Practice Test Geeks(CSS) Certified Security Salesperson Practice Test
← All CSS Flashcard Decks

Security Products & Solutions Knowledge Flashcards

7 cards from real CSS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security Products & Solutions Knowledge flashcards as text

  1. Which type of intrusion detection system (IDS) analyzes network traffic patterns to identify anomalies rather than matching known attack signatures?

    Answer: Anomaly-based IDS

    Anomaly-based IDS establishes a baseline of normal behavior and flags deviations, making it effective against zero-day attacks.

  2. A customer wants to consolidate firewall, VPN, and intrusion prevention into a single appliance. Which product category best fits their need?

    Answer: Unified Threat Management (UTM)

    UTM appliances combine multiple security functions—firewall, VPN, IPS, antivirus, and more—into one device, ideal for SMBs seeking simplified management.

  3. Which access control model grants permissions based on a user's organizational role rather than individual identity?

    Answer: Role-Based Access Control (RBAC)

    RBAC assigns permissions to roles (e.g., 'manager,' 'employee'), and users inherit those permissions when assigned to a role.

  4. What is the primary purpose of a Web Application Firewall (WAF)?

    Answer: Protecting web applications from attacks like SQL injection and XSS

    A WAF inspects HTTP/HTTPS traffic and blocks application-layer attacks targeting web applications, such as SQL injection and cross-site scripting.

  5. A healthcare organization needs to prevent patient records from being emailed outside the network. Which security solution addresses this requirement?

    Answer: Data Loss Prevention (DLP)

    DLP solutions monitor and control data transfers, preventing sensitive information like PHI from leaving the organization via email or other channels.

  6. Which biometric authentication method is considered the most difficult to spoof due to its uniqueness and the number of data points captured?

    Answer: Iris scanning

    Iris scanning captures over 200 unique data points and is extremely difficult to replicate, making it one of the most secure biometric methods.

  7. What distinguishes an Endpoint Detection and Response (EDR) solution from traditional antivirus software?

    Answer: EDR provides continuous monitoring and behavioral analysis with incident response capabilities

    EDR continuously records endpoint activity, uses behavioral analytics to detect threats, and provides tools for investigation and response beyond simple signature-based blocking.