Install a mantrap at the entrance

MD5 or SHA1 hash digest of the file

Implement VLAN to separate the HVAC cntrl sys from the open wireless networ

Steganograohy was used to hide the leaked data inside the user’s photos

Incident Response and Forensics

Containment, eradication, and recovery

Supply Chain Management

Conduct secure supply chain management training

studbud

Sec+

90 termsStudBud Administration27 plays

Imported from external platform

Flashcards90 cardsFPractice quizPHost liveL

Questions 90

Answers

1
Physical Security
Install a CCTV to monitor the entrance
Install a RFID badge reader at the entrance
Install a mantrap at the entrance
Require all employees to wear security badges when entering the building
2
Social Engineering
Brute force
Phishing
Spear Phishing
Whaling
3
Security Protocols
SSLv3
IPSec
SSLv2
PPTP
4
Perimeter Security
Honeypot
Jumpbox
Sandbox
Containerization
5
Cryptography
ECC with a 256-bit key
DES with 56-bit key
AES with 256-bit key
Randomized one-time use pad
6
Security Protocols
21
443
80
143
7
Secure Software Development
Session hijacking
SQL injection
XML injection
Buffer overflow
8
Vulnerability Management
Rainbow table
Brute force
Dictionary
Hybrid
9
Hashing
MD5 or SHA1 hash digest of the file
File size and files creation data
Private key of the file
Public key of the file
10
Authentication
802.1q
802.11ac
802.1x
802.3af
11
Cloud Security
Multi-cloud
Community
Public
Private
12
Vulnerability Management
nmap
netstat
ping
Wireshark
13
Virtualization
Sandboxing
Virtualization
Purchase additional workstations
Bypass testing and deploy patches directly into the production environment
14
Virtualization
Physical hardware
Guest OS
Hypervisor
Host OS
15
Planning for the Worst
MTTR
MTBF
RPO
RTO
16
Security Applications and Device
Proxy server
IPS
IDS
Authentication server
17
Policies and Procedures
PCI-DSS
PHI
PII
GDPR
18
Risk Assessments
Quantities risk assessment
Qualitative risk assessment
Privacy assessment
Supply chain assessment
19
Risk Assessments
$90,000
$360,000
$36,000
$9,000
20
Incident Response and Forensics
Order of volatility
Chain of custody
Legal hold
Right to audit
21
Policies and Procedures
GDPR
PHI
PII
PCI
22
Network Attacks
SSH
Web
Database
RDP
23
Hashing
Salting
Key stretching
Rainbow table
Collision resistance
24
Physical Security
Bollards
Mantraps
Intrusion alarm
Security guards
25
Planning for the Worst
Empty choice
Empty choice
Empty choice
Empty choice
26
Authentication
Kerberos
CHAP
TACACS+
RADIUS
27
Application Security
Logon time
UEFI boot mode
Date and time
User access control
28
Public Key Infrastructure
Trust models
Non-repudiation
CRL
Recovery agents
29
Network Attacks
DNS brute forcing
ARP spoofing
DNS poisoning
MAC spoofing
30
Network Attacks
Brute force
DDoS
Spoofing
Tailgating
31
Malware
Ransomware
Rootkit
Trojan
Keylogger
32
Securing Networks
Disable WPS
Enable WPA
Disable WPA2
Disable SSID broadcast
33
Monitoring and Auditing
Firewall logs
NIDS
Network mapping
Syslog
34
Public Key Infrastructure
Key escrow
CSR
OCSP
CRL
35
Facilities Security
Enable WPA2 security on the open wireless network
Enable NAC on the open wireless network
Implement VLAN to separate the HVAC cntrl sys from the open wireless networ
Install an IDS to protect the HVAC system
36
Hashing
SHA-2
SHA-1
NTLM
MD-5
37
Cloud Security
Empty choice
Empty choice
Empty choice
Empty choice
38
Malware Infection
Botnet
Ransomware
Rootkit
Spyware
39
Automation
Generative adversarial network
Deep learning
Artificial intelligence
Machine learning
40
Hardening
HIPS
GPO
Anti-malware
Patch management
41
Incident Response and Forensics
L3 cache
Backup tapes
ARP cache
Imagine do the server’s SSD
42
Facilities Security
CAN
SoC
SCADA
BAS
43
Malware Infection
Spear phishing
Remote code execution
XSS
Privilege escalation
44
Mobile Device Security
Bluejacking
Packet Sniffing
Bluesnarfing
Geotagging
45
Cryptography
The data was hashed and then emailed to their personal email account
Steganograohy was used to hide the leaked data inside the user’s photos
The data was encrypted and emailed it to their spouse’s email account
The files were downloaded from home while connected to the corporate VPN
46
Virtualization
VM migration
VM data remnant
VM escape
VM sprawl
47
Incident Response and Forensics
Preparation
Containment, eradication, and recovery
Post-incident activity
Detection and analysis
48
Supply Chain Management
Counterfeiting
Capitalism
Recycling
Entrepreneurship
49
Supply Chain Management
Conduct secure supply chain management training
Ensure all anti-virus signatures are up to date
Increase network vulnerability scan frequency
Verify that all routers are patched to the latest release
50
Securing Networks
WPA and MAC filtering
WEP and TKIP
WPA2 and AES
WPA2 and RC4
51
Securing Networks
WEP
WPA
WPA2
AES
52
Security Applications and Security
Firewall
Strong passwords
DLP
MDM
53
Perimeter Security
DLP
SSL
UTM
MDM
54
Automation
IaaS
SaaS
IaC
SDN
55
Public Key Infrastructure
Transitive trust
Public key trust
Domain level trust
Certificate authority trust
56
Network Design
Increase the encryption level of VPN used by the laptops
Implement a jumpbox system
Require 2FA (2-factor-authentication) on the laptops
Scan the laptops for vulnerabilities and patch them
57
Policies and Procedures
Data owner
Data steward
Data custodian
Privacy officer
58
Application Security
Application whitelist
Application blacklist
Disable removable media
Application hardening
59
Mobile Device Strategy
CYOD
BYOD
MDM
COPE
60
Vulnerability Management
Blue Team
Red Team
White Team
Purple Team
61
Malware
Trojan
Rootkit
Spyware
Ransomware
62
Security Protocols
Empty choice
Empty choice
Empty choice
Empty choice
63
Cryptography
Twofish
RC4
DES
ECC
64
Secure Software Development
XSS
Manipulation
SQL injection
XML injection
65
Cloud Security
PaaS
FaaS
SaaS
IaaS
66
Perimeter Security
IPS
Authentication Server
Proxy Server
IDS
67
Hardening
Discovered software bugs
Malware with defined indicators of compromise
Zero-day attacks
Known vulnerabilities
68
Malware Infection
Adware
Trojan
Worm
Logic Bombs
69
Supply Chain Management
Supplies Assured (AS)
Supply Secure (SS)
Trusted Foundry (TF)
Trusted Access Program (TAP)
70
Access Control
More routing auditing
More efficient baseline management
Increase password security
Increase individual accountability
71
Mobile Device Security
Remotely encrypt the device
Perform a remote wipe of the device
Reset the device’s password
Identify the IP address of the smartphone
72
Access Control
ABAC
MAC
RBAC
DAC
73
Physical Security
Motion Sensor
Cable Locks
Mobile Device Manager
CCTV
74
Social Engineering
Man-in-the-middle
Phishing
Tailgating
Shoulder surfing
75
Facilities Security
Laptop
SCADA
ICS
Smart televisions
76
Secure Software Development
DDoS
Cross-site scripting forgery
Buffer overflow
XSS
77
Hardening
Harvesting
Windowing
Stealthing
Hardening
78
Monitoring and Auditing
MDM
SIEM
SOAR
DLP
79
Malware
Rootkit
Botnet
Trojan
Ransomware
80
Access Control
Password complexity
Password expiration
Minimum password length
Password history
81
Application Security
Setting the secure attribute on the cookie
Forcing the use of TLS for the web application
Forcing the use of SSL for the web application
Hashing the cookie value
82
Automation
Continuous intergration
Continuous delivery
Continuous deployment
Continuous monitoring
83
Monitoring and Auditing
SNMP
NetFlow
MIB
SMTP
84
Authentication
MySQL
RDP
IMAP
LDAP
85
Risk Assessments
Transference
Acceptance
Mitigation
Avoidance
86
Planning for the Worst
Line conditioner
Uninterruptible power supply
Power distribution unit
Surge protector
87
Security Applications and Devices
Utilize secure boot
Install an anti-malware application
Utilize file integrity monitoring
Install a host-based IDS
88
Social Engineering
Organized crime
APT
Insider threat
Hacktivist
89
Network Design
DMZ
GPO
Subnet
NIDS
90
Network Design
Create an ACL to allow access
MAC filtering
Implement NAC
Configure a SIEM

Sec+ Flashcards | StudBud