What types of devices are vulnerable to becoming part of a botnet?

Any type of Internet-enabled device

What is the role of a rogue DHCP server in DNS attacks?

Configure clients with address of a DNS resolver controlled by the attacker

What is the primary purpose of threat assessment in cybersecurity?

To identify and profile threat sources and actors

Under what condition can an organization process credit card transactions directly?

If they adopt the PCI DSS standard

In the context of social engineering, what is phishing primarily used for?

To convince users to interact with malicious resources

What is one primary purpose of rogue devices and services?

To steal sensitive information.

What can be a source of internal threats?

Employees within the organization

What can be an inadvertent cause of a denial of service (DoS) attack?

A user connecting two wall ports and creating a switching loop.

What can the most serious vulnerabilities allow an attacker to do?

Execute arbitrary code on the system

Why is it more secure to use cryptographic hashes for passwords?

Because the plaintext should not be recoverable from the hash

What is the purpose of spoofing attacks?

To disguise the attacker's identity

What is risk posture?

The overall status risk management efforts

Why does a MAC flooding attack make network sniffing easier for the attacker?

Because the attack forces the switch to broadcast traffic to all ports

What does data locality require?

Data storage within certain geographical boundaries

What is the role of encryption in an access control solution?

To convert plaintext into ciphertext

studbud

NP2 Chapter 9

20 termsStudBud Administration6 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
What types of devices are vulnerable to becoming part of a botnet?
Devices without Internet access
Any type of Internet-enabled device
Only outdated computers
Only servers and mainframes
2
What is the role of a rogue DHCP server in DNS attacks?
Configure clients with address of a DNS resolver controlled by the attacker
To physically damage DNS servers
To steal user credentials through DNS queries
To encrypt all DNS traffic
3
What is the primary purpose of threat assessment in cybersecurity?
To develop new cybersecurity tools
To install antivirus software on all company devices
To train employees on cybersecurity best practices
To identify and profile threat sources and actors
4
Under what condition can an organization process credit card transactions directly?
If they adopt the PCI DSS standard
If they have an internet presence
If they use cloud storage
If they encrypt all their emails
5
In the context of social engineering, what is phishing primarily used for?
To physically access restricted areas
To observe and learn users' passwords
To convince users to interact with malicious resources
To search through an organization's garbage
6
Which password cracking method involves trying every possible combination to find the matching password?
Phishing
Dictionary
Brute Force
Social Engineering
7
Which of the following terms is deprecated for describing on-path attacks?
Adversary in the Middle (AitM)
Manipulator in the Middle
Machine in the Middle
Man-in-the-Middle (MitM)
8
What is one primary purpose of rogue devices and services?
To facilitate faster internet connections
To steal sensitive information.
To provide backup services in case of network failure
To enhance network security
9
What is the difficulty in implementing security controls?
They only address low-level risks.
They are not supported by IT service frameworks.
They are always too complex to implement.
They can be expensive.
10
What can be a source of internal threats?
Employees within the organization
Phishing emails from unknown senders
Malware found on the Internet
Hackers from another country
11
What can be an inadvertent cause of a denial of service (DoS) attack?
A user connecting two wall ports and creating a switching loop.
A malicious attempt to cut telephone lines or network cabling.
An attacker intentionally overloading a server with requests.
A threat actor exploiting vulnerabilities in network security.
12
What can the most serious vulnerabilities allow an attacker to do?
Improve application security
Increase system performance
Encrypt system files for data protection
Execute arbitrary code on the system
13
Why is it more secure to use cryptographic hashes for passwords?
Because the plaintext should not be recoverable from the hash
Because the hash can easily be converted back to plaintext
Because it allows system administrators to know all user passwords
Because it makes passwords easier to remember
14
What is the purpose of spoofing attacks?
To improve the security of DNS services
To provide legitimate services to users
To enhance the performance of ARP services
To disguise the attacker's identity
15
What is risk posture?
A physical stance taken by security personnel
The overall status risk management efforts
A specific type of security control
The legal stance on cybersecurity risks
16
What does end-to-end encryption, such as IPSec or TLS, secure against?
Viruses and malware
Only physical access to data
Recovery of password hashes
Only unauthorized logins
17
Which password cracking method uses a list of pre-defined words or phrases to guess passwords?
Phishing
Brute Force
Keylogging
Dictionary
18
Why does a MAC flooding attack make network sniffing easier for the attacker?
Because the attack speeds up the network traffic
Because the attack encrypts all the traffic on the network
Because the attack forces the switch to broadcast traffic to all ports
Because the attack disconnects all other devices from the network
19
What does data locality require?
Unlimited data transfer between countries
Data to be encrypted at all times
Data storage within certain geographical boundaries
Data to be stored in the cloud
20
What is the role of encryption in an access control solution?
To convert plaintext into ciphertext
To serve as the only method of access control
To give readable access to data
To physically secure devices and resources

NP2 Chapter 9 Flashcards | StudBud