Security Products & Solutions Knowledge Flashcards

Which security product category uses artificial intelligence and machine learning to detect threats that evade traditional signature-based security tools?

Answer: Next-Generation Antivirus (NGAV) / AI-powered endpoint security

NGAV uses machine learning models to detect malicious behavior and file attributes rather than relying solely on known malware signatures, catching zero-day threats.

A customer asks about protecting sensitive encryption keys and performing cryptographic operations in a tamper-resistant device. What should you recommend?

Answer: Hardware Security Module (HSM)

An HSM is a dedicated hardware device that securely generates, stores, and manages cryptographic keys and performs encryption operations in a tamper-resistant environment.

What is the primary benefit of deploying a Privileged Access Management (PAM) solution?

Answer: Controlling, monitoring, and auditing access by users with elevated system privileges

PAM solutions vault privileged credentials, enforce least-privilege access, and record all privileged sessions, reducing the risk of insider threats and credential abuse.

Which intrusion prevention system (IPS) deployment mode allows it to actively block malicious traffic in real time?

Answer: Inline mode

When deployed inline, an IPS sits directly in the traffic path and can drop or block malicious packets before they reach their destination.

A school district needs to prevent students from accessing inappropriate websites on campus. Which solution best addresses this requirement?

Answer: DNS Filtering / Secure Web Gateway (SWG)

DNS filtering and SWGs categorize and block access to inappropriate web content by intercepting and evaluating DNS requests or web traffic before it reaches users.

What is the key difference between two-factor authentication (2FA) and multi-factor authentication (MFA)?

Answer: 2FA requires exactly two factors while MFA requires two or more factors

2FA is a subset of MFA that uses exactly two authentication factors; MFA is the broader term covering any authentication scheme using two or more factors.

Which cloud security model places the greatest responsibility for security controls on the cloud customer rather than the provider?

Answer: Infrastructure as a Service (IaaS)

With IaaS, the customer manages the operating system, applications, and data security, while the provider only secures the underlying physical infrastructure.