stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CYSA Mixed Flashcards | StudBud
Explore
/
CYSA Mixed
CYSA Mixed
30 terms
·
StudBud Administration
·
47 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
Which of the following methods should you use to deal with the huge volume of new threats seen daily?
Intrusion detection system
Network access control
Intrusion prevention system
Heuristics analysis
2
Which of the following options allows your application to interact with an external service...
Containers
Microservice
Thin Client
API
3
A company collects information from customers in all possible ways through the web. Afterward, the company separates...
Data exfiltration
Data sovereignty
Data masking
Data enrichment
4
A company hired you as a security expert. You have been tasked to implement a solution to deceive and attract hackers...
Honeyfile
DNS Sinkholing
Honeynet
Honeypots
5
Which of the following protocols is commonly used to collect information about CPU utilization and bandwidth from...
HTTP
SNMP
SMTP
DHCP
6
Which of the following types of disaster recovery sites allows a company to continue normal business operations...
Normal Site
Cold Site
Warm Site
Hot Site
7
Which cybersecurity testing exercise team does not focus exclusively on attacking or defending, but they do both?
Purple Team
RED team
Blue Team
White Team
8
A cybersecurity researcher is debugging a code by examining the source code of the application before the execution...
Stress Test Application
Dynamic code analysis
Static code analysis
DEVSECOPS
9
You have been hired to investigate an activity from an attacker who compromised a host on the company’s network...
Authentication Hijacking
Injection Attacks
Privilege Escalation
Pharming
10
A developer is building a new corporate application that needs to be accessed only by selective employees based on...
Sandboxing
Port Secuirty
Whitelisting
Sandboxing
11
A company follows the data retention policy as it is a framework of rules for holding, storing, and deleting the...
Downtime
Secure Disposal
Patching
Sanitization
12
_________________ is a strategy that ensures continuity of operations with minimal service outage or downtime. It is...
Annualized loss expectancy (ALE)
Annualized rate of occurrence (ARO)
Single loss expectancy (SLE)
Business continuity plan
13
Which of the following options is a dictionary that provides definitions for publicly disclosed cybersecurity...
Common Vulnerabilities and Exposures
Security Orchestration, Automation, and Response
Sentiment analysis
Log aggregation
14
You have been tasked to implement a solution to increase the security of your company’s local area network (LAN)...
VPN
VLAN
DMZ
DNS
15
A hacker wants to attack a network with the aim of maintaining ongoing access to the targeted network rather than....
Insider Threat
Hacktivism
APT
State Actors
16
A Self-Encrypting Drive is a type of hard drive that automatically and continuously encrypts the data on the drive...
False
True
17
Which of the following hardware root of trust terms is a chip that stores RSA encryption keys specific to the host...
Trusted Execution
TPM
Processor security extensions
HSM
18
Which of the following options is a dictionary that provides definitions for publicly disclosed cybersecurity vulnera...
Security Orchestration, Automation, and Response
Log aggregation
Sentiment analysis
Common Vulnerabilities and Exposures
19
In the cybersecurity and threat intelligence industries, there are several approaches used to analyze and track the....
The Diamond Model of Intrusion Analysis
Kill Chain
MITRE ATTACK
Attack Vector
20
You are working on an application with multiple serverless functions and your task is to deploy a REST API...
Secure and verify data in transit
Patch function dependencies
Employ API gateways as a security buffer
Maintain isolated function perimeters
21
Your organization is working with a contractor to build a database. You need to find a way to hide the actual data...
Tokenization
Encryption
DATA at Rest
DATA masking
22
An author just published his new eBook on Amazon but he worries about copyright issues as the previous eBook was found..
DRM
AUP
DLP
NDA
23
What step of the cyber kill chain involves the target selection process, the research, and detection of vulnerabilities?
Installation
Weaponization
Reconnaissance
Exploitation
24
Which of the following monitoring solutions should you implement that provides the most accurate and updated info...
Agent Based
Internal
Server based
External
25
The developer of your company just released a new version of the registration form on the web application...
Output Encoding
Input Validation
Parameterized Queries
Session Management
26
Your company is using a Web Vulnerability Scanner tool named Acunetic to check whether your website and web applicat...
Password Spraying
Directory Traversal
On Path Attack
Privilege Escalation
27
A telecom company may promise network availability of 99.999 percent and allow the customer to reduce their payment...
SLA
MOU
Organizational Governance
Business Process Interruption
28
A/An _______________ is a contract between a service provider and its customers that documents what services...
SLA
MOU
EOL
NDA
29
An organization has hired a cybersecurity analyst to conduct an assessment of its current wireless network security...
Pacu
Prowler
Aircrack-ng
ScoutSuite
30
A cybersecurity researcher is debugging a code by examining how the application behaves during and after the execution..
Dynamic code analysis
DEVSECOPS
Stress Test
Static code analysis
