Which of the following best describes an external threat?

An employee shares sensitive data with someone pretending to be a manager

Which of the following is part of the physical threat domain?

Unauthorized access to host devices

What does CIA stand for in CIA triad?

Confidentiality, Integrity, Availability

Which of the following describes a trojan?

A malicious program disguised as legitimate software

Which of the following best describes a social engineering attack?

Attempting to view sensitive information on another user's computer screen

Which of the following describes a worm?

Malware that can replicate itself without human interaction

Which of the following best describes an internal threat?

An employee accidentally enters incorrect data into a critical database

Which of the following describes a botnet?

Software that turns multiple computers into remotely controlled "zombies"

Which two actions would best enhance an organization's defense-in-depth? (select TWO)

Implement ACLs, Add an IDS appliance

Which of the following describes a backdoor?

Malicious software that bypasses normal, secure, or restricted access

What does AAA stand for?

Authentication, Authorization, and Accounting

studbud

CCST Cybersecurity objective 1: Essential Security Principles

18 termsStudBud Administration75 plays

Imported from external platform

Flashcards18 cardsFPractice quizPHost liveL

Questions 18

Answers

1
An attack where threat actors position themselves between hosts to monitor, capture, or control communication is a _____
Mac spoofing attack
DDoS attack
MitM attack
DoS attack
2
Which of the following best describes an external threat?
An employee accidentally enters incorrect data into a critical database
An employee shares sensitive data with someone pretending to be a manager
An employee clicks on a suspicious link
An employee who has been terminated remotely accesses the customer database
3
Which of the following is part of the physical threat domain?
Social engineering
Phishing attacks
Unauthorized access to host devices
Malware infections
4
What does CIA stand for in CIA triad?
Confidentiality, Integrity, Availability
Central Intelligence Agency
Confidential Information Authentication
Communication, Integrity, Availability
5
External threats have the potential to cause greater damage than internal threats.
False
True
6
An attack where threat actors attempt to prevent legitimate users from accessing information or services is a _____
Mac spoofing attack
DoS attack
MitM attack
DDoS attack
7
Which of the following describes a trojan?
Software that turns multiple computers into remotely controlled "zombies"
A malicious program disguised as legitimate software
Malicious software that bypasses normal, secure, or restricted access
Malware that can replicate itself without human interaction
8
Which of the following best describes a social engineering attack?
Breaking into a server room to obtain access to physical devices
Attempting to view sensitive information on another user's computer screen
Exploiting software vulnerabilities in a computer network
Malicious software encrypts files and demands ransom for their release
9
Which of the following describes a worm?
A malicious program disguised as legitimate software
Malware that can replicate itself without human interaction
Software that turns multiple computers into remotely controlled "zombies"
Malicious software that bypasses normal, secure, or restricted access
10
Which of the following best describes an internal threat?
An employee who has been terminated remotely accesses the customer database
An employee accidentally enters incorrect data into a critical database
An employee shares sensitive data with someone pretending to be a manager
An employee accidentally lets someone through a locked door
11
RADIUS and TACACS+ are examples of what kind of service?
AAA
DHCP
DNS
FTP
12
Which types of attack would most likely rely on botnets? (select TWO)
DoS
MitM
SYN flood
DDoS
ARP spoofing
13
What does APT stand for?
Authentication Platform Transaction
Advanced Persistent Threat
Application Programming Technology
Advanced Protocol Transmission
14
Which of the following describes a botnet?
Malicious software that bypasses normal, secure, or restricted access
Software that turns multiple computers into remotely controlled "zombies"
Malware that can replicate itself without human interaction
A malicious program disguised as legitimate software
15
Which of the following is part of the network threat domain?
SQL injection attacks
DNS tunneling
Phishing attacks
Ransomware attacks
16
Which two actions would best enhance an organization's defense-in-depth? (select TWO)
Implement a VLAN
Implement ACLs
Increase network bandwidth
Add an IDS appliance
Implement the Diamond Model
17
Which of the following describes a backdoor?
Malware that can replicate itself without human interaction
Malicious software that bypasses normal, secure, or restricted access
A malicious program disguised as legitimate software
Software that turns multiple computers into remotely controlled "zombies"
18
What does AAA stand for?
Authentication, Analytics, and Application
Authentication, Authorization, and Anti-malware
Authorization, Application, and Automation
Authentication, Authorization, and Accounting

CCST Cybersecurity objective 1: Essential Security Principles Flashcards | StudBud