stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CySa+ CS0-003 Vul Mgmt 2 Flashcards | StudBud
Explore
/
CySa+ CS0-003 Vul Mgmt 2
CySa+ CS0-003 Vul Mgmt 2
40 terms
·
StudBud Administration
·
13 plays
CySa+ CS0-003 Domain: Vulnerability Management part 2
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
What is the primary purpose of the Payment Card Industry Data Security Standard (PCI DSS)?
To ensure the secure handling of cardholder information
To manage credit purchasing agreements
To regulate payroll access for employees
To provide guidelines for physical security of online stores
2
Why is it important to prioritize vulnerabilities in preventative vulnerability management?
To increase system vulnerabilities
To disable all network protocols
To delete all security logs
To focus resources on mitigating the most critical vulnerability first
3
What is a primary benefit of integrating external context awareness into cybersecurity strategies?
Faster incident response times
Reduced need for antivirus software
Increased vulnerability to social engineering attacks
Higher server availability
4
If an attacker successfully exploits an injection flaw, what could they potentially achieve?
Impacted system performance and bandwidth
Increased network bandwidth
Unauthorized access to sensitive data
System shutdown
5
During the reconnaissance stage of a penetration test, which option wouldn't alert the target IPS?
nmap stealth scan
DNS zone transfer
DNS brute-force attack
nmap ping sweep
6
A port scan of a remote system shows that port TCP3306 is open on a remote server. What service most likely running?
Microsoft SQL
MySQL
Postgres
Oracle
7
How can security professionals ensure effective integration of IT and Supervisory Control and Data Acquisition security?
By applying the same security policies to both environments
By limiting communication between IT and SCADA teams
By understanding the unique requirements and constraints of SCADA systems
By ignoring the differences between IT and SCADA environments
8
A security system fails to alert on a known malicious activity due to misconfiguration. What is the alert classified as?
True Positive
False Positive
False Negative
True Negative
9
What is a primary function of
ICS
in critical infrastructure?
Performing data analysis for business functions
Controlling and monitoring industrial processes
Hosting C&C websites
Managing office productivity
10
What is data masking?
To hide sensitive data by replacing it with non-sensitive information
A way to improve data processing speed
A technique to encrypt data in transit
A process of storing data in plain text
11
Potential
subscription free
sources for threat intelligence information you might incorporate into her security program.
Vulnerability feeds
Open source
Closed source
Proprietary
12
What does the Attack Complexity (AC) metric measure in the CVSS scoring system?
The potential impact of a vulnerability on confidentiality
The complexity of the attack required to exploit the vulnerability
The level of access needed to exploit a vulnerability
The exploitability of a vulnerability over a network
13
In CVSS, what does a Privileges Required (PR) score of "N" mean?
Exploitation does not require any privileges
Exploitation requires physical access
Exploitation requires user-level privileges
Exploitation requires administrative privileges
14
What is a recommended approach to continuously improve external context awareness capabilities?
By subscribing to threat intelligence emails
By limiting employee access
By regularly updating threat intelligence feeds
By enabling network monitoring
15
What is Server-Side Request Forgery (SSRF) in the context of cybersecurity?
A protocol used for secure remote access
An attack where an attacker tricks a server into making malicious requests
A technique for exploiting client-side vulnerabilities
A method of encrypting sensitive data in transit
16
What is the primary purpose of the CIS benchmarks?
To offer best practices for secure system configuration
To provide software development guidelines
To establish a framework for international trade
To create marketing strategies for cybersecurity products
17
What role does SSRF
(Server-Side Request Forgery)
play in the context of cloud security?
Exploiting cloud service provider networks
Accessing metadata and internal services in cloud environments
Preventing all cloud-related vulnerabilities
Deleting all cloud-based data
18
What is "passive discovery" in the context of cybersecurity?
Discovering vulnerabilities in network edges
Analyzing software patch levels
Identifying unauthorized access attempts
Monitoring external network boundaries
19
Why are true positives critical in cybersecurity incident response?
They reduce incident detection time
They indicate a successful attack
They increase workload for security analysts
They cause system downtime
20
What strategy can organizations implement to enhance attack surface
reduction
?
Reducing network segmentation
Using outdated antivirus definitions
Ignoring vulnerability reports
Regularly updating software patches
21
What is the primary purpose of security baseline scanning in cybersecurity?
To monitor network traffic in real-time
To deploy new software updates
To backup critical data
To ensure systems comply with security policies and configuration
22
How can vulnerability management contribute to incident response?
By increasing software complexity
By providing early detection & mitigation of potential incidents
By ignoring security best practices
By deleting all user accounts
23
Why is threat modeling important in the SDLC?
To comply with legal regulations
To optimize software performance
To increase software complexity
To identify and address security vulnerabilities early
24
A port scan shows the following ports open on a
workstation
, what's next?
Reenable the workstation's local host firewall.
Determine the reason for the ports being open.
Investigate the potentially compromised workstation.
Run a vulnerability scan to identify vulnerable services.
25
What is a recommended practice by Open Web Application Security Project (OWASP) to prevent sensitive data exposure?
Using strong encryption for data at rest and in transit
Storing passwords in plain text
Implementing simple password policies
Disabling security features
26
What is a primary function of SCADA systems in critical infrastructure?
Monitoring and controlling industrial processes remotely
Hosting industrial websites
Performing network segmentation
Managing industrial email systems
27
How does passive discovery benefit cybersecurity operations?
It provides visibility into network activity without actively probing
It reduces employee productivity
It improves incident response time
It increases network latency
28
Which one of the following very sophisicated, threat actors is most likely to be associated with an APT?
Hacktivist
Insider
Nation-state
Organized Crime
29
You decide not to invest in additional security for a legacy system due to budget constraints. What is this?
Risk transference
Risk mitigation
Risk avoidance
Risk acceptance
30
How does Role-Based Access Control (RBAC) help in data protection?
By restricting access to data based on user roles
By monitoring network traffic base on user roles
By encrypting only specific user's role data
By allowing everyone access to all data
31
What is an essential measure for protecting Supervisory Control and Data Acquisition (SCADA) systems from cyber threats?
Implementing strict access controls and monitoring
Using default administrator credentials
Disabling all updates to avoid downtime
Allowing unrestricted external network access
32
What is CSRF
?
A method to encrypt data in transit
A type of authentication bypass
Unauthorized commands are executed from a trusted user's session
A technique to bypass firewalls
33
What is a primary impact of effective attack surface management?
Reduced attack vectors
Increased vulnerability to social engineering attacks
Slower network performance
Higher compliance costs
34
What challenges might organizations face when implementing maintenance windows for vulnerability management?
Increasing network latency
Time constraints & balancing operational needs with security requirements
Ignoring security best practices
Lack of security controls
35
What is the purpose of a patch management policy?
To encrypt all network traffic
To delay software updates
To prioritize and manage software updates
To monitor all user activities
36
What is "edge discovery" in the context of cybersecurity?
Analyzing software patch levels
Identifying unauthorized access attempts
Discovering vulnerabilities in network edges
Understanding external network boundaries
37
What is privilege escalation in the context of cybersecurity?
The process of gaining additional privileges beyond initial authorization
The process of deleting unused security accounts
The process of disabling all security controls
The process of reducing user privileges
38
What challenges might organizations face in detecting Cross-site Request Forgery (CSRF) attacks?
Increasing network latency
Insufficient network bandwidth
Disabling all security controls
CSRF attacks often blend in with legitimate user actions
39
What mark-up language provides a standard mechanism for describing attack patterns, malware, threat actors, and tools?
TAXXI
XML
STIX
OpenIOC
40
Evaluating threat intelligence source results in a lot of false positives. What criteria is not being met by this souce?
Expense
Relevance
Timeliness
Accuracy
