stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ThriveDX - CS-IC - Exam Review Flashcards | StudBud
Explore
/
ThriveDX - CS-IC - Exam Review
ThriveDX - CS-IC - Exam Review
30 terms
·
StudBud Administration
·
303 plays
The Saturday Review Prior To The Exam
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
Which one of the following tools uses ICMP?
DHCP
Ping
DNS
Traceroute
2
What is the primary purpose of the ping command?
To flood a switch so that it uses broadcast mode
To verify that a device is responding on the network
To make sure that an attacker can't breach a firewall
To count how many hops it takes to reach a computer
3
CLI stands for:
Current Log In
Command Line Interface
Core Level Input
Computer Location Information
4
Regarding Defence in Depth, identify an Administrative control
Using anti-virus systems on PC's
Using firewalls to block malicious IP addresses
Conducting security awareness training for all employees (esp. Bob)
Deploying cameras in sensitive areas
5
In Linux, what command is used to view a directory's contents?
cd
ls
dir
mkdir
6
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Detect
Protect
Identify
Respond
7
What information would a hacker try to acquire as part of the Reconnaissance phase?
Operating Systems
Employee Information
Customer Information
Network Topology
8
Which process makes a system secure for its purpose?
Security
Baselining
Benchmarks
Hardening
9
The remaining risk after mitigation control has been implemented is known as:
Mitigation control
Impact of risk
Transferable risk
Residual risk
10
In Linux, what command gives a user elevated permissions
nano
root
vim
sudo
11
What type of attack floods a website with packets?
None of the above
ICMP
DoS/DDoS
Ransomware
12
What is the PRIMARRY purpose of a FIREWALL?
Inspects incoming streams
Backs up a system to restore
Allow or deny traffic based on rules
Remove worms
13
What is the MITRE ATT&CK Framework used for?
Provides a line graph of attack frequency
Help classify attacks, identify objectives, and assess risk
Information about the relationship between threat features
Tells you the steps of a threat event in 7 steps
14
What is the concept of Defense in Depth?
An Intrusion Prevention / Detection System (IPDS)
Using firewalls, tokens and passwords combined
Using key cards for server rooms
Multiple layers of controls to prevent unauthorized access
15
I have had the most awesome instructors, so I am going to NAIL this exam
False
True
16
All of the following are part of the Cyber Kill Chain, EXCEPT
Weaponization
Reconnaissance
Delivery
Demand
17
Which structure is specific to Microsoft operating systems?
Open source
User has no kernel access
Community supported
Hierarchical tree file system
18
When threat actors position themselves between a source and destination, it is known as what type of attack?
DoS
On-Path
Privilege Escalation
Smurf
19
Which asset is the most important in cybersecurity
Human life
Web server
Endpoints
Data
20
What does CVE stand for?
Common Vulnerabilities and Exposures
Current Versions of Expectations
None of the above
Central Virus Encyclopedia
21
What is the purpose of DevSecOps?
Unification of development, operations, and security
To increase the application’s security
Testing implementation early to avoid issues downstream
Shift-left testing
22
Which aspect of the CIA triad ensures data is
accessible
?
Integrity
Instantiation
Availability
Confidentiality
23
Which state of data has the most risk?
Data at rest
Data in use
Data in transit
Data in long term storage
24
Which network infrastructure has a connection that spreads across a city or metropolitan area?
WAN
LAN
PAN
MAN
25
In Windows, which command will display a list of files?
dir
rmdir
mkdir
cd
26
Which of the following is NOT part of the CIA triad
Availability
Instantiation
Confidentiality
Integrity
27
What percentage of users around the world are on the Windows operating system?
68%
98%
75%
50%
28
Which command would you use to create a file via the terminal in Linux?
touch
cd
cat
ls
29
Typically the weakest link exploited by hackers is
Vulnerable Websites
Network Monitoring
Human Factor
Misconfigured Firewalls
30
A program or command used to scan open ports on a device
metasploit
ettercap
nmap
kali
