Sec+ Most Missed Review

Which of the following stores and compares hashes of critical boot files to detect unauthorized processes?

Redirecting users from a legitimate website to a malicious website

What can be implemented for a CA to delegate the function of registration to another authority?

Which of the following refers to using pre-built functions to perform a database query?

What does the function of 'Protect' accomplish, according to the NIST framework?

What kill chain phase enables weaponized code to run a remote access tool and achieve persistence?

______ identifies risks, ______ identifies controls and processes that enable an org to maintain critical workflows

What is NOT a use of netcat?

Which of the following is an alternative to using CRLs?

A ___________ event is where confidential data is read or transferred without authorization.

What step of the kill chain is where the attacker finds a vector to transmit malicious code, like an email attachment?

WPA2 uses SAE for authentication

What type of virus would be exploiting local scripting?

What refers to any part of the Internet that's not indexed by a search engine?

A site has good enough input validation that it'll reject certain characters in URLs. What should it check for next?

__________ is the process of deploying an application to the target environment.

What header option mitigates clickjacking, script injection, and other client-side attacks?

What DLP remediation action is it when the original file is quarantined and replaced with one describing the violation?

What two statements describe the relationship between ICSs, SCADAs, and PLCs?

Which tool CAN'T be used to determine if a targeted IP address is present?

What type of firewall is distinguished by the fact they inspect IP headers?

SELECT TWO public key cryptography algorithms:

An example of MFA would be a smart card and a one-time password.

What principle involves developers committing/testing coding updates early and often?

What is the best choice for allowing users to log on to a network using social media credentials - via a mobile app?

What TWO kinds of key pairs does SSH use?

What technique uses the D-H key agreement to create ephemeral session keys?

What type of backup selects any new/modified files since the last backup?

What CTI platform model provides sector/industry-specific updates?

What's the MAIN security responsibility of an owner/director?

What access control model would I use if I want FW status, patches, and geographic locations to be considered?

What type of malicious activity involves a mechanism that restarts a backdoor if the host reboots or the user logs off?

What is not a way routers can be vulnerable?