stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IC-06-P(v2) Exam Review (10/07/2022) Flashcards | StudBud
Explore
/
IC-06-P(v2) Exam Review (10/07/2022)
IC-06-P(v2) Exam Review (10/07/2022)
21 terms
·
StudBud Administration
·
288 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
Which aspect of the CIA triad ensures data is
accessible
?
Availability
Instantiation
Integrity
Confidentiality
2
What is the purpose of DevSecOps?
Unification of development, operations, and security
Shift-left testing
Testing implementation early to avoid issues downstream
To increase the application’s security
3
When threat actors position themselves between a source and destination, it is known as what type of attack?
Privilege Escalation
On-Path
DoS
DDoS
4
Which software is designed to help accomplish a task on a computer?
Hardware
I/O devices
Database
Application
5
The remaining risk after mitigation control has been implemented is known as:
Residual risk
Mitigation control
Transferable risk
Impact of risk
6
Which cloud service is specific to Microsoft?
Azure
GCP
Server Space
AWS
7
Which aspect of the CIA triad ensures data is
accurate
?
Instantiation
Availability
Confidentiality
Integrity
8
In what phase of the NIST Cybersecurity Framework can access controls be applied?
Respond
Detect
Identify
Protect
9
Which network infrastructure has a connection that spreads across a city or metropolitan area?
WAN
PAN
MAN
LAN
10
What type of malware attack occurred in the Colonial Pipeline hack?
Ransomware
Spyware
State Actor
Worm
11
Which asset is the most important in cybersecurity?
Web server
Endpoints
Data
Human life
12
If you receive an email that appears to be from your CEO asking for your credentials to your account, ...
Pretexting
Phishing
Vishing
Baiting
13
What percentage of users around the world are on the Windows operating system?
60%
50%
85%
75%
14
Which process makes a system secure for its purpose?
Hardening
Baselining
Security
Benchmarks
15
Which compliance is for the protection of businesses in the European Union?
SOC 2
PCI DSS
ISO 27001
GDPR
16
Which structure is specific to Microsoft?
User has no kernel access
Hierarchical tree file system
Open source
Community supported
17
Which command would you use to create a file via the terminal in Linux?
cat
ls
cd
touch
18
In which phase of the Cyber Kill Chain are backdoors and other forms of persistence found?
C2
Weaponization
Installation
Exploitation
19
What attack exploits a vulnerability in BASH?
Trojan
Sudo su
Shellshock
Dirty Pipe
20
In which phase of the SSDLC does peer code review occur?
Test
Identify
Deploy and maintain
Design
21
Which state of data has the most risk?
Data in use
Data at rest
Data in storage
Data in transit