stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of Part 1-A There's Always money in the Nannerstand Flashcards | StudBud
Explore
/
Duplicate of Part 1-A There's Always money in the Nannerstand
Duplicate of Part 1-A There's Always money in the Nannerstand
47 terms
·
StudBud Administration
·
11 plays
THERES ALWAYS MONEY IN THE NANNERSTAND AND MAKE SURE YOU NANNERSTAND IT
Flashcards
47 cards
F
Practice quiz
P
Host live
L
Questions
47
Answers
1
which of these is not a common Vulnerability Source
‐U.S. National Vulnerability Database (NVD)
‐Exploit Database (DB)
‐NATO Cyber Exploit Database (NCDB)
‐Common Vulnerability and Exposure (CVE)
2
Which of the following is not a standard Computer Capability or Charactaristics?
Bandwidth
Speed
Versitility
Accuracy
3
Which type of malicious is a collection of software robots run by a C2 program?
Botnet
Rootkit
Spyware
Worm
4
Ability to perform multiple tasks at once, and various types of tasks describes which characteristic?
Diligence
Versatility
Speed
Accuracy
5
The Peer-to-peer model is where there are NO special machines that provide a service or manage the network resources.
False
True
6
A thin client often relies on other systems to operate, but it can operate independently.
True
False
7
A RISK requires a VULNERABLITY and a ____
Client
Threat
Workstation
Hacker
8
Which part of the CIA triad ensures the AUTHENTICITY of data?
Authorization
Integrity
Availability
Confidentiality
9
Which of these does not fall under Security basics?
Due Management
Due Process
Due Care
Due Diligence
10
Which subcomponent of motherboard is responsible for managing specific hardware components and processor compatibility?
CMOS
Chipset
System Clock
BIOS
11
Which type of security enforcement gives Step-by-step instructions on how to implement components of the policy?
Policy Statement
Standards
Procedures
Guidelines
12
Which type of system architecture relies on a centralized environment for clients?
Client-Server
Peer-to-peer model
Central-Server
Core
13
Free from fatigue, lack of concentration, etc. Describes which computer charactaristic
Accuracy
Versatility
Speed
Diligence
14
which of the following does not fall under vulnerability management?
Software Assessment
Patch Management
Change Management
Vulnerability Assessment
15
Which common vulnerability cause assumes ALL user input is safe and can allow unintended commands to execute?
SSO
Implementation
Design
Configuration
16
Which sub-component of the motherboard contains the computer's inventory list and advanced setup options?
System Clock
CMOS
BIOS
Expansion Slot
17
Which of these is not a common type of server?
Peer-to-Peer(p2p) Server
File Server
Proxy Server
Catalog Server
18
which sub-component of the motherboard can change the speed at which data is transferred betwixt hardware components?
System Clock
CPU
Bus
Chipset
19
Inherent vulnerabilities in a protocol, application or architecture fall under the *Design* category of causes.
False
True
20
System hardening uses all of the tasks below execept:
‐Protecting management interfaces & applications
‐Disabling unnecessary services
‐Disabling unnecessary accounts
-Adding redundant passwords
21
Which type of malicious code sits dormant until a specific event occurs?
Worm
Rootkit
Logic Bomb
Virus
22
Of the Four A's, which refer to the process of uniquely ID'ing a particular individual or entity
Authorization
Authentication
Access Control
Auditing & Accounting
23
Which security enforcement are recommendations or best practices to meet the policy standard?
Policy Statement
Procedures
Guidelines
Standards
24
Of the Four A's, which refer to the process of determing what rights & privileges a particular entity has?
Access Control
Authentication
Authorization
Auditing & Accounting
25
A VIRUS can spread through a network WITHOUT attaching itself to a host-file.
False
True
26
Which of the following is NOT a common vulnerability cause?
Design
Confiuration/Familiarity
Implementation
Credential Management
27
A computer on a network managing shared resources for other systems is what?
Thin client
Workstation
Server
Database
28
Which Common Vulnerability Source was launched by NIST in 2005
-National Institute of Standards & Technology Exploit Lexicon (NISTEL)
‐U.S. National Vulnerability Database (NVD)
‐Common Vulnerability and Exposure (CVE)
‐Exploit Database (DB)
29
which concept of vulnerability management is a systematic way of approving & executing change in order to assure CIA?
Change Management
Patch Management
Software Management
Asset Management
30
ScriptKid9006 would fall under what type of theat?
Internal
Unstructured
External
Structured
31
which of the 3 Dues includes not assuming an individual's guilt when suspected of wrongdoing?
Due Diligence
Due Lee Noted
Due Care
Due Process
32
which below is described as "how people& resources will be protected in the case of a natural or man-made disaster."?
Operations Recovery Plan
Disaster Continuity Plan
Disaster Recovery Plan
Operations Continuity Plan
33
which of the following is an ongoing process or program that aims at managing an organization's vulnerabilities
Vulnerability Assesment
Asset Management
Risk Assessment
Vulnerability Manaegment
34
which of the following is described as "how an organization will maintain normal ops during a disruption or crisis."?
Operations Continuity Plan
Disaster Continuity Plan
Operations Recovery Plan
Disaster Recovery Plan
35
Who developed Common Vulnerability and Exposure (CVE) in 1999?
Offensive Security
NIST
NISTEL
MITRE
36
which of the 3 Dues includes both using the equipment safely & using it in an approved manner
Due South
Due Diligence
Due Care
Due Process
37
Of the Four A's, which refer to the process of tracking & recording system activities and resource access?
Authorization
Access Control
Authentication
Auditing & Accounting
38
Which type of Memory is NON-VOLATILE and is used to control basic I/O operations?
SSD
ROM
RAM
HDD
39
what houses various subcomponents of a computer
Expansion Slots
BIOS
Chipset
Motherboard
40
A computer system weakness that is open to exploitations refers to what?
Vulnerability
Threat
Risk
Hazard
41
Angry Nanners making unauthorized changes on the system would be classified as what type of threat?
Structured
Internal
External
Unstructured
42
A state sponsored group with skilled operators would be categorized as a ___
Unstructured Threat
Internal threat
External Threat
Structured Threat
43
A personal computer may be referred to as a(n)
Endplace
Server
Client
Workbox
44
which concept of vulnerability management involves continuous vulnerability scans and remediation?
Asset Management
Vulnerability Assessment
Change Management
Patch Management
45
Default passwords and poor firewalls rules are features of what common vulnerability cause?
Security
Configuration
Implementation
Design
46
What are the two types of clients?
Heavy and light
Thick and Thin
Acute and Obtuse
Thin and Workstation
47
which of these is not a subcomponent of a computer housed by the motherboard
CPU
Hard Disk Drive (HDD)
Expansion Slots
CMOS