{"id":"security-plus-free","timeLimitSec":300,"questions":[{"id":"spf-01","section":"gen","q":"Which of these is a hashing algorithm, not an encryption algorithm?","options":["SHA-256","RSA","ChaCha20","AES-256"],"answer":0,"explain":"SHA-256 produces a fixed-length digest that cannot be reversed. AES, RSA and ChaCha20 encrypt data so it can be decrypted with a key."},{"id":"spf-02","section":"threats","q":"A phishing email is written specifically for the CEO and refers to a real board meeting. What is this called?","options":["Whaling","Spam","Vishing","Smishing"],"answer":0,"explain":"Whaling is spear phishing aimed at senior executives, who have the authority to approve payments and access."},{"id":"spf-03","section":"arch","q":"Which cloud model gives the customer the most control over, and responsibility for, the operating system?","options":["Platform as a service (PaaS)","Software as a service (SaaS)","Function as a service (serverless)","Infrastructure as a service (IaaS)"],"answer":3,"explain":"In IaaS the customer manages the operating system and everything above it. In PaaS, SaaS and serverless the provider manages it."},{"id":"spf-04","section":"ops","q":"Which principle gives each user only the permissions they need to do their job?","options":["Implicit allow","Least privilege","Defense in depth","Separation of duties"],"answer":1,"explain":"Least privilege limits what a compromised or careless account can do. Separation of duties splits one critical task between people."},{"id":"spf-05","section":"gov","q":"A single laptop theft costs $3,000 (SLE) and the company expects 4 thefts a year. What is the annualized loss expectancy (ALE)?","options":["$750","$7,000","$12,000","$3,000"],"answer":2,"explain":"ALE = SLE x ARO = $3,000 x 4 = $12,000 per year. This figure helps decide how much a control such as full disk encryption is worth."}]}