Review Quiz_Mid_1

Which flag for the ls command will show hidden files?

What type of firewall rule is used to deny all unspecified traffic?

What character signifies the end of an SQL query?

Which action should be used in a firewall rule to permit traffic?

What is the main purpose of a SIEM?

What is the main purpose of a subnet mask?

Which protocol is used to securely connect and execute commands on a remote machine?

What is the purpose of the uniq command?

What is NetworkMiner primarily used for?

What service is responsible for issuing Ticket Granting Tickets (TGTs)?

Which OSI model layers represent the starting and ending points for data transmission?

Which model strictly limits user abilities and is used for handling highly classified data?

Crontabs are used to schedule tasks to run at specific times in Linux.

What happens when a switch receives a data packet?

What is required for accountability in a system?

Firewalls and IDS both block unwanted network traffic.

What is the primary goal of sanitising user input?

Which of the following is a recommended best practice in log management?

What is the primary benefit of asymmetric encryption?

If an individual gains unauthorized access to data for malicious purposes, they are known as:

Which protocol provides secure login to systems via text-based interfaces?

How many bits are in a subnet mask?

In which NIST framework phase do organizations evaluate their security policies and asset vulnerabilities?

To view IP address information and network interfaces on a Unix-like system, which command would you use?

What is the function of a Domain Controller (DC)?

Which of the following is NOT a type of malware?

What is ARP used for in network communication?

What does the null byte (%00) do in a file inclusion exploit?

Which of the following best describes "nonrepudiation"?

Which protocol is stateless and faster but doesn't guarantee data delivery?

What is plaintext?

Which HTTP status code means 'Not Found'?

Which key is shared in asymmetric encryption?

What does an SNMP trap do in a network environment?

Which type of firewall can track and maintain the state of active connections?

What message is used by a client to initiate a TCP connection?

What is the first DNS server that your computer queries?

What is a key function of a Layer 3 switch?

What is the main purpose of computer forensics?

What is the role of the Splunk Forwarder?

What concept is the opposite of the CIA triad?

What is an essential step after acquiring digital evidence?

What type of SIEM alert may require rule tuning?

When sending data over TCP, what would you call the "bite-sized" pieces of data?

In which part of a URL would you test for reflected XSS?

CIDR is an acronym used in networking; what does it refer to?

Which of the following best describes a vulnerability?

TCP port 143 is standard for which of the following services?

Which part of the CIA triad protects data from unauthorized access?

A virus requires user interaction to spread from one file to another.

Which process involves verifying that a user is who they claim to be?

A packet-filtering firewall can inspect the contents of the packet payload.

What method involves sending data to an indexer for storage in an SIEM?

What is Local File Inclusion (LFI)?

What feature allows a Next-Generation Firewall to detect and block encrypted traffic?

What does XSS stand for?

Where is the root user’s home directory located?

A network administrator is NOT responsible for adding or removing devices in a network.

Which type of log contains authentication and authorization events?

Which command would you use to stop a service called "myservice"?

What Linux command checks if a specific service is active?

Why is hashing used for file integrity verification?

What is the primary reason to use a password list with Hydra?

Why is hashing used for passwords?

What is a MAC address used for?

Which type of cryptography uses two different keys?

Which port number is commonly used for HTTP traffic?

What does Network Penetration Testing simulate?

Which tool is known for memory analysis in DFIR?

What type of attacks can ffuf be used for?

What is the purpose of the "Follow TCP Stream" feature in Wireshark?

TTPs refer to the tactics, techniques, and procedures of threat actors.

What does a Silver Ticket attack allow?

Which OSI layer is responsible for error detection through a trailer?

Which element of Threat Control inspects traffic and blocks the extraction of sensitive data?

A SOC analyst might use DHCP logs to determine which devices have joined the network.

A checksum is used to ensure the integrity of data in TCP and UDP packets.

Which Splunk operator can be used to find events matching different values for the same field?