Chapters 1 to 3

Which assessment helps identify insider threats?

Which malware demands Bitcoin and encrypts files?

How can Python code be analyzed for malware?

Which attacker is most associated with an APT?

What is the term for shared malware hash values after a breach?

How should a rootkit-infected drive be scanned for malware?

Which DLP method protects sensitive data over a network?

Which group did the U.S. create to share cybersecurity knowledge?

What type of malware connects to a command and control system?

What terms describe Snowden’s activities? (Choose two.)

What is the most likely way a student stole a staff member’s password?

What data is most likely stolen by a keylogger?

Which technology protects data using encryption?

Which data protection method is reversible?

Which principle was impacted when customer records were stolen?

Which threat vector is most exploited by distant attackers?

What type of security control is a warning sign on a data center fence?

What type of malware spreads via USB and executes when a file is opened?

Which malware collects browsing and system data?

What term describes Kolin's work as a penetration tester in a healthcare system?

What term describes malware that gives remote system access?

Which security control discourages attackers?

What term describes an organization’s desired security state?

Which is not one of the three main cybersecurity principles?

What type of attack involves malicious firmware on a network device?

What data minimization technique hides part of the data?

What is the main impact of bloatware?

What type of malicious traffic uses TCP port 6667?

What is the best way to fully remove malware from a system?

Which is the best example of a hacktivist group?

What type of risk is related to PCI DSS compliance violations?

What type of risk involves financial loss from a security breach?

What is the best way to prevent Trojan installation?

Which is not a useful IoC for a rootkit?

What is a key difference between worms and viruses?

Which regulation impacts healthcare providers most?

Which is not an OSINT source?

What is the best reference for TLS technical specifications?

What is the term for data sent between two systems?

What term describes using an unsanctioned cloud messaging tool?

Which is not a common cybersecurity attack goal?

What security risk arises when a CRM system loses vendor support?

What type of software comes preinstalled and slows down new systems?

What is the biggest concern when sensitive data is found in a public repository?

Which vendor is least likely to cause a supply chain attack?

What term describes Renee accessing student records by modifying a URL?

How can organizations prevent logic bombs from insiders?

What type of malware deletes files if an employee is fired?

Which data element is least associated with identity theft?

Which statement about PCI DSS compensating controls is false?

What type of control is tuning an IPS to prevent false positives?

Which cybersecurity principle is violated when a website is defaced?

Why do antivirus tools report different names for the same malware?

Which tool visually displays threat actor locations?

Which malware exploits a WordPress vulnerability over a network?

Which threat actor has the most resources?

What is the primary motivation of hacktivists?

Which measure is not commonly used to assess threat intelligence?

What type of control gap exists if laptops lack full-disk encryption?

What category of control is used for updating threat assessment processes?