_____ are software packages used on info systems or networks to scan looking for weaknesses like open ports.

Vulnerability Assessment Tools (VATS)

A DoD info system used to record and disseminate critical vulnerability info throughout the DoD Enterprise network.

Vulnerability Management System (VMS)

The fifth step of building and securing a new server.

employ network protection mechanisms

A ___ ___ ___ is a system that scans, audits, and monitors the security infrastructure for signs of attacks in progress.

Intrusion detection system (IDS)

In this attack the attacker piggybacks on sessions with goal of “forging” a fake request to get you to click on it.

XSRF (Cross Site Request Forgery)

Once data is encrypted and authenticated, it is then signed with a ______ _________ _____.

Message authentication code (MAC)

Which of the following is an example of a “common attack” on sessions?

ALL OF THESE ARE COMMON ATTACKS

studbud

MILLERS BLOCK 5 KEY TO SUCCESS

99 termsStudBud Administration25 plays

YE YE 100% TOP GRAD STATUS YEAH

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
_____ are software packages used on info systems or networks to scan looking for weaknesses like open ports.
COTS
IDS
VMSs
Vulnerability Assessment Tools (VATS)
2
Small files stored on your computer from a website within a web browser that the website can retrieve at a later time.
Session Cache
Session Tokens
HTTP bits
Cookies
3
A _____-____ is a software- or hardware-based network security system controlling incoming and outgoing network traffic.
Fire-wall
Proxy-Server
Reverse-Proxy
Demilitarized-Zone
4
A DoD info system used to record and disseminate critical vulnerability info throughout the DoD Enterprise network.
VSM
VATs
ESS
Vulnerability Management System (VMS)
5
The ______ ____ are responsible for monitoring client health and assisting the NOSs with remediation of vulnerabilities.
NOS & COS
VROs and PMOs
Base CFPs
616th and 690th
6
This Server Security Principle states that critical data backups should be maintained in the event of system failure.
Backups
Critical Data Protection
DLP
SRP
7
_ is when devs test the results of unexpected values or inputs to discover which ones cause the application to "act up".
Fuzzing
Dynamic Testing
Interactive Testing
Stress Testing
8
Since devs are responsible for pushing code into production, it is critical that they receive proper security training.
True
False
9
is the process of developing, testing, and adding security features to applications to prevent security vulnerabilities.
Software Security
Program Security
System Security
Application security
10
A ______ ______ aims to detect security holes from day 1 in order to prevent security issues and to resolve them ASAP.
IDS & IPS
DevSecOps Approach
Firewalls & Boundry Protection
ZERODAY DESTROYER
11
The entry to the boundary on a network is the first point that you control (usually the external router).
False
True
12
A _____ is a flaw in systems security design or internal controls that could be used by an adversary to breach the AFIN.
Threat
Exploit
Risk
Vulnerability
13
In what attack will a hacker obtain a users Session ID info and then use it to hijack and manipulate the active session?
XSS
XSRF
Session Hijacking
Session ID Manipulation
14
__ _ ____ utilizes multiple independent layers of security controls so that if one fails another will be operational.
Strong Security Posture
The DoD always
Defense in Depth
Untouchable Gigachad Security
15
__ steps are required to ensure the security of any new server.
6
5
4
3
16
_ is a comprehensive vulnerability scanner. It performs config scans of servers, network devices and databases.
Nessus®
ZEEK
NMap
tcpdump
17
- is a suite of centrally managed Defensive Cyber Operations tools that allow for the denial of adversary actions.
Network vulnerability scanning tools
Endpoint Security (ESS)
Network defense tools
Network security tools
18
This VR tasking requires the patch to be tested for 48 hours. PMO's have 24 hours to deploy it w/ a min 80% compliance
Available
Emergency
Mandatory
Priority
19
A _________ _______ is a physical or logical subnet that separates an internal network from the internet.
Demilitarized Zone
Network Gap
TLS Tunnel
Firewall Container
20
A boundary that is too large could inherit risk from systems that are outside the administrative and technical controls.
True
False
21
This VR tasking requires an enterprise patch within 24 hours, with a mandated minimum 70% compliance amongst machines.
Normal
Urgent
Emergency
Priority
22
The most common method of tracking a customer accessing an organization’s website is by assigning a unique _____ __.
Logon Cache
Identification Number
Session-ID
Site-specific Cookie
23
Base NCCs/ CFPs are required to populate NOS patch testing groups with at least 3% of the base's total assets.
False
True
24
If an attacker gained _______ ________ to a victim’s device they could steal a user’s authentication tokens.
Computer Access
Physical Access
Prolonged Access
Remote Access
25
This type of Application Security Testing analyzes running code while simulating outside, or “black box” attacks.
Hybrid Testing
Dynamic Testing
Static Testing
Interactive Testing
26
In this attack a bad actor w/ resources can endlessly ‘guess’ auth tokens until one of the attempts proves successful.
Brute Force Attack
Man In The Middle
XSS (Cross-Site Scripting)
XSRF (Cross-Site Request Forgery)
27
The ______ ________ is the point where data transfers from the intranet to the internet and vice versa.
System Boundary
System Perimeter
Data Bridge
Transfer Point
28
Single console access. Provides real-time detection of network anomalies and is scalable.
VMS
Application Center
Security Center
SEM
29
This type of Application Security Testing combines elements of both static and dynamic testing.
Dynamic Testing
Hybrid Testing
Interactive Testing
Static Testing
30
Which of the following is an example of a firewall function?
proxy services
All of These are Examples
Network Address Translation
packet & content filtering
31
Once the _ threshold is met by the NOS, remediation of the remaining clients are the responsibility of the local base.
5%
70%
95%
90%
32
__ deployments target all machines that require an update, are not a part of an exemption, and are not designated a PMO.
Priority
Necessary
Available
Mandatory
33
________ is used to control network access by monitoring outgoing and incoming packets and then allowing/ blocking them.
Packet filtering
Demilitarized Zone
Content Filter
Proxy Server
34
Risk Management Framework (RMF) consists of 5 steps: Prepare, Categorize, Assess, Authorize, and Monitor.
False
True
35
The fifth step of building and securing a new server.
Update security measures
Update the OS
employ network protection mechanisms
Implement a plan
36
This type of Application Security Testing analyzes code at fixed points during its development.
Static Testing
Fuzzing
Dynamic Testing
IDE testing
37
When it comes to web application security BEST practices you need to ensure you're using the strongest _____ algorithms.
Encryption
NAT
Hashing
IP
38
A primary use of TLS is encrypting the communication between web apps and servers, such as web browsers loading a site.
False
True
39
Installing software updates and patches is one of the most effective ways to keep your software secure.
False
True
40
A ___ ___ ___ is a system that scans, audits, and monitors the security infrastructure for signs of attacks in progress.
Intrusion detection system (IDS)
Network-based Intrusion detection system (NIPS)
Host-based intrusion detection system (HIPS)
Intrusion prevention system (IPS)
41
________ attacks involve someone intercepting data being sent between two parties.
(MITM) Man in the middle
Bluejacking
BlueSnarfing
Evesdroping
42
In this attack the attacker piggybacks on sessions with goal of “forging” a fake request to get you to click on it.
Brute Force
XSS
XSRF (Cross Site Request Forgery)
Session Hijacking
43
_____ creates pre-configured operating system images that are compliant with all applicable TCNOs and STIGs.
ARAD
TCNO
AFECMO
AFCEDS
44
_ is designed to support a faster pace of system updating & patch management for our network connected Windows devices.
MECM
ACAS
RDP
AFECMO
45
A __ ___ says organizations should understand what it would take to break their system or network’s security features.
Intrusion Plan
Threat Factor
Disaster Plan
Work Factor
46
Once data is encrypted and authenticated, it is then signed with a ______ _________ _____.
Message authentication code (MAC)
Media Access Control (MAC)
Mandatory access control (MAC)
Certificate sign off (CSO)
47
This Server Security Principle states that job roles/functions should be as separate as possible.
Need to Know
Separation of Privilege
Least Privilege
Role Segregation
48
This type of app security is implemented after a user has been authenticated,and is given access to use an application.
Authorization
Secure Sign On
Authentication
Accounting
49
Which of the following is an example of a “common attack” on sessions?
SOCIAL ENGINEERING/ PHYSICAL ACCESS
XSS & XSRF
ALL OF THESE ARE COMMON ATTACKS
MITM
50
The easiest way to protect against Man in the Middle attacks is to use HTTPS and secure cookies throughout your apps.
True
False
51
____ is implemented into an application to ensure that only authorized users gain access to it.
Accounting
Authorization
Authentication
ACS
52
___ is a security protocol designed to facilitate privacy and data security for communications over the Internet.
SSL
SSH
TLS
TCP
53
______ _____ are encryption keys that use one-way encryption.
AES keys
Public keys
SHA256 Keys
Private Keys
54
A ________ is a network device or software acting on behalf of clients to retrieve requested content from the internet.
NAT
Proxy
Web Server
Hypervisor
55
is implemented if there is a security breach in an app, logging can help identify who got access to the data and how.
IPS Logging
System Event Management
Log Monitoring
Accounting
56
Performing __________ and mitigation helps organizations better understand their network's security posture.
Analysis
risk assessments
Vulnerability assessments
Vulnerability Scanning
57
A _ __ is a set of algorithms that hold details such as shared encryption or session keys, will be used in THAT session.
Certificate-Authentication Library (CAL)
Cipher Suite
Public and Private Key Repository
Cipher Selection
58
All simple tasks should be _______ in order to allow teams to focus on more challenging undertakings.
Completed Manually
Marked as top priority
Automated
Marked as low priority
59
Many threats against data and resources are possible because of mistakes.
False
True
60
The second step of building and securing a new server.
Employ appropriate network protection mechanisms
Employ secure administration and maintenance processes
Install configure and secure the OS
Install, configure, and secure the server software.
61
This Server Security Principle states that if a failure occurs, the system should fail in a secure manner.
Fail Safe
Fail plan
Safe Server Automation
Contingency Plan
62
A too-narrow of a boundary could exclude system resources from the level of protection required by the system owner.
False
True
63
is the monitoring and control of comms at the external boundary of an info system to prevent and detect malicious comms.
Boundary Protection
Boundry Scanning
Pertimiter Control
Firewall Rule Management
64
To identify an infosystems boundary you must know where data is stored, where system data flows & critical dependencies.
True
False
65
This Server Security Principle states that security mechanisms should be as simple as possible.
PSS
Simplicity
SMSC
“Less the Better”
66
This Server Security Principle states that each user is granted the minimum rights required to perform its job.
Least Privilege
Most Privilege
67
This type of Application Security Testing is designed specifically for the mobile environments.
Mobile OS Testing
Phone Probing
Cellular Application Testing (CAT)
Mobile Testing
68
The third step of building and securing a new server.
Build a plan
Update the operating System
Install configure and secure the servers software
Implement the solution
69
The fourth step of building and securing a new server.
Implement a plan
Update OS
Update Software
Server specific but ensure content is secured
70
SSL is now depreciated and has been replaced by ________ ______ _________.
Secure Shell (SSH)
User datagram packets (UDP)
Transport Layer Security (TLS)
Transmission Control Protocol (TCP)
71
For a website or application to use TLS, it must have a TLS Certificate installed on its origin server.
False
True
72
The first step of building and securing a new server.
Plan the installation
Employ secure administration and maintenance processes
Ensure that the content is properly secured
Install, configure, and secure the underlying OS
73
The term ______ refers to a connection for ongoing data exchange between two parties (client and server).
Session ID
Session
Client
Network
74
___ is an internet standard that enables a LAN to use one set of IPs for internal traffic and a second set for external.
Network Address Translation (NAT)
Firewall
NAC
Proxy Server
75
A _____ is a DISA-led formal inspection designed to increase the security posture of DoD Information Networks.
CCRI
AFECMO
NOS
ACAS
76
__ are hired to break into an app in order to detect vulnerabilities and find potential attack vectors for a company.
Black-Box Testers
Pen-Testers
WhiteHat Hackers
Ethical Hackers
77
NOSs will implement a goal of ___ compliance of vulnerability remediation actions using enterprise remediation tools.
98%
85%
95%
99%
78
The _____ create patch packages for all vulnerabilities impacting the AFIN using enterprise remediation capabilities.
Network Operations Squadron (NOS)
Vulnerability Remediation Operators (VROs)
Cyberspace Operations Squadron (COS)
Project Management Offices (PMOs)
79
The key to boundary defense is a multi-layered approach segmenting your networks and controlling the flow of your data.
True
False
80
_________ deployments target all systems, unless stated otherwise by the tasking authority.
Available
Emergency
Mandatory
Priority
81
This type of application security is implemented to protect sensitive data from being seen or even used by a bad actor.
Encryption
TLS Transport
Data Masking
Secure Data Transfer
82
Monitors the network in real-time, continuously looking for new hosts, applications and new vulnerabilities.
Passive vulnerability Scanner (PVS)
CFP
ESS
Vulnerabilities Management System (VMS)
83
A CCRI evaluates three overall Information Assurance areas: Culture, Capability, and Conduct.
False
True
84
_ _ _are techniques to enhance the security of an application at the coding level, making it less vulnerable to threats.
Application Security Controls
Secure code implementation
Mobile Security Improvements
Security and Testing
85
_____ are responsible for remediating assets that are supported by a weapons system.
Vulnerability Remedial Operations (VROs)
Network Operations Squadron (NOS)
Program Management Offices (PMOs)
Communications Focal Point (CFPs)
86
This Server Security Principle states that users should understand the necessity of security.
Mandatory Developer Education
User Education
End User College
RTK (Right to Know)
87
______ ________ is the control of traffic coming into or leaving a network.
LogicBased- Firewall
Boundary protection
Traffic Filtering
Network Scoping
88
The sixth step of building and securing a new server.
Plan the installation
Configuration of the OS
app patching & upgrading, log monitoring, security testing, OS backups
Configuration of the software
89
Which of the following is not a component of TLS?
Authentication
Integrity
Encryption
Accounting
90
A TLS connection is initiated using a sequence known as the ___ ___________.
TLS Handshake
TLS Milkshake
TCP Handshake
SSL Bridge
91
The ___ __ will task NOSs with Priority and Emergency vulnerability remediation actions.
561st NOS
690 NSS
691st NOS
616th OC
92
In this session attack a bad actor can maliciously inject JavaScript into an application running on the victims browser.
Session ID Manipulation
XSRF
XSS (Cross-Site Scripting)
Session Hijacking
93
_____ will manage vulnerabilities identified on devices that cannot be managed by NOSs.
CFPs
PMO
VMO
VRO
94
________ will generally entail installation of software patches & removal of files or tools used for malicious purposes.
Preventative Measures
Error Remediation
Countermeasures
Patching
95
The 690th will direct base CFPs & PMOs to implement __________ a VR tasking. These actions will take 11 days to rectify.
Priority
Emergency
Normal
A VMS system
96
The DoD uses an application called _______ to support Info Assurance and automate the Risk Management Framework process.
AFINC
ESS
eMASS
VMS
97
The _ tool automatically identifies configuration vulnerabilities threatening the security of the DoDs computer systems.
ACAS
Solar winds
IDS
SEM
98
Its important to ____ ____ & records so that if a attack does occur evidence is available to the organization.
Destroy Logs
Maintain Logs
Secure-wipe Logs
Encrypt Logs
99
To secure a server, it is essential to define the threats that must be mitigated.
True
False

MILLERS BLOCK 5 KEY TO SUCCESS Flashcards | StudBud