stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Intro v4 - Exam Review Flashcards | StudBud
Explore
/
Intro v4 - Exam Review
Intro v4 - Exam Review
58 terms
·
StudBud Administration
·
657 plays
Imported from external platform
Flashcards
58 cards
F
Practice quiz
P
Host live
L
Questions
58
Answers
1
What is the difference between an IP address and a MAC address?
An IP address is a physical address, while a MAC address is logical.
An IP (hardware) can't be changed but a MAC (hardware) can.
A MAC address is a physical address. An IP address is a logical address
The router uses a MAC address, while a switch uses an IP address
2
Which framework focuses on the offensive side of an attack rather than the defensive?
FISMA
NIST cybersecurity
MITRE ATT&CK
Incident response lifecycle
3
What is data loss prevention (DLP)?
A technique used to encrypt information.
A Microsoft service to share data between entities.
A technique used to prevent unauthorized access to sensitive information.
A network security service to block cyber-attacks.
4
Which team is responsible for providing security assessments that outline an organization’s system defense efficacy
Blue
Purple
Green
Red
5
Which tool can be used to scan and map computers on a network?
Hydra
nmap
Ettercap
Ping
6
What is the Open Web App Security Project (OWASP)?
University departments collected to work on secure coding
A government organization designed to promote secure data use and storage
A private, for-profit organization dedicated to application security
A community-driven organization focused on application security
7
What is the primary focus of generative AI?
Mimicking human cognitive abilities
Enhancing security measures and detecting threats
Creating new content from existing data
Surpassing human intelligence across all cognitive abilities
8
Which wireless encryption protocol is now considered insecure and should no longer be used?
WPA
WPA2
WEP
CCMP
9
What is a MAC address?
A unique address given to the network interface card
A unique address given to a computer on a network
10
What are the three As of Security?
Authentication, Authorization and Accounting
Authentication, Accountability and Acoustics
Accountability, Access control and Accounting
Authorization, Access Control and Audi Parking
11
Which goal of network security ensures that only intended recipients can read the data?
Confidentiality
Integrity
Availability
Readability
12
Which of the following is not considered a factor of risk?
Cost
Threat
Convenience
Mitigation
13
Which of the following types of network attacks modifies or alters data?
Inactive attack
Active attacks
Passive attacks
On path
14
What does Windows Defender ATP proactively do in client hardening?
Analyze misconfigured endpoints.
Automates routine tasks.
Set up a backup mechanism.
Enhances network connectivity.
15
Which of the following is not one of the three states of data?
Data at rest
Data in use
Data under investigation
Data in transit
16
What is Hydra used for?
To perform password cracking using brute-force attacks.
To configure security restrictions at enterprise networks.
To generate secure passwords for daily usage.
To accomplish encryption and backup information.
17
What technique does an adversary use to gain knowledge about a system or network?
Discovery
Lateral Movement
Recon
Initial Access
18
During which phase of the cyber kill chain does the attacker gather information about a target?
Exploitation phase
Reconnaissance phase
Actions on objects phase
Installation phase
19
A global network connecting sites worldwide.
Extranet
None of the above
Intranet
Internet
20
Which of the following is an example of a MAC address?
192.17.2.1
00-00-00-1B-02-55
http://www.comptia.org
4309:FD21:ACB3:0012
21
Which of the following is the correct equation for risk?
Confidentiality + integrity + availability = risk
Vector + asset + credentials = risk
Risk management + asset management = risk
Asset + vulnerability + threat = risk
22
Which of the following is not considered a social engineering tactic?
Password Cracking
Pretexting
Vishing
Phishing
23
SSID stands for?
Service station identification
Service set identification
Service suit identification
Singleplayer super intelligence defibrillator
24
Which targeted attack floods a network with false requests in an attempt to halt business operations?
SQLi
Phishing
DoS
On Path
25
Which of the following controls allows for the creation of rules that allow or block traffic?
iptables
ClamAV
OpenDLP
CIS Benchmarks
26
A Kill Chain phase in which the attacker opens and maintains a communication channel between the target and the attacker
Installation
C2
Reconnaissance
Exploitation
27
What type of professional is hired by organizations to legally hack into their networks and identify weak entry points?
Defensive Cybersecurity Analyst
Ethical Hacker
Cybersecurity Engineer
IT Auditor
28
What is the purpose of the
ping
command?
To request connection to the file server
To resolve the domain name to its IP address
To obtain a dynamic IP address from the server
To test connectivity to other networks
29
Which duty is the primary focus of data loss prevention (DLP)?
Deterring credential theft through layered obfuscation
Stopping exfiltration of sensitive data during a breach
Preventing unauthorized sharing of privileged information
Wiping company data from devices of employees as they leave the company
30
Which of the following can be accomplished using a firewall?
monitoring and filtering network traffic
take over the world
route traffic based on source and destination MAC address
stop all possible attacks
31
Which Linux distro is packaged for information security tasks such as security research or penetration testing?
Kali
Fedora
Debian
Ubuntu
32
What are some potential impacts of a cybersecurity breach?
All of the above
Legal and regulatory penalties for non-compliance
Financial loss due to theft or destruction ofdata
Damage to reputation and loss of customer trust
33
According to NIST, what is the primary objective of incident response (IR)?
Mitigating violations of security policies and recommended practices
Support the electrical team if there is a power outage
Providing support services for the end user
Minimizing weaknesses before the incident
34
What is MAC address filtering?
A 32-bit number that uniquely identifies a host
A way of limiing who can access a network using IP adresses on a MAC
APPLE's way of security
A way of limiing who can access a network using MAC adresses
35
A technique, whereby an attacker sends a fraudulent email message from a seemingly reputable source?
Baiting
Tailgating
Pretexting
Phishing
36
Which of the following is a likely cause of continued issues related to the EternalBlue CVE?
Weak password policies
Lack of proper threat intelligence
Unchecked insider threats
Poor patch management
37
Which is a step toward increasing server security?
Deploying sleeper honeypots to DMZs for protection
Dumping your credential database to see how easy it is
Disabling unneeded services to reduce the attack surface
Setting a unique internal clock time to confuse attackers
38
What is application fuzzing?
Automated data is injected into an app to test response and security.
A string is injected and used to drop (delete) tables of sensitive data.
Half of the app’s code is encrypted to test the effects of ransomware
A process for testing the end-user experience of a piece of software
39
Which of the choices below best describes an attack resulting from an unknown vulnerability exploit.
Zero-day attack
Phishing
Same-day attack
Patching attack
40
How do breaches affect an organization?
Legal liability
All of the above
Reputation loss
Financial impact
41
What is the purpose of a demilitarized zone (DMZ)?
To separate internal networks from untrusted external traffic
To allow authenticated users to access the main router
To check the authenticity of self-signed certificates
To block all traffic within a network
42
Which technique does an adversary use to move between systems on a network?
Initial access
Discovery
Lateral movement
Reconnaissance
43
Which of the following network attacks causes a service to fail by flooding the target with traffic?
On Path
DoS
Malware
Exploit
44
What is black hat hacking?
Maliciously hacking a person or businesses network
Getting paid to find holes in someone's online security
trolling a person or business for fun
Giving someone a black hat
45
Which of the following terms is an example of a Linux distribution?
Bootloader
Kernel
Root
Kali
46
Which of the following descriptions is included in the category of OS hardening?
All of the above.
The process of updating an operating system to its latest version.
The process of removing unused features from an operating system.
The process of improving the security of an operating system.
47
CANNOT be discovered in the course of a routine vulnerability assessment
Kernel flaw
Buffer overflow
File and directory permissions
Zero-day vulnerability
48
What type of information could include addresses, dates of birth, or social securitynumbers?
API
Legal liability
SSN
PII
49
_________ uniquely identifies a network destination.
MAC address
IP Table
Rules Table
IP address
50
Which of the following standards is most applicable to a company that utilizes any payment card for its operations?
PCI-DSS
GLBA
SOX
HIPAA
51
What is the first step you should take when hardening a Linux system?
Determine server purpose and requirements
Secure the bootloader.
Eliminate any unpatched software.
Install the latest updates.
52
Which term best describes actions taken to increase infrastructure security?
Hardening
Subrogation
Assimilation
Layering
53
What is risk transfer?
assuming the cost of an uninsurable risk
ethics
same risks can be transferred to another company
principles
54
Which term refers to the idea of moving security earlier in the SSDLC to avoid downstream bugs and vulnerabilities?
purple team
Shift-left
Safety first
lifecycle security
55
Which is a true statement about the Windows Operating System?
It has a folder-based file system.
It has an open-source file system.
It has a ring-topology file system.
It has a tree-like file system.
56
Which network infrastructure type connects users and end devices located in a small area such as an office building?
PAN
WAN
MAN
LAN
57
A Vulnerability Assessment
Finding reasons to spend money on cyber security tools
Looking at your network and assessing its vulnerabilities
Is a tool to see how awesome your network is
Hacking the network to find its vulnerabilities
58
Which command is used to create a new directory in the LInux OS?
mkdir
cd
touch
ls
