ICS Domain 4

Question 1

Wireshark is a passive reconnaissance tool but can be used for active reconnaissance.

Accepted Answer

True

Question 2

Which is a risk assessment method?

Accepted Answer

Qualitative analysis

Question 3

Protocol design to support STIX and transfer STIX data

Accepted Answer

TAXII

Question 4

What is a threat in risk management?

Accepted Answer

Potential harm

Question 5

What is the best mitigation strategy for natural disasters?

Accepted Answer

hardened facilities and alternate sites

Question 6

Scanning technique that targets all host on networks by sending traffic to a certain port to see if it's active on hosts

Accepted Answer

Sweep

Question 7

Standard language (JSON-based lexicon)-express & share threat intelligence information in readable & consistent formats

Accepted Answer

STIX

Question 8

What is a vulnerability assessment?

Accepted Answer

Identifying weaknesses

Question 9

What is risk mitigation?

Accepted Answer

Reducing risk impact

Question 10

What are the goals of an information security exchange management policy? (Choose 2)

Accepted Answer

ensure modifications to system do not negatively impact security, ensure documentation is updated when systems are installed/modified

Question 11

What is the first step in risk management?

Accepted Answer

Risk identification

Question 12

What is the best mitigation strategy for supply-chain disruptions?

Accepted Answer

alternate sources and inventory management

Question 13

What is a security patch?

Accepted Answer

Fixes vulnerabilities

Question 14

What's the name of the catalog the MITRE Corp created that houses known security threats?

Accepted Answer

CVE

Question 15

Which is a common vulnerability?

Accepted Answer

SQL injection

Question 16

Which is a type of risk response?

Accepted Answer

Risk acceptance

Question 17

Which tool is used for vulnerability scanning?

Accepted Answer

Nmap

Question 18

Scanning technique a threat actor uses to disguise their location

Accepted Answer

Bounce

Question 19

What is the best mitigation strategy for cyberattacks?

Accepted Answer

firewalls, IDS, IPS, and log analyzers

Question 20

Which network intelligence org created a system to assign scores to vulnerabilities?

Accepted Answer

FIRST

Questions 20