stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
4.3 quiz Sec+ 701 Flashcards | StudBud
Explore
/
4.3 quiz Sec+ 701
4.3 quiz Sec+ 701
25 terms
·
StudBud Administration
·
518 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Threat feeds can be
used to do the work for the analyst
OSINT, proprietary, community based
useful to find disgruntled employee
used to inform employees
2
CVE is:
STIX, TAXII
anti-malware
NGFW
glossary that classifies vulnerability
3
Application package monitoring is essential to:
inform vendors about an application
alert suppliers to deliver their poarts on time
help employees detect false positives
keep track of all third-party libraries and verifying its contents
4
CVSS and CVE are component of:
NIST
NGFW
SCAP
STIX, TAXII
5
To tolerate risk is:
to accept the amount of the risk
to be aware of it
to mitigate it
to stop it
6
CEO asks to not renew their password quarterly, but annually. What type of concept is this?
authority
exemption
exception
privileges
7
True negative is:
spam filter recognizes all emails as malicious
spam filters recognize a legit email as legit
spam filter blocks email that was spam or phishing
spam filter recognizes all emails as legit
8
Scans that require admin/user to sign-in to scan are:
credentialed
fully non-credentialed
non-credentialed
semi-credentialed
9
The difference between False positive and false negative is when
real threat reported as real; no threat reported as non-threat
threat real or non reported as real for both
there is no difference
no real threat reports it threat; real threat ignored and reported clear
10
Scanners that are installed on individual system/endpoint are:
agentless credentialed
agentless
agent-based
agent credentialed
11
Identification methods used to convey the information to organizations as in threat feed are:
WAF, NGFW
proxy, gateway
STIX, TAXII
IDS, IPS
12
Dark WEB should NEVER be utilized even when you work in the SOC
True
False
13
The concept of moving the risk entirely/partially to another party is called:
security insurance
IT insurance
cybersecurity insurance
life insurance
14
The public has the right to know about a vulnerability in a company before it is fixed
False
True
15
OWASP identifies
proxies
web app vulnerabilities
NGFW
IDS, IPS
16
True positive is:
spam filter recognizes all emails as legit
recognize a legit email as legit
spam filter recognizes all emails as malicious
spam filter blocks email that was spam or phishing
17
The concept of implementing additional security controls when patching is not available is called:
mitigating
validating
compensating
updating
18
In static analysis
application crashes
the application is fuzzing
application is running
the code is not executed
19
Penetration testing is essential to:
evaluate employee's trust
evaluating organizational security
catch phishing attempts
ensure vendors are safe
20
Scans that do NOT require admin/user to sign-in to scan are
semi-credentialed
fully non-credentialed
credentialed
non-credentialed
21
Agentless scanners are
fully non-credentialed
semi-credentialed
installed individually on each endpoint system
centralized and monitor many devices
22
What is the most common mitigation technique in cybersecurity?
patching
repairing
remediation
negotiation
23
CEO wants to know what the latest threat in the community is. How does he check that?
uses Nmap
uses centralized scanners
uses information-sharing organization
uses Nessus
24
Rewards are given to those who find vulnerabilities/exploits and notify the organization
unethical hacking program
known environment program
Responsible disclosure program, bug bounty program
bugs bunny program
25
In dynamic analysis:
code is running as analyzed
application is jogging
the application crashes
the code is not executed
