stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cyber Training Bootcamp Review Flashcards | StudBud
Explore
/
Cyber Training Bootcamp Review
Cyber Training Bootcamp Review
92 terms
·
StudBud Administration
·
40 plays
Imported from external platform
Flashcards
92 cards
F
Practice quiz
P
Host live
L
Questions
92
Answers
1
M2: Which of the following can be targeted for a cyber attack?
Industry
People
Company
All of the Above
2
M2: Which of the following is NOT an example of a Negligent Insider Threat
Untrained
Unaware
Under Privileged
Unwilling to Improve
3
M3: How many layers does the OSI Model consist of?
Five
Physical
Transport
Seven
4
M3: What are the benefits of subnetting?
All of the above
Easier to manage
Reduces "waste" of IP Addresses
Reduces the amount of network traffic
5
M7: What is any information relating to an identifiable person?
Proprietary Information
Personally Identifiable Information
Controlled Unclassified Information
Sensitive Compartmentalized Information
6
M3: What type of command is used to test network connectivity to a specific IP address?
Release
Ping
Config
Trace
7
M4: What day of the month does Windows usually send out patches?
Second Tuesday
Third Thursday
Quarterly
Yearly
8
M9: A multidisciplinary profession that focuses on identifying, investigating, and remediating network exploitation?
Intrusion Detection System
Data Custodians
Incident Response
Tech Support
9
M2: China, Russia, North Korea, and Iran are examples of what kind of Cyber Threat?
DDoS
Advanced Persistent Threats
Near Peer Adversaries
Malware
10
M7: Which of the following is a disaster recovery site?
Cold Site
All of the above
Hot Site
Warm Site
11
M4: What is Microsoft's flagship workstation operating system?
Windows 11
Office
Mcafee
Linux
12
M6: What creates a simulated, or virtual, computing environment as opposed to a physical environment?
Citrix
Virtualization
Hyper-V
VMware
13
M2: What is, "The overall methodology used by a threat actor to carry out an attack?"
Threat Vector
Insider Threat
Violence
Intimidation
14
M6: What is an OS-level virtualization method used to deploy & run apps without launching an entire VM for each app?
Application Compartmentalization
Application Containerization
Virtual Reality
Remote Access Control
15
M6: Although unauthenticated scans will show weaknesses in your perimeter, what will they not show?
Where your network can be penetrated
Details about your Point of Presence
What firewall ports are vulnerable
What the attacker will exploit once breaching your perimeter.
16
M5: Which language is procedural and simple?
BASIC
Ruby
JAVA
Advanced
17
M6: What is a process for maintaining computer systems, servers, and software in a desired, consistent state?
Operations Management
Customer Satisfaction
Tech Support
Configuration management
18
M7: Which Act applies to all financial product/service companies?
Gramm, Leach, Billey Act
Act of Congress
Federal Information Security Management Act
Sarbanes Oxley Act
19
M6: What can prevent the installation and launching of applications?
Parental Controls
Application Control
Lock down
Software
20
M6: What is a disadvantage of offline backup/recovery solutions?
All of the above
Backup requires manual interaction
Data is not easily accessible
Recovery takes additional time
21
M6: What are the two types of encryption?
None of the Above
Digital and Analog
Symmetric and Asymmetric
Apple and Windows
22
M6: Which network topology is still commonly used?
Tree
Bus
Both Star and Tree
Star
23
M6: What is a list that allows only trusted applications to be accessed?
Blacklist
Authorized User
Whitelist
Guest List
24
M4: What is used to enforce rules on the domain and local machine level?
Laws
Admin
Regulations
Group Policy
25
M4: What is a network or system that is not connected to another/ does not have any interaction with the outside world?
Remote
Isolated
Air gapped environment
Stand Alone
26
M2: Which Cyber Security Team is mainly focused around detection and response?
Black Hat
Red Team
Blue Team
White Hat
27
M4: What contains "security identifiers" that identify the user's account and a list of the privileges held by the user.
Badge
Key
Access Token
ID
28
M6: What are the two forms of vulnerability scans?
Omnibus
Both Internal and External
External
Internal
29
M6: What is an advantage of online managed backup/recovery solutions?
Easily automate backups
Quickly recover data
Easily manage back up data
All of the above
30
M8: What is a simulated cyber attack against your company to check for exploitable vulnerabilities?
Threat Emulation
Spoofing
Phishing
Penetration Test
31
M6: What is a risk to immediate backups?
Can be maliciously accessed
Data cannot be recovered
Data can be easily accessed
Data corruption replicates to backup data.
32
M8: What is a simulated cyber attack against your company to check the behavior of a specific type or class of attacker?
Threat Emulation
Spoofing
Phishing
Penetration Test
33
M6: Which Heuristic Analysis isolates the suspected file & allows the code to run in a sandbox to analyze its functions?
C-RAM
Dynamic
Static
Phalanx
34
M2: What is, "An exploit for a vulnerability where there is no patch available yet?"
DoS
Zero Day
Phishing
Whale-Phishing
35
M6: What can cause unintended availability issues regardless of whether there's a bad actor involved?
A Bad Boss
None of the Above
Noisy Office
a poor network architecture
36
M4: What are automatic processes that run at certain times or when certain conditions are met?
Programs
Virus
Patches
Scheduled Tasks
37
M7: Who is a senior business stakeholder who is accountable for the quality of one or more data set?
Data Custodians
Proprietary Information
Data Owner
CISO
38
M6: What allows vulnerability scanners to use privileged credentials to dig deeper into a network and detect threats?
Permission from the CISA
Authenticated scans
PEN Tester
Permission from the Vulnerability Management Lead
39
M7: Determining activities & resources critical to the continuity of operations during/after a disruption is part of a _
Disruption Prevention System
Resource Management
Business Impact Analysis
Risk Management
40
M2: What kind of management involves weighing the risk versus reward?
Personnel Accountability
Personnel Management
Risk Management
OODA Loop
41
M6: What is an authentication mechanism that is used to verify user or host identity?
Captcha
Hyper-V
Kerberos
Trust System
42
M2: What kind of Cyber Threat mostly buys kits such as Banking Trojans and Ransomware from others?
The Government
Lone Wolves
State Actors
Terrorists
43
M8: Which of the following is an example of a ports state?
Filtered
Open
Closed
All of the above
44
M6: What is an advantage of offline backup/recovery solutions?
All of the above
Additional physical security measures can safeguard data
Data is not susceptible to corruption
Data is not accessible by remote attackers
45
M4: What are the four Cloud deployment models?
Private, Public, College, and Home
Private, Public, Community, and Hybrid
Personnel, Primary, Champion, and Hammer
Private, Principal, Charter, and Hybrid
46
M5: Which language governs how the web page looks?
HTML
Web Developer Code
UDP
IP
47
M6: What is a method of detecting viruses by examining code for suspicious properties?
Observation
Heuristic analysis
Packet Filtering
Spot and Stalk
48
M7: What is information that a company wishes to keep confidential?
Data Custodians
Proprietary Information
CISO
Data Owner
49
M6: An access control where the OS/database limits the ability of a subject to access/perform an operation on an object
Random Access Memory
Random Access Control
Mandatory Access Control
Read Only Memory
50
M2: What kind of Cyber Threat is the Russian Mafia and Lazarus Group?
Country
Organized Crime
Hacktivist
State
51
M3: Which type of topology is flexible, scalable, and very commonly used?
Hybrid
Mesh
Bus
Ring
52
M5: Which language provides front-end processing for web pages and adds functionality?
C+ & C++
Perl
Ruby & SQL
PHP & JavaScript
53
M4: What is the management of the various life stages of a software or hardware product from cradle to grave?
Tech Refresh
Lifecycle Management
Replacement Process
All of the Above
54
M4:What refers to the security features that control who can access resources in the operating system?
Password
MAC Filtering
Windows Access Control
Login
55
M7: Which Act applies to the Executive Branch (and contractors)?
Federal Information Security Management Act
Gramm, Leach, Billey Act
Sarbanes Oxley Act
Act of Congress
56
M5: Which of the following is an example of a Loop?
Do While
While
For
All of the above
57
M6: Which list blocks applications that cannot be trusted?
Web Page Access Control List
White List
Blacklist
Denial
58
M6: What is the process of using the Domain Name System to block malicious websites & filter out harmful content?
IP Filtering
Net Admin
DNS Filtering
MAC Filtering
59
M7: What type of data classification looks at other variables as indirect indicators of sensitive info?
Sensitive Compartmentalized Information
Intensive Classification
Content-Based Classification
Context-Based Classification
60
M6: What is a disadvantage of online managed backup/recovery solutions?
All of the above
Data is susceptible to corruption
Overhead
Can be maliciously accessed
61
M7: Who is responsible for maintaining data on the IT infrastructure in accordance with requirements?
CISO
Data Custodians
Data Owner
Proprietary Information
62
M2: What kind of Cyber Threat is "Spray and Pray?"
Targeted
Death Star
Opportunistic
Blunderbuss
63
M9: Pieces of forensic data that identify potentially malicious activity on a system or network?
Data Log
Indicators of Compromise
Spam
Threat Emulation
64
M7: Which of the following US Code Titles is specific to Active Duty US Military personnel?
Title 20
Title 50
Title 10
Title 32
65
M5: What is the most common example of a Bytecode?
Star
Rugby
Python
Java
66
M9: What is a device or software application that monitors events/activities on a host or network?
Task Manager
Antivirus software
Penetration Test
Intrusion Detection System
67
M6: Which Heuristic Analysis examines the source code of a suspected file & compares it to a database for similarities?
Dynamic
Block Chain Analysis
Static
DIagnostic Analysis
68
M6: What is a type of symmetric encryption?
Chain Code
Block Cipher
Both Stream and Block Ciphers
Stream Cipher
69
M2: What kind of Cyber Threat can be the most dangerous?
Whaling
Phishing
Active Shooter
Insider Threat
70
M6: Which method of encryption cracking involves trying every possible key?
Key Encryption
DOS Attack
Brute Force
Quantum Mechanics
71
M7: Classify different types of information based on what?
Whatever feels right
Cost-Based Analysis
Sensitivity
Impact
72
M7: Which Act applies to all publicly traded companies?
Federal Information Security Management Act
Act of Congress
Sarbanes Oxley Act
Gramm, Leach, Billey Act
73
M4: What is an example of a Cloud Service Delivery Model?
All of the above
Software as a Service (SaaS)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
74
M2: Why was Purple Team created?
Attempt to be more agile and bridge the gap between red and blue team.
To win cyber engagements
To hunt down and destroy cyber criminals
To make more money off cyber threats
75
M2: What is, "The specific methodology used to take advantage of a vulnerability?"
Cyber Weakness
Plunder
Exploit
Cyber Threat
76
M4: In Windows, what does the Server Core remove to cut down on resource usage?
GUI
bytes
software
hardware
77
M6: What is an example of Advanced Authentication?
HTTP Authentication
Captcha
Username and Password
Smart Cards
78
M2: Many attacks are not against technology, but are more so towards what?
Area-51
NASA
People
Organizations
79
M5: Which language generation involves artificial intelligence and problem solving with constraints, not code.
First
Skynet
Fifth
Terminator
80
M6: What provides that information systems are configured to provide only essential capabilities?
Access Control
Principle of least functionality
Essential Workers
Basic Operations
81
M3: What are the 3 IP Address Classes?
IPv4
A, B, C
Dark Web
IPv6
82
M3: What is, " The sets of rules that allow devices to communicate across a network?"
Code
Word Doc
OSI Reference Model
Protocol
83
M7: Which type of data classification inspects and interprets files looking for sensitive information?
Context-Based Classification
Intensive Classification
Sensitive Compartmentalized Information
Content-Based Classification
84
M4: What is the use of remote computers, networking, and storage across the internet?
The World Wide Web
Darknet
WAN
Cloud Services
85
M3: Which network security device is used to stop unauthorized access?
Fence
Intrusion Detection System (IDS)
Firewall
Security Forces
86
M2: Which Cyber Security Team has the role of "Attack to Defend?"
CISA
Blue Team
Red Team
NSA
87
M4 What is a database of user & computer information which allows the administration of network activity and user access
Active Directory
Casual Users
MySQL
Temp Users
88
M6: What maximizes data protection regardless of whether the it is in a public or private cloud, device, or in transit?
Block Chain
Communication Security
End to end encryption
Secure Transit
89
M6: What kind of authentication involves using something you know and something you have?
Multi-Factor
Biometric
Certificate
Two Step
90
M5: How many language generations are there?
Seventy
Five
One
Nine
91
M6: What is granting a user or process the minimum amount of rights it needs to do its job?
Privileged User
Certified User
Root Access
Least Privilege
92
M6: What is the virtualization of computers as complete hardware platforms?
Hardware virtualization
Application Containerization
Virtual Reality
Augmented Reality