Block port 3389 inbound from untrusted networks.

Activate runbooks for incident response.

Privilege escalation, Directory traversal

Purchasing hardware from different vendors

Replacing the traditional key with an RFID key

Putting securityantitamper tape over USB ports logging port numbers and reg

Update the base container Image and redeploy the environment.

curl --head http://192.168.0.10

To validate the integrity of the files

Hiring an employee been convicted of theft to adhere to industry compliance

Publish document in central repository that easily accessible organization

Calculate the checksum using a hashing algorithm.

Perform containment on the critical servers and resources.

studbud

Sec+ 1

100 termsStudBud Administration20 plays

Imported from external platform

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
13
Encryption
Hashing
Tokenization
Masking
2
3
NIC Teaming
Automated Patch Managment
Snapshots
Reverse Proxy
3
67
Block port 3389 inbound from untrusted networks.
Prevent connections over TFTP from the internal network.
Create a firewall rule that blocks a 22 from the internet to the server.
Disable file sharing over port 445 to the server.
4
35
SSAE SOC 2
GDPR
NIST CSF
ISO 31000
5
75
Rainbow
Dictionary
Keylogger
Brute-Force
6
7
Classify the data
Perform a risk analysis
Assign the application owner
Mask the data
7
2
USB Data Blocker
Faraday Cage
Cable Lock
Proximity Reader
8
49
Conduct forensics on the compromised system.
Reimage the impacted workstations.
Activate runbooks for incident response.
Conduct passive reconnaissance to gather information.
9
18
DLP
HIPS
TPM
FIM
10
61
Pass-the-hash
Privilege escalation
SQL injection
Directory traversal
11
56
Stage
Development
Production
Test
12
70
PKI
OAuth
Blockchain
SAML
13
84
Cuckoo
Memdump
Autopsy
Nmap
14
11
DLP
NIDS
TPM
FDE
15
79
SIEM
CVSS
SOAR
CVE
16
54
Actions on objective
Reconnaissance
Exploitation
Command and control
17
41
Retention
Change management
Governance
Classification
18
1
On-Path
Domain Hijacking
Evil Twin
DNS Poisoning
19
5
XSS
sQLi
DLL Injection
API Attack
20
97
Common Weakness Enumeration
OSINT
Vulnerability database
Dark web
21
78
SFTP
SSH
SNMPv3
Telnet
22
94
CTO
DEO
DPO
DBA
23
37
Credential harvesting
Hoaxes
SPIMs
Identity fraud
24
58
Testing
Production
Development
Staging
25
55
Firewall syslog event logs
SIEM correlation dashboards
Network management solution login audit logs
Bandwidth monitors and interface sensors
26
59
Migrating workloads to public cloud infrastructure
Designing new detective security controls
Implementing a robust patch management solution
Purchasing hardware from different vendors
27
71
BYOD
VDI
Containerization
Mobile device Management
28
85
Mobile device management
Geofencing
Remote wiping
Containerization
29
50
Low efficacy
Low CER
Low FRR
Low FAR
30
99
SQLi attack
XSS attack
XSRF attack
Replay attack
31
21
False Entrance
False Acceptance
False Denial
False Rejection
32
42
DNS poisoning
Disassociation
Domain hijacking
Domain reputation
33
12
Replacing the traditional key with an RFID key
Setting motion-sensing lights to illuminate the door on activity
Surrounding the property with fencing and gates
Installing and monitoring a camera facing the door
34
86
Deterrent
Preventive
Corrective
Detective
35
44
Placing systems into locked key controlled containers with no access to the
Installing endpoint agent to detect connectivity of USB and removable media
Putting securityantitamper tape over USB ports logging port numbers and reg
Implementing GPO will restrict access to authorized USB removable media reg
36
32
Include the containers in the regular patching schedule for servers.
Update the base container Image and redeploy the environment.
Update the host in which the containers are running.
Patch each running container individually and test the application.
37
83
ping 192.168.0.10
nmap -pl-65535 192.168.0.10
curl --head http://192.168.0.10
dig 192.168.0.10
38
57
Hybrid
Community
Private
Public
39
72
Public
Top Secret
Open-source
Proprietary
40
8
XSRF
Broken Authentication
SQL Unjection
XSS
41
31
Motion sensors
Lighting
Fencing
Signage
42
19
To verify if the software was digitally signed
To use the hash as a software activation key
To use a hash as a decryption passphrase
To validate the integrity of the files
43
9
MFA
Lockout
Password History
TIme based logins
44
27
Stop current employees sibling from working at the bank to stop nepotism
Hiring an employee been convicted of theft to adhere to industry compliance
Filter applicants who added false info to resumes so they appear qualified
Ensuring new hires worked at other banks that tryna to steal customer info
45
90
Rotate CIRT members to foster a shared responsibility model organization.
Restrict eligibility to comment on the process to subject matter experts
Incent new hires to constantly update the document with external knowledge
Publish document in central repository that easily accessible organization
46
92
Preventive controls
Compensating controls
Detective controls
Deterrent controls
47
81
Look for tampering on the evidence collection bag.
Ensure proper procedures for chain of custody are being followed.
Calculate the checksum using a hashing algorithm.
Encrypt the collected data using asymmetric encryption.
48
47
Multiple vulnerability scanners
Intrusion prevention system
Patch management
Network segmentation
49
39
Longer key longevity
Algorithms that require less computing power
High data entropy
Hashing
50
91
Disconnect the entire infrastructure from the internet.
Review the firewall and identify the source of the active connection.
Perform containment on the critical servers and resources.
Conduct a full vulnerability scan to identify possible vulnerabilities.
51
100
cloud hot site
edge computing
Transit gateway
DNS sinkhole
52
98
Network attached stroage
SIEM
SOAR
Log collectors
53
33
acceptance.
transference.
avoidance.
mitigation.
54
17
Password reuse
Password History
Password Complexity
Password Age
55
48
Quality assurance
Intellectual property theft
Elevated privileges
Unknown backdoor
56
28
SWG
Application allow list
VPN
Host-Based firewall
57
30
Baseline configurations
Diagrams
Domain services
Standard naming conventions
58
46
Implement a TAXII server.
Perform OSINT investigations.
Submit RFCs
Subscribe to threat intelligence feeds.
59
65
WAF
NIPS
HIDS
HSM
60
36
Detection
Preparation
Containment
Lessons learned
61
53
Create help desk tickets to get infected systems reimaged.
Review how the malware was introduced to the network.
Attempt to quarantine all infected hosts to limit further spread.
Update all endpoint antivirus solutions with the latest updates.
62
73
A WAF
Segmentation
A CASB
An NG-SWG
63
25
Fire suppression
Generator power
Facility Automation
Geographical dispersal
64
80
Private
Hybrid
Public
Community
65
26
AES
TLS
HTTPS
EAP
66
20
nmap -p 80.10.10.10.0/24
ne -l -p 80
pathping 10.10.10.0 -p 80
nslookup 10.10.10.0
67
82
Shared accounts
Password history
Acceptable use policy
Complexity requirements
68
77
Supply chain
Removabe media
Direct access
Spear Phishing
69
52
Remote access Trojan
Logic bomb
Spyware
Cryptomalware
70
15
Store passwords in the system in rainbow table has a centralized location.
Perform mathematical operation on passwords will convert into unique string
Add extra data to the passwords their length is increased, hard brute force
Enforce use of one-time passwords that are changed for every login session.
71
89
Transference
Acceptance
Avoidance
Mitigation
72
87
Buffer overflow
Memory leak
API attack
DLL injection
73
62
DNS poisoning
Domain hijacking
Malicious script
Privilege escalation
74
38
MAC flooding
ARP poisoning
DDoS attack
DNS poisoning
75
51
GDRP
NIST
PCI DSS
ISO
76
74
CYOD and VMs
BYOD and containers
MDM and Application Managment
COPE and VDI
77
88
MDM
DLP
COntent filter
Firewall rule
78
29
Enforce escorts to monitor all visitors.
Utilize cameras monitored by guards.
Implement access control vestibules.
Use appropriate signage to mark all areas.
79
4
A smishing message stating a package is scheduled for pickup
SPIM notification claimin undercover enforcement investigating a cybercrime
Phishing email stating cas settlement has been awarded but will expire soon
A vishing call that requests a donation be made to a local charity
80
16
Cipher suite
Blockchain
Steganography
Homomorphic encryption
81
63
Whaling
Smishing
Phishing
Vishing
82
43
Agile
Waterfall
Spiral
V-shaped
83
68
HOTP
Kerberos
Federation
TOTP
84
60
User behavior analysis
Security orchestration, automation, and response
Threat hunting
Vulnerability scans
85
22
PCI DSS
ISO
NIST
GDRP
86
40
A zero-day exploit is initially undetectable, and no patch for it exists.
zero-day exploit is discovered, the system cannot be protected by any means
Discovering zero-day exploits is always performed via bug bounty programs.
Zero-day exploits have their own scoring category in CVSS.
87
66
Purchase cybersecurity insurance.
Implement a full system upgrade.
Install uninterruptible power supplies.
Perform a physical-to-virtual migration.
88
23
VISHING
HOPPING
Credential Harvesting
PHISHING
89
14
SSH
S/MIME
SRTP
LDAPS
90
76
Differential
Full
Snapshot
Cloud
91
34
True positive
False negative
False positive
True negative
92
64
Contact the authorities if a cybercrime is suspected.
Modify access so the IT team has full access to the compromised assets.
Train the team to identify the difference between events and incidents.
Restrict communication surrounding the response to the IT team.
93
96
persistence
pivoting
footprinting
Privilege escalation
94
45
Enforce time-based login requests that align with business hours.
Implement geofencing to only allow access from headquarters.
Shift the access control scheme to a discretionary access control.
Enforce MFA when an account request reaches a risk threshold.
95
93
IaaS
SaaS
PaaS
SDN
96
10
Subject alternative name
Domain Validation
Wild Card
Self-signed
97
69
Implement a SOAR with customizable playbooks.
Install a SIEM with community-driven threat intelligence.
Configure a NIDS appliance using a Switched Port Analyzer.
Collect OSINT and catalog the artifacts in a central repository.
98
6
Data Encryption
Data Masking
Data Anonymization
Data Tokenization
99
95
Hashing
Salting
Perfect forward secrecy
Key stretching
100
24
Persistence
Buffer overflow
Privilege escalation
Pharming

Sec+ 1 Flashcards | StudBud