What is the primary reason to use a password list with Hydra?

To brute-force authentication by trying multiple passwords automatically

What does the null byte (%00) do in a file inclusion exploit?

Ends a string, bypassing added extensions

What is an essential step after acquiring digital evidence?

Placing it in a secure container

What is the role of the Splunk Forwarder?

Collects data from endpoints and sends it to Splunk

What is the function of a Domain Controller (DC)?

To run Active Directory services and manage domain authentication

What does an SNMP trap do in a network environment?

Sends unsolicited alerts to a network management system

Which of the following is a recommended best practice in log management?

Securing and protecting logs with access controls

What is the purpose of the uniq command?

To display unique lines in a file

Which of the following best describes a vulnerability?

A weakness that can be exploited by attackers

What is a MAC address used for?

To identify a device on a local network

What happens when a switch receives a data packet?

It sends the packet to the intended device only

What is the main purpose of computer forensics?

To gather evidence of activities performed on computers

What is the primary goal of sanitising user input?

Preventing command injection and other vulnerabilities

studbud

Review Quiz_Mid_1

80 termsStudBud Administration36 plays

Imported from external platform

Flashcards80 cardsFPractice quizPHost liveL

Questions 80

Answers

1
What is the primary reason to use a password list with Hydra?
To manually enter passwords
To brute-force authentication by trying multiple passwords automatically
To log all network traffic
To update the user's password
2
A SOC analyst might use DHCP logs to determine which devices have joined the network.
False
True
3
Which protocol provides secure login to systems via text-based interfaces?
SSH
FTP
HTTP
SMB
4
What does a Silver Ticket attack allow?
Adding users to the domain
Decrypting domain-wide traffic
Full domain compromise
Access to one specific service
5
What does the null byte (%00) do in a file inclusion exploit?
Cleans input data
Encrypts the URL
Stops a script from running
Ends a string, bypassing added extensions
6
Which OSI layer is responsible for error detection through a trailer?
Application
Network
Data Link
Physical
7
What character signifies the end of an SQL query?
/
.
:
;
8
What concept is the opposite of the CIA triad?
AIC
DAD
XYZ
ABC
9
What does Network Penetration Testing simulate?
Data loss prevention
Regular user activity
Malicious network attacks
Normal traffic flow
10
What is an essential step after acquiring digital evidence?
Placing it in a secure container
Analyzing it immediately
Encrypting it for safety
Erasing unnecessary data
11
What is the first DNS server that your computer queries?
Root Name Server
Recursive DNS Server
Authoritative DNS Server
Top-Level Domain Server
12
How many bits are in a subnet mask?
64
32
16
128
13
Which flag for the ls command will show hidden files?
-r
-l
-a
-h
14
In which NIST framework phase do organizations evaluate their security policies and asset vulnerabilities?
Detect
Identify
Protect
Recover
15
A checksum is used to ensure the integrity of data in TCP and UDP packets.
False
True
16
What is the role of the Splunk Forwarder?
Searches logs in the Splunk instance
Manages user accounts in Splunk
Collects data from endpoints and sends it to Splunk
Visualizes data into charts and graphs
17
Which type of log contains authentication and authorization events?
Application Logs
Security Logs
System Logs
Network Logs
18
How is an internal person called when they accidentally compromise the security of an organization?
Malicious user
Careless insider
Unworried insider
Unaware participant
19
What is the function of a Domain Controller (DC)?
To store user files
To run Active Directory services and manage domain authentication
To manage printers
To handle all email communications
20
What does an SNMP trap do in a network environment?
Sends unsolicited alerts to a network management system
Encrypts data packets
Creates a secure VPN
Detects rogue devices
21
What is required for accountability in a system?
Role-based permissions
Password complexity
Comprehensive logging
Multi-factor authentication
22
What message is used by a client to initiate a TCP connection?
SYN
ACK
FIN
SYN/ACK
23
CIDR is an acronym used in networking; what does it refer to?
Classful Internet Data Redundancy
Central Internet Domain Registry
Classless Inter-Domain Routing
Computed Integrated Data Routing
24
Where is the root user’s home directory located?
/home
/var
/root
/etc
25
TTPs refer to the tactics, techniques, and procedures of threat actors.
False
True
26
Which Splunk operator can be used to find events matching different values for the same field?
OR
XOR
NOT
AND
27
Which HTTP status code means 'Not Found'?
404
500
200
301
28
Why is hashing used for passwords?
To make them easier to remember
To make them faster to type
To store them securely
To reduce password length
29
What type of firewall rule is used to deny all unspecified traffic?
Default-drop
Permit-all
Block-all
Accept
30
Which of the following is a recommended best practice in log management?
Securing and protecting logs with access controls
Ignoring log testing
Creating custom logs without a standard format
Logging sensitive information
31
Which protocol is used to securely connect and execute commands on a remote machine?
SSH
HTTP
DNS
FTP
32
What is the purpose of the uniq command?
To extract specific fields
To calculate the word count
To display unique lines in a file
To replace text patterns
33
Which of the following best describes a vulnerability?
A tool used by SOC analysts
A weakness that can be exploited by attackers
A secure protocol for data transmission
A type of firewall configuration
34
When sending data over TCP, what would you call the "bite-sized" pieces of data?
Segments
Packets
Datagrams
Frames
35
What is a MAC address used for?
To provide Internet access
To identify a device on a local network
To secure a device
To assign IP addresses
36
In which part of a URL would you test for reflected XSS?
Fragment
Parameters
Domain
Protocol
37
What happens when a switch receives a data packet?
It forwards the packet to multiple devices
It sends the packet to the router
It sends the packet to the intended device only
It broadcasts the packet to all devices
38
What is the main purpose of computer forensics?
To gather evidence of activities performed on computers
To create computer viruses
To improve computer hardware
To develop new software applications
39
What is the primary goal of sanitising user input?
Enhancing UI design
Allowing special characters
Speeding up the application
Preventing command injection and other vulnerabilities
40
What is the name for a piece of data when it does have IP addressing information?
Datagram
Packet
Frame
Segment
41
What type of SIEM alert may require rule tuning?
Confirmed Threat
Routine Check
True Positive
False Positive
42
Crontabs are used to schedule tasks to run at specific times in Linux.
True
False
43
Firewalls and IDS both block unwanted network traffic.
True
False
44
Which action should be used in a firewall rule to permit traffic?
Forward
Block
Allow
Deny
45
Which type of firewall can track and maintain the state of active connections?
Stateless firewall
Stateful firewall
All of them
State-link firewall
46
What type of attacks can ffuf be used for?
Buffer overflow exploitation
DNS poisoning
Web enumeration and fuzzing
Wireless network attacks
47
What feature allows a Next-Generation Firewall to detect and block encrypted traffic?
Stateful inspection
SSL/TLS decryption
IP spoofing
Packet-filtering rules
48
What is a key function of a Layer 3 switch?
Filtering traffic based on MAC addresses
Connecting to the Internet
Encrypting data between networks
Routing between VLANs
49
A packet-filtering firewall can inspect the contents of the packet payload.
False
True
50
Which model strictly limits user abilities and is used for handling highly classified data?
IAM
RBAC
MAC
DAC
51
Which element of Threat Control inspects traffic and blocks the extraction of sensitive data?
DLP
Endpoint Protection
IDS/IPS
SIEM
52
What is the purpose of the "Follow TCP Stream" feature in Wireshark?
To reconstruct the entire conversation of a TCP connection
To filter packets based on IP address
To merge capture files
To follow all HTTP requests
53
Which part of the CIA triad protects data from unauthorized access?
Integrity
Availability
Encryption
Confidentiality
54
Which protocol is stateless and faster but doesn't guarantee data delivery?
ICMP
ARP
TCP
UDP
55
What is the primary benefit of asymmetric encryption?
It’s much faster than symmetric encryption
It doesn’t use keys
It doesn’t require a public key
It allows secure communication without sharing private keys
56
Which command would you use to stop a service called "myservice"?
kill myservice
systemctl start myservice
systemctl stop myservice
systemctl enable myservice
57
Which of the following is NOT a type of malware?
Ransomware
Patch
Virus
Trojan Horse
58
What Linux command checks if a specific service is active?
check-service
active-service-status
service [service_name] status
monitor-service
59
What is the main purpose of a subnet mask?
To assign MAC addresses
To divide IP addresses into network and host portions
To encrypt data
To identify device locations
60
What service is responsible for issuing Ticket Granting Tickets (TGTs)?
AS (Authentication Service)
PAC
TGS
LSASS
61
What is NetworkMiner primarily used for?
Malware analysis
Software development
Network traffic forensics
Web application testing
62
Which key is shared in asymmetric encryption?
AES key
Secret key
Private key
Public key
63
What is the main purpose of a SIEM?
Encrypting network traffic
Collecting and correlating log data from various sources
Installing security patches
Managing user accounts
64
Which of the following best describes "nonrepudiation"?
Confirming a sender cannot deny sending information
Ensuring that data is encrypted
Storing data securely
Preventing unauthorized access to data
65
Which tool is known for memory analysis in DFIR?
KAPE
Volatility
Autopsy
Redline
66
TCP port 143 is standard for which of the following services?
HTTP
IMAP
DNS
LDAP
67
A virus requires user interaction to spread from one file to another.
True
False
68
What is Local File Inclusion (LFI)?
Including local files on the server into a web page
Storing files directly in a database
Including a remote file via a URL
Executing a script through an API
69
What is ARP used for in network communication?
Routing packets
Resolving IP addresses to MAC addresses
Encrypting data
Transmitting data over Wi-Fi
70
Why is hashing used for file integrity verification?
Hashes add extra encryption to data
Hashes change if any data is altered
Hashes simplify data retrieval
Hashes allow quick decryption
71
What does XSS stand for?
Cross-Site Scripting
Cross-Site Sharing
Cross-Site Security
Cross-Site Server
72
Which process involves verifying that a user is who they claim to be?
Identification
Accountability
Authorization
Authentication
73
A network administrator is NOT responsible for adding or removing devices in a network.
False
True
74
Which OSI model layers represent the starting and ending points for data transmission?
Physical and Application
Data Link and Presentation
Network and Data Link
Transport and Network
75
If an individual gains unauthorized access to data for malicious purposes, they are known as:
Red Team member
Gray Hat hacker
Black Hat hacker
White Hat hacker
76
What is plaintext?
Encrypted data
The original readable data before encryption
Unreadable scrambled text
A mathematical key
77
Which type of cryptography uses two different keys?
Encoding
Hashing
Symmetric
Asymmetric
78
Which port number is commonly used for HTTP traffic?
3389
443
80
21
79
What method involves sending data to an indexer for storage in an SIEM?
Data deletion
Log encryption
File sharing
Data ingestion
80
To view IP address information and network interfaces on a Unix-like system, which command would you use?
ifconfig
nmap
Netinfo
Ping

Review Quiz_Mid_1 Flashcards | StudBud