stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Day 6 & 7 CySa + Flashcards | StudBud
Explore
/
Day 6 & 7 CySa +
Day 6 & 7 CySa +
16 terms
·
StudBud Administration
·
43 plays
Imported from external platform
Flashcards
16 cards
F
Practice quiz
P
Host live
L
Questions
16
Answers
1
Which type of scanning method monitors network traffic without actively probing the systems?
Dynamic scanning
Active scanning
Passive scanning
Non-credentialed scanning
2
What is a cybersecurity concept that emphasizes the importance of automation in routine security tasks?
AAA
IAM
Least privilege
Minimize human engagement
3
What are additional pieces of software that enhance the functionality of existing applications or tools?
Plugin
Firewall
Interface
Single pane of glass
4
Consistent security measures & responses, reduction in human error and enhanced compliance are benefits of what?
APIs
Scalability
Plugins
Standardization
5
Which tool is commonly used to perform comprehensive vulnerability scans & provide detailed reports?
Metasploit framework
OpenVAS
Angry IP Scanner
Immunity debugger
6
What augments security data with additional context, facilitates better decision-making and speeds up threat hunting?
Data enrichment
Data analysis
Data in star trek
Data flow control
7
What is typically integrated with SIEM platforms to automate the response to security threats?
HIPS
Firewall
SOAR
NIDS
8
Improved communication, faster response to incidents & better utilization of skills & resources are benefits to what?
Group policy
Team Coordination
Groupon
Team shirts
9
What involves aggregating data from various threat intelligence sources to create a holistic view of potential risks?
Threat feed combination
Threat tolerance
Threatening figures
Threat actors
10
What is a nonregulatory agency in the US that establishes standards and best practices across science and technology?
ISO 27000
CIS
NIST
OWASP
11
Which type of tool provides real-time info about a program's memory, registers, and execution flow during debugging?
Recon-ng
GNU debugger (GDB)
Zed Attack Proxy (ZAP)
Pacu
12
What are automated messages sent between applications that can contain event info and trigger automated actions?
Webhooks
Audits
Ringers
Shoutouts
13
Which method helps to ensure every device is accurately identified and scanned on a segmented network?
Map scans
Non-credentialed scanning
Device fingerprinting
Dynamic scanning
14
Which industry frameworks should a business consider for their security baseline that ensure a robust security posture?
OWASP and ISO 27000 series
Both A and B
PCI DSS and CIS benchmarks
None of the above
15
What allows 2 or more applications to speak with each other & defines types of requests, data format requirements, etc?
API
CLI
Files
Telnet
16
Which control is being reviewed while ensuring the organization's policies align with SLO's for incident response times?
Corrective
Technical
Managerial
Operational