stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Intro v4 - Exam Review Flashcards | StudBud
Explore
/
Intro v4 - Exam Review
Intro v4 - Exam Review
58 terms
·
StudBud Administration
·
657 plays
Imported from external platform
Flashcards
58 cards
F
Practice quiz
P
Host live
L
Questions
58
Answers
1
Which Linux distro is packaged for information security tasks such as security research or penetration testing?
Debian
Kali
Ubuntu
Fedora
2
Which framework focuses on the offensive side of an attack rather than the defensive?
NIST cybersecurity
Incident response lifecycle
FISMA
MITRE ATT&CK
3
During which phase of the cyber kill chain does the attacker gather information about a target?
Exploitation phase
Installation phase
Reconnaissance phase
Actions on objects phase
4
_________ uniquely identifies a network destination.
IP Table
Rules Table
MAC address
IP address
5
Which term best describes actions taken to increase infrastructure security?
Assimilation
Layering
Subrogation
Hardening
6
A technique, whereby an attacker sends a fraudulent email message from a seemingly reputable source?
Phishing
Tailgating
Baiting
Pretexting
7
What type of information could include addresses, dates of birth, or social securitynumbers?
API
SSN
PII
Legal liability
8
What is risk transfer?
same risks can be transferred to another company
principles
assuming the cost of an uninsurable risk
ethics
9
What is a MAC address?
A unique address given to the network interface card
A unique address given to a computer on a network
10
Which of the following is not considered a social engineering tactic?
Phishing
Vishing
Pretexting
Password Cracking
11
What is black hat hacking?
Giving someone a black hat
trolling a person or business for fun
Maliciously hacking a person or businesses network
Getting paid to find holes in someone's online security
12
Which wireless encryption protocol is now considered insecure and should no longer be used?
WEP
WPA
WPA2
CCMP
13
Which of the following is an example of a MAC address?
00-00-00-1B-02-55
4309:FD21:ACB3:0012
192.17.2.1
http://www.comptia.org
14
What is the primary focus of generative AI?
Creating new content from existing data
Mimicking human cognitive abilities
Surpassing human intelligence across all cognitive abilities
Enhancing security measures and detecting threats
15
Which tool can be used to scan and map computers on a network?
Ettercap
Hydra
Ping
nmap
16
What is Hydra used for?
To accomplish encryption and backup information.
To generate secure passwords for daily usage.
To perform password cracking using brute-force attacks.
To configure security restrictions at enterprise networks.
17
Which technique does an adversary use to move between systems on a network?
Discovery
Lateral movement
Reconnaissance
Initial access
18
What does Windows Defender ATP proactively do in client hardening?
Analyze misconfigured endpoints.
Set up a backup mechanism.
Automates routine tasks.
Enhances network connectivity.
19
A Vulnerability Assessment
Hacking the network to find its vulnerabilities
Finding reasons to spend money on cyber security tools
Looking at your network and assessing its vulnerabilities
Is a tool to see how awesome your network is
20
What are the three As of Security?
Accountability, Access control and Accounting
Authentication, Accountability and Acoustics
Authorization, Access Control and Audi Parking
Authentication, Authorization and Accounting
21
A global network connecting sites worldwide.
Extranet
Intranet
Internet
None of the above
22
Which team is responsible for providing security assessments that outline an organization’s system defense efficacy
Red
Green
Blue
Purple
23
Which is a step toward increasing server security?
Deploying sleeper honeypots to DMZs for protection
Dumping your credential database to see how easy it is
Disabling unneeded services to reduce the attack surface
Setting a unique internal clock time to confuse attackers
24
What is the purpose of a demilitarized zone (DMZ)?
To allow authenticated users to access the main router
To block all traffic within a network
To check the authenticity of self-signed certificates
To separate internal networks from untrusted external traffic
25
Which of the following is not one of the three states of data?
Data in use
Data in transit
Data at rest
Data under investigation
26
What are some potential impacts of a cybersecurity breach?
Financial loss due to theft or destruction ofdata
All of the above
Damage to reputation and loss of customer trust
Legal and regulatory penalties for non-compliance
27
Which of the following descriptions is included in the category of OS hardening?
The process of removing unused features from an operating system.
The process of improving the security of an operating system.
The process of updating an operating system to its latest version.
All of the above.
28
What is data loss prevention (DLP)?
A Microsoft service to share data between entities.
A network security service to block cyber-attacks.
A technique used to prevent unauthorized access to sensitive information.
A technique used to encrypt information.
29
According to NIST, what is the primary objective of incident response (IR)?
Support the electrical team if there is a power outage
Minimizing weaknesses before the incident
Mitigating violations of security policies and recommended practices
Providing support services for the end user
30
Which of the following is a likely cause of continued issues related to the EternalBlue CVE?
Unchecked insider threats
Weak password policies
Poor patch management
Lack of proper threat intelligence
31
Which term refers to the idea of moving security earlier in the SSDLC to avoid downstream bugs and vulnerabilities?
purple team
lifecycle security
Shift-left
Safety first
32
What is MAC address filtering?
A 32-bit number that uniquely identifies a host
A way of limiing who can access a network using MAC adresses
APPLE's way of security
A way of limiing who can access a network using IP adresses on a MAC
33
Which network infrastructure type connects users and end devices located in a small area such as an office building?
MAN
WAN
PAN
LAN
34
CANNOT be discovered in the course of a routine vulnerability assessment
File and directory permissions
Kernel flaw
Zero-day vulnerability
Buffer overflow
35
How do breaches affect an organization?
All of the above
Financial impact
Legal liability
Reputation loss
36
What type of professional is hired by organizations to legally hack into their networks and identify weak entry points?
Cybersecurity Engineer
Defensive Cybersecurity Analyst
IT Auditor
Ethical Hacker
37
What is the difference between an IP address and a MAC address?
An IP address is a physical address, while a MAC address is logical.
A MAC address is a physical address. An IP address is a logical address
An IP (hardware) can't be changed but a MAC (hardware) can.
The router uses a MAC address, while a switch uses an IP address
38
Which of the following is the correct equation for risk?
Risk management + asset management = risk
Asset + vulnerability + threat = risk
Vector + asset + credentials = risk
Confidentiality + integrity + availability = risk
39
Which goal of network security ensures that only intended recipients can read the data?
Confidentiality
Integrity
Readability
Availability
40
Which of the following is not considered a factor of risk?
Cost
Threat
Convenience
Mitigation
41
What is the first step you should take when hardening a Linux system?
Determine server purpose and requirements
Secure the bootloader.
Install the latest updates.
Eliminate any unpatched software.
42
SSID stands for?
Service suit identification
Service station identification
Singleplayer super intelligence defibrillator
Service set identification
43
Which of the following can be accomplished using a firewall?
stop all possible attacks
take over the world
route traffic based on source and destination MAC address
monitoring and filtering network traffic
44
Which targeted attack floods a network with false requests in an attempt to halt business operations?
Phishing
SQLi
DoS
On Path
45
What is application fuzzing?
Half of the app’s code is encrypted to test the effects of ransomware
Automated data is injected into an app to test response and security.
A process for testing the end-user experience of a piece of software
A string is injected and used to drop (delete) tables of sensitive data.
46
What technique does an adversary use to gain knowledge about a system or network?
Recon
Initial Access
Lateral Movement
Discovery
47
Which of the following standards is most applicable to a company that utilizes any payment card for its operations?
HIPAA
GLBA
PCI-DSS
SOX
48
A Kill Chain phase in which the attacker opens and maintains a communication channel between the target and the attacker
Exploitation
Installation
Reconnaissance
C2
49
Which is a true statement about the Windows Operating System?
It has a ring-topology file system.
It has a tree-like file system.
It has a folder-based file system.
It has an open-source file system.
50
Which duty is the primary focus of data loss prevention (DLP)?
Preventing unauthorized sharing of privileged information
Deterring credential theft through layered obfuscation
Wiping company data from devices of employees as they leave the company
Stopping exfiltration of sensitive data during a breach
51
Which of the following terms is an example of a Linux distribution?
Root
Kali
Bootloader
Kernel
52
Which command is used to create a new directory in the LInux OS?
ls
touch
mkdir
cd
53
What is the Open Web App Security Project (OWASP)?
University departments collected to work on secure coding
A government organization designed to promote secure data use and storage
A private, for-profit organization dedicated to application security
A community-driven organization focused on application security
54
What is the purpose of the
ping
command?
To test connectivity to other networks
To request connection to the file server
To resolve the domain name to its IP address
To obtain a dynamic IP address from the server
55
Which of the following types of network attacks modifies or alters data?
Inactive attack
On path
Active attacks
Passive attacks
56
Which of the following controls allows for the creation of rules that allow or block traffic?
CIS Benchmarks
OpenDLP
iptables
ClamAV
57
Which of the choices below best describes an attack resulting from an unknown vulnerability exploit.
Zero-day attack
Phishing
Same-day attack
Patching attack
58
Which of the following network attacks causes a service to fail by flooding the target with traffic?
Malware
On Path
DoS
Exploit
