Full backups followed by differential backups

The date and time, The order of volatility

The identity federation protocol, The encryption method

Configure NAT on the core router, Enable TLSv2 encryption on the web server

Encrypt the disk on the storage device

Submit the application to QA before releasing it

Update the host firewalls to block outbound SMB

Tune monitoring in order to reduce false positive rates

Configure the web content filter for the web address

studbud

251-300

51 termsStudBud Administration1 play

Imported from external platform

Flashcards51 cardsFPractice quizPHost liveL

Questions 51

Answers

1
299
The MITRE ATT&CK framework
The Cyber Kill Chain
The Diamond Model of intrusiton Analysis
Security research publications
2
285
Incremental backups followed by delta backups
Full backups followed by differential backups
Full backups followed by incremental backups
Incremental backups followed by differential backups
3
272
Detective
Preventative
Compensating
Deterrent
4
277
A CRC32 checksum
The vendor's name
The date and time
The order of volatility
5
268
SaaS
PaaS
MaaS
IaaS
6
271
Mirroring
Masking
Full disk encryption
Tokenization
7
275
To facilitate third-party access
To avoid data leakage
To ensure availability
To protect surveillance logs
8
269
Geofencing
Geolocation
Time-based logins
Impossible travel time
9
291
XaaS
IaaS
SaaS
PaaS
10
297
SaaS
PaaS
IaaS
XaaS
11
278
The hashing method
The identity federation protocol
The back-end directory source
The encryption method
12
300
Configure NAT on the core router
Configure VLANs on the core router
Enable AES encryption on the web server
Enable TLSv2 encryption on the web server
13
283
Encrypt the disk on the storage device
Define the PC firewall rules to limit access
Change the default settings on the PC
Plug the storage device in to the UPS
14
270
Eradication
Lessons learned
Preperation
Recovery
15
292
Encryption
Hashing
Snapshots
Event logs
16
279
RPO
MTBF
RTO
MTTR
17
259
SLE
RPO
ALE
ARO
18
274
Log collector
Log parser
Log enrichment
Log aggregation
19
255
Network range
Z-Wave compatability
Zigbee configuration
Communicatioin protocols
20
256
nmap comptia.org -p 80 -sV
nslookup -port=80 comptia.org
nc -l -v comptia.org -p 80
hping3 -S comptia-org -p 80
21
289
HSM
SED
DLP
TPM
22
293
Machine learning
DNS sinkhole
Honeypot
Blocklist
23
260
Corrective
Detective
Compensating
Preventative
24
280
Limit the use of third-party libraries
Submit the application to QA before releasing it
Obfuscate the source code
Prevent data exposure queries
25
281
WAF logs
Application logs
DNS logs
System logs
26
284
Biometrics
Full-device encryption
Remote wipe
Mobile device management
27
266
Business continuity plan
Communication plan
Disaster recovery plan
Incident response plan
28
254
Evil twin
On-path
Jamming
Rogue access point
29
BONUS Question: A=C, B=A, C=D, D=B
B
A
C
D
30
261
Automated information sharing
Vulnerability databases
The dark web
Open-source intelligence
31
287
A firewall
A USB data blocker
A device pin
Biometrics
32
294
DDoS attack
Buffer overflow
Memory leak
Resource exhaustion
33
262
OSINT
TTP
SIEM
SOAR
34
288
Data processor
Data controller
Data custodian
Data owner
35
258
SFTP
SSL
SNMP
TLS
36
273
DNS poisoning
URL redirection
ICMP spoofing
MAC address cloning
37
298
Place the unauthorized application in a blocklist
Place the machines with the unapproved software in containment
Update the host firewalls to block outbound SMB
Implement a content filter to block the unauthorized software communication
38
263
802.11n
WPS
WPA2-Enterprise
WPA3-PSK
39
265
Forward proxy
Reverse proxy
Load balancer
NIC teaming
40
251
Production
Development
Staging
Test
41
282
CASB
VPC
Perimeter network
WAF
42
264
Race conditions
SQL injection
Memory leak
Directory traversal
43
286
Account audits
SSO
AUP
Password reuse
44
290
A DMZ
A VPN
A VLAN
An ACL
45
252
On-path attack
Domain hijacking
Locator (URL) redirection
DNS poisoning
46
267
D
B
C
A
47
253
Redirect all events to pultiple syslog servers
Increase the number of sensors present on the environment
Tune monitoring in order to reduce false positive rates
Activate verbose logging in all critical assets
48
296
D
C
B
A
49
276
Send out a corporate communication to warn all users of the malicious email
Configure the web content filter for the web address
Report the website to threat intelligence partners
Set the SIEM to alert for any activity to the web address
50
257
Backdoors
Lack of encryption
Outdated software
Weak credentials
51
295
Role-based access controls
Geolocation
Certificates
Geotagging

251-300 Flashcards | StudBud