stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Review 1 Flashcards | StudBud
Explore
/
Review 1
Review 1
25 terms
·
StudBud Administration
·
17 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Why is "layering" important as a defense strategy?
It provides redundancy, so users don’t lose access
prevents any one security control from becoming a single point of failure
It allows for the same security protocol to be applied repeatedly
It simplifies security configuration by consolidating tools
2
What is the best action to take with unused application service ports?
Leave them open in case they're needed later
Block or disable them at the firewall
Change them to non-standard values
Monitor them passively without changing settings
3
Why is the concept of randomness (entropy) valuable in cybersecurity defense?
It reduces the effectiveness of brute-force attacks by confusing attackers
It ensures uniform access policies
It simplifies network architecture
It eliminates the need for antivirus software
4
What is the
primary goal
of operating system security?
To prevent malware from being installed
To optimize system performance
To protect against unauthorized access and security threats
To reduce user access to applications
5
A threat actor scans a network to identify open ports and services. What attack strategy is being used?
Technical approach
Social engineering
Escalating privileges
Creating a backdoor
6
What is the purpose of using a VPN in the context of endpoint protection?
To provide a secure tunnel for data transmission
To allow root access remotely
To speed up internet access
To block phishing emails
7
Which of the following best describes the purpose of reconnaissance in a cyber attack?
To overwhelm the network with traffic
To plant malware on remote machines
To identify users with administrative rights
To gather information about the target system and organization
8
Why is regular user awareness training critical for workstations?
To detect zero-day malware
To reduce the need for encryption
Because human behavior is a key security factor
Users need to learn new OS features
9
Why should unused interfaces be explicitly disabled?
They may allow unauthorized access
They use excessive bandwidth
They affect power consumption
They reduce hardware longevity
10
What is the purpose of an Access Control List (ACL)?
To store encryption keys
To specify permissions for users or groups
To filter unwanted emails
To log user behavior
11
What is the main goal of privilege escalation in a cyber attack?
To impersonate another user's identity
To gain greater control and access within the system
To bypass physical security controls
To avoid detection by antivirus software
12
What is the
main reason
to test patches before production deployment?
To reduce update size
To improve patch download speeds
To ensure system stability and security
To avoid missing updates
13
What is a key benefit of continuous monitoring after hardening?
Prevents system updates
Detects deviations from secure configurations
Automatically repairs hardware
Reduces network latency
14
Which of the following best defines "hardening"?
Making a system operate securely by reducing vulnerabilities
Running all services in isolation
Encrypting all system files
Increasing logging verbosity for all applications
15
What does Full Disk Encryption (FDE) protect?
The entire hard drive
Only user documents
Data in transit
Operating system files only
16
What is the
most significant challenge
in patching legacy systems?
Incompatibility with modern update tools
Requirement of command-line knowledge
High bandwidth requirements
Limited user interface options
17
What does it mean to "stage computers" during an attack?
To prepare compromised systems to assist in further attacks
To set up backup systems in case the main attack fails
To simulate a false attack to test defenses
To use the computers for reconnaissance
18
Which of the following would NOT typically be part of OS hardening?
Removing unnecessary applications
Disabling unused services
Applying secure configurations
Installing performance benchmarking tools
19
Which of the following is
unique
to workstation hardening?
Patch management
Access control lists
Screen lock settings
USB device control
20
Which action best exemplifies the use of social engineering in an attack?
Creating a backdoor
Gaining access through default credentials
Exploiting a zero-day vulnerability
Sending a phishing email to trick a user into revealing credentials
21
Why is decommissioning important for security?
It prepares the device for resale
It improves system performance
It ensures sensitive data is erased properly
It resets the device's uptime statistics
22
What is the principle of
least functionality
?
Removing all admin accounts from the OS
Running only necessary protocols and service
Ensuring users have the least access privileges
Blocking all incoming traffic by default
23
What does configuration enforcement ensure?
That device settings meet security baselines
That users cannot uninstall software
That patches install automatically
That devices reboot after updates
24
Why is removable media encryption necessary?
o prevent file fragmentation
To speed up data transfer
To allow compatibility with more OSes
To protect data even when devices are physically removed
25
An
allow list
for applications will:
Only block malware known to the system
Allow all apps except those on a deny list
Block all apps not explicitly approved
Allow any administrator-installed app
