stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ Week 1 (Lesson 1 - 4) Flashcards | StudBud
Explore
/
Sec+ Week 1 (Lesson 1 - 4)
Sec+ Week 1 (Lesson 1 - 4)
21 terms
·
StudBud Administration
·
89 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
What is the protocol used to transmit CTI data between servers and clients?
TAXII
CVE
AIS
STIX
2
What CTI platform model provides sector/industry-specific updates?
Closed/Proprietary
Vendor Websites
Open Source Intelligence (OSINT)
ISACS
3
Any part of the Web deliberately concealed and is an overlay to internet infrastructure is a *******.
Dark Net
Dark Web
Cyber Threat Actor
Deep Web
4
What category of network vulnerabilities would transferring cleartext data fall into?
Unsecure protocols
Open ports/services
Errors
Weak Encryption
5
Identify the command that can be used to detect the presence of a host on a specific IP address.
ip
ping
ipconfig
ifconfig
6
What does the function of 'Protect' accomplish, according to the NIST framework?
Develop, handle, and decommission IT assets with security at the forefront
Identify, analyze, contain, and eradicate threats
Implement cybersecurity resilience to restore systems and data
Evaluate risks and threats, develop secure policies
7
What category of security control would training programs BEST fall into?
Compensating
Technical
Managerial
Operational
8
Implementing, maintaining, and monitoring policy for an orgs security belongs mainly to which individuals?
The owner
Management
Public Relations
Technical staff
9
Which one of these is NOT a use of netcat?
Port scanning
Testing network connectivity
Establishing connections with remote machines
Route discovery
10
What distinguishes DevSecOps from traditional organizational culture?
Software code is the responsibility of a development team
Culture shift to encourage more collaboration
Identifying a single point-of-contact for security incidents
Security is a primary consideration at every stage of software development
11
Unformatted error messages are an example of a weak network configuration.
False
True
12
What's the goal of a keylogger?
Recording confidential information
Circumventing authentication to get control
Using SYSTEM privileges for persistence and stealth
Monitoring and tracking activity
13
What is Wireshark?
A command-line protocol analyzer
A GUI-based protocol analyzer
A vulnerability scanner
A GUI-based port scanner
14
Which tool
CANNOT
be used to determine if a targeted IP address is present?
ping
ip
Wireshark
nmap
15
An attacker entering a secure area with an employee's permission is an example of:
Lunchtime attack
Shoulder surfing
Piggy backing
Tailgating
16
Redirecting users from a legitimate website to a malicious website
Watering hole attack
Pharming
Phishing
Typosquatting
17
What's the MAIN security responsibility of an owner/director?
Overall internal responsibility
A specific domain
Implementing, maintaining, and monitoring policies
Overall external responsibility
18
Which of the following BEST indicates that valid credentials were used during a vulnerability scan?
The scan produced a list of vulnerabilities on the target host
The scan identified expired SSL certificates
The scan enumerated software versions of installed programs
Scan results show open ports, protocols, and services exposed on the target
19
Read the question in the image
Persistence
Pivoting
Weaponization
Reconnaissance
20
A ___________ event is where confidential data is read or transferred without authorization.
Data Exfiltration
Data Loss
Data Breach
Data Management
21
What type of virus would be exploiting local scripting?
File infector
Boot sector
Script/Macro
Memory resident
