stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Even more Cybersecurity stuff Flashcards | StudBud
Explore
/
Even more Cybersecurity stuff
Even more Cybersecurity stuff
20 terms
·
StudBud Administration
·
8 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
This detection is currently assigned. True or False
True
False
2
What process triggered the highlighted alert?
None of the above
explorer.exe
WINWORD.exe
userinit.exe
3
What type of detection is this?
Proxy firewall detection
Firewall detection
Phishing detection
And EDR detection
4
An email security gateway fails to flag a phishing email that successfully tricks an employee. What does this represent?
False Positive
True Negative
True Positive
False Negative
5
A security solution flags a file as malicious, but it is verified to be clean and safe. What type of alert is this?
False Positive
True Positive
True Negative
False Negative
6
This detection was closed out as a False Positive. True or False?
True
False
7
What is the reason this alert fired?
Suspicious DNS request
Suspicious application on the endpoint
Phishing email
None of the above
8
What is the IOC in this detection?
moemaldives.pmd-office.com
WORD.EXE
User
explorer.exe
9
An IPS detects and blocks an unauthorized remote login attempt that was a real attack. What is this a
TP
TN
FP
FN
10
A user downloads a Trojan-infected file, and the antivirus software fails to detect it. What kind of outcome is this?
False Negative
None of the above
True Positive
True Positive
11
What is the severity of the highlighted detection?
High
Medium
Low
Critical
12
What is the child process of msedge.exe?
explorer.exe
winlogon.exe
userinit.exe
identity_helper.exe
13
A firewall blocks legitimate traffic from a business partner's IP, thinking it's malicious. What kind of result is this?
True Negative
False Positive
True Positive
False Negative
14
A EDR identifies suspicious behavior, but it's just an admin running a scheduled script. What type of detection is this?
None of the above
FP
TN
TP
15
A vulnerability scanner reports no issues on a system, further assessment confirms no vulnerabilities. What is this?
True Negative
False Positive
True Positive
False Negative
16
What is the user account that triggered this alert?
Unknown
None of the above
lab5
20.77.4.162
17
What action did the EDR (MS Defender) take?
Blocked the malicious file
Ignored the file
Failed to block the malicious file
None of the above
18
You received an endpoint alert for a suspicious file on a host. What is the fastest way to investigate its reputation?
Executing the file
Investigate the file hash on OSINT
Scanning the device
Googling the file name
19
What is the main difference between IOCs and IOAs?
IOCs are better than IOAs
None of the above
IOCs are more signature-based while IOAs are behavioral
IOCs can detect zero-day vulnerabilities while IOAs cannot
20
An EDR tool correctly detects and blocks a ransomware attack before it executes. What is this?
True Positive
True Negative
False Positive
False Negative
