stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Casp 003 Blitz Friday Flashcards | StudBud
Explore
/
Casp 003 Blitz Friday
Casp 003 Blitz Friday
30 terms
·
StudBud Administration
·
77 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
What will my file integrity monitoring use to validate files have not been tampered with?
File Ownership
Hashing
File Locking
Asymmetric Encryption
2
What type of system is based on a digital ledger managed by a peer to peer network?
Blockchain
SOA
ERP
CRM
3
When moving services back on-premise, what is your chief
security
concern during this transfer from your cloud provider?
Data Classification
Data Remnants
Data Isolation
Duplicate Data
4
What will FBI investigators use to perform a forensic copy of a hard drive?
ifconfig
Foremost
dd
memdump
5
what is used in cloud computing to ensure that tenant data in a multitenant solution is segmented from other tenants?
Public cloud
Data Hiding
Data isolation
Cloud Isolation
6
Developers connect into azure cloud to access an application stack to code their applications, what AAS will they need?
SAAS
IAAS
PAAS
CASB
7
You are hosting applications on RedHat Linux, where will you store secure salted password hash values?
/etc/passwd/hash
/etc/shadow
/etc/root
/etc/passwd
8
The CEO's laptop is infected with crypto-malware and is connected to the NAS, what action should a technician take next?
Isolate
Contact CISO
Begin a Forensic Investigation
Contact Legal
9
What Cloud model would be appropriate for Critical Infrastructure services
Public SAAS
Community PAAS
Private IAAS
Private SAAS
10
What type of SSO mechanism would be appropriate for authenticating internal enterprise users?
OPENID
MSCHAP
TACACS
KERBEROS
11
Ford Motors move all their core services into the cloud, Network Engineers will remotely manage hardware Clusters?
SAAS
IAAS
PAAS
CASB
12
Name two commonly used key stretching algorithms?
3DES RC4
RSA ECC
BCRYPT PBKDF2
MD4 MD5
13
Cyber criminals steal payment details and sell them on the dark web for over 12 months, who will search for IOCs?
Regulatory Auditors
Senior Management
Legal Team
Hunt Team
14
The attacker “breaks out” of a VM’s normally isolated state and interacts directly with the hypervisor?
a VMEscape attack
fraggle attack
Hot Desking Attack
Smurf attack
15
What will FBI investigators use to access memory resident forensic artifacts?
dd
memdump
Foremost
ifconfig
16
You are hardening your Linux host prior to deployment in DMZ, what would enable you to harden this server?
Deploy SELINUX & run in ENFORCE mode
Use Windows GPO to disable services
Deploy UBUNTU & run in ENFORCE mode
Disable IPTABLES & enable SAMBA service
17
When choosing a cloud solution for your government department, Data stored will include PII what would be most secure?
Public Cloud
Secure Cloud
Private Cloud
Community Cloud
18
What will I type in the terminal on my RedHat server to ensure the downloaded RDP file is not tampered with or corrupt
sha256sum rdp.dmg
cacls rdp.dmg
netstat rdp.dmg
attrib rdp.dmg
19
A security layer that operates as a gatekeeper between an organization’s on-premise network and the provider’s cloud?
SAAS
CASB
IAAS
REST API
20
What will FBI investigators use to access my deleted files?
ifconfig
memdump
Foremost
dd
21
When Alice assigns homework to her students using Google Classroom, what Cloud service is she using?
SAAS
IAAS
PAAS
CASB
22
What command will I use to view all active connections on my host computer?
tshark
ipconfig
ping
netstat
23
What hashing algorithm is vulnerable to collisions??
DES
3DES
MD5
SHA256
24
What governs Information that is stored in digital form is subject to the laws of the country in which it is located?
data globalisation
Chain of Custody
data sovereignty
data offshoring
25
Select an Asymmetric algorithm that enforces perfect forward secrecy (PFS)?
RSA
SHA256
ECDHE
ECC
26
A VM guest user has discovered a zero day that allows access to the main VMware admin console, what is this exploit?
VM LICENSE AVIODENCE
VM INCIDENTS
VM SPRAWL
VM ESCAPE
27
What allows data from multiple resources to be collated, then queried to give analytical reports?
SQL Query
Data aggregation
Data analysis
Data logging
28
What cloud based As a Service is used by my development team?
PAAS
IAAS
CASB
SAAS
29
What allows for bitlocker drive encryption on a guest VM?
Virtual Keys
Virtual TPM
Virtual Encryption
Virtual UEFI
30
What is the an appropriate response when criminals steal patient records and demand payments?
Contact Legal & Inform Law Enforcement
Perform a full audit of the SMTP Gateway
Deploy Hunt Teams
Attack Criminal's Network