stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
GMetrix -ITS Cybersecurity Training Mode 35-40 Flashcards | StudBud
Explore
/
GMetrix -ITS Cybersecurity Training Mode 35-40
GMetrix -ITS Cybersecurity Training Mode 35-40
28 terms
·
StudBud Administration
·
24 plays
Imported from external platform
Flashcards
28 cards
F
Practice quiz
P
Host live
L
Questions
28
Answers
1
Netflix manages citizens' data in the EU. Which compliance act must they adhere to when investigating security incidents
PCI-DSS
FISMA
GDPR
HIPAA
2
Which Linux command is used to change to the root directory
cd/root
chmod
sudo
su
3
Which US-compliant framework requires colleges to ensure the privacy and security of student information
GDPR
FERPA
PCI-DSS
HIPAA
4
Acceptable use policy defines a set fo rules to be followed by users and customers
False
True
5
Which of the following automates security operations, threat intelligence, and incident response?
SIEM
SCAP
SOAR
STIX
6
An attacker is obtaining an automated tool to deliver malware after identifying a vulnerability. Which step is this
Exploitation
Reconnaissance
Weaponization
Delivery
7
(choose the correct syslog level) An unusual event but not and error
level 6 (information)
level 4 (warning)
level 1 (Alert)
level 5 (notice)
8
Natural disasters can be mitigated with...
Standard procedures, training
Hardened facilities and alternate sites
Alternate sources, inventory management
Firewalls, IDS and IPS, Log Analyzers
9
Cyber attacks can be mitigated with...
Hardened facilities and alternate sites
Firewalls, IDS and IPS, Log Analyzers
Standard procedures, training
Alternate sources, inventory management
10
Supply-chain disruptions can be mitigated with...
Hardened facilities and alternate sites
Alternate sources, inventory management
Firewalls, IDS and IPS, Log Analyzers
Standard procedures, training
11
Which of the following analyzes and aggregates log data from different IT systems to identify security threats.?
PCI-DSS
CPR
SIEM
SOAR
12
Which of the following automates system vulnerability management and security compliance evaluation.
SIEM
SOAR
SCAP (Security Content Automation Protocol)
GDPR
13
Remote access policy defines a set of rules to be followed by users connecting from their homes.
True
False
14
Employee errors can be mitigated with...
Firewalls, IDS and IPS, Log Analyzers
Hardened facilities and alternate sites
Standard procedures, training
Alternate sources, inventory management
15
Network access policy identifies network resources and usage that are acceptable to an organization
False
True
16
Which policy specifies which people can have access to network resources
Remote access policy
Identificaiton and authentication policy
Network maitenence policy
Acceptable use policy
17
The password policy...
defines a set of rules to be followed by users or customers
specifies which authorized people can have access to network resources
deals with type of characters that can be used to log into a network
defines the access conditions for users connecting into the network
18
(choose the correct syslog level) The condition should be corrected immediately
level 1 (Alert)
level 5 (notice)
level 4 (warning)
level 6 (information)
19
How can a company protect a device from unwanted access and malware that may have passed its firewall?
Use file encryption on the device.
Require users to log in to access the device.
Use a host-based firewall on the device.
Run the system file checker tool on the device.
20
(choose the correct syslog level) An error may occur if the situation is not remedied
level 1 (Alert)
level 5 (notice)
level 6 (information)
level 4 (warning)
21
What is used to authenticate and verify the identity of website
Digital certificate
Website domain name
Code signing
Website IP address
22
A business continuity plan is important because it outlines how a business recovers from a cyber attack
False
True
23
What creates and manages digital validation for websites within the public key infrastructure?
US Government Federal Information Processing Standard (FIPS)
Code signing
Certificate Authority (CA)
Diffie-Hellman (DH)
24
Read the following
low
moderate
high
very low
25
(choose the correct level) Normal Operation. Requires no intervention.
level 5 (notice)
level 6 (information)
level 4 (warning)
level 1 (Alert)
26
Which algorithm is a one-way mathematical function that is used to provide data integrity
3DES
Diffie-Hellman
SHA-2
AES
27
A(n) ___ is the possibility of exposure, loss of an asset, or harm to a company's reputation from a cyber attack.
risk
exploit
ransomware attack
cryptworm
28
What will permit access to a home wireless network for only specific devices?
MAC filtering
Firewall
SSID hiding
WEP
