stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ICWE-AI-Weekend Exam Review Flashcards | StudBud
Explore
/
ICWE-AI-Weekend Exam Review
ICWE-AI-Weekend Exam Review
41 terms
·
StudBud Administration
·
343 plays
Introduction to Cybersecurity Exam Review
Flashcards
41 cards
F
Practice quiz
P
Host live
L
Questions
41
Answers
1
What is network segmentation?
Dividing the network into multiple zones
Planning the beginning, middle and end of a network
Storing a MAC addresses in Active Directory
Using subnets to stop worms
2
What type of attack uses links in an email
Zero Day
Phishing
Dos
DdoS
3
What type of team would a SOC analyst belong to?
Blue team
Green team
Red team
Purple team
4
Attack by intercepting ("sniffing") data between two or more devices is?
Switch
On-Path
DoS
Firewall
5
The primary use for the NMAP tool is to scan network computers
True
False
6
OWASP is a government agency
True
False
7
Reviewing systems for possible weaknesses is called
Sniffing
System Patching
Vulnerability Assesment
SOC Analysing
8
Which type of network, below, is the internet considered to be
SAN
PAN
LAN
WAN
9
Considering security in earlier phases of the SDLC is called
Mitigating
OWASP
MITRE Framework
Shifting Left
10
Something used to show potential employers your Cyber/IT knowledge
Certifications
Analysts
Trends
Blog posts
11
What is one of the leading causes of exploited KNOWN vulnerabilities?
Misconfigured firewalls
Data loss protection
Apple M1 chips
Poor patch management
12
A DDOS attack leverages multiple attack sources
True
False
13
Generative AI creates new content out of existing content
False
True
14
What does DLP stand for?
Direct Local Protocol
Dont Like Potatoes
Data Loss Prevention
Dynamic Lan Protocol
15
What type of hacker breaks into organizations for personal gain?
Hacktivist
Blue Hat Hacker
Ethical Hacker
Unethical Hacker
16
SSDLC involves
Applications/Software
Routing
Networks
MITRE
17
Multiple controls to protect an asset is called
Defense In Depth
The CIA Triad
Local Area Network
MITRE Attack Framework
18
When hackers exploit a new software vulnerability they found first it is called a:
Asset-grab
Zero-day
NIST-source
MITRE-log
19
A VPN is used to secure data at rest
True
False
20
What type of AI is ChatGPT?
General AI
Substinative AI
Advanced AI
Generative AI
21
Which part of the CIA triad ensures that data hasn't changed in transit?
Integrity
Readability
Confidentiality
Availability
22
What are worms and viruses considered to be?
ransomware
malware
tupperware
hackware
23
What is MFA?
Master FIle Authority
Malware For Accounts
Multi Factor Authentication
Many Fried Artichokes
24
Which Linux command is used to create a folder
mkdir
ls
cd
pwd
25
One of the main reasons for pen-testing is compliance.
True
False
26
Which federal government agency (part of DHS) is in charge of cybersecurity?
CISA
MITRE
USDA
NIST
27
With proper planning, all risk can be eliminated
True
False
28
CLI stands for...
Core Linux Information
Correct Linked Interference
Common Loss Incident
Command Line Interface
29
The most powerful account in Linux is...
Root
Admin
Groot
Authority
30
Select all items that are involved in risk calculations
Attack
Threat
Vulnerability
Asset
31
What does a firewall do?
Allows computers to join a switch
Checks for weak passwords
Reads log files
Inspects and filters network traffic
32
NIST is a reliable place to find vulnerability information
True
False
33
How would you "harden" a Linux server?
Remove unnecessary services
Delete it and switch to Windows
Convert to SSD's
Increase physical memory
34
Select a tool that can be used for password cracking
ping
nmap
hydra
firewall
35
Which network command shows a path to a computer
ping
netstat
tracert
nslookup
36
Kali Linux is used for penetration testing
True
False
37
I GOT THIS!
True
False
38
The primary purpose of a router is...
Allow separate networks to communicate
Send spouse's Amazon packages to a new address
Allow local computers to communicate
Manage IP addresses
39
SQL injection involves which app component?
A firewall
A terminal
A switch
A database
40
Incident response deals with mitigation of policy violations
True
False
41
Which regulation involves software for medical use?
NIST
HIPAA
MITRE
PCI-DSS