stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
701 SEC+ PREP Flashcards | StudBud
Explore
/
701 SEC+ PREP
701 SEC+ PREP
34 terms
·
StudBud Administration
·
319 plays
Imported from external platform
Flashcards
34 cards
F
Practice quiz
P
Host live
L
Questions
34
Answers
1
An organization needs to manage all aspects of BYOD & COPE mobile devices, what will be the best solution?
Containerization
MDM
Remote Wipe
MAM
2
to preserve the admissibility of the evidence, which of the following forensic techniques should be used?
Order of volatility
Data recovery
Non-repudiation
Chain of custody
3
Bill, needs to choose a disaster recovery
test
that is The LEAST time-consuming for the disaster recovery team?
Simulation
Parrallel
Tabletop
Cutover
4
A data breach is attributed to an executive who was charging a phone in a public area. What would have prevented this?
Biometrics
A USB data blocker
A device pin
A firewall
5
Which of the following tools should an analyst use to further review a packet capture pcap file?
NMAP
cURL
PING
TCPDUMP
6
A solution to allow guest access to the internet , but requires guests to sign off on the acceptable use policy (AUP)?
Deploy WAF
Deploy WIPS on all APs
Captive Portal
Guest Account
7
What Document would highlight the residual risks that need to be managed after mitigating controls have been implemented
An asset value register
A Risk Transfer Register
A Risk Register
A Risk Mitigation Register
8
A developer must ensure a web application is not vulnerable to common exploits such as XSS, XSRF & SQLi. What is best?
GDPR
OWASP
DoD RMF
NIST CSF
9
What prevents PII and IP theft, in the cloud, & allows security professionals to view reporting dashboards?
SOAR
Law Enforcement
CASB
Encryption
10
An attacker is exploiting a vulnerability that does not have a patch available. What is the attacker exploiting?
A rainbow table attack
Zero Day
Weak passwords
Default permissions
11
Lockheed is concerned about unauthorized access to Industrial Control Systems if the staff Wi-Fi network is breached.
Place the environmental systems in the same DHCP scope as the staff Wi-Fi
They should install a smart meter on the staff Wi-Fi
Implement Zigbee on the staff Wi-Fi access points
Segment the Wi-Fi network from the Industrial Control systems network
12
You log into TripAdvisor website and are using your existing Facebook account for SSO, what is the Federation Type?
Waf
Oauth
Saml
Shibboleth
13
Choose the regulatory frameworks that you must be compliant with for Card Payments & European Customers?
PCI DSS
ISO 27701
ISO 31000
GDPR
14
VM SPRAWL
Instances uncontrolled
virtual machine
Police Order
Visual Moments running away
15
users have been redirected to malicious Pharming sites, the issue seems to be fake DNS responses. What is BEST to fix?
DLP
DNSSEC
User awarenesss training
DNS Sinkhole
16
Which of the following authentication methods use single sign-on?
Chap
Kerberos
Complex Passwords
Group policy
17
What appliance will be
MOST
effective to
PREVENT
Exfiltration of Intellectual Property?
NIPS
Network Mapper
SNIFFER
DLP
18
A Chief Risk Officer (CRO) decides to acquire cybersecurity insurance for their company. What is the strategy?
Risk transference
Risk acceptance
Risk mitigation
Risk avoidance
19
MSSP
What we need to do get a fire wall going
Nuts and bolts of equipment needed to run a VM
Stands for the state of Mississippi
Managed security service provider
20
What port does Radius use?
1812
636
88
389
21
What type of network separation would be appropriate for SCADA/ICS networks?
DMZ
Air Gap
Ad Hoc
Wi-Fi
22
You must use
native tools
to map services running on a Windows Server's listening ports
Nmap
Nessus
Netcat
Netstat
23
What appliance will be
MOST
effective to
PREVENT
Malicious inbound network threats?
DLP
NIDS
SNIFFER
NIPS
24
Jeff spends a large amount of time on common security tasks, what could be used to streamline and automate these tasks?
NIDS
SOAR
SCAP
FIREWALL
25
You experienced a major cyberattack against a modem. The attacker was sophisticated and highly skilled. What was it?
An insider threat
A Hacktivist
Shadow IT
APT
26
You need to support MFA, presently users are only using facial recognition? What additional factors could be used?
Iris Scan
TOTP
Voice Recognition
Fingerprint Reader
27
What tool will perform an
un-credentialed
scan, discovering ports, protocols and operating systems across a network?
NMAP
PING
TCPDUMP
NESSUS
28
What is the best measurement to use when assessing the reliability of biometric authentication devices?
HIGH FRR VALUE
LOW CER VALUE
HIGH CER VALUE
HIGH FAR VALUE
29
What is a good security best practice to consider when giving users authorization to access resources?
Reduced Privilege
Under Priveledged
PULP
POLP
30
A disgruntled user, hides company information in .png files sent as email attachments. Choose 2 terms to describe this?
Hashing
Obfuscation
Steganography
Encryption
31
Which of the following will increase the compute time for an
offline
brute-force attack? Choose two
Salting
Password History
Account lockout
Key Stretching
32
What tool will perform
credentialed
scans, discovering unpatched systems and displaying
CVE
references &
CVSS
ratings?
NESSUS
NMAP
PING
TCPDUMP
33
SWG
Secure web gate way
Soft water gate
Secure waffle game
Software with Gold
34
Phishing and spear-phishing attacks have been occurring more frequently against staff. What will be the best mitigation?
DNSSEC
MX records in the DNS
DNS logging
DNS conditional forwarders