stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CASP 003 Blitz Friday NEW Flashcards | StudBud
Explore
/
CASP 003 Blitz Friday NEW
CASP 003 Blitz Friday NEW
30 terms
·
StudBud Administration
·
16 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
When Alice assigns homework to her students using Google Classroom, what Cloud service is she using?
PAAS
CASB
IAAS
SAAS
2
You have imaged 10 workstations using AGM 1909 build, prior to deployment you run a scap scan, what are you performing?
Imaging
Compliance Scan
Vulnerability Scan
REMEDIATION
3
What cloud based As a Service is used by my development team?
SAAS
CASB
IAAS
PAAS
4
What command will I use to view all active connections on my host computer?
ipconfig
netstat
ping
tshark
5
What command will I use on my RedHat server to end running processes?
kill <process id>
stop <process id>
netstat <process id>
ps -A <process id>
6
Ford Motors move all their core services into the cloud, Network Engineers will remotely manage hardware Clusters?
IAAS
PAAS
SAAS
CASB
7
What type of SSO mechanism would be appropriate for authenticating internal enterprise users?
OPENID
KERBEROS
MSCHAP
TACACS
8
What will FBI investigators use to perform a forensic copy of a hard drive?
dd if=/dev/sda of=/dev/sdb
memdump
ifconfig
Foremost
9
When moving services back on-premise, what is your chief concern during this transfer from your cloud provider?
Data Remnants
Data Classification
Data Isolation
Duplicate Data
10
What will I type in the terminal on my RedHat server to ensure the downloaded
patch.mod
file is not corrupt?
attrib patch.mod
gpg -e patch.mod
ifconfig patch.mod
md5sum patch.mod
11
What will FBI investigators use to access memory resident forensic artifacts?
ifconfig
dd
memdump
Foremost
12
The attacker “breaks out” of a VM’s normally isolated state and interacts directly with the hypervisor?
fraggle attack
Smurf attack
Hot Desking Attack
a VMEscape attack
13
Select an Asymmetric algorithm that enforces perfect forward secrecy (PFS)?
SHA256
ECDHE
ECC
RSA
14
When choosing a cloud solution for your government department, Data stored will include PII what would be most secure?
Public Cloud
Private Cloud
Community Cloud
Secure Cloud
15
What hashing algorithm is vulnerable to collisions??
DES
SHA256
3DES
MD5
16
What governs Information that is stored in digital form is subject to the laws of the country in which it is located?
data sovereignty
data globalisation
Chain of Custody
data offshoring
17
What Cloud model would be appropriate for Critical Infrastructure services
Private SAAS
Public SAAS
Private IAAS
Community PAAS
18
What allows data from multiple resources to be collated, then queried to give analytical reports?
Data aggregation
SQL Query
Data analysis
Data logging
19
What is the best response when criminals steal patient records and demand payments?
Conduct an audit of Information Systems
Contact Legal & Inform Law Enforcement
Deploy Hunt Teams
Purge all Sensitive PHI
20
Developers connect into azure cloud to access an application stack to code their applications, what AAS will they need?
IAAS
SAAS
CASB
PAAS
21
A software layer that operates as a gatekeeper between an organization’s on-premise network and the provider’s cloud?
REST API
CASB
IAAS
SAAS
22
What type of system is based on a digital ledger managed by a peer to peer network?
SOA
Blockchain
CRM
ERP
23
A VM guest user has discovered a zero day that allows access to the main VMware admin console, what is the threat?
VM LICENSE COST
VM ESCAPE
VM SPRAWL
VM INCIDENTS
24
What will my file integrity monitoring use to validate files have not been tampered with?
Asymmetric Encryption
File Ownership
Hashing
File Locking
25
What do developers use as key stretching algorithms?
3DES RC4
TPM UEFI
BCRYPT PBKDF2
MD5 SHA1
26
What will FBI investigators use to access my deleted files?
Foremost
dd
memdump
ifconfig
27
what is used in cloud computing to ensure that tenant data in a multitenant solution is segmented from other tenants?
Public cloud
Data isolation
Cloud Isolation
Data Hiding
28
The CEO's laptop is infected with crypto-malware and is connected to the NAS, what action should a technician take next?
Contact Legal
Isolate
Contact CISO
Begin a Forensic Investigation
29
You are hardening your Linux host prior to deployment in DMZ, what would enable you to harden this server?
Deploy SELINUX & run in ENFORCE mode
Disable IPTABLES & enable SAMBA service
Use Windows GPO to disable services
Deploy UBUNTU & run in ENFORCE mode
30
You are hosting applications on RedHat Linux, where will you store secure salted password hash values?
/etc/passwd
/etc/root
/etc/shadow
/etc/passwd/hash