Free EDU-102 sample questions

Correct answers: The use of unmanaged personal devices (BYOD) connecting to internal applications.; Employees connecting through unsecured public Wi-Fi networks.; The exposure of internal applications to the internet to facilitate remote access via legacy VPNs.

Unmanaged personal devices introduce new potential entry points for attackers, increasing the attack surface.

Unsecured public networks expose data in transit to interception, adding to the attack surface.

Exposing services to the internet for VPN access creates discoverable nodes that attackers can target, expanding the attack surface.

Correct answer: It increases the attack surface by introducing unmonitored digital assets, unauthorized data flows, and potential vulnerabilities outside the IT department's visibility.

Shadow IT significantly expands the attack surface because it introduces unmanaged, unmonitored assets and data flows. Security teams cannot protect what they cannot see, leaving these unauthorized apps vulnerable to exploitation and data leakage. flowchart LR User[Marketing User] -->|Sanctioned| IT[IT Monitored App] User -->|Shadow IT| Unmonitored[Unsanctioned SaaS App] Unmonitored -->|Data Leakage| Attacker((Attacker)) style Unmonitored fill:#f9f,stroke:#333,stroke-width:2px

Correct answer: False

False. The 'attack surface' is the total sum of all potential points (or 'attack vectors') where an unauthorized user can try to enter data to or extract data from an environment. An 'attack vector' is the specific path or method (e.g., a phishing email, an open port) an attacker uses to exploit a vulnerability.

Correct answer: Endpoint security

Endpoint security focuses on securing end-user devices such as laptops, smartphones, and tablets from malicious threats and cyberattacks. Deploying EDR and antivirus software on these devices is a textbook example of endpoint security.

Correct answer: The e-commerce startup, as configuring access controls for their data falls under their responsibility in the shared responsibility model.

In cloud security, the Shared Responsibility Model dictates that the cloud provider secures the 'cloud' (infrastructure, hardware), while the customer secures what is 'in the cloud' (data, configurations, access management). An open S3 bucket is a customer misconfiguration.

Correct answer: 1: Application Security, 2: Information/Data Security, 3: Network Security

SAST is a core component of Application Security (finding flaws in source code). DLP is a prime control for Information/Data Security (preventing sensitive data exfiltration). VLANs and internal firewalls are foundational elements of Network Security (controlling traffic flow between network segments).