4.3 Quiz: Protecting Devices

Lesson 4.3 — Protecting Devices · Quiz

Lesson 4.3 Quiz: Protecting Devices

5 questions · 7-minute target · Instant feedback · AP exam format

🎯 Quiz Instructions

Answer all 5 questions. Click Check Answer after each to see feedback. Your total score appears after the last question. Target: 4 of 5 or better before moving to Lesson 4.4.

00:00

✎ Lesson 4.3 Quiz — Protecting Devices
Scenario 4A — Kestrel AgWorks

You are a security engineer at Kestrel AgWorks, which manufactures internet-connected agricultural machinery: tractors, irrigation controllers and automated milking systems. Every machine carries an onboard computer that farmers operate remotely, and those onboard computers are updated only as needed. Field technicians carry company laptops onto customer farms and plug them into networks Kestrel does not own and cannot inspect. Renata Boyle leads IT; Dale Ferro manages field service and would rather technicians were not slowed down.

Question 1 of 5 Renata drafts the laptop policy below for Kestrel field technicians. Exactly one row is wrong for a device-security policy. Which correction fixes the row that is actually wrong?
KESTREL AGWORKS — FIELD TECHNICIAN LAPTOP POLICY (draft)
Row 1  Acceptable use    Technicians may not browse social media or gaming sites.
Row 2  Passwords         Minimum 14 characters; reuse of a previous password is prohibited.
Row 3  Installations     Technicians may install any software they judge useful on a service call and log it afterwards.
Row 4  Removable media   Technicians may not connect external drives or USB media.
Row 5  Updates           Technicians must keep the operating system and diagnostic software updated.
Question 2 of 5 A Kestrel diagnostic laptop is rarely online, so its anti-malware signature database was last updated 11 months ago. A malware family that first appeared four months ago is now circulating among equipment dealers. A full scan of the laptop today reports no threats found. Which statement BEST describes what that result does and does not prove?
Question 3 of 5 Kestrel machines in the field receive onboard-computer updates only as needed. Consider these statements about patching.
I. A patch is a small update issued by the vendor to fix a vulnerability the vendor has found, so a machine that applies the patch is no longer exposed to that known vulnerability.
II. Once the vendor publishes the patch, the vulnerability stops being a risk to the fleet, because the fix now exists.
III. Applying updates is a detective control, because an update tells the operator that an adversary has already exploited the machine.
Which statement(s) are TRUE?
Question 4 of 5 Kestrel ships irrigation controllers with a host-based firewall. Renata wants outbound FTP blocked so that an adversary with remote access to a controller cannot use FTP to move design files off it. The outbound rule list, applied in order, is below. Which statement BEST describes what actually happens to outbound FTP traffic?
OUTBOUND ACL — IRRIGATION CONTROLLER (applied in order)
Rule 1   ALLOW   destination any                  port any
Rule 2   DENY    destination any                  port 21 (FTP)
Rule 3   ALLOW   destination updates.kestrelag    port 443 (HTTPS)
Rule 4   DENY    destination any                  port any
Question 5 of 5 Kestrel field laptops are plugged into customer farm networks that Kestrel does not own and cannot inspect. Dale asks which of the four controls below he can skip. Which control would do the LEAST to protect a field laptop from a compromised customer network?
0 / 5 Quiz complete — review any missed questions. 4+/5 means you’re ready for Lesson 4.4.
← Back to Lab Review Lesson 4.3
AP Cybersecurity · Unit 4 · Lesson 4.3 · Quiz
Lesson•Exercise 1•Exercise 2•Lab•Quiz•
Back to:Lesson 4.3Unit 4 Study GuideCourse Guide

Get in Touch

Whether you're a student, parent, or teacher — I'd love to hear from you.

Just want free AP CS resources?

Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.

Typically responds within 24 hours
✓

Message Sent!

Thanks for reaching out. I'll get back to you within 24 hours.

🏫 Welcome, fellow educator!

I offer curriculum resources, practice materials, and study guides designed for AP CS teachers. Let me know what you're looking for — whether it's classroom materials, a guest speaker, or Teachers Pay Teachers resources.

✉

Email

[email protected]

📚

Courses

AP CSA, CSP, & Cybersecurity

⏱

Response Time

Within 24 hours

Prefer email? Reach me directly at [email protected]