Cybersecurity Year 1 - Module 9 Review

When planning and preparing  an information security audit, all of the following steps should be followed except:

Authorized simulated cyberattack on a computer system, performed to evaluate the security of the system:

Once an attacker has exploited one vulnerability, they may gain access to other machines so the process repeats:

A __________ creates a secure connection between two networks over the internet.

Penetration testing phase in which the attacker uses data to exploit the targeted system:

Definition of black box testing:

Attacker who aims to make political statements or damage organizations whose views they oppose:

Which term describes the process of taking your network and creating virtual local area networks (VLANS)?

Improved performance is achieved on a segmented network because there are many more hosts per subnetwork.

The main motivation of nation-state actors:

The idea of granting the user minimum rights required to perform its job is referred to as _______________________.

Security mechanisms for servers need to be complex for the defense against security issues.

The MAC addresses of wireless clients can't truly be changed because they're encoded in the hardware.

Penetration testing phase in which the attacker gathers important information on the target system:

WEP is the oldest and least secure, and almost all wireless experts advise utilizing WPA or WPA2 instead.

Definition of white box testing:

The nature of eavesdropping on, or monitoring of, transmissions:

An SSID is the only requirement necessary for a secure network.

What is the main way external threats can gain access to a network?

Installing a _________ in between your firewall and network allows you to install a dedicated IDS for device protection.

Penetration testing phase in which the attacker clears any trace of compromising the system:

Primary objective of a penetration test:

The primary motivation of organized crime threat actors:

Segmenting allows __________ access to the network to be controlled by implementing VLANs to segregate the network.

Packet capture is illegal for law enforcement use due to the intrusion of privacy.

Modification of the data stream or the creation of a false stream:

Which of these is NOT a use for packet or protocol analyzers?

A tool used for network security, specifically to hide the true address of client workstations and act as a firewall:

The two most basic methods to design a network with a DMZ, are with a single firewall or with __________ firewalls.

Unprotected wireless networks at restaurants and public places are safe to use and do not open you up for cyber attacks.

What type of threat is described as mostly inexperienced individuals using easily available hacking tools?

Which of the following is NOT self-replicating?