stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cyber Training Bootcamp Review Flashcards | StudBud
Explore
/
Cyber Training Bootcamp Review
Cyber Training Bootcamp Review
92 terms
·
StudBud Administration
·
40 plays
Imported from external platform
Flashcards
92 cards
F
Practice quiz
P
Host live
L
Questions
92
Answers
1
M6: What is a type of symmetric encryption?
Chain Code
Both Stream and Block Ciphers
Stream Cipher
Block Cipher
2
M6: What can cause unintended availability issues regardless of whether there's a bad actor involved?
None of the Above
A Bad Boss
a poor network architecture
Noisy Office
3
M2: What kind of Cyber Threat is the Russian Mafia and Lazarus Group?
State
Hacktivist
Organized Crime
Country
4
M6: What maximizes data protection regardless of whether the it is in a public or private cloud, device, or in transit?
Communication Security
Block Chain
Secure Transit
End to end encryption
5
M6: Although unauthenticated scans will show weaknesses in your perimeter, what will they not show?
What firewall ports are vulnerable
Details about your Point of Presence
Where your network can be penetrated
What the attacker will exploit once breaching your perimeter.
6
M7: Which Act applies to all publicly traded companies?
Act of Congress
Gramm, Leach, Billey Act
Sarbanes Oxley Act
Federal Information Security Management Act
7
M7: Which of the following US Code Titles is specific to Active Duty US Military personnel?
Title 20
Title 50
Title 32
Title 10
8
M2: What is, "The overall methodology used by a threat actor to carry out an attack?"
Intimidation
Threat Vector
Insider Threat
Violence
9
M2: Which of the following can be targeted for a cyber attack?
All of the Above
People
Company
Industry
10
M6: What are the two forms of vulnerability scans?
Omnibus
Both Internal and External
Internal
External
11
M2: What kind of management involves weighing the risk versus reward?
Risk Management
OODA Loop
Personnel Management
Personnel Accountability
12
M7: What is any information relating to an identifiable person?
Sensitive Compartmentalized Information
Controlled Unclassified Information
Proprietary Information
Personally Identifiable Information
13
M2: China, Russia, North Korea, and Iran are examples of what kind of Cyber Threat?
Malware
Advanced Persistent Threats
DDoS
Near Peer Adversaries
14
M6: What is an example of Advanced Authentication?
Username and Password
Captcha
HTTP Authentication
Smart Cards
15
M4: What are automatic processes that run at certain times or when certain conditions are met?
Programs
Patches
Virus
Scheduled Tasks
16
M6: What provides that information systems are configured to provide only essential capabilities?
Principle of least functionality
Basic Operations
Essential Workers
Access Control
17
M2: Many attacks are not against technology, but are more so towards what?
Organizations
NASA
Area-51
People
18
M2: Why was Purple Team created?
Attempt to be more agile and bridge the gap between red and blue team.
To make more money off cyber threats
To hunt down and destroy cyber criminals
To win cyber engagements
19
M8: What is a simulated cyber attack against your company to check the behavior of a specific type or class of attacker?
Penetration Test
Spoofing
Phishing
Threat Emulation
20
M2: What kind of Cyber Threat mostly buys kits such as Banking Trojans and Ransomware from others?
The Government
State Actors
Terrorists
Lone Wolves
21
M6: Which list blocks applications that cannot be trusted?
Blacklist
White List
Web Page Access Control List
Denial
22
M7: Who is a senior business stakeholder who is accountable for the quality of one or more data set?
Data Owner
CISO
Data Custodians
Proprietary Information
23
M7: What type of data classification looks at other variables as indirect indicators of sensitive info?
Context-Based Classification
Content-Based Classification
Sensitive Compartmentalized Information
Intensive Classification
24
M2: Which of the following is NOT an example of a Negligent Insider Threat
Under Privileged
Untrained
Unaware
Unwilling to Improve
25
M3: What are the benefits of subnetting?
All of the above
Reduces the amount of network traffic
Reduces "waste" of IP Addresses
Easier to manage
26
M6: Which Heuristic Analysis isolates the suspected file & allows the code to run in a sandbox to analyze its functions?
C-RAM
Dynamic
Phalanx
Static
27
M7: Who is responsible for maintaining data on the IT infrastructure in accordance with requirements?
CISO
Data Custodians
Proprietary Information
Data Owner
28
M4: What contains "security identifiers" that identify the user's account and a list of the privileges held by the user.
ID
Access Token
Key
Badge
29
M5: Which of the following is an example of a Loop?
All of the above
For
While
Do While
30
M5: What is the most common example of a Bytecode?
Rugby
Star
Python
Java
31
M9: Pieces of forensic data that identify potentially malicious activity on a system or network?
Indicators of Compromise
Data Log
Threat Emulation
Spam
32
M6: What is an authentication mechanism that is used to verify user or host identity?
Kerberos
Trust System
Hyper-V
Captcha
33
M6: What is a risk to immediate backups?
Data cannot be recovered
Data can be easily accessed
Can be maliciously accessed
Data corruption replicates to backup data.
34
M4: What is a network or system that is not connected to another/ does not have any interaction with the outside world?
Stand Alone
Air gapped environment
Isolated
Remote
35
M7: Which type of data classification inspects and interprets files looking for sensitive information?
Sensitive Compartmentalized Information
Content-Based Classification
Context-Based Classification
Intensive Classification
36
M4: What is used to enforce rules on the domain and local machine level?
Laws
Admin
Group Policy
Regulations
37
M6: Which network topology is still commonly used?
Tree
Bus
Star
Both Star and Tree
38
M4: What is the management of the various life stages of a software or hardware product from cradle to grave?
All of the Above
Tech Refresh
Replacement Process
Lifecycle Management
39
M2: What kind of Cyber Threat can be the most dangerous?
Whaling
Phishing
Insider Threat
Active Shooter
40
M6: What is a disadvantage of offline backup/recovery solutions?
All of the above
Backup requires manual interaction
Recovery takes additional time
Data is not easily accessible
41
M2: What kind of Cyber Threat is "Spray and Pray?"
Targeted
Opportunistic
Death Star
Blunderbuss
42
M6: What is a process for maintaining computer systems, servers, and software in a desired, consistent state?
Tech Support
Customer Satisfaction
Operations Management
Configuration management
43
M3: What type of command is used to test network connectivity to a specific IP address?
Config
Release
Trace
Ping
44
M7: What is information that a company wishes to keep confidential?
Data Owner
Proprietary Information
CISO
Data Custodians
45
M6: What is an advantage of offline backup/recovery solutions?
Data is not susceptible to corruption
All of the above
Data is not accessible by remote attackers
Additional physical security measures can safeguard data
46
M2: What is, "The specific methodology used to take advantage of a vulnerability?"
Exploit
Cyber Threat
Cyber Weakness
Plunder
47
M6: What is a disadvantage of online managed backup/recovery solutions?
Data is susceptible to corruption
All of the above
Overhead
Can be maliciously accessed
48
M6: What are the two types of encryption?
Digital and Analog
Symmetric and Asymmetric
Apple and Windows
None of the Above
49
M7: Which Act applies to all financial product/service companies?
Sarbanes Oxley Act
Federal Information Security Management Act
Gramm, Leach, Billey Act
Act of Congress
50
M4:What refers to the security features that control who can access resources in the operating system?
Windows Access Control
Password
Login
MAC Filtering
51
M6: Which method of encryption cracking involves trying every possible key?
Key Encryption
DOS Attack
Quantum Mechanics
Brute Force
52
M6: What is a list that allows only trusted applications to be accessed?
Blacklist
Guest List
Whitelist
Authorized User
53
M5: Which language provides front-end processing for web pages and adds functionality?
Perl
C+ & C++
Ruby & SQL
PHP & JavaScript
54
M2: Which Cyber Security Team is mainly focused around detection and response?
White Hat
Blue Team
Black Hat
Red Team
55
M6: What allows vulnerability scanners to use privileged credentials to dig deeper into a network and detect threats?
Permission from the CISA
PEN Tester
Authenticated scans
Permission from the Vulnerability Management Lead
56
M4: What day of the month does Windows usually send out patches?
Yearly
Quarterly
Second Tuesday
Third Thursday
57
M6: What is the virtualization of computers as complete hardware platforms?
Hardware virtualization
Augmented Reality
Application Containerization
Virtual Reality
58
M6: What is a method of detecting viruses by examining code for suspicious properties?
Packet Filtering
Observation
Spot and Stalk
Heuristic analysis
59
M7: Classify different types of information based on what?
Whatever feels right
Impact
Cost-Based Analysis
Sensitivity
60
M6: An access control where the OS/database limits the ability of a subject to access/perform an operation on an object
Random Access Memory
Mandatory Access Control
Random Access Control
Read Only Memory
61
M3: How many layers does the OSI Model consist of?
Physical
Seven
Five
Transport
62
M3: Which type of topology is flexible, scalable, and very commonly used?
Bus
Ring
Hybrid
Mesh
63
M4: What is an example of a Cloud Service Delivery Model?
Software as a Service (SaaS)
Platform as a Service (PaaS)
All of the above
Infrastructure as a Service (IaaS)
64
M7: Which of the following is a disaster recovery site?
Hot Site
All of the above
Cold Site
Warm Site
65
M3: What is, " The sets of rules that allow devices to communicate across a network?"
Protocol
Code
Word Doc
OSI Reference Model
66
M3: Which network security device is used to stop unauthorized access?
Fence
Firewall
Security Forces
Intrusion Detection System (IDS)
67
M8: What is a simulated cyber attack against your company to check for exploitable vulnerabilities?
Phishing
Threat Emulation
Spoofing
Penetration Test
68
M6: What is an OS-level virtualization method used to deploy & run apps without launching an entire VM for each app?
Remote Access Control
Virtual Reality
Application Containerization
Application Compartmentalization
69
M6: What is an advantage of online managed backup/recovery solutions?
Easily manage back up data
Quickly recover data
Easily automate backups
All of the above
70
M5: How many language generations are there?
One
Five
Nine
Seventy
71
M4: What is the use of remote computers, networking, and storage across the internet?
Cloud Services
Darknet
The World Wide Web
WAN
72
M4: What are the four Cloud deployment models?
Personnel, Primary, Champion, and Hammer
Private, Public, Community, and Hybrid
Private, Public, College, and Home
Private, Principal, Charter, and Hybrid
73
M2: What is, "An exploit for a vulnerability where there is no patch available yet?"
Whale-Phishing
Zero Day
DoS
Phishing
74
M4: In Windows, what does the Server Core remove to cut down on resource usage?
GUI
hardware
software
bytes
75
M6: What is granting a user or process the minimum amount of rights it needs to do its job?
Least Privilege
Certified User
Privileged User
Root Access
76
M2: Which Cyber Security Team has the role of "Attack to Defend?"
Blue Team
CISA
NSA
Red Team
77
M9: A multidisciplinary profession that focuses on identifying, investigating, and remediating network exploitation?
Incident Response
Intrusion Detection System
Data Custodians
Tech Support
78
M5: Which language is procedural and simple?
JAVA
Ruby
BASIC
Advanced
79
M4 What is a database of user & computer information which allows the administration of network activity and user access
Temp Users
Casual Users
MySQL
Active Directory
80
M6: What creates a simulated, or virtual, computing environment as opposed to a physical environment?
Virtualization
Citrix
VMware
Hyper-V
81
M5: Which language generation involves artificial intelligence and problem solving with constraints, not code.
Skynet
First
Terminator
Fifth
82
M6: What is the process of using the Domain Name System to block malicious websites & filter out harmful content?
IP Filtering
DNS Filtering
Net Admin
MAC Filtering
83
M3: What are the 3 IP Address Classes?
A, B, C
IPv4
IPv6
Dark Web
84
M7: Determining activities & resources critical to the continuity of operations during/after a disruption is part of a _
Business Impact Analysis
Risk Management
Resource Management
Disruption Prevention System
85
M4: What is Microsoft's flagship workstation operating system?
Office
Linux
Windows 11
Mcafee
86
M9: What is a device or software application that monitors events/activities on a host or network?
Intrusion Detection System
Task Manager
Penetration Test
Antivirus software
87
M6: What can prevent the installation and launching of applications?
Software
Parental Controls
Lock down
Application Control
88
M7: Which Act applies to the Executive Branch (and contractors)?
Federal Information Security Management Act
Sarbanes Oxley Act
Gramm, Leach, Billey Act
Act of Congress
89
M6: What kind of authentication involves using something you know and something you have?
Biometric
Two Step
Certificate
Multi-Factor
90
M6: Which Heuristic Analysis examines the source code of a suspected file & compares it to a database for similarities?
Dynamic
Block Chain Analysis
Static
DIagnostic Analysis
91
M5: Which language governs how the web page looks?
HTML
UDP
Web Developer Code
IP
92
M8: Which of the following is an example of a ports state?
Closed
All of the above
Filtered
Open