Use of information for a purpose other than was originally disclosed

Install additional tools that can detect scans and send the logs to syslog.

Compromise of the underlying VMware host

You cannot determine if a message was forwarded by analyzing the headers.

Uploading all files to a thirdparty virus scanning platform like VirusTotal

Check /home/ for new user directories.

nmap -sU -p 9100,515,631 10.0.10.15/22 -oX printers.txt

Move the administrative interface to a protected network

Frank does not need to make a change; this is a default setting.

studbud

TRY THIS ON FOR SIZE CYSA NINJA!!

50 termsStudBud Administration35 plays

Imported from external platform

Flashcards50 cardsFPractice quizPHost liveL

Questions 50

Answers

1
No. 6
A zone transfer
Using maltego
A DNS forward or reverse lookup
A WHOIS query
2
No. 13
netstat -i
intf -q
ifconfig
ip link show
3
No. 36
APFS
FAT32
HFS+
MacFAT
4
No. 21
Email
Flat file
CSV
API
5
No. 46
Public
Highly Sensitive
Internal
Sensitive
6
No. 14
HSM-2015
CA-Check
FIPS 140-2
PCI-DSS
7
No. 44
Data ownership policy
Privacy policy
NDA
AUP
8
No. 11
Fault injector
Fuzzer
Static code analyzer
Web application assessor
9
No. 49
Unpatched vulnerability on a web server
Improper file permissions for a group of employees
Accidental destruction of backup media
Use of information for a purpose other than was originally disclosed
10
No. 4
Install additional tools that can detect scans and send the logs to syslog.
Search for connections to ports in the /var/syslog directory
Log all kernel messages to detect scans
Search for use of privileged ports in sequential order
11
No. 42
SED
eSATA
P2PE
MFA
12
No. 50
PaaS
IaaS
FaaS
SaaS
13
No. 10
VPC
UEFI
TPM
HSM
14
No. 31
Public key and cryptographic hash
MD5 hash
File size and file creation date
Private key and cryptographic hash
15
Which one of the following activities is least likely to occur during the risk identification process?
Vulnerability scanning
System assessments
Network segmentation
Threat intelligence
16
No. 9
1433
443
1521
8080
17
No. 25
MAC address
Hostname
IP address
None of the above
18
No. 23
grep example.txt cysa+
grep -case cysa+ example.txt
grep -i cysa+ example.txt
grep -uc CySA+ example.txt
19
No. 41
Firewall
Nondisclosure agreement
Background investigation
DLP system
20
No. 18
A denial-of-service attack
SQL injection
Session hijacking
XSS
21
No. 26
An interactive defense
A bear trap
A honeyjar
An active defense
22
In order, which set of Linux permissions are least permissive to most permissive?
544, 444, 545
111, 734, 747
711, 717, 117
777, 444, 111
23
No. 7
Telnet, SNMP, DNS, LDAP
SSH, SMTP, DNS, LDAP
Telnet, SMTP, DHCP, MS-SQL
SSH, SNMP, DNS, RDP
24
Naomi wants to analyze malware by running it and capturing what it does. What type of tool should she use?
A virtualization tool
A sandbox tool
A packet analyzer
A containerization tool
25
What markup language provides a standard mechanism for describing attack patterns, malware, threat actors, and tools?
OpenIOC
TAXII
XML
STIX
26
No. 20
Telnet to the port
Send an email via the open port.
Send an SMTP probe.
SSH to the port.
27
No. 28
A NetFlow collector
A firewall
A honeypot
A BGP monitor
28
No. 30
Risks
Surface tension
Attack vectors
Threats
29
No. 45
Swiss team
Red team
Blue team
White team
30
No. 3
Integer overflow
Stack overflow
Heap overflow
Buffer overflow
31
No. 12
VLAN hopping
Compromise of the underlying VMware host
802.1q trunking vulnerabilities
BGP route spoofing
32
No. 19
Reviewing the Message-ID to see if it has been incremented
You cannot determine if a message was forwarded by analyzing the headers.
Checking for the References field
Checking for the In-Reply-To field
33
No. 22
SQLite
NoSQL
Base64 encoded text
Plain text
34
No. 15
Uploading all files to a thirdparty virus scanning platform like VirusTotal
Checking the size of uploaded files against a maximum allowed file size
Checking zip files for their structure and path before unzipping them
Using input validation to ensure only allowed file extensions
35
No. 2
SQL injection
Cross-site scripting
Impersonation
Privilege escalation
36
No. 39
Review /etc/sudoers for unexpected accounts.
Check /home/ for new user directories.
Check /etc/groups for group membership issues.
Review /etc/passwd and /etc/shadow for unexpected accounts.
37
No. 35
nmap -sS -p 9100,515,631 10.0.10.15/22 -oX printers.txt
nmap -sS -O 10.0.10.15/22 -oG | grep >> printers.txt
nmap -sU -p 9100,515,631 10.0.10.15/22 -oX printers.txt
nmap -O 10.0.10.15/22 -oG - | grep printer >> printers.txt
38
No. 29
Cross-training
Succession planning
Dual control
Separation of duties
39
No. 27
Disable console access entirely
Implement a login-block feature with back-off settings
Prevent console login via SSH
Move the administrative interface to a protected network
40
No. 48
A precursor
An indicator
A risk
A threat
41
No. 16
A complete operation
Perpendicular execution
Atomic execution
A fractional operation
42
No. 43
Repeat the business impact assessment
Design a remediation plan
Document the decision
Implement additional security controls
43
No. 8
SSL v2
SSL v3
PPTP
IPsec
44
No. 37
Business DMZ
Critical system DMZ
Business network
Safety systems
45
No. 38
Hashcat
Ophcrack
Cain and Abel
John the Ripper
46
No. 5
less
more
grep
strings
47
No. 32
Frank does not need to make a change; this is a default setting.
auditpol.msc
regedit
secpol.msc
48
No. 17
None of the above.
Perform security testing before development.
Automate some security gates
Perform security testing only after all code is fully operational.
49
No. 33
Packet sniffing
Portmon
NetFlow
SNMP
50
No. 47
Physical control
Operational control
Technical control
Managerial control

TRY THIS ON FOR SIZE CYSA NINJA!! Flashcards | StudBud