stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
DAY 1 - SECURITY+ Flashcards | StudBud
Explore
/
DAY 1 - SECURITY+
DAY 1 - SECURITY+
15 terms
·
StudBud Administration
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
Which control category is focused on oversight and policy-making?
Physical
Technical
Managerial
Operational
2
What makes a gray hat hacker different from white or black hats?
They hack without permission but don’t have malicious intent
They are employed by organized crime groups
They operate within the law
They lack any hacking skills
3
A security guard at a data center entrance is an example of which type of control?
Managerial
Detective
Physical
Technical
4
Which threat actor is most likely to target government systems for espionage?
Nation-state actor
Hactivist
Insider
Script kiddie
5
What makes an Advanced Persistent Threat (APT) different from other threats?
Is always internal to an organization
Is fast and leaves no trace
Is well-resourced and maintains long-term access
Targets low-value systems
6
Which of the following best defines pretexting?
Creating a fake backstory to gain trust and extract data
Installing spyware through email links
Encrypting communication between two users
Registering a domain similar to a real site
7
Which is a characteristic of lure-based vectors?
Involves bait such as USB drives or fake files
Uses fake login portals via email
Requires sophisticated remote code execution
Alters DNS records in a router
8
Which role is most likely responsible for creating company-wide security policies?
CSO
ISSO
Red Team Engineer
SOC Analyst
9
Which attack type manipulates a DNS system to redirect traffic to a fake website?
Typosquatting
Whaling
Pharming
Spear phishing
10
What is shadow IT?
A type of hacking team funded by criminal groups
Unapproved tech or software used by employees
Malware that hides in rootkits
Backup systems hidden from public access
11
What is a common sign of a phishing attack?
Password reset messages from your own IT team
An internal company email with your name correctly spelled
A sense of urgency with poor grammar and strange links
HTTPS in the URL
12
What kind of attack involves a malicious actor posing as a trusted individual like a CEO or vendor to deceive a target?
Pharming
Business email compromise
Watering hole
Credential stuffing
13
What is the purpose of a Security Operations Center (SOC)?
Handle employee access badges
Physically guard the building
Monitor and respond to security incidents
Develop secure applications
14
What is the goal of a watering hole attack?
Compromise high-ranking executives directly
Send phishing emails to company admins
Infect a website that the target is likely to visit
Guess weak passwords repeatedly
15
What is the main goal of confidentiality in the CIA triad?
Prevent unauthorized access to data
Ensure systems are always available
Prove data came from a trusted source
Ensure data is accurate
