What does the CIA triad focus on?

Confidentiality, Integrity, Availability

What is the purpose of log analysis?

Detecting anomalies and incidents

Difference between threat and vulnerability?

Threat is danger, vulnerability is weakness

What is the purpose of multifactor authentication (MFA)?

Provide additional security layer

What is data loss prevention (DLP)?

Preventing sensitive data leakage

studbud

Cybersecurity Fundamentals

29 termsStudBud Administration13 plays

Test your knowledge on the basic concepts and principles of cybersecurity

Flashcards29 cardsFPractice quizPHost liveL

Questions 29

Answers

1
What is the goal of incident response?
Ignoring alerts
Developing policies
Preventing all incidents
Mitigating incident impact
2
What does the CIA triad focus on?
Control, Internet, Applications
Confidentiality, Integrity, Availability
Communication, Information, Access
Compliance, Investigation, Analysis
3
What is the purpose of log analysis?
Encrypting data
Detecting anomalies and incidents
Managing user accounts
Blocking network traffic
4
What is the principle of least privilege?
Minimum necessary access
Daily password changes
Denying all access
Full access for all
5
Which protocol uses port 80?
HTTP
SMTP
DNS
FTP
6
Which port is for HTTPS?
443
25
21
80
7
Which is a social engineering technique?
Zero-day exploit
SQL injection
Buffer overflow
Pretexting
8
What does a firewall control?
Scan for malware
Encrypt traffic
Analyze logs
Control network traffic
9
Difference between threat and vulnerability?
Threat is a weakness
No difference
Threat is danger, vulnerability is weakness
Vulnerability is a defense
10
What is ARP spoofing?
Forged IP addresses
Manipulated MAC addresses
Forged emails
Fake DNS records
11
What is a SYN flood?
Volume-based DDoS
Data exfiltration
Application-layer DDoS
Protocol-based DDoS
12
What does a SIEM system do?
Manage user accounts
Block all network traffic
Encrypt sensitive data
Collect and analyze logs
13
Which attack floods a system with traffic?
DDoS
SQL injection
Phishing
Malware
14
What is the purpose of vulnerability scanning?
Managing user accounts
Encrypting data
Identifying system weaknesses
Blocking network traffic
15
What is the purpose of multifactor authentication (MFA)?
Encrypt all data
Provide additional security layer
Simplify password management
Block unauthorized access
16
What is data loss prevention (DLP)?
Preventing physical theft
Preventing malware infections
Preventing unauthorized access
Preventing sensitive data leakage
17
What is a man-in-the-middle (MitM) attack?
Targets network perimeter
Targets databases
Intercepts communication
Targets web applications
18
What is phishing?
Malware
Encryption method
Tricking users for info
Network protocol
19
What is a zero-day exploit?
For an unknown vulnerability
Takes zero days to create
Causes zero damage
Requires zero permissions
20
What does SIEM analyze?
Managing hardware
User training
Developing tools
Analyzing security logs
21
Which port does RDP use?
80
22
443
3389
22
What is the purpose of an IDS?
Managing user accounts
Encrypting data
Detecting malicious activity
Blocking all traffic
23
What is penetration testing?
Designing networks
User training
Simulating attacks
Installing antivirus
24
Which term means a system weakness?
Threat
Attack
Exploit
Vulnerability
25
What is defense in depth?
Multiple layers of security
Open-source tools only
Ignoring alerts
Single control
26
What is the purpose of DNS?
Domain to IP translation
Sending email
Secure browsing
Transferring files
27
What is Zero Trust security?
Perimeter-based security
Never trust, always verify
Unlimited access
Trusting all users
28
What is used for sending emails?
FTP
IMAP
POP3
SMTP
29
What is a security baseline?
Network diagram
Set of security configurations
Checklist of vulnerabilities
List of approved software

Cybersecurity Fundamentals Flashcards | StudBud