stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IC-06-P(v2) Exam Review (10/07/2022) Flashcards | StudBud
Explore
/
IC-06-P(v2) Exam Review (10/07/2022)
IC-06-P(v2) Exam Review (10/07/2022)
21 terms
·
StudBud Administration
·
32 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
Which state of data has the most risk?
Data at rest
Data in storage
Data in use
Data in transit
2
Which command would you use to create a file via the terminal in Linux?
touch
cd
cat
ls
3
Which cloud service is specific to Microsoft?
AWS
GCP
Server Space
Azure
4
Which software is designed to help accomplish a task on a computer?
Application
Database
Hardware
I/O devices
5
If you receive an email that appears to be from your CEO asking for your credentials to your account, ...
Baiting
Pretexting
Phishing
Vishing
6
Which process makes a system secure for its purpose?
Baselining
Security
Benchmarks
Hardening
7
Which network infrastructure has a connection that spreads across a city or metropolitan area?
PAN
WAN
MAN
LAN
8
In which phase of the SSDLC does peer code review occur?
Design
Deploy and maintain
Test
Identify
9
Which asset is the most important in cybersecurity?
Human life
Data
Endpoints
Web server
10
Which compliance is for the protection of businesses in the European Union?
GDPR
PCI DSS
SOC 2
ISO 27001
11
Which aspect of the CIA triad ensures data is
accessible
?
Instantiation
Integrity
Availability
Confidentiality
12
The remaining risk after mitigation control has been implemented is known as:
Mitigation control
Transferable risk
Impact of risk
Residual risk
13
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Detect
Respond
Identify
Protect
14
What type of malware attack occurred in the Colonial Pipeline hack?
Worm
Ransomware
Spyware
State Actor
15
When threat actors position themselves between a source and destination, it is known as what type of attack?
DDoS
Privilege Escalation
DoS
On-Path
16
Which aspect of the CIA triad ensures data is
accurate
?
Confidentiality
Integrity
Instantiation
Availability
17
Which structure is specific to Microsoft?
Community supported
User has no kernel access
Open source
Hierarchical tree file system
18
What percentage of users around the world are on the Windows operating system?
85%
75%
60%
50%
19
What is the purpose of DevSecOps?
To increase the application’s security
Unification of development, operations, and security
Testing implementation early to avoid issues downstream
Shift-left testing
20
In which phase of the Cyber Kill Chain are backdoors and other forms of persistence found?
Weaponization
Exploitation
Installation
C2
21
What attack exploits a vulnerability in BASH?
Sudo su
Dirty Pipe
Trojan
Shellshock