Sec+ Questions_Overview

can identify the current software OS's and applications being used on the network

after a recon, the attacker will determine if it provides entry to a secure network

overwriting the disk space with zeros or random data

a message that a service transmits when another program connects to it

used to evaluate and report any compliance issues related to specific industry guidelines

a computer typically located in an area with limited security; imitations of real data files

the tester has in-depth knowledge of the network and systems being tested

attempts to actually penetrate the system in order to perform a simulated attack

how long data must be kept and how it is to be secured

once inside the network, the tester moves around inside it to other resources

relies upon the skill, knowledge and cunning of the tester

can discover malicious wireless network activity such as failed login attempts

a range of products that look for different vulnerabilities in networks or systems

a comprehensive review of how an enterprise follows regulatory guidelines

purpose is to invite attacks so that the attacker's methods can be studied

a command-line alternative to Nmap with additional features scanning for vulnerabilities

designed to test the security of a WLAN system by attempting to break its protections

designed to exploit any weaknesses in systems that are vulnerable

when a program intentionally gathers information such as the type of server software

actively probing the system, much like an attacker would do to find information

the tester uses tools that do not raise any alarms

used to determine if the data is hidden to thwart unauthorized users from finding the data

intended to break the digest of a password to determine its strength

used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools

combines network device discovery tools and network scanners to find open ports

sends probes to network devices and examines the responses received

continual observation of systems and networks through vulnerability scanning and pen testing

the tester has not prior knowledge of the network infrastructure

to permanently destroy the entire drive by reducing or eliminating the magnetic field

a security vulnerability scanner that can determine which devices are connected to the network

used by network admin's for network monitoring

an approach, philosophy or strategy regarding data privacy and security

the standard security checklist against which systems are evaluated for security posture

a plan that will address vulnerabilities and how to fix them before they are exploited