stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IC-Exam Review-Weekend (Next Gen) v3 Flashcards | StudBud
Explore
/
IC-Exam Review-Weekend (Next Gen) v3
IC-Exam Review-Weekend (Next Gen) v3
36 terms
·
StudBud Administration
·
273 plays
Jan Updated Next Gen
Flashcards
36 cards
F
Practice quiz
P
Host live
L
Questions
36
Answers
1
Which command is used to create a new directory in the Linux operating system?
ls
cd
mkdir
pwd
2
Which of the following are some common threat vectors?
Outdated Software & Hardware
None are examples
Malware-Infected Vulnerabilities
Phishing Emails
3
Zero Day refers to several days in which hackers exploit a software vulnerability.
True
False
4
What are some processes included in Hardening?
Process of improving the security of an OS
Process of removing unused features from an OS
Process of implementing an OS to the latest version
Process of encrypting data in transit
5
An application is a type of network used to transmit data.
True
False
6
Kali is not an example of a Linux Distribution
True
False
7
The purpose of a firewall is to filter network traffic.
True
False
8
A DoS attack refers to flooding a network with false requests.
True
False
9
What is the purpose of a LAN?
Connect users and devices located in a small geographical area
Connect networks across a large geographical area
Connect networks across a city
10
Which type of malware can self-replicate across a network?
Spyware
Adware
Virus
Worm
11
DLP is a technique used for encryption
False
True
12
Which of the following definitions does not describe an active attack?
Flooding a web server with botnet traffic.
Inserting a malicious file into an organization's systems.
Reviewing the LinkedIn profiles of target organizations' employees.
Performing a brute-force attack against an internet service.
13
According to NIST, what is the primary objective of incident response (IR)?
Mitigating violations of security policies and recommended practices
Providing support services for the end user
Minimizing weaknesses before the incident
Support the electrical team if there is a power outage
14
Segmentation is the concept used to divide a network into multiple zones.
False
True
15
What does Windows Defender ATP proactively do in client hardening?
Automates routine tasks.
Enhances network connectivity.
Set up a backup mechanism.
Analyze misconfigured endpoints.
16
Defense in Depth (DiD) is a single-layer security method.
False
True
17
What are the 3 states of data?
Data in transit
Data under investigation
Data in use
Data at rest
18
Hydra is a tool used for
encryption
Setting security restrictions
Password cracking using brute-force attacks
Password generation
19
What is the primary focus of generative AI?
Mimicking human cognitive abilities
Enhancing security measures and detecting threats
Surpassing human intelligence across cognitive abilities and capabilities
Creating new content from existing data
20
What are some ways breaches can affect an organization?
Offers great publicity
Legal liability
Financial Impact
Reputational loss
21
The equation for risk is?
Asset + Credentials + Threats = Risk
Asset + Vulnerability + Threat = Risk
C+I+A=Risk
22
Which application type works with operating systems and saves files directly to the file system?
Progressive Web Application
Desktop Application
Mobile Application
None of the Above
23
Phishing, vishing, and pretexting are examples of social engineering tactics.
True
False
24
Two-Factor Authentication (2FA) is to add an extra layer of protection to the authorization process
True
False
25
Which stage of the Cyber Kill Chain opens and maintains a communication channel between the target and the attacker?
Installation
Reconnaissance
Command & Control (C2)
Delivery
26
Which of the following attacks occurs when threat actors position themselves between a source and a destination?
Vulnerability Exploits
DoS/DDoS
On-Path Attack
27
Which of the CIA ensures the accuracy of data?
Confidentiality
Availability
Integrity
Inheritance
28
What does CIA stand for?
Confidentiality Integrity Availability
Controls Integrity Availability
Confidentiality Integrity Applications
29
A user downloads a malicious program that encrypts data and demands payment for its restoration. This describes:
Ransomware
Virus
Spyware
Trojan
30
Nmap is a tool used to scan and map computers on a network
False
True
31
Ping Command is used to verify network connectivity between hosts
False
True
32
A VPN cannot be used to secure data in transit.
False
True
33
Which command is used to list files and directories in the Linux operating system?
cd
touch
ls
pwd
34
An ethical hacker uses their abilities to support a political agenda.
True
False
35
Which of the following provides a means to manage users and centralize network resource access management in Windows?
Active Directory
MDM in Microsoft
Azure
36
The installation Phase of the Cyber Kill Chain pertains to?
opening communication between the target and the attacker
The delivery of the attack
Installation of a backdoor or other point of persistence on a target system
