security + day one, two and three review

Question 1

Which key would Jose use to decrypt a digitally signed document from Ricardo?

Accepted Answer

Jose's public key

Question 2

Gap analysis is determining the state of the system now with what you need the system security to be and filling the gap

Accepted Answer

True

Question 3

The last step of the NIST Cybersecurity Framework is Protect.

Accepted Answer

False

Question 4

What does DevSecOps do in cybersecurity?

Accepted Answer

Ensures security controls are part of every phase of the SDLC

Question 5

Which section in the CIA triad uses encryption to secure the information?

Accepted Answer

Confidentiality

Question 6

An expanding list of transactional records that is widely used for cryptocurrencies is called what?

Accepted Answer

Blockchain

Question 7

Which encryption method uses a public/private key pair to encrypt and decrypt and is used for small amounts of data?

Accepted Answer

Asymmetric Encryption

Question 8

While setting up his network, Frank is putting ACL's on firewalls . What type of security control function is he using?

Accepted Answer

Preventative

Question 9

A security guard can be what kind of security control functional type?

Accepted Answer

Deterrent

Question 10

Baby-face Nelson and his lackeys hack into company security systems for profit. What type of threat actor are they?

Accepted Answer

Organized crime

Question 11

Record-level encryption does not enforce fine-grained access controls to support compliance requirements for security.

Accepted Answer

False

Question 12

The attack surface refers to all points an attacker can discover/exploit vulnerabilities.

Accepted Answer

True

Question 13

After travel, Chris received a text message: must pay toll now use link to avoid penalty. What type of attack was this?

Accepted Answer

Smishing

Question 14

Which Hash Algorithm is used more often today for increased security in password storage and checksums?

Accepted Answer

SHA

Question 15

Joaquin received a phone call. Someone impersonating his boss asked for information now! What kind of attack is this?

Accepted Answer

Impersonation

Question 16

Chase dropped a USB drive in the parking lot of B of A. What type of attack vector was he using?

Accepted Answer

Lure-based Vector

Question 17

When Emmanuel doesn't change the default passwords on his devices; what type of attack vector is he inviting?

Accepted Answer

Network Vector

Question 18

Which type of encryption method should Casey use to verify integrity, authentication and non-repudiation of his message?

Accepted Answer

Digital Signature

Question 19

Winter is the person that handles everything on a network. He does oversight. What type of security control is Winter?

Accepted Answer

Managerial

Question 20

Jason convinced Grace at Facebook to allow access through research, spoofing and convincing details. What attack method?

Accepted Answer

Pretexting

Question 21

Floyd is the administrator of a very large company who uses certificates on it's intranet. What type of certificate?

Accepted Answer

Self-signed certificate

Question 22

What does authorization do in the access control process?

Accepted Answer

Allows the user to only perform certain tasks

Question 23

What type of threat actor motivation do nation-state actors normally have when planning an attack?

Accepted Answer

Political motivations

Question 24

Kevin registered a domain name as googlie hoping that google customers couldn't spell. What attack method did he use?

Accepted Answer

Typosquatting

Question 25

Which part of access control uses logs for data collected about access acquired to that system?

Accepted Answer

Accounting

Question 26

A digital certificate is basically a wrapper for a subject's public key with identity info and the actual key itself.

Accepted Answer

True

Question 27

Abel shorted $1000 had to wait till next payday. Abel decided to make them pay. What type of threat actor is he?

Accepted Answer

Internal threat actor

Question 28

Threat is defined as a weakness that could be triggered accidentally or exposed intentionally to cause breach.

Accepted Answer

False

Question 29

Where would Geraldo look to verify the identity of the certificates being used on the website he is accessing?

Accepted Answer

CA

Question 30

Which security role is over the technical portion of cybersecurity?

Accepted Answer

Information Systems Security Officer (ISSO)

Question 31

There are claims of backdoors chips in Chinese-manufactured hardware. What type of attack is this?

Accepted Answer

Supply Chain attack

Question 32

The new network administrator at the ACME is requiring salting to password hashes. What does salting do?

Accepted Answer

Prevents use of pre-computed hash tables by adding random value when before

Question 33

The IDS automatically identifies attacks as they happen. What type of security functional type is it?

Accepted Answer

Detective

Question 34

Janet's task at ACME is to run updates and patches if needed. what security control category is she working within?

Accepted Answer

Operational

Question 35

Which of the following is a message-based vector?

Accepted Answer

Short Message Service (SMS)

Question 36

Kelsey is working in a center that focuses only on security for networks and Incident response. What type of center?

Accepted Answer

Security Operations Center (SOC)

Question 37

Ricardo's Windows 95 OS is open to attack through which attack vector?

Accepted Answer

Vulnerable Software Vector

Question 38

Where would Alisha look to find out if a digital certificate has been revoked?

Accepted Answer

CRL

Question 39

Charles wanted to hack his parents computer. He looked it up and found a script. What type of hacker is he?

Accepted Answer

Script kiddie

Question 40

Which AES key length would Alice use for a stronger protection against brute force cryptoanalysis attack?

Accepted Answer

AES-256

Question 41

Jarrod, the system administrator is worried about key loss. What method allows distribution of pieces of keys to agents?

Accepted Answer

M-of-N control

Question 42

What is the first step in the NIST Cybersecurity Framework model?

Accepted Answer

Identify

Question 43

What type of algorithm use the same secret key agreed upon by sender and receiver?

Accepted Answer

Symmetric

Question 44

Jill sent Jack a nasty email without digitally signing it like she normally does. What part of security is she avoiding?

Accepted Answer

Non-repudiation

Question 45

Which cryptoprocessor is a removable or dedicated hardware form factor for storing keys?

Accepted Answer

HSM

security + day one, two and three review

Questions 45

security + day one, two and three review

Questions 45