Sec+ Most Missed Review

What CTI platform model provides sector/industry-specific updates?

What type of firewall is distinguished by the fact they inspect IP headers?

What type of malicious activity involves a mechanism that restarts a backdoor if the host reboots or the user logs off?

What principle involves developers committing/testing coding updates early and often?

What is the best choice for allowing users to log on to a network using social media credentials - via a mobile app?

__________ is the process of deploying an application to the target environment.

What kill chain phase enables weaponized code to run a remote access tool and achieve persistence?

What does the function of 'Protect' accomplish, according to the NIST framework?

What step of the kill chain is where the attacker finds a vector to transmit malicious code, like an email attachment?

Which of the following stores and compares hashes of critical boot files to detect unauthorized processes?

What type of backup selects any new/modified files since the last backup?

Which of the following is an alternative to using CRLs?

WPA2 uses SAE for authentication

What refers to any part of the Internet that's not indexed by a search engine?

A site has good enough input validation that it'll reject certain characters in URLs. What should it check for next?

Redirecting users from a legitimate website to a malicious website

What's the MAIN security responsibility of an owner/director?

What can be implemented for a CA to delegate the function of registration to another authority?

A ___________ event is where confidential data is read or transferred without authorization.

An example of MFA would be a smart card and a one-time password.

What technique uses the D-H key agreement to create ephemeral session keys?

What type of virus would be exploiting local scripting?

What access control model would I use if I want FW status, patches, and geographic locations to be considered?

What DLP remediation action is it when the original file is quarantined and replaced with one describing the violation?

Which tool CAN'T be used to determine if a targeted IP address is present?

What is NOT a use of netcat?

______ identifies risks, ______ identifies controls and processes that enable an org to maintain critical workflows

What TWO kinds of key pairs does SSH use?

What header option mitigates clickjacking, script injection, and other client-side attacks?

What is not a way routers can be vulnerable?

SELECT TWO public key cryptography algorithms:

What two statements describe the relationship between ICSs, SCADAs, and PLCs?

Which of the following refers to using pre-built functions to perform a database query?