TMP Security & Risk Management 2

Question 1

In telecommunications security, what distinguishes a 'threat' from a 'vulnerability'?

Accepted Answer

A threat is a potential harmful event or actor; a vulnerability is a weakness that could be exploited

Answer

A threat is a weakness in a system; a vulnerability is a potential harmful event

Answer

A threat is a documented risk; a vulnerability is an undocumented risk

Answer

There is no practical difference between the two terms

Question 2

Which multi-factor authentication (MFA) method is generally considered the most secure for protecting telecommunications management systems?

Accepted Answer

Hardware security key (FIDO2/U2F)

Answer

SMS-based one-time password (OTP)

Answer

Email-based verification code

Answer

Security questions and answers

Question 3

What is the primary security benefit of network segmentation in a telecommunications environment?

Accepted Answer

It limits the lateral spread of an attack by isolating network zones

Answer

It increases total network bandwidth

Answer

It eliminates the need for firewalls

Answer

It reduces hardware procurement costs

Question 4

What does SIEM stand for, and what is its role in telecommunications security?

Accepted Answer

Security Information and Event Management; aggregates and analyzes log data to detect threats

Answer

Secure Information and Event Management; blocks unauthorized access

Answer

System Integration and Event Monitoring; manages hardware inventory

Answer

Signal Intelligence and Encryption Management; encrypts all network traffic

Question 5

Which type of firewall provides the deepest inspection by analyzing traffic at the application layer (Layer 7)?

Accepted Answer

Next-Generation Firewall (NGFW)

Answer

Packet filtering firewall

Answer

Stateful inspection firewall

Answer

Circuit-level gateway

Question 6

What is the primary objective of penetration testing in a telecommunications organization?

Accepted Answer

To simulate real-world attacks and identify exploitable vulnerabilities before malicious actors do

Answer

To install new network hardware and test its performance

Answer

To ensure regulatory compliance with billing standards

Answer

To benchmark network speed against industry competitors

Question 7

What does the principle of least privilege (PoLP) require in a telecommunications network management context?

Accepted Answer

Users and systems should be granted only the minimum access rights needed to perform their job functions

Answer

All users should have administrator-level access to maximize productivity

Answer

Network devices should operate at the lowest possible bandwidth to conserve resources

Answer

Security patches should be applied only when absolutely necessary