stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Saldus Test V1 Flashcards | StudBud
Explore
/
Saldus Test V1
Saldus Test V1
45 terms
·
StudBud Administration
·
31 plays
Testv1
Flashcards
45 cards
F
Practice quiz
P
Host live
L
Questions
45
Answers
1
What does a Purple Team exercise aim for?
Collaboration for security
Simulating external attacks
Testing security solutions
Identifying insider threats
2
What defines 'data exfiltration'?
Destroying data
Cloud backups
Unauthorized data transfer
Encrypting data
3
What does Heartbleed exploit?
DNSSEC flaws
Weak hashing
Buffer overflows
SSL/TLS extension
4
What is the role of SOAR technology?
Perform vulnerability scans
Automate security workflows
Encrypt communications
Generate compliance reports
5
What is a rainbow table used for?
Creating digital certificates
Cracking hashed passwords
Generating symmetric keys
Encrypting files
6
What does 'sandbox evasion' imply in malware?
Bypassing sandboxes
Exploiting sandboxes
Avoiding antivirus
Encrypting payloads
7
What is an example of a man-in-the-middle attack?
Executing SQL injection
Encrypting files for ransom
Sending phishing emails
Eavesdropping
8
Primary function of a jump server?
Redirect attack traffic
Access restricted systems
Analyze encrypted traffic
Disguised honeypot
9
What does a zero-day vulnerability mean?
Encryption flaw
Unknown vulnerability
Patched vulnerability
Legacy system flaw
10
How does Kerberoasting work?
Modifying logs
Spoofing tickets
Overloading servers
Cracking service tickets
11
What is the primary purpose of a firewall?
Filter network traffic
Update antivirus software
Encrypt data
Scan for vulnerabilities
12
Which tool is used for packet analysis?
Nmap
Wireshark
Nessus
Metasploit
13
What is ransomware?
A type of phishing attack
Software for tracking hackers
Malware that encrypts data
Malware that steals passwords
14
What is the primary function of C2 infrastructure?
Spread malicious payloads
Control compromised devices
Encrypt communications
Log network traffic
15
What is the key difference between a virus and a worm?
Worms target networks
Worms spread independently
Viruses are always file-based
Worms require user interaction
16
What is the primary goal of a supply chain attack?
Compromise third-party vendors
Encrypt devices
Target end users
Exploit firewalls
17
What is the difference between IDS and IPS?
IDS is cloud-based
IDS monitors; IPS blocks
IDS is faster
IDS encrypts; IPS decrypts
18
Purpose of a kill chain in cybersecurity?
Track cyberattack stages
Simulate red team
Monitor system vulnerabilities
Disable attacker's base
19
Which vulnerability is exploited by Log4Shell?
Insecure deserialization
SQL injection
Remote code execution
Cross-site scripting
20
What is ARP poisoning?
Spoofing MAC addresses
Attacking wireless networks
Exploiting TCP/IP vulnerabilities
Corrupting DNS entries
21
Defense against Pass-the-Hash attack?
Multi-factor authentication
Encrypt hashed passwords
Network segmentation
Disable NTLM, use Kerberos
22
What does DNS stand for?
Distributed Network Services
Dynamic Node Synchronization
Domain Name System
Data Network Security
23
What is the key difference between hashing and encryption?
Hashing is faster
Encryption is reversible
Hashing uses symmetric keys
Encryption secures passwords
24
What is a digital signature used for?
Encrypting messages
Verifying authenticity
Creating symmetric keys
Compressing files
25
What is the purpose of EDR?
Prevent DDoS attacks
Manage network traffic
Encrypt communications
Monitor endpoint threats
26
Which principle ensures data cannot be modified?
Confidentiality
Authentication
Availability
Integrity
27
Who is targeted by 'typosquatting'?
Mistyping users
DNS configuration errors
Vulnerable subnets
Unpatched software
28
What is the main purpose of CTI?
Patch vulnerabilities
Monitor network activity
Deploy defense systems
Anticipate adversaries
29
What is a 'Golden Ticket' attack?
SSL/TLS vulnerabilities
Forged Kerberos ticket
Bypass endpoint protection
Fake API tokens
30
What is the primary use of a sandbox?
Isolate suspicious files
Stop malware propagation
Encrypt malicious code
Prevent ransomware
31
What is the purpose of the MITRE ATT&CK Framework?
Documenting tactics
Simulating attacks
Preventing vulnerabilities
Encrypting communications
32
Primary purpose of air-gapped systems?
Encrypt communications
Prevent physical access
Stricter authentication
Isolate critical systems
33
What is two-factor authentication?
Combining two methods
Using two passwords
Encrypting with two algorithms
Logging in from two devices
34
What is an IOC?
Network scanner
Real-time alert
Evidence of malicious activity
System update
35
What is a Canary Token used for?
Detect unauthorized access
Multi-factor authentication
Disguised malware
Automate testing
36
What does DNSSEC protect against?
Man-in-the-middle attacks
DDoS attacks
DNS tunneling
Unauthorized DNS access
37
What characterizes a fileless attack?
Executing from memory
Drive-by downloads
Phishing on social media
Malicious PDFs
38
What is the purpose of fuzz testing?
Block malware
Encrypt data
Identify vulnerabilities
Simulate phishing
39
What is a zero-day vulnerability?
Unknown to the vendor
A patched vulnerability
A legacy system flaw
A flaw in encryption
40
What does 'packet sniffing' mean?
Encrypt data packets
Test network latency
Send malicious packets
Intercept network traffic
41
Which attack exploits SQL databases?
Denial of service
Cross-site scripting
SQL injection
Buffer overflow
42
What is a reverse shell used for?
Disable antivirus
Encrypt files
Execute commands remotely
Intercept traffic
43
What is the goal of post-incident analysis?
Monitor ongoing threats
Encrypt affected data
Restore systems
Evaluate and prevent incidents
44
What is the purpose of hashing?
Encrypt data
Transmit data securely
Compress files
Verify data integrity
45
What is the primary function of a honeypot?
Scan for vulnerabilities
Prevent brute force
Lure attackers
Encrypt sensitive data
