CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
what connection type is very similar to bluetooth but used by more
specialized devices, such as sensors and fitness trackers -
correct answer ✅ANT (Adaptive Network Technology)
What would you recommend to a team member who is interested
in additional sources of information to assist with refining their own
understanding of the current attack surface of the organization? -
correct answer ✅Output from the latest configuration review,
vulnerability scanning, and penetration tests
A user complains that after entering a URL into a browser, what
appeared to be the correct page is displayed in the browser.
However, after clicking a few links on the page, it became obvious
that the site the user arrived at was not the correct site, but instead
a malicious copy of the site the user intended to visit. Which of the
following attacks did the user most likely fall prey to? -
correct answer ✅typosquatting
An enterprise cloud administrator needs to create a trust boundary
between two compute instances in the same default security group
and on the same IPv4 subnet within an AWS virtual private cloud
,CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
(VPC). What would be an effective solution to the administrator's
needs? -
correct answer ✅Place the instances in separate subnets and use a
network firewall between the subnets.
You've taken up a contract helping to upgrade the existing industrial
control network for an oil refinery. What network type should you
expect to work with? -
correct answer ✅DCS
Which of the following is a risk to cloud services that is not a risk to
on-premises services? -
correct answer ✅Your data may be threatened by attacks launched
on the data of others.
Which of the following factors has no effect on chain of custody,
with regard to digital evidence that is presented to the court? -
correct answer ✅Documentation of the presiding judge and
opposing counsel
,CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
On a subnet with limited physical security, you're worried about
ARP poisoning and DHCP spoofing attacks. What switch feature
could help prevent both? -
correct answer ✅802.1AE/MACsec
Your company is developing a custom web app for the sales team. It
should be able to access a list of Salesforce contacts, but for
security reasons, the app shouldn't be able to access the actual
Salesforce account. What standard would allow this? -
correct answer ✅OAuth
Uses an authenticator to block communications between
unauthorized users or workstations and the local network
Requires the use of EAP and an authentication server -
correct answer ✅802.1X
Centrally secures access to server resources deployed within or
across a non-secure network -
correct answer ✅Kerberos
, CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
Restricts access to a LAN via a WAN link -
correct answer ✅Point to Point Protocol (PPP) with Challenge
Handshake Authentication Protocol (CHAP)
a framework for enterprise risk management -
correct answer ✅31000
focuses on personal data and privacy -
correct answer ✅27701
defines the various security controls in greater detail -
correct answer ✅27002
details the steps to implement a compliant ISMS -
correct answer ✅27001
what area of compliance requirements is part of all of the following
regulations
HIPAA
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
what connection type is very similar to bluetooth but used by more
specialized devices, such as sensors and fitness trackers -
correct answer ✅ANT (Adaptive Network Technology)
What would you recommend to a team member who is interested
in additional sources of information to assist with refining their own
understanding of the current attack surface of the organization? -
correct answer ✅Output from the latest configuration review,
vulnerability scanning, and penetration tests
A user complains that after entering a URL into a browser, what
appeared to be the correct page is displayed in the browser.
However, after clicking a few links on the page, it became obvious
that the site the user arrived at was not the correct site, but instead
a malicious copy of the site the user intended to visit. Which of the
following attacks did the user most likely fall prey to? -
correct answer ✅typosquatting
An enterprise cloud administrator needs to create a trust boundary
between two compute instances in the same default security group
and on the same IPv4 subnet within an AWS virtual private cloud
,CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
(VPC). What would be an effective solution to the administrator's
needs? -
correct answer ✅Place the instances in separate subnets and use a
network firewall between the subnets.
You've taken up a contract helping to upgrade the existing industrial
control network for an oil refinery. What network type should you
expect to work with? -
correct answer ✅DCS
Which of the following is a risk to cloud services that is not a risk to
on-premises services? -
correct answer ✅Your data may be threatened by attacks launched
on the data of others.
Which of the following factors has no effect on chain of custody,
with regard to digital evidence that is presented to the court? -
correct answer ✅Documentation of the presiding judge and
opposing counsel
,CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
On a subnet with limited physical security, you're worried about
ARP poisoning and DHCP spoofing attacks. What switch feature
could help prevent both? -
correct answer ✅802.1AE/MACsec
Your company is developing a custom web app for the sales team. It
should be able to access a list of Salesforce contacts, but for
security reasons, the app shouldn't be able to access the actual
Salesforce account. What standard would allow this? -
correct answer ✅OAuth
Uses an authenticator to block communications between
unauthorized users or workstations and the local network
Requires the use of EAP and an authentication server -
correct answer ✅802.1X
Centrally secures access to server resources deployed within or
across a non-secure network -
correct answer ✅Kerberos
, CMIT 320 Final Exam Questions &
Answers Test QUESTIONS AND
VERIFIED SOLUTIONS |2026|
ELABORATED &DETAILED ANSWERS!!
Restricts access to a LAN via a WAN link -
correct answer ✅Point to Point Protocol (PPP) with Challenge
Handshake Authentication Protocol (CHAP)
a framework for enterprise risk management -
correct answer ✅31000
focuses on personal data and privacy -
correct answer ✅27701
defines the various security controls in greater detail -
correct answer ✅27002
details the steps to implement a compliant ISMS -
correct answer ✅27001
what area of compliance requirements is part of all of the following
regulations
HIPAA
