Increase individual accountability

Mobile Device Security

Perform a remote wipe of the device

Incident Response and Forensics

Containment, eradication, and recovery

Install a mantrap at the entrance

Supply Chain Management

Conduct secure supply chain management training

studbud

Sec+

90 termsStudBud Administration27 plays

Imported from external platform

Flashcards90 cardsFPractice quizPHost liveL

Questions 90

Answers

1
Access Control
More efficient baseline management
More routing auditing
Increase password security
Increase individual accountability
2
Policies and Procedures
GDPR
PHI
PII
PCI-DSS
3
Virtualization
Bypass testing and deploy patches directly into the production environment
Sandboxing
Purchase additional workstations
Virtualization
4
Securing Networks
Enable WPA
Disable SSID broadcast
Disable WPS
Disable WPA2
5
Social Engineering
APT
Organized crime
Hacktivist
Insider threat
6
Perimeter Security
Sandbox
Honeypot
Containerization
Jumpbox
7
Social Engineering
Shoulder surfing
Phishing
Tailgating
Man-in-the-middle
8
Application Security
Logon time
Date and time
UEFI boot mode
User access control
9
Virtualization
VM data remnant
VM escape
VM migration
VM sprawl
10
Secure Software Development
DDoS
Buffer overflow
Cross-site scripting forgery
XSS
11
Monitoring and Auditing
MDM
SIEM
SOAR
DLP
12
Malware
Trojan
Keylogger
Ransomware
Rootkit
13
Network Attacks
SSH
RDP
Web
Database
14
Physical Security
Mantraps
Security guards
Intrusion alarm
Bollards
15
Securing Networks
WPA2
WEP
AES
WPA
16
Perimeter Security
Proxy Server
Authentication Server
IDS
IPS
17
Vulnerability Management
netstat
ping
Wireshark
nmap
18
Mobile Device Security
Perform a remote wipe of the device
Remotely encrypt the device
Reset the device’s password
Identify the IP address of the smartphone
19
Securing Networks
WPA2 and RC4
WPA and MAC filtering
WPA2 and AES
WEP and TKIP
20
Planning for the Worst
Line conditioner
Surge protector
Uninterruptible power supply
Power distribution unit
21
Hardening
Discovered software bugs
Zero-day attacks
Known vulnerabilities
Malware with defined indicators of compromise
22
Incident Response and Forensics
Post-incident activity
Preparation
Detection and analysis
Containment, eradication, and recovery
23
Cryptography
Twofish
ECC
RC4
DES
24
Secure Software Development
XSS
Manipulation
SQL injection
XML injection
25
Mobile Device Strategy
MDM
BYOD
COPE
CYOD
26
Social Engineering
Spear Phishing
Phishing
Brute force
Whaling
27
Facilities Security
SCADA
BAS
SoC
CAN
28
Hashing
MD-5
SHA-2
SHA-1
NTLM
29
Secure Software Development
Session hijacking
SQL injection
Buffer overflow
XML injection
30
Cloud Security
Empty choice
Empty choice
Empty choice
Empty choice
31
Network Attacks
DNS poisoning
ARP spoofing
DNS brute forcing
MAC spoofing
32
Physical Security
Install a mantrap at the entrance
Install a CCTV to monitor the entrance
Install a RFID badge reader at the entrance
Require all employees to wear security badges when entering the building
33
Hardening
Anti-malware
HIPS
GPO
Patch management
34
Cloud Security
Private
Community
Multi-cloud
Public
35
Cryptography
Randomized one-time use pad
DES with 56-bit key
ECC with a 256-bit key
AES with 256-bit key
36
Planning for the Worst
Empty choice
Empty choice
Empty choice
Empty choice
37
Security Protocols
IPSec
PPTP
SSLv2
SSLv3
38
Monitoring and Auditing
SNMP
NetFlow
MIB
SMTP
39
Authentication
CHAP
TACACS+
Kerberos
RADIUS
40
Security Applications and Devices
Install a host-based IDS
Utilize secure boot
Utilize file integrity monitoring
Install an anti-malware application
41
Security Protocols
80
143
21
443
42
Physical Security
CCTV
Mobile Device Manager
Motion Sensor
Cable Locks
43
Network Design
Require 2FA (2-factor-authentication) on the laptops
Implement a jumpbox system
Scan the laptops for vulnerabilities and patch them
Increase the encryption level of VPN used by the laptops
44
Malware Infection
Adware
Trojan
Worm
Logic Bombs
45
Hashing
Rainbow table
Salting
Key stretching
Collision resistance
46
Malware Infection
XSS
Spear phishing
Remote code execution
Privilege escalation
47
Supply Chain Management
Increase network vulnerability scan frequency
Ensure all anti-virus signatures are up to date
Conduct secure supply chain management training
Verify that all routers are patched to the latest release
48
Security Protocols
Empty choice
Empty choice
Empty choice
Empty choice
49
Authentication
MySQL
IMAP
RDP
LDAP
50
Application Security
Application hardening
Disable removable media
Application whitelist
Application blacklist
51
Automation
SaaS
IaC
IaaS
SDN
52
Security Applications and Security
DLP
MDM
Firewall
Strong passwords
53
Facilities Security
Smart televisions
ICS
Laptop
SCADA
54
Risk Assessments
$90,000
$360,000
$36,000
$9,000
55
Risk Assessments
Supply chain assessment
Privacy assessment
Quantities risk assessment
Qualitative risk assessment
56
Public Key Infrastructure
Transitive trust
Public key trust
Certificate authority trust
Domain level trust
57
Policies and Procedures
PII
PHI
PCI
GDPR
58
Network Design
Subnet
NIDS
GPO
DMZ
59
Automation
Continuous intergration
Continuous monitoring
Continuous delivery
Continuous deployment
60
Authentication
802.3af
802.11ac
802.1x
802.1q
61
Cloud Security
FaaS
PaaS
SaaS
IaaS
62
Public Key Infrastructure
Key escrow
CSR
CRL
OCSP
63
Network Design
Create an ACL to allow access
MAC filtering
Configure a SIEM
Implement NAC
64
Security Applications and Device
IPS
Authentication server
Proxy server
IDS
65
Perimeter Security
MDM
SSL
UTM
DLP
66
Facilities Security
Enable WPA2 security on the open wireless network
Enable NAC on the open wireless network
Implement VLAN to separate the HVAC cntrl sys from the open wireless networ
Install an IDS to protect the HVAC system
67
Hashing
MD5 or SHA1 hash digest of the file
Private key of the file
Public key of the file
File size and files creation data
68
Malware Infection
Ransomware
Spyware
Rootkit
Botnet
69
Risk Assessments
Avoidance
Acceptance
Mitigation
Transference
70
Network Attacks
Brute force
DDoS
Tailgating
Spoofing
71
Incident Response and Forensics
Chain of custody
Legal hold
Order of volatility
Right to audit
72
Mobile Device Security
Bluejacking
Packet Sniffing
Bluesnarfing
Geotagging
73
Malware
Botnet
Trojan
Ransomware
Rootkit
74
Supply Chain Management
Entrepreneurship
Counterfeiting
Capitalism
Recycling
75
Access Control
RBAC
ABAC
DAC
MAC
76
Vulnerability Management
Hybrid
Brute force
Dictionary
Rainbow table
77
Public Key Infrastructure
Non-repudiation
Trust models
Recovery agents
CRL
78
Malware
Trojan
Ransomware
Spyware
Rootkit
79
Cryptography
Steganograohy was used to hide the leaked data inside the user’s photos
The data was hashed and then emailed to their personal email account
The data was encrypted and emailed it to their spouse’s email account
The files were downloaded from home while connected to the corporate VPN
80
Supply Chain Management
Trusted Foundry (TF)
Supply Secure (SS)
Supplies Assured (AS)
Trusted Access Program (TAP)
81
Vulnerability Management
White Team
Red Team
Purple Team
Blue Team
82
Virtualization
Physical hardware
Host OS
Guest OS
Hypervisor
83
Hardening
Stealthing
Hardening
Harvesting
Windowing
84
Planning for the Worst
MTTR
MTBF
RPO
RTO
85
Access Control
Password expiration
Password complexity
Password history
Minimum password length
86
Automation
Artificial intelligence
Generative adversarial network
Deep learning
Machine learning
87
Application Security
Hashing the cookie value
Forcing the use of SSL for the web application
Forcing the use of TLS for the web application
Setting the secure attribute on the cookie
88
Incident Response and Forensics
Backup tapes
Imagine do the server’s SSD
ARP cache
L3 cache
89
Monitoring and Auditing
Syslog
Network mapping
NIDS
Firewall logs
90
Policies and Procedures
Data steward
Data owner
Privacy officer
Data custodian

Sec+ Flashcards | StudBud