Mika's Freakin Test Prep for a Thing That Doesn't Sound Real Even But It Gets A Raise & A Cert

Question 1

What does the principle of least privilege (PoLP) entail?

Accepted Answer

Allowing users only the minimum permissions necessary

Question 2

Behavioral analysis can detect unknown threats by analyzing deviations in system activity.

Accepted Answer

True

Question 3

Zero-day vulnerabilities always have a patch available before they are exploited.

Accepted Answer

False

Question 4

Netstat is a command-line tool which is commonly used to analyze open network connections on a system.

Accepted Answer

True

Question 5

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

Aggregating and analyzing security logs

Question 6

Your IDS detects outbound traffic to a malicious IP after an employee downloads an app. What should you do?

Accepted Answer

Quarantine the infected system and analyze malware behavior

Question 7

A properly implemented Intrusion Prevention System (IPS) can automatically block all cyberattacks.

Accepted Answer

False

Question 8

A web app receives long input strings ending in "; DROP TABLE users;". What attack is occurring?

Accepted Answer

Cross-site scripting (XSS)

Question 9

An employee's files were encrypted with a ransom note after a recent patch deployment. Why?

Accepted Answer

Ransomware attack before patch deployment

Question 10

What is the purpose of a honeypot in cybersecurity?

Accepted Answer

To detect, deflect, and analyze attacks

Question 11

Which type of malware encrypts files and demands a ransom for their decryption?

Accepted Answer

Ransomware

Question 12

Which of the following is a common indicator of a phishing attack?

Accepted Answer

A file attachment with an unusual extension

Question 13

Digital forensics is only used for investigating cybercrimes, not internal security incidents.

Accepted Answer

False

Question 14

An email claiming to be from IT asks users to reset their password via a link. What is this?

Accepted Answer

Spear phishing

Question 15

Which protocol is used to encrypt web traffic using TLS?

Accepted Answer

HTTPS

Question 16

A SIEM alert shows multiple failed logins from a foreign IP to an executive's account. What is the likely attack?

Accepted Answer

Brute-force attack

Question 17

Which type of attack involves an attacker placing a rogue Wi-Fi access point to intercept user data?

Accepted Answer

Man-in-the-Middle (MitM)

Question 18

Which of the following best defines a vulnerability?

Accepted Answer

A weakness in a system that can be exploited

Question 19

Which of the following is a symmetric encryption algorithm?

Accepted Answer

AES

Question 20

A security analyst detects large outbound data transfers to an unknown IP. What threat is this?

Accepted Answer

Data exfiltration

Questions 20