Intro Exam Review

MAC address's are displayed in HEX format.

DNS does what? (choose best answer)

What type of attack uses Javascript?

______ is the largest contributer to security breaches. (pick the best answer)

Which protocol by default uses port 80? (make sure to see all answers before choosing)

Which user account has full control over a Linux operating system?

Match the definition: Devices connected to a network, such as computers, servers, phones, and IoT devices.

You can alsways trust information you read on the internet.

Wireshark is an example of an active attack

Choose the main three types of authentication. (pick three)

Common threat vectors include

Select all states that data can be in (choose 3)

OWASP is a government agency

Pick all the Hacker Classifications

The administrator account is disabled by default on a new Windows 10 install.

Authorization provides users with permission to access resources

I want to go in to which Cybersecurity field?

What is the number 1 web app vulnerability according to OWASP?

SQL injection _____

You click link that redirects you to Faceb00k. At the site, a prompt requesting CC information. Which phase are you in?

On a LAN, how do computers communicate?

Select all network types

An IP address is used to uniquely identify computers on the network.

Ways to harden a server is to:

______ is the first step in the Cyber Kill chain

Which network device allows your traffic to go from one network to another?

What attack leverages unsuspecting user machines?

A Network device used to prevent unauthorized access from entering the network

This Exam has got nothing on me!

Which indicator shows that an advasary is activaly in your system or has compermosed your network?

Which Windows account is most restricted?

Which control type is NOT one of the three main categories of security controls?

Which of the following describes a security flaw that can be exploited by an attacker?

Which method will also help protect your network from an active attack?

What is a "zero day"?

An app is software designed to help accomplish a task

Which Linux command elevates you to root before running the next command

STRIDE is a threat classification model.

What aspect of the CIA triad ensures data is accurate?

A site with information about Cybersecurity jobs

Dan downloads a program that encrypts data and demands payment to restore. What type of malware did Dan download?

Which role below is another name for a red teamer?

___ is a security vuln. that allows attackers to induce a server-side app to make requests to an unintended location

Reconnaissance is always passive

What is a Common Vulnerability and Exposure (CVE)?

Which part of the CIA makes sure that data is not altered?

An on-path attach affects which factor(s) in the CIA triad? (hint you can select more than answer)

In Linux to delete a file using the CLI, you would use which command?

Another name for a Nation/State hacker would be

The CIA triad stands for

Which framework describes the stages of a succesful cyber attack?

Kali Linux is used for pentesting

Virtualization provides all the following EXCEPT:

A network is 2 or more devices sharing data.

Small network that uses MAC address.

Common Vulnerabilities and Exposures is maintained by _____

The Tactic, Technique, or Procedure represents the big picture ("WHY")?

Select the three categories of controls

The Linux Super User account (like the administrator account in Windows) is called root.

You are troubleshooting and want to see the routing path traffic takes on Linux. Which command do you use?

I GOT THIS EXAM!

Which was a famous ransomware breach?

Risk is comprised of all of the following EXCEPT.

Select all versions of the Windows Operating System

What type of attack is used to intercept data between devices?

Making use of somebody else's user name and password is called

What is a vulnerability?

How does a breach directly impact an organization? (choose top 3)

What CLI tool can you use to do a DNS lookup?

The last stage of the cyber kill chain is

What is Defense in Depth (DiD)?

My favorite class was

Network device designed to forward packets based on their IPs between networks.

What Linux command brings you back to your home directoty

Which program is used to do an active scan on a network?

Intrusion Detection Systems (IDS) can stop an active attack by blocking block malicious traffic.

What is the primary purpose of a firewall?

DNS is a secure protocol.

The core of anoperating system is called

What are the impacts to an orginization if they get hacked?

Linux pre-bundled with GNU applications for a specific purpose is called

The last phase of the NIST cybersecurity framework is

Defense in Depth is a concept that defines a multi-layered security structure.