Intro Exam Review

DNS is a secure protocol.

What CLI tool can you use to do a DNS lookup?

What are the impacts to an orginization if they get hacked?

What aspect of the CIA triad ensures data is accurate?

DNS does what? (choose best answer)

You can alsways trust information you read on the internet.

Which control type is NOT one of the three main categories of security controls?

Select all network types

Select all states that data can be in (choose 3)

What Linux command brings you back to your home directoty

In Linux to delete a file using the CLI, you would use which command?

The last stage of the cyber kill chain is

Making use of somebody else's user name and password is called

Which was a famous ransomware breach?

What type of attack uses Javascript?

You are troubleshooting and want to see the routing path traffic takes on Linux. Which command do you use?

The administrator account is disabled by default on a new Windows 10 install.

What is a "zero day"?

Common threat vectors include

Common Vulnerabilities and Exposures is maintained by _____

Which of the following describes a security flaw that can be exploited by an attacker?

MAC address's are displayed in HEX format.

What is a Common Vulnerability and Exposure (CVE)?

Authorization provides users with permission to access resources

I want to go in to which Cybersecurity field?

Which indicator shows that an advasary is activaly in your system or has compermosed your network?

What is Defense in Depth (DiD)?

Small network that uses MAC address.

Which role below is another name for a red teamer?

Intrusion Detection Systems (IDS) can stop an active attack by blocking block malicious traffic.

Pick all the Hacker Classifications

Dan downloads a program that encrypts data and demands payment to restore. What type of malware did Dan download?

Which network device allows your traffic to go from one network to another?

Another name for a Nation/State hacker would be

My favorite class was

You click link that redirects you to Faceb00k. At the site, a prompt requesting CC information. Which phase are you in?

Network device designed to forward packets based on their IPs between networks.

Which Windows account is most restricted?

What type of attack is used to intercept data between devices?

A site with information about Cybersecurity jobs

OWASP is a government agency

A network is 2 or more devices sharing data.

What is the primary purpose of a firewall?

A Network device used to prevent unauthorized access from entering the network

______ is the first step in the Cyber Kill chain

Which part of the CIA makes sure that data is not altered?

Select all versions of the Windows Operating System

___ is a security vuln. that allows attackers to induce a server-side app to make requests to an unintended location

Wireshark is an example of an active attack

An IP address is used to uniquely identify computers on the network.

This Exam has got nothing on me!

Kali Linux is used for pentesting

Match the definition: Devices connected to a network, such as computers, servers, phones, and IoT devices.

Which protocol by default uses port 80? (make sure to see all answers before choosing)

What is the number 1 web app vulnerability according to OWASP?

Which method will also help protect your network from an active attack?

I GOT THIS EXAM!

Reconnaissance is always passive

What attack leverages unsuspecting user machines?

Linux pre-bundled with GNU applications for a specific purpose is called

What is a vulnerability?

An on-path attach affects which factor(s) in the CIA triad? (hint you can select more than answer)

Which framework describes the stages of a succesful cyber attack?

On a LAN, how do computers communicate?

How does a breach directly impact an organization? (choose top 3)

Which program is used to do an active scan on a network?

The CIA triad stands for

The Linux Super User account (like the administrator account in Windows) is called root.

The last phase of the NIST cybersecurity framework is

Defense in Depth is a concept that defines a multi-layered security structure.

SQL injection _____

Select the three categories of controls

______ is the largest contributer to security breaches. (pick the best answer)

Ways to harden a server is to:

The Tactic, Technique, or Procedure represents the big picture ("WHY")?

Choose the main three types of authentication. (pick three)

An app is software designed to help accomplish a task

Which user account has full control over a Linux operating system?

STRIDE is a threat classification model.

The core of anoperating system is called

Which Linux command elevates you to root before running the next command

Virtualization provides all the following EXCEPT:

Risk is comprised of all of the following EXCEPT.