Best describes a demilitarized zone (DMZ) in networking?

No-man's land between firewalls

Forensic cmd to image a disk in Linux?

dd if=/dev/sda of=/path/to/image

Verify TLS/SSL cert chain of trust?

openssl s_client -connect example.com:443

Which cmd identifies active services on Unix?

systemctl list-units --type=service

Cmd to find unsecured SNMP configs?

snmpwalk -v2c -c public localhost

studbud

CySA+ Chapter 2

30 termsStudBud Administration17 plays

Imported from external platform

Flashcards30 cardsFPractice quizPHost liveL

Questions 30

Answers

1
Best describes a demilitarized zone (DMZ) in networking?
Isolated LAN for guests
Internal network with strict ACLs
Network exclusively for military data
Encrypted virtual network
No-man's land between firewalls
Secure area for server hosting
2
Redundant data center design is known as?
Clustered
Mirrored
Active-Active
Load balanced
Active-Passive
Cold site
3
Principle of least privilege impacts what design aspect?
User experience
Physical security measures
Network throughput
Redundancy planning
Data processing speed
Access control policies
4
SIEM's role in SecOps?
Asset discovery
Data purging
Policy enforcement
Credential management
Threat hunting
Incident creation
5
Primary purpose of network segmentation?
Security enhancement
Cost reduction
Fault tolerance
Simplifying management
Performance improvement
Compliance requirements
6
Forensic cmd to image a disk in Linux?
mkfs.ext4 /dev/sda1
fdisk -l
fsck /dev/sda1
mount /dev/sda1 /mnt
du -sh /dev/sda1
dd if=/dev/sda of=/path/to/image
7
Best practice for log storage?
Local only
No backups
Volatile memory
Encryption
Public access
Compression
8
Flag in nmap for OS detection?
-O
-sS
--script
-p-
-sV
-A
9
Effective countermeasure against APTs?
Anti-virus software
Employee awareness training
All the answers
Multi-factor authentication
Regular password resets
Frequent software updates
10
Which is a sign of an APT attack?
Sudden increase in bandwidth usage
Unexplained data bundles
irregular or unauthorized patching activity
All the answers
Increased firewall alerts
Unexplained data bundles
11
Cmd to view routing table on Linux?
arp
dig
netstat -r
ifconfig
traceroute
ipconfig
12
Type of control is data tokenization?
Detective
Compensating
Deterrent
Physical
Preventive
Corrective
13
APTs are most commonly associated with?
Academic researchers
Lone wolf hackers
Script kiddies
Cybercriminal syndicates
Activist groups
State-sponsored groups
14
Verify TLS/SSL cert chain of trust?
sslyze --regular example.com
openssl s_client -connect example.com:443
curl --insecure https://example.com
ldd /usr/bin/openssl
nmap --script ssl-cert -p 443 example.com
keytool -printcert -sslserver example.com
15
Which tools would you use to analyze a pcap for exfil data?
tcpdump
Nessus
Nmap
Wireshark
Snort
Nikto
16
Which cmd identifies active services on Unix?
ps -aux
service --status-all
systemctl list-units --type=service
lsof -i
crontab -l
uname -a
17
Name a technique to detect malware?
Code review
Red teaming
Patching
Behavioral analysis
Phishing tests
Hardening
18
ID common IOC in logs: IP, hash, URL, or others?
Protocol type
Error code
File path
Port number
Timestamp
Username
19
Cmd to test network ACLs effectiveness?
dig +short porttest.example.com
tcpdump 'port 80'
nmap -Pn --packet-trace
ss -tuln
traceroute -A
iptables -L
20
Cmd to find unsecured SNMP configs?
nmap --script=snmp-netstat
snmpset -v1 -c private
snmpget -v3 -l authNoPriv
ss -an | grep ':161 '
snmpwalk -v2c -c public localhost
tcpdump port 161 or port 162
21
Linux tool for network interface promisc mode?
ip link set eth0 promisc on
dhclient -r
iwconfig wlan0 mode monitor
iftop
netcat
nmap -sP
22
Cmd to extract files from pcap?
nmap -p 80 --script http-extract
snort -r file.pcap -l ./
pcapfix file.pcap -o output
tshark -r file.pcap -qz "follow,tcp,raw"
curl -O http://example.com/file.pcap
tcpflow -r file.pcap
23
Layer handling encryption in OSI model?
Physical
Presentation
Session
Application
Data Link
Transport
24
Identify L7 load balancer via cmd line?
nslookup example.com
hping3 --syn --destport 80 example.com
iptables -t nat -L
nmap -p 80,443 example.com
dig +short example.com
curl -I http://example.com
25
APTs typically utilize what type of attack vector?
Supply chain compromise
Denial-of-service attacks
Social engineering
Insider threats
Brute force attacks
Physical tampering
26
What distinguishes APTs from other cyber threats?
High financial demands
Use of malware
Speed of attack
Long-term presence
Random targeting
Limited to espionage
27
Linux cmd to monitor real-time syscalls?
tcpdump
htop
netstat
strace
top
ltrace
28
Determine system boot via network?"
dmidecode -t system
dmesg | grep 'BIOS-e820'
grep 'pxe' /var/log/syslog
biosdecode
systemctl status
cat /proc/net/pnp
29
To identify encrypted traffic: look for?
Fixed source port numbers
Clear-text protocols
High entropy in packets
Standard HTTP headers
Repeated payload patterns
ICMP packet types
30
APT actors often target what type of data?
Publicly available data
Redundant data
Outdated records
Corrupted data
Encrypted data
Intellectual property

CySA+ Chapter 2 Flashcards | StudBud