SSCP - Systems & Application Security

Question 1

Which type of malware can spread without any user interaction?

Accepted Answer

Worm

Question 2

What type of hypervisor runs directly on top of bare hardware?

Accepted Answer

Type 1

Question 3

Apple devices running current versions of iOS use full device encryption by default.

Accepted Answer

True

Question 4

What technique can malware use to modify itself each time it infects a new system to avoid signature detection systems?

Accepted Answer

Polymorphism

Question 5

What is a common command-and-control mechanism for botnets?

Accepted Answer

IRC

Question 6

Which technique is useful in preventing replay attacks?

Accepted Answer

Session Tokens

Question 7

What additional patching requirements apply only in a virtualized environment?

Accepted Answer

Patching the Hypervisor

Question 8

Cryptolocker is an example of what type of malicious software?

Accepted Answer

Randomware

Question 9

What model of cloud computing does not use any shared tenancy resources?

Accepted Answer

Private Cloud

Question 10

What type of malware delivers its payload only after certain conditions are met. e.g. specific date and time occurring?

Accepted Answer

Logic Bomb

Question 11

What type of phishing attack focuses specifically on senior executives of a targeted organization?

Accepted Answer

Whaling

Question 12

A social engineer calls an employee and obtains her password by threatening her, what type of attack is taking place?

Accepted Answer

Intimidation

Question 13

Which one of the following security controls is built into Microsoft Windows?

Accepted Answer

Host Firewall

Question 14

Which one of the following controls is not particularly effective against the insider threat?

Accepted Answer

Firewall

Question 15

What command is used to apply operating system updates on some Linux distributions?

Accepted Answer

yum

Question 16

What type of malware prevention is most effective against known viruses?

Accepted Answer

Signature Detection

Question 17

The core issues around BYOD relate to _____.

Accepted Answer

Ownership

Question 18

What attack uses carefully crafted packets that have all available option flags set to 1?

Accepted Answer

Christmas Tree

Question 19

What is the name of the application control technology built-in to Microsoft Windows?

Accepted Answer

AppLocker

Question 20

What type of packet do participating systems send during a Smurf attack?

Accepted Answer

ICMP Echo Requests

Question 21

In what application control approach may users install only approved software on their devices?

Accepted Answer

whitelist

Question 22

What technology allows administrators to pinpoint the location of a mobile device?

Accepted Answer

GPS

Question 23

Dan is engaging in a password cracking attack where he uses precomputed hash values. What type of attack is Dan waging?

Accepted Answer

Rainbow Table

Question 24

Which public cloud computing tier places the most security responsibility on the vendor?

Accepted Answer

SaaS

Question 25

What type of website does an attacker use when waging a watering hole attack?

Accepted Answer

Site trusted by end user

Question 26

What is the most effective tool to use against dumpster diving attacks?

Accepted Answer

Shredders

SSCP - Systems & Application Security

Questions 26

SSCP - Systems & Application Security

Questions 26