Review Quiz_Mid_1

What is the main purpose of a subnet mask?

What is the purpose of the "Follow TCP Stream" feature in Wireshark?

Which type of log contains authentication and authorization events?

What character signifies the end of an SQL query?

A network administrator is NOT responsible for adding or removing devices in a network.

Which type of firewall can track and maintain the state of active connections?

Which protocol is stateless and faster but doesn't guarantee data delivery?

Firewalls and IDS both block unwanted network traffic.

Which tool is known for memory analysis in DFIR?

In which NIST framework phase do organizations evaluate their security policies and asset vulnerabilities?

What is required for accountability in a system?

What is NetworkMiner primarily used for?

CIDR is an acronym used in networking; what does it refer to?

Why is hashing used for file integrity verification?

What happens when a switch receives a data packet?

Which of the following best describes a vulnerability?

Which OSI layer is responsible for error detection through a trailer?

If an individual gains unauthorized access to data for malicious purposes, they are known as:

Which protocol provides secure login to systems via text-based interfaces?

What is the purpose of the uniq command?

What does XSS stand for?

What is the main purpose of a SIEM?

Which command would you use to stop a service called "myservice"?

What type of attacks can ffuf be used for?

What Linux command checks if a specific service is active?

What is the primary benefit of asymmetric encryption?

What is plaintext?

What concept is the opposite of the CIA triad?

What is the primary goal of sanitising user input?

What service is responsible for issuing Ticket Granting Tickets (TGTs)?

What is Local File Inclusion (LFI)?

What does a Silver Ticket attack allow?

What feature allows a Next-Generation Firewall to detect and block encrypted traffic?

A packet-filtering firewall can inspect the contents of the packet payload.

A SOC analyst might use DHCP logs to determine which devices have joined the network.

What does an SNMP trap do in a network environment?

Which element of Threat Control inspects traffic and blocks the extraction of sensitive data?

What is a key function of a Layer 3 switch?

Which process involves verifying that a user is who they claim to be?

What type of SIEM alert may require rule tuning?

Which of the following is NOT a type of malware?

What is a MAC address used for?

What type of firewall rule is used to deny all unspecified traffic?

What is the function of a Domain Controller (DC)?

Which model strictly limits user abilities and is used for handling highly classified data?

In which part of a URL would you test for reflected XSS?

Which of the following best describes "nonrepudiation"?

Which part of the CIA triad protects data from unauthorized access?

When sending data over TCP, what would you call the "bite-sized" pieces of data?

Which HTTP status code means 'Not Found'?

What is the first DNS server that your computer queries?

TTPs refer to the tactics, techniques, and procedures of threat actors.

What does the null byte (%00) do in a file inclusion exploit?

To view IP address information and network interfaces on a Unix-like system, which command would you use?

What does Network Penetration Testing simulate?

What is ARP used for in network communication?

Which key is shared in asymmetric encryption?

What method involves sending data to an indexer for storage in an SIEM?

What is the main purpose of computer forensics?

Why is hashing used for passwords?

Which protocol is used to securely connect and execute commands on a remote machine?

Which of the following is a recommended best practice in log management?

A virus requires user interaction to spread from one file to another.

What is the primary reason to use a password list with Hydra?

TCP port 143 is standard for which of the following services?

How many bits are in a subnet mask?

Which Splunk operator can be used to find events matching different values for the same field?

What message is used by a client to initiate a TCP connection?

Where is the root user’s home directory located?

What is an essential step after acquiring digital evidence?

A checksum is used to ensure the integrity of data in TCP and UDP packets.

Which type of cryptography uses two different keys?

Which OSI model layers represent the starting and ending points for data transmission?

Which action should be used in a firewall rule to permit traffic?

What is the role of the Splunk Forwarder?

Which port number is commonly used for HTTP traffic?

Which flag for the ls command will show hidden files?

Crontabs are used to schedule tasks to run at specific times in Linux.