You cannot determine if a message was forwarded by analyzing the headers.

Use of information for a purpose other than was originally disclosed

Move the administrative interface to a protected network

Check /home/ for new user directories.

Install additional tools that can detect scans and send the logs to syslog.

Compromise of the underlying VMware host

Frank does not need to make a change; this is a default setting.

nmap -sU -p 9100,515,631 10.0.10.15/22 -oX printers.txt

Uploading all files to a thirdparty virus scanning platform like VirusTotal

studbud

TRY THIS ON FOR SIZE CYSA NINJA!!

50 termsStudBud Administration31 plays

Imported from external platform

Flashcards50 cardsFPractice quizPHost liveL

Questions 50

Answers

1
No. 16
A fractional operation
Atomic execution
Perpendicular execution
A complete operation
2
No. 48
A risk
A precursor
An indicator
A threat
3
No. 23
grep -case cysa+ example.txt
grep -uc CySA+ example.txt
grep example.txt cysa+
grep -i cysa+ example.txt
4
No. 19
You cannot determine if a message was forwarded by analyzing the headers.
Checking for the References field
Reviewing the Message-ID to see if it has been incremented
Checking for the In-Reply-To field
5
No. 33
SNMP
Portmon
NetFlow
Packet sniffing
6
No. 21
API
Flat file
CSV
Email
7
No. 50
IaaS
PaaS
FaaS
SaaS
8
No. 22
Base64 encoded text
SQLite
Plain text
NoSQL
9
No. 49
Accidental destruction of backup media
Use of information for a purpose other than was originally disclosed
Unpatched vulnerability on a web server
Improper file permissions for a group of employees
10
No. 42
P2PE
MFA
SED
eSATA
11
No. 8
SSL v2
IPsec
SSL v3
PPTP
12
No. 3
Heap overflow
Stack overflow
Buffer overflow
Integer overflow
13
No. 27
Move the administrative interface to a protected network
Prevent console login via SSH
Implement a login-block feature with back-off settings
Disable console access entirely
14
No. 17
None of the above.
Automate some security gates
Perform security testing only after all code is fully operational.
Perform security testing before development.
15
No. 31
Public key and cryptographic hash
File size and file creation date
Private key and cryptographic hash
MD5 hash
16
No. 37
Critical system DMZ
Business network
Safety systems
Business DMZ
17
No. 18
Session hijacking
XSS
A denial-of-service attack
SQL injection
18
No. 39
Review /etc/sudoers for unexpected accounts.
Check /etc/groups for group membership issues.
Check /home/ for new user directories.
Review /etc/passwd and /etc/shadow for unexpected accounts.
19
No. 4
Install additional tools that can detect scans and send the logs to syslog.
Search for use of privileged ports in sequential order
Log all kernel messages to detect scans
Search for connections to ports in the /var/syslog directory
20
No. 2
Impersonation
Cross-site scripting
Privilege escalation
SQL injection
21
No. 30
Attack vectors
Risks
Surface tension
Threats
22
No. 26
An active defense
An interactive defense
A honeyjar
A bear trap
23
No. 20
SSH to the port.
Send an email via the open port.
Telnet to the port
Send an SMTP probe.
24
No. 7
Telnet, SNMP, DNS, LDAP
Telnet, SMTP, DHCP, MS-SQL
SSH, SMTP, DNS, LDAP
SSH, SNMP, DNS, RDP
25
No. 45
Blue team
Red team
Swiss team
White team
26
No. 5
strings
grep
more
less
27
No. 38
John the Ripper
Ophcrack
Cain and Abel
Hashcat
28
No. 36
FAT32
MacFAT
HFS+
APFS
29
No. 47
Managerial control
Physical control
Operational control
Technical control
30
No. 25
IP address
Hostname
MAC address
None of the above
31
No. 11
Fuzzer
Static code analyzer
Fault injector
Web application assessor
32
No. 9
443
8080
1433
1521
33
No. 41
Firewall
Nondisclosure agreement
DLP system
Background investigation
34
No. 12
BGP route spoofing
802.1q trunking vulnerabilities
VLAN hopping
Compromise of the underlying VMware host
35
No. 32
auditpol.msc
secpol.msc
regedit
Frank does not need to make a change; this is a default setting.
36
No. 14
FIPS 140-2
CA-Check
PCI-DSS
HSM-2015
37
No. 43
Repeat the business impact assessment
Implement additional security controls
Design a remediation plan
Document the decision
38
Which one of the following activities is least likely to occur during the risk identification process?
Network segmentation
Vulnerability scanning
Threat intelligence
System assessments
39
No. 44
AUP
Data ownership policy
NDA
Privacy policy
40
Which one of the following activities is least likely to occur during the risk identification process?
System assessments
Vulnerability scanning
Network segmentation
Threat intelligence
41
No. 13
intf -q
netstat -i
ifconfig
ip link show
42
No. 46
Public
Highly Sensitive
Internal
Sensitive
43
What markup language provides a standard mechanism for describing attack patterns, malware, threat actors, and tools?
XML
STIX
TAXII
OpenIOC
44
Naomi wants to analyze malware by running it and capturing what it does. What type of tool should she use?
A virtualization tool
A sandbox tool
A containerization tool
A packet analyzer
45
No. 35
nmap -sS -p 9100,515,631 10.0.10.15/22 -oX printers.txt
nmap -sS -O 10.0.10.15/22 -oG | grep >> printers.txt
nmap -sU -p 9100,515,631 10.0.10.15/22 -oX printers.txt
nmap -O 10.0.10.15/22 -oG - | grep printer >> printers.txt
46
No. 10
VPC
UEFI
TPM
HSM
47
No. 6
Using maltego
A WHOIS query
A DNS forward or reverse lookup
A zone transfer
48
No. 15
Using input validation to ensure only allowed file extensions
Checking the size of uploaded files against a maximum allowed file size
Uploading all files to a thirdparty virus scanning platform like VirusTotal
Checking zip files for their structure and path before unzipping them
49
No. 28
A BGP monitor
A honeypot
A firewall
A NetFlow collector
50
No. 29
Separation of duties
Dual control
Succession planning
Cross-training

TRY THIS ON FOR SIZE CYSA NINJA!! Flashcards | StudBud