Cybersecurity Assessment Quiz

Question 1

Lists of malicious or untrustworthy IP addresses and domains using STIX and TAXII?

Accepted Answer

A threat feed

Question 2

Which scan type provides the greatest insight into vulnerabilities on systems?

Accepted Answer

Authenticated scans

Question 3

What is the purpose of a vulnerability scanner?

Accepted Answer

To identify weaknesses

Question 4

What is the purpose of a honeypot?

Accepted Answer

To capture data from attacks

Question 5

After patching of a critical vulnerability, what step is often performed next

Accepted Answer

Rescanning the system

Question 6

What is a honeynet?

Accepted Answer

A network with vulnerabilities

Question 7

What is the first step in determining the best fix for the vulnerability shown?

Accepted Answer

Review the vulnerability descriptions in the CVEs listed.

Question 8

Term describing data that is collected from publicly available sources for threat intelligence ?

Accepted Answer

OSINT

Question 9

What is a false positive in vulnerability scanning?

Accepted Answer

An incorrect alert

Question 10

What type of reconnaissance uses Shodan?

Accepted Answer

Passive

Question 11

What does a playbook in SOAR describe?

Accepted Answer

A set of rules and actions

Question 12

What is user behavior analysis used for?

Accepted Answer

Detecting insider threats

Question 13

Reviews bulletins & advisories to determine what threats an organization is likely to face?

Accepted Answer

Threat hunting

Question 14

What is footprinting in penetration testing?

Accepted Answer

Information gathering

Question 15

What is the main advantage of automation in security?

Accepted Answer

Faster response times

Question 16

What is the dark web?

Accepted Answer

A part of the internet

Question 17

What does a false negative indicate?

Accepted Answer

A missed vulnerability

Question 18

What is a bug bounty program?

Accepted Answer

Responsible disclosure

Question 19

What type of test simulates an attacker's actions?

Accepted Answer

A Pentest

Question 20

What is a Cyber purple team?

Accepted Answer

A team of attackers and defenders

Question 21

What is privilege escalation?

Accepted Answer

Gaining unauthorized access

Question 22

What is the role of a white team?

Accepted Answer

To oversee exercises

Question 23

What is the primary goal of threat hunting?

Accepted Answer

To identify hidden threats

Question 24

What tool should Allison acquire for log aggregation?

Accepted Answer

SIEM

Cybersecurity Assessment Quiz

Questions 24

Cybersecurity Assessment Quiz

Questions 24