stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Day 7 CyS+ Flashcards | StudBud
Explore
/
Day 7 CyS+
Day 7 CyS+
15 terms
·
StudBud Administration
·
12 plays
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
What is performed to identify discrepancies between the organization's existing practices and the requirements outlined?
Gap Analysis
Continuous Improvement
Risk Assessment
Internal Audit
2
What involves sending ICMP echo requests to a range of IP addresses to identify devices that respond?
Ping Sweeps
ipconfig
tracert
nslookup
3
Which of the following best describes device hardening?
Installing additional software to improve performance
Reducing vulnerabilities by applying security configurations
Allowing unrestricted access to all users
Removing all security features to improve system speed
4
What establishes a reference point for what constitutes a secure and compliant configuration within an organization?
Accountability
Baseline Scanning
Risk Mitigation
Compliance Assurance
5
Which scan observes and analyzes the network traffic without actively sending probe or query packets to target devices?
Active Scanning
Passive Scanning
Bystander Scanning
Proactive Scanning
6
What offers a wealth of tools, resources, and projects to assist organizations in improving web application security?
Wireshark
OWASP
ISO 27001
NIST
7
An analyst is examining a piece of malware to understand how it operates and vulnerabilities it exploits. What is used?
Reverse Engineering
Load Testing
Code Refactoring
Penetration Testing
8
What causes the inputs ' OR 1=1 -- into the username field and successfully logs in without valid credentials?
XSS
IDOR
Reverse Engineering
SQL Injection
9
What is the process of systematically identifying and categorizing all devices, equipment, and resources on a network?
Inventory Management
Device Fingerprinting
Product Tracking
Asset Discovery
10
You're performing a vulnerability scan, but your boss insists, "Just scan
everything
!" What should you tell them?
"Ignore vulnerabilities—firewalls will fix everything!"
"Absolutely, let’s scan the whole internet while we’re at it!"
"I’ll just guess which vulnerabilities are the worst."
"A targeted scan will be more efficient and provide relevant results."
11
What is the practice that involves the active testing of a software application or system while it is running?
Static Scanning
OWASP
WAP
Dynamic Scanning
12
What software testing method involves injecting random or malformed data into a program to identify vulnerabilities?
Unit Testing
Fuzz Testing
Regression Testing
Load Testing
13
What is the practice in which the scanning tool has privileged access to the target device using valid credentials?
Audit Scanning
Credentialed Scanning
Port Scanning
Forward Scanning
14
Which of the following best describes the role of the NIST in cybersecurity?
NIST enforces cybersecurity laws at the federal level
NIST develops policies to regulate internet service providers
NIST provides a cybersecurity framework to help organizations manage risks
NIST designs antivirus software for government agencies
15
What is a cybersecurity practice that does not require the installation of software agents on target devices?
Agentless
Nessus Agent
Agent
Qualys
