stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Review 1 Flashcards | StudBud
Explore
/
Review 1
Review 1
25 terms
·
StudBud Administration
·
17 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
What does Full Disk Encryption (FDE) protect?
Operating system files only
Data in transit
The entire hard drive
Only user documents
2
Which of the following best defines "hardening"?
Encrypting all system files
Running all services in isolation
Making a system operate securely by reducing vulnerabilities
Increasing logging verbosity for all applications
3
Why is the concept of randomness (entropy) valuable in cybersecurity defense?
It simplifies network architecture
It ensures uniform access policies
It eliminates the need for antivirus software
It reduces the effectiveness of brute-force attacks by confusing attackers
4
Why is removable media encryption necessary?
To speed up data transfer
To protect data even when devices are physically removed
To allow compatibility with more OSes
o prevent file fragmentation
5
A threat actor scans a network to identify open ports and services. What attack strategy is being used?
Social engineering
Creating a backdoor
Technical approach
Escalating privileges
6
What is a key benefit of continuous monitoring after hardening?
Prevents system updates
Automatically repairs hardware
Detects deviations from secure configurations
Reduces network latency
7
Why is decommissioning important for security?
It improves system performance
It ensures sensitive data is erased properly
It prepares the device for resale
It resets the device's uptime statistics
8
Why should unused interfaces be explicitly disabled?
They affect power consumption
They use excessive bandwidth
They may allow unauthorized access
They reduce hardware longevity
9
What is the purpose of an Access Control List (ACL)?
To specify permissions for users or groups
To log user behavior
To store encryption keys
To filter unwanted emails
10
What is the
primary goal
of operating system security?
To prevent malware from being installed
To reduce user access to applications
To protect against unauthorized access and security threats
To optimize system performance
11
Which of the following best describes the purpose of reconnaissance in a cyber attack?
To gather information about the target system and organization
To identify users with administrative rights
To overwhelm the network with traffic
To plant malware on remote machines
12
What does configuration enforcement ensure?
That patches install automatically
That users cannot uninstall software
That devices reboot after updates
That device settings meet security baselines
13
Which action best exemplifies the use of social engineering in an attack?
Exploiting a zero-day vulnerability
Sending a phishing email to trick a user into revealing credentials
Creating a backdoor
Gaining access through default credentials
14
What is the
main reason
to test patches before production deployment?
To avoid missing updates
To improve patch download speeds
To ensure system stability and security
To reduce update size
15
An
allow list
for applications will:
Block all apps not explicitly approved
Allow any administrator-installed app
Allow all apps except those on a deny list
Only block malware known to the system
16
What is the best action to take with unused application service ports?
Monitor them passively without changing settings
Change them to non-standard values
Block or disable them at the firewall
Leave them open in case they're needed later
17
Why is "layering" important as a defense strategy?
prevents any one security control from becoming a single point of failure
It allows for the same security protocol to be applied repeatedly
It simplifies security configuration by consolidating tools
It provides redundancy, so users don’t lose access
18
What is the purpose of using a VPN in the context of endpoint protection?
To speed up internet access
To block phishing emails
To provide a secure tunnel for data transmission
To allow root access remotely
19
What does it mean to "stage computers" during an attack?
To simulate a false attack to test defenses
To set up backup systems in case the main attack fails
To prepare compromised systems to assist in further attacks
To use the computers for reconnaissance
20
Why is regular user awareness training critical for workstations?
To reduce the need for encryption
Because human behavior is a key security factor
Users need to learn new OS features
To detect zero-day malware
21
Which of the following is
unique
to workstation hardening?
Patch management
Access control lists
Screen lock settings
USB device control
22
What is the principle of
least functionality
?
Removing all admin accounts from the OS
Ensuring users have the least access privileges
Blocking all incoming traffic by default
Running only necessary protocols and service
23
What is the main goal of privilege escalation in a cyber attack?
To gain greater control and access within the system
To bypass physical security controls
To impersonate another user's identity
To avoid detection by antivirus software
24
What is the
most significant challenge
in patching legacy systems?
Requirement of command-line knowledge
Limited user interface options
Incompatibility with modern update tools
High bandwidth requirements
25
Which of the following would NOT typically be part of OS hardening?
Removing unnecessary applications
Installing performance benchmarking tools
Applying secure configurations
Disabling unused services
