stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ICWE-V5-Weekend Exam Review Flashcards | StudBud
Explore
/
ICWE-V5-Weekend Exam Review
ICWE-V5-Weekend Exam Review
26 terms
·
StudBud Administration
·
52 plays
Introduction to Cybersecurity Exam Review
Flashcards
26 cards
F
Practice quiz
P
Host live
L
Questions
26
Answers
1
Select all items that are involved in risk calculations
Threat
Asset
Attack
Vulnerability
2
Which of the following is a type of antivirus?
GUI
IPtables
ClamAV
iOS
3
Reviewing systems for possible weaknesses is called
Vulnerability Assesment
Sniffing
SOC Analysing
System Patching
4
Which of the following is a new vulnerabilty without a patch available?
Asset-grab
Zero-day
MITRE-log
NIST-source
5
What does a firewall do?
Allows computers to join a switch
Inspect incoming traffic
Checks for weak passwords
Reads log files
6
With proper planning, all vulnerabilities can be eliminated
True
False
7
Multiple controls to protect an asset is called
Defense In Depth
Local Area Network
MITRE Attack Framework
The CIA Triad
8
What does DLP stand for?
Dynamic Lan Protocol
Direct Local Protocol
Data Loss Prevention
Dont Like Potatoes
9
Which part of the CIA triad ensures that data hasn't changed in transit?
Integrity
Confidentiality
Availability
Readability
10
I GOT THIS!
True
False
11
SQL injection involves
A website
A switch
A firewall
A database
12
NIST is a reliable place to find vulnerability information
False
True
13
Something used to show potential employers your IT knowledge
Trends
Certifications
Analysts
Blog posts
14
Which regulation involves software for medical use?
NIST
HIPAA
PCI-DSS
MITRE
15
What type of attack uses links in an email
Zero Day
Dos
Phishing
DdoS
16
What type of hacker breaks into organizations for personal gain?
Unethical Hacker
Ethical Hacker
Hacktivist
Blue Hat Hacker
17
What type of team would a SOC analyst belong to?
Purple team
Blue team
Red team
Green team
18
Which attack involves sniffing data between two or more computers
DoS
Switch
On-Path
Firewall
19
OWASP is a government agency
True
False
20
SSDLC involves
Networks
Applications
Patching
MITRE
21
Which type of network, below, is the internet considered to be
PAN
WAN
SAN
LAN
22
What type of attack is based on a vendor's vulnerable equipment?
Supply chain
SOC attack
CISCO
Internal threat
23
What is one of the leading causes of KNOWN vulnerabilities being exploited?
Data loss protection
Apple M1 chips
Misconfigured firewalls
Poor patch management
24
How would you "harden" a Linux server?
Remove unnecessary services
Convert to SSD's
Increase physical memory
Delete it and switch to Windows
25
Kali Linux is used for penetration testing
True
False
26
Testing of code for constant improvement is called
OWASP
Shift Left
MITRE Framework
Mitigating