stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cisco: Introduction To Cybersecurity - Chapter 4 Flashcards | StudBud
Explore
/
Cisco: Introduction To Cybersecurity - Chapter 4
Cisco: Introduction To Cybersecurity - Chapter 4
16 terms
·
StudBud Administration
·
234 plays
This is cybersecurity chapter 4
Flashcards
16 cards
F
Practice quiz
P
Host live
L
Questions
16
Answers
1
What lures an attacker by appealing to the their predictable behavior and logs their actions?
Web Proxy Server
Firewall
Intrusion Detection System (IDS)
honeypot
2
Which of the following is
NOT
true about an Intrusion Detection System (IDS)?
Does not prevent attacks
Can block or deny traffic based on a positive rule
Detects, logs and reports
Usually placed offline
3
Which is the last step in the Kill Chain Framework?
Installation
Command and Control
Action
Exploitation
4
Which of the following is
NOT
part of the Kill Chain Framework?
Weaponization
Execution
Reconnaissance
Delivery
5
Which of the following is
NOT
true about Netflow?
Provides for behavior-based detection and analysis
Gathers information about data flowing through a network
Helps establish baseline behaviors
Is used to route malicious traffic to a honeypot server
6
What uses baseline information to detect anomalies that could indicate an attack?
routing statistics
DDoS detection
network flow patterns
behavior based analysis
7
Which tool performs real-time traffic analysis, detects port scans & buffer overflow attacks?
Snort
SIEM
Nmap
Netflow
8
What type of attack disrupts services by overwhelming network devices with bogus traffic?
port scans
DDoS
zero-day
brute force
9
Which of the following is
NOT
a tool for Incident Prevention and Detection?
Cisco Identity Services Engine (ISE)
Data Loss Prevention (DLP)
Security Information and Event Management (SIEM)
Cisco Extract Tranform Loader (ETL)
10
What is a device that controls or filters traffic going in or out of the network ?
server
hub
router
firewall
11
What is a group of compromised computers (bots) controlled by hacker?
Nmap
zombie
SIEM
botnet
12
Which tool identifies malicious traffic by comparing packet contents to known attack patterns?
Netflow
IDS
Zenmap
Nmap
13
What best describes Security Information and Event Management (SIEM) ?
Collects and analyzes alerts and logs from security devices
Stops sensitive data from being stolen from the network
Routes traffic based on filters
Enforces role-based access control policies
14
Which protocol is used by Cisco Cyberthreat Defense Solution to track network traffic ?
NAT
NetFlow
HTTPS
Telnet
15
What term describes when a hacker exploits a [soft/hard]ware flaw before a fix is developed?
rootkit
Stuxnet
zero-day exploit
DDoS
16
Which of the following is
NOT
a Security Best Practice ?
Deploy Employee Locator Tracking
Perform Risk Assessment
Create a Security Policy
Physical Security Measures
