stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ Week 1 (Lesson 1 - 4) Flashcards | StudBud
Explore
/
Sec+ Week 1 (Lesson 1 - 4)
Sec+ Week 1 (Lesson 1 - 4)
21 terms
·
StudBud Administration
·
89 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
Read the question in the image
Weaponization
Persistence
Reconnaissance
Pivoting
2
Identify the command that can be used to detect the presence of a host on a specific IP address.
ipconfig
ifconfig
ip
ping
3
What type of virus would be exploiting local scripting?
Memory resident
Boot sector
Script/Macro
File infector
4
Any part of the Web deliberately concealed and is an overlay to internet infrastructure is a *******.
Dark Net
Dark Web
Deep Web
Cyber Threat Actor
5
What's the MAIN security responsibility of an owner/director?
Overall external responsibility
A specific domain
Overall internal responsibility
Implementing, maintaining, and monitoring policies
6
Implementing, maintaining, and monitoring policy for an orgs security belongs mainly to which individuals?
Management
Public Relations
The owner
Technical staff
7
What does the function of 'Protect' accomplish, according to the NIST framework?
Develop, handle, and decommission IT assets with security at the forefront
Evaluate risks and threats, develop secure policies
Implement cybersecurity resilience to restore systems and data
Identify, analyze, contain, and eradicate threats
8
What category of security control would training programs BEST fall into?
Technical
Compensating
Managerial
Operational
9
Which of the following BEST indicates that valid credentials were used during a vulnerability scan?
The scan identified expired SSL certificates
Scan results show open ports, protocols, and services exposed on the target
The scan enumerated software versions of installed programs
The scan produced a list of vulnerabilities on the target host
10
What is the protocol used to transmit CTI data between servers and clients?
STIX
TAXII
CVE
AIS
11
A ___________ event is where confidential data is read or transferred without authorization.
Data Breach
Data Exfiltration
Data Loss
Data Management
12
Unformatted error messages are an example of a weak network configuration.
False
True
13
Redirecting users from a legitimate website to a malicious website
Typosquatting
Watering hole attack
Phishing
Pharming
14
What's the goal of a keylogger?
Recording confidential information
Monitoring and tracking activity
Using SYSTEM privileges for persistence and stealth
Circumventing authentication to get control
15
What CTI platform model provides sector/industry-specific updates?
Vendor Websites
ISACS
Open Source Intelligence (OSINT)
Closed/Proprietary
16
An attacker entering a secure area with an employee's permission is an example of:
Shoulder surfing
Piggy backing
Tailgating
Lunchtime attack
17
What distinguishes DevSecOps from traditional organizational culture?
Identifying a single point-of-contact for security incidents
Software code is the responsibility of a development team
Culture shift to encourage more collaboration
Security is a primary consideration at every stage of software development
18
What is Wireshark?
A GUI-based protocol analyzer
A GUI-based port scanner
A command-line protocol analyzer
A vulnerability scanner
19
Which one of these is NOT a use of netcat?
Route discovery
Port scanning
Establishing connections with remote machines
Testing network connectivity
20
What category of network vulnerabilities would transferring cleartext data fall into?
Unsecure protocols
Weak Encryption
Errors
Open ports/services
21
Which tool
CANNOT
be used to determine if a targeted IP address is present?
ip
nmap
ping
Wireshark
