stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IC-06-P(v2) Exam Review (10/07/2022) Flashcards | StudBud
Explore
/
IC-06-P(v2) Exam Review (10/07/2022)
IC-06-P(v2) Exam Review (10/07/2022)
21 terms
·
StudBud Administration
·
288 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
In which phase of the SSDLC does peer code review occur?
Test
Deploy and maintain
Identify
Design
2
If you receive an email that appears to be from your CEO asking for your credentials to your account, ...
Pretexting
Baiting
Vishing
Phishing
3
Which aspect of the CIA triad ensures data is
accurate
?
Integrity
Confidentiality
Instantiation
Availability
4
Which cloud service is specific to Microsoft?
GCP
Server Space
AWS
Azure
5
Which process makes a system secure for its purpose?
Baselining
Benchmarks
Security
Hardening
6
Which software is designed to help accomplish a task on a computer?
Application
Hardware
Database
I/O devices
7
When threat actors position themselves between a source and destination, it is known as what type of attack?
DoS
DDoS
Privilege Escalation
On-Path
8
The remaining risk after mitigation control has been implemented is known as:
Residual risk
Mitigation control
Transferable risk
Impact of risk
9
Which command would you use to create a file via the terminal in Linux?
cd
touch
ls
cat
10
What type of malware attack occurred in the Colonial Pipeline hack?
Ransomware
Worm
Spyware
State Actor
11
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Detect
Respond
Protect
Identify
12
Which asset is the most important in cybersecurity?
Web server
Human life
Data
Endpoints
13
Which compliance is for the protection of businesses in the European Union?
GDPR
ISO 27001
PCI DSS
SOC 2
14
What percentage of users around the world are on the Windows operating system?
85%
50%
60%
75%
15
Which structure is specific to Microsoft?
Community supported
Hierarchical tree file system
Open source
User has no kernel access
16
What is the purpose of DevSecOps?
To increase the application’s security
Testing implementation early to avoid issues downstream
Shift-left testing
Unification of development, operations, and security
17
Which state of data has the most risk?
Data at rest
Data in transit
Data in use
Data in storage
18
In which phase of the Cyber Kill Chain are backdoors and other forms of persistence found?
C2
Exploitation
Installation
Weaponization
19
What attack exploits a vulnerability in BASH?
Dirty Pipe
Sudo su
Trojan
Shellshock
20
Which aspect of the CIA triad ensures data is
accessible
?
Integrity
Availability
Confidentiality
Instantiation
21
Which network infrastructure has a connection that spreads across a city or metropolitan area?
PAN
WAN
LAN
MAN