stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Mod 1-5 IOD Flashcards | StudBud
Explore
/
Mod 1-5 IOD
Mod 1-5 IOD
95 terms
·
StudBud Administration
·
25 plays
Imported from external platform
Flashcards
95 cards
F
Practice quiz
P
Host live
L
Questions
95
Answers
1
Which raid type is a "mirror".
Raid 0
Raid 1
Raid 5
Raid 6
2
Management of stakeholders is a Critical Skill for all Information Security SMEs.
False
True
3
SAFe is known as the "Really big Agile Framework.
True
False
4
Cross Site Scripting is when an attacker is able to insert their untrusted data in the client.
True
False
5
ARP stands for Address Resolution Protocol
True
False
6
A cyber threat is a potential compromise of the security of an Information System.
False
True
7
Knowledge Management Risk and Controls has how many main controls/processes.
4
6
7
3
8
SEO Poisoning is a form of a browser attack.
False
True
9
Password Spraying is attempting to access a large number of accounts using a few commonly used passwords.
False
True
10
What does a broadcast address look like on an IPv6 Network
127.0.0.1
1.1.1.1
EF:12:52:FF:65:21
FF:FF:FF:FF:FF:FF
11
Social Engineering consist of
Urgency, Trust
All of the above
Consensus, Scarcity
Authority, Intimidation
12
Pass the Hash attacks re-use valid authentication connections.
False
True
13
Worms require end-user initiation.
True
False
14
Risk Management is a core task performed by C.S. Professionals.
True
False
15
"Dumb" Switches reside on what layer of the OSI model
2
1
5
3
16
IAAA is part of Confidentiality
False
True
17
What is a data-breach?
Incident that allows attacker's onto your network.
Incident that grants access to unauthorized data.
Sending an email to a co-worker.
Incident that allows attackers into your building.
18
There are 5 classes of IPv4 Addresses
True
False
19
Radical Candor has how many "directions"
3
2
5
4
20
UDP uses a 3 way handshake to send data securely.
False
True
21
The transport layer specifies how data will be sent on the network.
False
True
22
Telnet is secure.
True
False
23
the "touch" command makes a file when using the Linux Terminal.
False
True
24
Spoofing is an impersonation attack.
False
True
25
Which of the following is NOT an Application Attack
Cross Site Scripting
Man in the Middle
Remote Code Execution
Buffer Overflow
26
SaaS stands for Session as a Service
True
False
27
IoT (Internet of Things) is a system of interconnected and interrelated computing systems connected over the internet.
False
True
28
The internet was originally designed with security in mind.
False
True
29
DoS attacks use multiple computers to take down a network.
True
False
30
There are how many steps to Risk Management?
1
4
3
2
31
A rootkit modifies the OS to create a backdoor.
False
True
32
Packet sniffing involves intercepting traffic between two parties to compromise confidentiality.
True
False
33
Which of the following is a hashing rule.
Changing the original does not change the hash value
Speed is the same no matter the data size
Its possible to regenerate the original message from the hash value.
Each message has the same hash.
34
Who, What, When, Where, and Why, are part of Open Questions.
False
True
35
Project Management has how many main Organizational Strategies?
3
6
4
5
36
The OSI model consist of _ layers
5
7
6
4
37
ISP's get their address space from ICANN
True
False
38
Closed questions generate a yes or no answer.
True
False
39
When installing new software to a device it is important to verify the checksum value of the installed software.
True
False
40
Hitting Ctrl+C when in a terminal on Windows or Linux stops the current command(s) from running.
False
True
41
"Open Questions" use the "TED" acronym to describe the process.
False
True
42
Which of the following is a common compliance standard.
CAPM
NIST
CISSP
IOD
43
Which of the following is a type of network consisting of to or more LANS
MAN
WAN
WLAN
GAN
44
The Pyramid of Pain shows the most common attack indicators.
True
False
45
IPv6 uses 32 bit addresses.
True
False
46
Project Management is a key factor in Information Security.
False
True
47
What is Layer one of the OSI Model
Application
Data Link
Physical
Network
48
A network is either a client-server or peer-to-peer network.
False
True
49
The "gpg" command in Linux is used to encrypt data and create digital signatures.
True
False
50
When delivering a speech you should try to present yourself in a confident manner.
True
False
51
Types of Malware consist of Worms, Viruses, Trojan Horses, Logic Bombs, and Ransomware.
True
False
52
The ping command sends ICMP packets.
False
True
53
The "Shred" command deletes a file when using a Linux Terminal.
False
True
54
CIA Triad Consists of -
Computers, Information, Access
Confusing, Inflicting, Acting
Communications, Internet, Avalibility
Confidentiality, Integrity, Avalibility
55
How many commonly reverenced types of hackers are there. (Think Hats)
5
4
2
3
56
The 80/20 Rule states that 80% of the effort gives 20% of the results.
True
False
57
A type one Hyper visor (Virtual Machine) sits directly on the physical hardware.
False
True
58
To be a threat, an actor needs Skill, Motivation, and Resources.
False
True
59
HTTP uses port 21
False
True
60
A Zero Day attack is a known exploit.
True
False
61
HTTPS uses what port?
443
123
80
22
62
A SSL session is established in how many phases?
1
5
6
3
63
MAC Addresses are on what layer of the OSI model
Network
Data Link
Transport
Physical
64
IaaS stand for Infrastructure as a Service
False
True
65
What is the most secure hashing algorithm as of 2023.
MD6
SHA256
SHA-0
MD
66
Cybersecurity includes all information assets in all formats.
True
False
67
A backdoor is code introduced by a criminal who has compromised a system.
True
False
68
The Pyramid of Pain has how many levels.
5
6
7
4
69
Which of the following is NOT considered part of "Hiding in plain sight"
Set up a back door
Cleaning up tracks
Gaining their own unique access.
Holding data Ransom thru Ransomware.
70
When an attacker is in the collection phase they are going to try to capture sored/live data.
False
True
71
NAT allows organizations to use one IP address for every device on its internal network.
False
True
72
Workload Management is only "Do It, Delegate It, and Schedule it"
True
False
73
Sniffing occurs when-
A hacker examines network traffic
A virus is on a computer
A DDoS attack is occuring.
A keylogger is active
74
Smaller businesses are safer than large businesses when it comes to Cyber attacks.
False
True
75
Attackers can only access data in transit.
True
False
76
One Deception Method is Tailgating.
True
False
77
Insider Threats tend to be more lethal than external attackers.
True
False
78
DDoS uses a single computer to attack a network.
True
False
79
IMAP uses port 143
False
True
80
The two elements of a good presentation are the Introduction and Conclusion.
False
True
81
AGILE is the current favored method of Organizational Srategy.
False
True
82
Email and Browser attacks consist of-
Spam and Adware
Spyware and Scareware
All of the above
Phishing and Vishing
83
The Basics of an Attack are Recon, Weaponize, Attack, Expand, and Persist.
False
True
84
Which of the following is a term for "Limited by skill and experience this is a hacker that relies on known exploits."
Script Kiddie
Lone Wolf
Nation State Hacker
Organized Cybercriminal
85
Malware is
Network downtime
Virus, worms, ransomware, etc
Mishandling of data
Corrupted data
86
IP addresses are on what layer of the OSI model
2
4
1
3
87
The more parts you use the larger your attack surface is.
False
True
88
SMEs in Cyber Security stands for which of the following?
Socialist Market Economy
Subway Microchip Economics
Subject Matter Expert
Small-Medium Enterprise
89
When conducting Knowledge Management, we document things so that other people dont duplicate your work in the future.
False
True
90
Businesses rely hevily on secure I.T. to grow their businesses at and exponential rate.
False
True
91
TCP/IP Consists of _ Layers
3
7
1
4
92
Nation State Hackers are highly skilled cybercriminals that are mostly motivated by financial gains.
False
True
93
Should we review the Quiz/Commonly missed questions.
Yes
Maybe so
No
This question does not affect the points so be honest.
94
The "rm" command does what when using a Linux Terminal
Decrypts the Object
Deletes the object
Zeroizes the document
Reveals the Objects Media
95
The Core of a network consists of applications and hosts.
False
True