stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IC-06-P(v2) Exam Review (10/07/2022) Flashcards | StudBud
Explore
/
IC-06-P(v2) Exam Review (10/07/2022)
IC-06-P(v2) Exam Review (10/07/2022)
21 terms
·
StudBud Administration
·
32 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Protect
Identify
Respond
Detect
2
What attack exploits a vulnerability in BASH?
Dirty Pipe
Sudo su
Shellshock
Trojan
3
Which aspect of the CIA triad ensures data is
accessible
?
Confidentiality
Availability
Integrity
Instantiation
4
What percentage of users around the world are on the Windows operating system?
60%
50%
85%
75%
5
Which compliance is for the protection of businesses in the European Union?
SOC 2
GDPR
PCI DSS
ISO 27001
6
In which phase of the Cyber Kill Chain are backdoors and other forms of persistence found?
C2
Installation
Exploitation
Weaponization
7
Which asset is the most important in cybersecurity?
Web server
Human life
Data
Endpoints
8
If you receive an email that appears to be from your CEO asking for your credentials to your account, ...
Phishing
Baiting
Pretexting
Vishing
9
Which cloud service is specific to Microsoft?
AWS
Server Space
Azure
GCP
10
Which state of data has the most risk?
Data at rest
Data in transit
Data in storage
Data in use
11
Which aspect of the CIA triad ensures data is
accurate
?
Instantiation
Integrity
Availability
Confidentiality
12
Which network infrastructure has a connection that spreads across a city or metropolitan area?
LAN
MAN
PAN
WAN
13
When threat actors position themselves between a source and destination, it is known as what type of attack?
On-Path
DoS
Privilege Escalation
DDoS
14
Which software is designed to help accomplish a task on a computer?
I/O devices
Application
Database
Hardware
15
Which command would you use to create a file via the terminal in Linux?
cat
cd
touch
ls
16
The remaining risk after mitigation control has been implemented is known as:
Transferable risk
Residual risk
Impact of risk
Mitigation control
17
In which phase of the SSDLC does peer code review occur?
Design
Test
Deploy and maintain
Identify
18
Which structure is specific to Microsoft?
Community supported
Open source
User has no kernel access
Hierarchical tree file system
19
Which process makes a system secure for its purpose?
Hardening
Security
Baselining
Benchmarks
20
What is the purpose of DevSecOps?
Shift-left testing
Unification of development, operations, and security
Testing implementation early to avoid issues downstream
To increase the application’s security
21
What type of malware attack occurred in the Colonial Pipeline hack?
Ransomware
Spyware
Worm
State Actor