Sec+2

Question 1

I'm tired of waiting for the paperwork to come in, so I fix the problem without properly getting permission, I'm _______

Accepted Answer

Shadow IT

Question 2

I can do some OSINT by checking out the

Accepted Answer

NVD

Question 3

Adding tertiary software between two processes that allow for compatibility or shenanigans

Accepted Answer

Shimming

Question 4

Spoofing traffic across a DNS server to substitute a website name with a victim's IP address would be considered:

Accepted Answer

Amplification

Question 5

Last Rule in a firewall?

Accepted Answer

Implicit Deny

Question 6

Plugging your phone into a computer forces use of

Accepted Answer

USB OTG

Question 7

Mitigating an evil twin attack may require use of an:

Accepted Answer

RF Monitor

Question 8

Contained in IPsec is NOT:

Accepted Answer

CSP

Question 9

RTO means

Accepted Answer

How long it takes to bring a network back up

Question 10

Which computing environments are to download firmware updates exclusively from internet?

Accepted Answer

Android

Question 11

Reconfiguring a perimeter network firewall with 2 web servers and you want something that auto-detects threats for them:

Accepted Answer

NIDS

Question 12

2-Factor authentication plus a OTP from a shared secret key and timestamp would use what for the one-time password?

Accepted Answer

HOTP

Question 13

Client computers need to connect with PPP, and they need to support a wide variety of OS's and versions- so use:

Accepted Answer

MS CHAP2

Question 14

Name the Asymmetric Protocol!

Accepted Answer

DSA

Question 15

__________ are computers designed to control electromechanical processes like roller coasters and nuclear centrifuges

Accepted Answer

PLC

Question 16

Having a stupid-long password is which authentication type?

Accepted Answer

1

Question 17

Having a big nose is which authentication type?

Accepted Answer

3

Question 18

Referees in a pentest exercise are considered

Accepted Answer

White Team

Question 19

Two forms of virtualizing your configurations for all networking devices across a LAN could be

Accepted Answer

NFV, SDN

Question 20

Which is a hardware encryption standard?

Accepted Answer

Opal

Question 21

The only non-legally binding agreement?

Accepted Answer

MOU

Question 22

Minimize malware infection for a low power device browsing the internet from a corporate connection-

Accepted Answer

Disable unused features

Question 23

Which risk mitigation controls assist in "safety" the best?

Accepted Answer

Lighting

Question 24

The fourth step in the Incident Response Process is

Accepted Answer

Eradication

Question 25

I need to test a system by throwing a mega-fat packet at an IP, I'll craft a biggie bigg one by using

Accepted Answer

Hping

Question 26

Select an encryption method that can't be cracked when properly applied

Accepted Answer

OTP

Question 27

Provides firewall protections, reads content-traffic, provides SOAR outputs and logs incidents.(Many different purposes)

Accepted Answer

UTM Appliance

Question 28

Poorly constructed botnets can be tracked back to a ____ server

Accepted Answer

C & C

Question 29

Which is an acceptable account type in a secured network?

Accepted Answer

Privileged

Question 30

Ensure devices have the correct OS and current AV software to adhere to a network with _________

Accepted Answer

NAC

Question 31

Management messages need to be encrypted between NMS and agents' devices. We should:

Accepted Answer

Configure SNMP to use TLS

Question 32

Taking advantage of a web app with an HTML form can allow users to perform a search for objects on a directory is ______

Accepted Answer

LDAP injection

Question 33

Connecting a laptop to a WAP remotely to a network uses

Accepted Answer

802.1x

Question 34

I want to DoS something- so I use

Accepted Answer

Sn1per

Question 35

STIX and TAXII are the transport and language for what system?

Accepted Answer

Automated Indicator Sharing

Question 36

Authentication and authorization structure for routers, servers and switches, as secure as possible:

Accepted Answer

TACACS+

Question 37

Simultaneous Authentication of Equals pops off in which technology set?

Accepted Answer

WPA3

Question 38

How could a hacker get access to a router for reconfiguration?

Accepted Answer

IP Spoofing, Rootkit Infection

Question 39

Which deals most closely with auditing?

Accepted Answer

SSAE SOC 1 or 2

Question 40

What could give away a hacker, AKA their trail of "broken twigs"?

Accepted Answer

IoC's

Question 41

I need to get a PCAP of the network files all in one big fat pile. I'm gonna take a

Accepted Answer

dd

Question 42

Highly secured key exchange is most likely talking about:

Accepted Answer

Out of Band

Question 43

Which attacks include intercepting network packets?

Accepted Answer

MITM, TCP Hijacking

Question 44

Linux version of finding intermediary devices to and from a specified machine?

Accepted Answer

traceroute

Question 45

Which deals with Risk Management?

Accepted Answer

ISO 31000 series

Question 46

If a downloaded font software deletes your disk partitions, you've found a

Accepted Answer

Trojan Horse

Question 47

Not a control for availability:

Accepted Answer

Hashing

Question 48

The 24 bit IV on ______ is a big problem!

Accepted Answer

WEP

Question 49

The ways to find validity of a cert FOR A CLIENT do NOT include:

Accepted Answer

CR

Question 50

Prepping a warm site that can take over business operations quickly is:

Accepted Answer

Risk Mitigation

Sec+2

Questions 50

Sec+2

Questions 50