stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
FRIDAY FINAL REVISION CONCEPTS Flashcards | StudBud
Explore
/
FRIDAY FINAL REVISION CONCEPTS
FRIDAY FINAL REVISION CONCEPTS
51 terms
·
StudBud Administration
·
26 plays
Imported from external platform
Flashcards
51 cards
F
Practice quiz
P
Host live
L
Questions
51
Answers
1
The SIEM is reporting multiple layer 2 address are being registered against a single port on a core switch. What attack?
Buffer Overflow
DDoS
Arp Poisoning
SQL Injection
Directory Traversal
Mac Flooding
2
What MDM feature will BEST protect company data stored on a BYOD smartphone?
Screen Lock
VPN
Firewall
Containerization
3
Which is the environment in which patches will be deployed just prior to being put into an operational status?
Staging
Production
Test
Development
4
Authorities need to review all emails and ensure data is not deleted during an investigation, what is used?
Content Filter
Legal Hold
Order of Volativity
Chain of Custody
5
what cloud solution will require the LEAST management and support from the company?
IaaS
SaaS
CASB
PaaS
6
What regulatory compliance is used to protect E.U. citizens private data?
CSA
GDPR
PCI-DSS
ISO 27001
7
What is the Attack when multiple devices are compromised and controlled by a remote hacker?
Buffer Overflow
DNS Poisoning
Botnet
Directory Traversal
Mac Flooding
ARP Poisoning
8
What type of attack involves a disgruntled user placing a script on a server that deletes files when a CFO logs on?
Fileless Virus
Worm
Backdoor
Logic Bomb
9
What cloud model gives the customer the MOST responsibility?
SaaS
IaaS
XaaS
PaaS
10
Which of the following should be classified as proprietary?
Customer date of birth
Marketing Strategies
Payroll Data
Customer zip code
11
An organization must use legacy software to support a critical service. What is the MAIN risk?
Lack of vendor support
Supply Chain
Weak encryption
Social Engineering
12
A company has a flat network. The company needs a solution to segment its HR, Marketing & Finance servers
VLANs
Screened Subnet
Zero Trust Network
Internet
13
What is SIEM
Allows for management of networking infrastructure
Central reporting dashboard, correlating logs from across the enterprise
Automated responses to identified IoCs from across the enterprise
Intrusion Prevention based upon definition files, anomolies and behaviours
14
http://GET customer.id.php-user=foo OR 1=1
What is the Attack?
Directory Traversal
XSS
Buffer Overflow
Arp Poisoning
SQL Injection
DDoS
15
What industry standard
Benchmarks
help you safeguard systems, software, & networks against cyber threats?
GDPR Benchmarks
ISO 27001 Benchmarks
PCI-DSS Benchmarks
Center for Internet Security (CIS) Benchmarks
16
What form documents the provenance and handling of forensic evidence?
Risk Register
Chain of Custody
Order of Volativity
Non Disclosure Agreement
17
What SDLC type involves the customer at ONLY the beginning & end of the development process?
Waterfall
Agile
Build and Fix
V-Shape
18
What SDLC type involves the customer at all stages of the development process?
Build and Fix
Waterfall
V-Shape
Agile
19
when using a credit card on-line, which of the following protocols would be the MOST secure to implement?
SNMP
TLS
SSL
FTP
20
What displays real-time threat intelligence on a reporting dashboard?
Diamond Model of intrusion detection
Government security guidance
Threat Model
Thread Feed
21
why would security professionals place a file named password.txt on the desktop of an administrator account on a server?
This is a file that the OS needs to verify the login credentials.
It is a backup file if the system needs to be recovered.
its a honeyfile and is meant to attract the attention of a cyberintruder.
its a keylogger storing all keystrokes should the account be compromised
22
What prevents password hashes being cracked using a rainbow table?
Password History
Hashing
Salting
Account Lockout
23
What mitigates a risk when an organization must use unsupported legacy software to support a critical service?
Network Segmentation
Firmware upgrades
Regular vulnerability scanning
Patch Management
24
http://GET 2E%2E%2F%2E%2E%2Fetc/passwd
What is the Attack?
SQL Injection
XSS
DDoS
Arp Poisoning
Buffer Overflow
Directory Traversal
25
When the SIEM detects attacks what is used to respond to the threat?
DDoS
SOAR
Audit Logs
Warning Banners
26
What security appliance is deployed in-line and protects the network from inbound malicious traffic?
WAF
NIDS
Internet Proxy
HIDS
27
What is the
preventative
control that
BEST
guards against inbound threats?
Intrusion Prevention based upon definition files, anomolies and behaviours
Central reporting dashboard, correlating logs from across the enterprise
Linux standard for log files
A Control preventing data breaches and exfiltration of sensitive data
28
What is SOAR
Linux standard for log files
Central reporting dashboard, correlating logs from across the enterprise
Automated responses to malicious events & automation for repetitive tasks
Intrusion Prevention based upon definition files, anomolies and behaviours
29
What is the Attack in the Exhibit?
Arp Poisoning
Buffer Overflow
DDoS
SQL Injection
Directory Traversal
XSS
30
An attacker has determined the best way to impact operations is to infiltrate third-party software vendors. Attack type?
Social media
Supply chain
Social Engineering
Cloud
31
Admins need to identify a data fault tolerant solution to provide enhanced read I/O & allow for a single disk failure
RAID 1
RAID 6
RAID 0
RAID 5
32
You need to restrict web access and monitor the websites that employees visit?
VPN
Firewall
WAF
Internet Proxy
33
What technology allows for consistant desktop experiences using any device and secures all data in the datacenter?
COPE
MDM
BYOD
VDI
34
What is the Attack in the Exhibit?
Directory Traversal
Arp Poisoning
SQL Injection
DDoS
Buffer Overflow
XSS
35
http://GET someotherpage<script>alert(''getcookie.js)</script>
What is the Attack?
Directory Traversal
Buffer Overflow
XSS
DDoS
SQL Injection
Arp Poisoning
36
What MDM policy can automatically wipe all data from a mobile device when a user steps outside a predefined area?
Remote Wipe
Logic Bomb
Geofence Policy
Bluesnarfing
37
What threat actor is sophisticated, well-financed, and uses advanced techniques to remain undetected?
Script Kiddie
APT
Hacktivist
Shadow IT
38
What is the purpose of DLP?
Intrusion Prevention based upon definition files, anomolies and behaviours
Central reporting dashboard, correlating logs from across the enterprise
Linux standard for log files
A Control preventing data breaches and exfiltration of sensitive data
39
What metric describes a biometric system with the highest likelihood that an unauthorized user will be denied access?
Low FRR
High CER
Low FAR
Cipher Lock
40
What is likely to lead to password credentials being exfiltrated in the least amount of time?
Shared Workstations + Rainbow table Attacks
Shared Workstations + Brute Force
Shared Workstations + Dictionary Attacks
Shared Workstations + Keyloggers
41
What industry compliance is used to protect cardholder data?
GDPR
PCI-DSS
CSA
ISO 27001
42
What type of control are surveillance cameras that monitor a datacenter 24/7?
Detective
Corrective
Preventative
Compensating
43
Which of the following controls describe a the addition of a WAF rule whilst the newly created patch is being validated
Preventative
Deterrent
Compensating
Detective
44
What ensures administrators have user accounts and privileged accounts, and the accounts are recertified monthly?
MDM
SLA
EDR
PAM
45
What should be configured on a wireless network to ensure that confidential data is not exposed to unauthorized users?
TLS
AES
HTTPS
EAP
46
Which of the following describes the ability of code to target a hypervisor from inside?
VM Escape
Fog computing
Software-defined networking
Container breakout
47
What BEST helps to protect users being directed to pharming sites
FLOOD GUARDS
MAC FILTERING
ARP POISONING
DNSSEC
48
What best secures valuable computing equipment in a public area?
MFA
Visitor Logs
Cameras
Cable Locks
49
A technician enables full disk encryption on a laptop that will be taken on a business trip, what does this best protect
Data at rest
Data in transit
Data in transit
Data tokenization
50
What type of malware evades detection by altering its signature on each fresh infection?
Polymorphic
Worm
Spyware
RAT
51
What cloud model allows a customer to choose from a wide range of offered services?
XaaS
SaaS
PaaS
IaaS
