OS to communicate and react to its surroundings?
• Which DSAC domain would you study to protect data with encryption?
• Which term is defined as a set of rules that defines the classes of objects and attributes?
• Which statement about cloud responsibility is true?
• Which of the following is not one of the three most common installation methods of Windows?
• GPOs are NOT listed as an association for Group Policy Objects (GPOs). Which of the following is NOT listed as an association?
• Which regulatory standards are commonly referenced in Annex B and what is their role?
• Which type of UI displays text commands typed over a command line?
• The GPO data store is part of which directory service?
• What is the primary function of a Host (A) record in DNS?
• What is a function of networking in an operating system?
• Which operating system is proprietary and runs on Apple and Macintosh computers?
• Which set lists the four common authentication factors?
• Which type of record maps a hostname string into its IPv6 address?
• What is a cryptographic nonce and its role in secure communications?
• The operating system acts as the interface between the user and the hardware. True or False?
• Which DSAC domain focuses on securing networks and communications?
• Which statement best describes Linux in the context of customization and source availability?
• What is a security control baseline and why is it important in Annex B?
• Which access control model assigns access by owner discretion?
• In which DNS zone would you store records that support reverse DNS lookups?
• The user interface of an application can be classified into two types: GUI and ________.