Having unnecessary ports and services open introduces this risk.

It increases the attack surface of a system.

Security Information and Event Management

is used to impersonate another system.

Influence campaigns are designed to ...

sway opinions, sow division, or hurt reputations

Unknown (Black box) testing means ...

you have no privileges and know very little about the site

A birthday attack ...

attempts to find a hash collision

Dumpster diving is ...

sifting through discarded material for information

studbud

SY0-601 Domain 1 ALL

87 termsStudBud Administration118 plays

Imported from external platform

Flashcards87 cardsFPractice quizPHost liveL

Questions 87

Answers

1
Which malware is self-replicating?
Worms
Trojan
Logic Bomb
Backdoor
2
Vendor websites, academic journals, and vulnerability feeds are a part of ______.
Research sources
Indicators of compromise
Vulnerability databases
Threat Intelligence sources
3
Which is NOT a target of a DDoS: Operational Technology attack?
SCADA
Flaws in the code
Video surveillance
Previously air-gapped systems
4
Having unnecessary ports and services open introduces this risk.
It increases the performance and functionality of a system.
It increases the attack surface of a system.
This is not a security issue.
It increases the availability and accessibility of a system.
5
Which is NOT a physical attack?
Rainbow table
Skimming
Malicious USB cable
Card cloning
6
Getting paid by organization to find and disclose issues in a service, product, system or a device is know as a(n) ...
bug bounty
ransomware bounty
event bounty
vulnerability bounty
7
Network vulnerability scans do NOT look for ...
buffer overflows
unsecure devices
open ports on devices
misconfigured network devices
8
What occurs when the numeric value entered is too large for the allocated space?
A race condition
Buffer overflow
Resource exhaustion
Integer overflow
9
Which Layer 2 attack can set up an On-Path attack?
MAC cloning
MAC flooding
ARP cloning
ARP poisoning
10
Which type of attack includes injection attacks, buffer overflows, replay attacks, and request forgeries?
IPA attack
AIP attack
IAP attack
API attack
11
Which is NOT considered an Advanced Persistent Threat?
Hacktivist organizations
Shadow IT
Nation States
Criminal syndicates
12
This attack encrypts the contents of your drive and provides you with a link to pay for the key.
Remote Access Trojan (RAT)
Ransomware
Crypto-malware
Crypto-ransomware
13
Gaining access to directories above the webpage is known as a(n) ...
Pointer dereference
Directory traversal
API attack
Replay attack
14
Which Layer 2 attack causes a switch to act like a hub?
ARP flooding
MAC cloning
MAC flooding
ARP poisoning
15
SIEM stands for
System Information and Event Management
Security Information and Evidence Management
Security Information and Event Management
Security Intrusion and Evidence Management
16
Which is NOT a Layer 2 attack?
DNS poisoning
MAC cloning
MAC flooding
ARP poisoning
17
Which social engineering attack uses a great reward or a dire consequence to fool the recipient?
Hoax
SPAM
Whaling
Pharming
18
Which is a weak or deprecated algorithm? (two answers)
ECC
DES
AES
MD5
19
A false negative is when an _______ user is _______ access to a network.
authorized, granted
unauthorized, granted
unauthorized, denied
authorized, denied
20
Malicious code or scripts that can attack routers, servers, and switches is often written in which code?
Powershell
Macros
VBA
Python
21
Which is not a part of Threat Hunting?
Threat Feeds
Maneuver
SIEM
Intelligence Fusion
22
Which is true about a fileless virus?
Requires a host file
Piggybacks on legitimate scripts
Uses command and control
Memory-based
23
This uses trojans, phishing, social media, spam, and other attacks.
Impersonation
Reconnaissance
Credential harvesting
Whaling
24
Driver manipulations are accomplished through ... (Two answers)
Shimming
Refactoring
Skimming
Subfactoring
25
MAC cloning ...
sends unsolicited ARP replies.
overwhelms the CAM table.
monitors the network for odd MAC addresses.
is used to impersonate another system.
26
A network with 1000 computers should allow access to software security patches ...
once a week during off peak free hours from the ISP
any time of the day
from a SUS
via the Internet
27
Which is NOT a secure protocol?
HTTPS
FTPS
SMTP
SCP
28
Sliding in behind a person into a secure facility without authenticating is ... (Two answers)
Door Diving
Tailgating
Ghosting
Piggybacking
29
Which is NOT a use for RFID?
Tracking
Inventory control
Authorization
Proximity cards
30
The commercial version of this product monitors your family or your worker's activities.
SPAM
Keylogger
Adware
Ransomware
31
Criminal activities on the internet do NOT include ...
Theft
Google hacking
Extortion
Forgery
32
Influence campaigns are designed to ...
identify and correct inaccurate information
stop doxing
sway opinions, sow division, or hurt reputations
build-up pubic confidence and trust in civil society
33
Which attack adds a RE: or a FW: to an email header?
Phishing
Pharming
Prepending
Pretexting
34
Unknown (Black box) testing means ...
you have no privileges and know very little about the site
you have user privileges and know some things about the site
you are a windows internal tester
you have elevated privileges and know a lot about the site
35
Which color identifies the team that typically attacks in a security assessment exercise?
Red
White
Blue
Purple
36
Which attack purposely disconnects a device from a Wi-Fi network?
Disassociation
MAC cloning
Jamming
Bluesmacking
37
A server that has a program running on it with remote access, but it bypassed authorization is a ...
DDoS
Backdoor
Spyware
DoS
38
What type of pen test has the details of the source code and development process?
Partially Known (Gray box)
Vulnerability
Unknown (Black box)
Known (White box)
39
Which is NOT an example of DNS poisoning?
A rogue DNS server
Altering the HOSTS file
Reconfigure DNS resolution of IP settings
A signed DNS zone transfer
40
When data has been moved from its proper location to unauthorized locations, this is known as ...
data storage
reputation loss
data exfiltration
zero-day attack
41
A birthday attack ...
attacks users on their birthday
uses a list of predetermined hashes to compare to users
attempts to find a hash collision
tries every combination of characters until it works
42
Which reconnaissance tool detects wireless networks? (Two answers)
War Flying
Footprinting
War Driving
War Dialing
43
Dumpster diving is ...
watching over someones shoulder as they enter sensitive info
pretending to be an inspector that needs access or else
sifting through discarded material for information
tricking users to spread false information
44
Which password attack attempts every possibility until it succeeds?
Spaying
Brute force
Dictionary
Rainbow table
45
What scan can log into a special account to gain more information with greater accuracy and detail?
Non-credentialed
Credentialed
Intrusive
Non-intrusive
46
Which threat actor sees security as a hindrance?
Script kiddie
Hactivist
Criminal syndicates
Shadow IT
47
What occurs when the data exceeds the storage-space allocation?
Refactoring
Object dereference
Shimming
Buffer overflow
48
Which is NOT used in an injection attack?
SQL
TLS
XML
DLL
49
Looking for and identifying new threats is called ...
Threat Hunting
Security Orchestration, Automation, and Response
Pen Testing
a Vulnerability Scan
50
In which attack is JavaScript code used to gain access to another authenticated window?
XSS
XSRF
CMD injection attack
SQL attack
51
The statement ' or '1' = '1 is an example of a(n) ...
SQL injection
XML injection
LDAP injection
DLL injection
52
This tool collects and analyses logs and real-time data, and trigger an automated response without human involvement?
SOAR
SIEM
CVE
CVSS
53
Which threat actor exposes, changes, or defaces information without fear of being caught?
APT
Insider
Hacktivist
Script kiddie
54
A pivot is when an attacker ...
targets the file server
attacks a weak link to use as a jump off point
attacks over and over until successful
targets the SCADA system
55
Security personnel may stop responding to alerts and alarms if there are too many ...
False negatives
True positives
False positives
True negatives
56
Which is NOT a vector that threat actors use for attacks?
Supply chain
Dark web
Social media
Wireless
57
A Common Vulnerabilities and Exposures (CVE) _____. (Two answers)
is a centralized system to monitor network security information and events
is a repository of information about threats, exploits, and attacks
standardizes the definitions and communications for security-related events
assigns identifiers to publicly known vulnerabilities
58
Which are cloud-based vulnerability? (Two answers)
Use of strong authentication technologies
Authorized access to the database
Increased chance of data loss or exposure
Virtualization attacks
59
TAXII and STIX are associated with which threat intelligence source?
Predictive Analysis
Open Source Intelligence
Automated Indicator Sharing
Dark Web
60
This attack looks like a useful program, but carries a sinister payload.
Logic Bomb
Worms
Backdoor
Trojan
61
What type of threat actor has low skills, limited funding, and is acting out of revenge or perceived slight?
Insider
Hacktivist
Criminal syndicates
Script kiddie
62
Smishing is ...
phishing over SMS.
phishing for the small fish
phishing over the phone
SPAM over instant messaging
63
A Zero-day ...
grants access to a external source over a VPN
is an opening/weakness unknown to the manufacturer/developer
allows users to modify, delete, or transverse a file location
protects against unauthorized or malicious manipulation
64
Which malware avoids detection and hides its processes?
Rootkit
Armored virus
Adware
Stealth virus
65
A targeted attack against a region, a group, or an organization with a common resource is a ...
Watering Hole attack
Pretexting attack
Pharming attack
Prepending attack
66
Which is NOT a type of request forgery?
Blind-side
Server-side
Client-side
Cross-site
67
This risk management tool protects a company's software if its third-party software developer goes out of business.
Software Escrow Agreement
Data Loss Prevention
Code Escrow Management
Software Escrow Management
68
WEP is easily cracked due to ...
it utilizes only 16,777,216 total IVs while having favorites
the RC4 key is dynamic
the IVs are unique and unpredictable
the RC4 streaming cipher is weak
69
Which URL is NOT a typo squatting attack?
www.whitehouse.gov
www.amazone.com
www.mycrowsoft.com
www.gooogle.com
70
What type of threat actor has low skills, low resources and is often caught quickly?
APT
Hacktivist
Script Kiddie
Insider
71
An unauthorized wireless access point that spoofs the hotel's SSID and password is a(n) ...
rogue access point
extended SSID
hotspot hoax
evil twin
72
A system that is no longer supported by the original vendor is a ...
Refurbished platform
Compliant platform
Hardened platform
Legacy platform
73
A vulnerability scan is usually considered to be _____.
Active
Intrusive
Non-intrusive
Aggressive
74
This is a specific concern for multi-threaded applications.
Memory Overflow
Race Conditions
Unit Testing
Input Validation
75
A worker accessed an application with a co-worker's account. What does this illustrate?
Horizonal privilege escalation
Lateral privilege escalation
Vertical privilege escalation
Upward privilege escalation
76
What term describes the gathering of information from a variety of sources?
Proprietary Sources
Dark Web
Vulnerability Databases
Open Source Intelligence
77
Which attack captures the user's authentication process, and later resends it to the server to impersonate the user?
Replay attack
API attack
Refactoring attack
Resend attack
78
This attack performs activities at a specific time or when a particular event happens.
Trojan
Worms
Logic Bomb
Backdoor
79
Known (White box) testing means ...
you have user privileges and know some things about the site
you have no privileges and know very little about the site
you are a windows internal tester
you have elevated privileges and know a lot about the site
80
What vulnerability is associated with using a system right out of the box?
Improper patch management
Legacy platform
Unsecure default settings
Lack of vendor support
81
Which of the following is NOT considered as an indicator of compromise?
A large number of requests for a specific file
A file edited by an authorized user
A large increased number of logins
Unusual outbound network traffic
82
Spear fishing is ... (Two answers)
an malicious email sent to an entire organization with a great deal
a malicious email sent to a specific (small fish) user
an malicious email sent to a small group with a great offer
an malicious email sent to a CISO with a great investment in penny stocks
83
What attack overwhelms a device's Bluetooth connection with a DoS attack?
Bluejacking
Bluesnarfing
Bluebugging
Bluesmacking
84
Which is NOT a social engineering principle?
Urgency
Misinformation
Intimidation
Authority
85
Which social engineering attack is accomplished through DNS poisoning?
Pharming
Spear phishing
Vishing
Smishing
86
This password attack uses same password on multiple accounts.
Spraying
Brute force
Dictionary
Birthday
87
A memory leak is when ...
the application fails to deallocate memory
the data excedes the storage-space allocation
the pointer to a memory location is set to null value target
the data in memory is exfiltrated to an outside website

SY0-601 Domain 1 ALL Flashcards | StudBud