What is the purpose of log analysis?

Detecting anomalies and incidents

What is data loss prevention (DLP)?

Preventing sensitive data leakage

What does the CIA triad focus on?

Confidentiality, Integrity, Availability

Difference between threat and vulnerability?

Threat is danger, vulnerability is weakness

What is the purpose of multifactor authentication (MFA)?

Provide additional security layer

studbud

Cybersecurity Fundamentals

29 termsStudBud Administration13 plays

Test your knowledge on the basic concepts and principles of cybersecurity

Flashcards29 cardsFPractice quizPHost liveL

Questions 29

Answers

1
What is a security baseline?
List of approved software
Checklist of vulnerabilities
Network diagram
Set of security configurations
2
What does SIEM analyze?
Managing hardware
User training
Analyzing security logs
Developing tools
3
What is the goal of incident response?
Preventing all incidents
Ignoring alerts
Mitigating incident impact
Developing policies
4
Which term means a system weakness?
Threat
Exploit
Vulnerability
Attack
5
Which is a social engineering technique?
Pretexting
Buffer overflow
Zero-day exploit
SQL injection
6
What is the purpose of log analysis?
Blocking network traffic
Detecting anomalies and incidents
Managing user accounts
Encrypting data
7
What is phishing?
Tricking users for info
Network protocol
Malware
Encryption method
8
Which protocol uses port 80?
HTTP
DNS
SMTP
FTP
9
Which port is for HTTPS?
443
25
80
21
10
What is the purpose of an IDS?
Blocking all traffic
Managing user accounts
Detecting malicious activity
Encrypting data
11
Which attack floods a system with traffic?
Malware
SQL injection
DDoS
Phishing
12
What is a zero-day exploit?
Takes zero days to create
For an unknown vulnerability
Causes zero damage
Requires zero permissions
13
What is a man-in-the-middle (MitM) attack?
Targets web applications
Intercepts communication
Targets network perimeter
Targets databases
14
What is data loss prevention (DLP)?
Preventing unauthorized access
Preventing malware infections
Preventing physical theft
Preventing sensitive data leakage
15
What is the purpose of DNS?
Sending email
Secure browsing
Transferring files
Domain to IP translation
16
What is Zero Trust security?
Never trust, always verify
Trusting all users
Perimeter-based security
Unlimited access
17
What is the purpose of vulnerability scanning?
Identifying system weaknesses
Encrypting data
Blocking network traffic
Managing user accounts
18
Which port does RDP use?
3389
80
22
443
19
What does the CIA triad focus on?
Control, Internet, Applications
Compliance, Investigation, Analysis
Confidentiality, Integrity, Availability
Communication, Information, Access
20
Difference between threat and vulnerability?
No difference
Vulnerability is a defense
Threat is a weakness
Threat is danger, vulnerability is weakness
21
What is the principle of least privilege?
Denying all access
Minimum necessary access
Daily password changes
Full access for all
22
What is ARP spoofing?
Forged emails
Forged IP addresses
Manipulated MAC addresses
Fake DNS records
23
What is used for sending emails?
IMAP
SMTP
FTP
POP3
24
What is defense in depth?
Single control
Multiple layers of security
Ignoring alerts
Open-source tools only
25
What does a SIEM system do?
Block all network traffic
Encrypt sensitive data
Collect and analyze logs
Manage user accounts
26
What is penetration testing?
Installing antivirus
Designing networks
User training
Simulating attacks
27
What is the purpose of multifactor authentication (MFA)?
Simplify password management
Block unauthorized access
Encrypt all data
Provide additional security layer
28
What is a SYN flood?
Volume-based DDoS
Protocol-based DDoS
Data exfiltration
Application-layer DDoS
29
What does a firewall control?
Scan for malware
Encrypt traffic
Control network traffic
Analyze logs

Cybersecurity Fundamentals Flashcards | StudBud