To validate the integrity of the files

Hiring an employee been convicted of theft to adhere to industry compliance

Replacing the traditional key with an RFID key

Phishing email stating cas settlement has been awarded but will expire soon

Calculate the checksum using a hashing algorithm.

Train the team to identify the difference between events and incidents.

Update the base container Image and redeploy the environment.

Block port 3389 inbound from untrusted networks.

Activate runbooks for incident response.

Attempt to quarantine all infected hosts to limit further spread.

studbud

Sec+ 1

100 termsStudBud Administration20 plays

Imported from external platform

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
95
Perfect forward secrecy
Key stretching
Salting
Hashing
2
16
Steganography
Cipher suite
Homomorphic encryption
Blockchain
3
46
Implement a TAXII server.
Subscribe to threat intelligence feeds.
Submit RFCs
Perform OSINT investigations.
4
6
Data Tokenization
Data Encryption
Data Anonymization
Data Masking
5
78
SNMPv3
SFTP
SSH
Telnet
6
28
VPN
SWG
Host-Based firewall
Application allow list
7
19
To validate the integrity of the files
To use a hash as a decryption passphrase
To use the hash as a software activation key
To verify if the software was digitally signed
8
27
Hiring an employee been convicted of theft to adhere to industry compliance
Stop current employees sibling from working at the bank to stop nepotism
Ensuring new hires worked at other banks that tryna to steal customer info
Filter applicants who added false info to resumes so they appear qualified
9
12
Surrounding the property with fencing and gates
Installing and monitoring a camera facing the door
Replacing the traditional key with an RFID key
Setting motion-sensing lights to illuminate the door on activity
10
4
A vishing call that requests a donation be made to a local charity
Phishing email stating cas settlement has been awarded but will expire soon
SPIM notification claimin undercover enforcement investigating a cybercrime
A smishing message stating a package is scheduled for pickup
11
92
Compensating controls
Detective controls
Preventive controls
Deterrent controls
12
74
MDM and Application Managment
COPE and VDI
BYOD and containers
CYOD and VMs
13
71
BYOD
VDI
Containerization
Mobile device Management
14
1
DNS Poisoning
On-Path
Domain Hijacking
Evil Twin
15
5
API Attack
DLL Injection
XSS
sQLi
16
75
Dictionary
Keylogger
Rainbow
Brute-Force
17
81
Look for tampering on the evidence collection bag.
Ensure proper procedures for chain of custody are being followed.
Encrypt the collected data using asymmetric encryption.
Calculate the checksum using a hashing algorithm.
18
9
Password History
TIme based logins
MFA
Lockout
19
34
False positive
False negative
True negative
True positive
20
82
Complexity requirements
Acceptable use policy
Password history
Shared accounts
21
94
DBA
DEO
CTO
DPO
22
63
Whaling
Phishing
Vishing
Smishing
23
3
Reverse Proxy
NIC Teaming
Snapshots
Automated Patch Managment
24
47
Network segmentation
Intrusion prevention system
Patch management
Multiple vulnerability scanners
25
11
FDE
DLP
NIDS
TPM
26
10
Domain Validation
Subject alternative name
Self-signed
Wild Card
27
97
Vulnerability database
Common Weakness Enumeration
Dark web
OSINT
28
85
Geofencing
Remote wiping
Mobile device management
Containerization
29
37
SPIMs
Hoaxes
Identity fraud
Credential harvesting
30
25
Fire suppression
Generator power
Facility Automation
Geographical dispersal
31
31
Lighting
Fencing
Motion sensors
Signage
32
54
Command and control
Reconnaissance
Actions on objective
Exploitation
33
39
Longer key longevity
Algorithms that require less computing power
Hashing
High data entropy
34
17
Password reuse
Password Complexity
Password Age
Password History
35
68
HOTP
Federation
Kerberos
TOTP
36
64
Modify access so the IT team has full access to the compromised assets.
Train the team to identify the difference between events and incidents.
Contact the authorities if a cybercrime is suspected.
Restrict communication surrounding the response to the IT team.
37
89
Avoidance
Mitigation
Acceptance
Transference
38
79
CVSS
CVE
SIEM
SOAR
39
57
Community
Private
Hybrid
Public
40
32
Include the containers in the regular patching schedule for servers.
Update the host in which the containers are running.
Patch each running container individually and test the application.
Update the base container Image and redeploy the environment.
41
55
Network management solution login audit logs
Bandwidth monitors and interface sensors
SIEM correlation dashboards
Firewall syslog event logs
42
20
nmap -p 80.10.10.10.0/24
ne -l -p 80
pathping 10.10.10.0 -p 80
nslookup 10.10.10.0
43
67
Create a firewall rule that blocks a 22 from the internet to the server.
Block port 3389 inbound from untrusted networks.
Disable file sharing over port 445 to the server.
Prevent connections over TFTP from the internal network.
44
13
Masking
Tokenization
Encryption
Hashing
45
33
acceptance.
transference.
avoidance.
mitigation.
46
49
Reimage the impacted workstations.
Conduct passive reconnaissance to gather information.
Activate runbooks for incident response.
Conduct forensics on the compromised system.
47
53
Attempt to quarantine all infected hosts to limit further spread.
Review how the malware was introduced to the network.
Update all endpoint antivirus solutions with the latest updates.
Create help desk tickets to get infected systems reimaged.
48
80
Hybrid
Private
Public
Community
49
21
False Entrance
False Acceptance
False Denial
False Rejection
50
36
Detection
Lessons learned
Preparation
Containment
51
8
XSRF
SQL Unjection
XSS
Broken Authentication
52
56
Development
Stage
Production
Test
53
42
DNS poisoning
Domain reputation
Disassociation
Domain hijacking
54
58
Development
Production
Testing
Staging
55
14
SRTP
S/MIME
LDAPS
SSH
56
61
Pass-the-hash
SQL injection
Directory traversal
Privilege escalation
57
23
VISHING
PHISHING
Credential Harvesting
HOPPING
58
77
Spear Phishing
Supply chain
Removabe media
Direct access
59
30
Baseline configurations
Domain services
Diagrams
Standard naming conventions
60
38
DNS poisoning
DDoS attack
ARP poisoning
MAC flooding
61
88
DLP
MDM
Firewall rule
COntent filter
62
51
PCI DSS
NIST
GDRP
ISO
63
44
Implementing GPO will restrict access to authorized USB removable media reg
Placing systems into locked key controlled containers with no access to the
Putting securityantitamper tape over USB ports logging port numbers and reg
Installing endpoint agent to detect connectivity of USB and removable media
64
52
Cryptomalware
Spyware
Remote access Trojan
Logic bomb
65
22
PCI DSS
NIST
ISO
GDRP
66
24
Pharming
Privilege escalation
Persistence
Buffer overflow
67
7
Perform a risk analysis
Classify the data
Assign the application owner
Mask the data
68
35
SSAE SOC 2
GDPR
NIST CSF
ISO 31000
69
73
Segmentation
An NG-SWG
A WAF
A CASB
70
15
Add extra data to the passwords their length is increased, hard brute force
Enforce use of one-time passwords that are changed for every login session.
Store passwords in the system in rainbow table has a centralized location.
Perform mathematical operation on passwords will convert into unique string
71
96
footprinting
persistence
Privilege escalation
pivoting
72
76
Full
Differential
Snapshot
Cloud
73
62
Malicious script
Privilege escalation
DNS poisoning
Domain hijacking
74
86
Preventive
Detective
Corrective
Deterrent
75
66
Implement a full system upgrade.
Perform a physical-to-virtual migration.
Install uninterruptible power supplies.
Purchase cybersecurity insurance.
76
43
Waterfall
Spiral
V-shaped
Agile
77
87
DLL injection
API attack
Memory leak
Buffer overflow
78
84
Autopsy
Cuckoo
Nmap
Memdump
79
45
Enforce time-based login requests that align with business hours.
Enforce MFA when an account request reaches a risk threshold.
Shift the access control scheme to a discretionary access control.
Implement geofencing to only allow access from headquarters.
80
70
PKI
SAML
OAuth
Blockchain
81
93
PaaS
SDN
IaaS
SaaS
82
83
ping 192.168.0.10
dig 192.168.0.10
nmap -pl-65535 192.168.0.10
curl --head http://192.168.0.10
83
98
Network attached stroage
SIEM
Log collectors
SOAR
84
65
HIDS
NIPS
WAF
HSM
85
40
Zero-day exploits have their own scoring category in CVSS.
Discovering zero-day exploits is always performed via bug bounty programs.
zero-day exploit is discovered, the system cannot be protected by any means
A zero-day exploit is initially undetectable, and no patch for it exists.
86
48
Quality assurance
Elevated privileges
Unknown backdoor
Intellectual property theft
87
2
Faraday Cage
USB Data Blocker
Cable Lock
Proximity Reader
88
60
Security orchestration, automation, and response
User behavior analysis
Vulnerability scans
Threat hunting
89
29
Implement access control vestibules.
Use appropriate signage to mark all areas.
Enforce escorts to monitor all visitors.
Utilize cameras monitored by guards.
90
91
Review the firewall and identify the source of the active connection.
Disconnect the entire infrastructure from the internet.
Conduct a full vulnerability scan to identify possible vulnerabilities.
Perform containment on the critical servers and resources.
91
69
Implement a SOAR with customizable playbooks.
Configure a NIDS appliance using a Switched Port Analyzer.
Collect OSINT and catalog the artifacts in a central repository.
Install a SIEM with community-driven threat intelligence.
92
72
Open-source
Public
Proprietary
Top Secret
93
50
Low FRR
Low FAR
Low efficacy
Low CER
94
26
TLS
HTTPS
AES
EAP
95
59
Designing new detective security controls
Migrating workloads to public cloud infrastructure
Purchasing hardware from different vendors
Implementing a robust patch management solution
96
90
Publish document in central repository that easily accessible organization
Rotate CIRT members to foster a shared responsibility model organization.
Incent new hires to constantly update the document with external knowledge
Restrict eligibility to comment on the process to subject matter experts
97
18
TPM
HIPS
DLP
FIM
98
41
Retention
Classification
Change management
Governance
99
99
XSS attack
XSRF attack
SQLi attack
Replay attack
100
100
cloud hot site
DNS sinkhole
edge computing
Transit gateway

Sec+ 1 Flashcards | StudBud