stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ThriveDX - CS-IC - Exam Review Flashcards | StudBud
Explore
/
ThriveDX - CS-IC - Exam Review
ThriveDX - CS-IC - Exam Review
30 terms
·
StudBud Administration
·
303 plays
The Saturday Review Prior To The Exam
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
All of the following are part of the Cyber Kill Chain, EXCEPT
Demand
Reconnaissance
Delivery
Weaponization
2
What is the PRIMARRY purpose of a FIREWALL?
Inspects incoming streams
Backs up a system to restore
Remove worms
Allow or deny traffic based on rules
3
What is the primary purpose of the ping command?
To count how many hops it takes to reach a computer
To make sure that an attacker can't breach a firewall
To flood a switch so that it uses broadcast mode
To verify that a device is responding on the network
4
Which process makes a system secure for its purpose?
Hardening
Security
Baselining
Benchmarks
5
What is the concept of Defense in Depth?
Using firewalls, tokens and passwords combined
Using key cards for server rooms
Multiple layers of controls to prevent unauthorized access
An Intrusion Prevention / Detection System (IPDS)
6
What is the purpose of DevSecOps?
Shift-left testing
To increase the application’s security
Unification of development, operations, and security
Testing implementation early to avoid issues downstream
7
The remaining risk after mitigation control has been implemented is known as:
Transferable risk
Impact of risk
Mitigation control
Residual risk
8
In Linux, what command is used to view a directory's contents?
ls
cd
mkdir
dir
9
Which aspect of the CIA triad ensures data is
accessible
?
Integrity
Availability
Instantiation
Confidentiality
10
Which asset is the most important in cybersecurity
Endpoints
Data
Web server
Human life
11
Which of the following is NOT part of the CIA triad
Confidentiality
Integrity
Instantiation
Availability
12
When threat actors position themselves between a source and destination, it is known as what type of attack?
Privilege Escalation
DoS
On-Path
Smurf
13
CLI stands for:
Computer Location Information
Core Level Input
Current Log In
Command Line Interface
14
What type of attack floods a website with packets?
None of the above
Ransomware
DoS/DDoS
ICMP
15
Which structure is specific to Microsoft operating systems?
Open source
Community supported
Hierarchical tree file system
User has no kernel access
16
In Windows, which command will display a list of files?
rmdir
dir
cd
mkdir
17
Which state of data has the most risk?
Data at rest
Data in use
Data in transit
Data in long term storage
18
Typically the weakest link exploited by hackers is
Vulnerable Websites
Network Monitoring
Misconfigured Firewalls
Human Factor
19
Which network infrastructure has a connection that spreads across a city or metropolitan area?
WAN
LAN
PAN
MAN
20
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Detect
Respond
Protect
Identify
21
Regarding Defence in Depth, identify an Administrative control
Deploying cameras in sensitive areas
Conducting security awareness training for all employees (esp. Bob)
Using anti-virus systems on PC's
Using firewalls to block malicious IP addresses
22
What is the MITRE ATT&CK Framework used for?
Tells you the steps of a threat event in 7 steps
Help classify attacks, identify objectives, and assess risk
Provides a line graph of attack frequency
Information about the relationship between threat features
23
A program or command used to scan open ports on a device
metasploit
ettercap
kali
nmap
24
Which one of the following tools uses ICMP?
Traceroute
Ping
DHCP
DNS
25
Which command would you use to create a file via the terminal in Linux?
touch
cat
ls
cd
26
In Linux, what command gives a user elevated permissions
vim
root
nano
sudo
27
What information would a hacker try to acquire as part of the Reconnaissance phase?
Customer Information
Employee Information
Operating Systems
Network Topology
28
What percentage of users around the world are on the Windows operating system?
50%
75%
98%
68%
29
I have had the most awesome instructors, so I am going to NAIL this exam
False
True
30
What does CVE stand for?
Central Virus Encyclopedia
None of the above
Current Versions of Expectations
Common Vulnerabilities and Exposures
