Quiz
turn on the blender please
Fragen in diesem Quiz (58)
1A security specialist is tasked to ensure that files transmitted between the headquarters office and the branch office are not altered during transmission. Which two algorithms can be used to achieve this task? (Choose two.)
- A3DES
- BHMAC
- CAES
- DSHA-1
- EMD5
2What technology has a function of using trusted third-party protocols to issue credentials that are accepted as an authoritative identity?
- Ahashing algorithms
- Bdigital signatures
- Csymmetric keys
- DPKI certificates
3What are the two important components of a public key infrastructure (PKI) used in network security? (Choose two.)
- Asymmetric encryption algorithms
- Bcertificate authority
- Cintrusion prevention system
- Ddigital certificates
- Epre-shared key generation
4Which statement describes statistical data in network security monitoring processes?
- AIt shows the results of network activities between network hosts.
- BIt contains conversations between network hosts.
- CIt is created through an analysis of other forms of network data.
- DIt lists each alert message along with statistical information.
5How does a web proxy device provide data loss prevention (DLP) for an enterprise?
- Aby checking the reputation of external web servers
- Bby functioning as a firewall
- Cby inspecting incoming traffic for potential exploits
- Dby scanning and logging outgoing traffic
6Which capability is provided by the aggregation function in SIEM?
- Areducing the volume of event data by consolidating duplicate event records
- Bsearching logs and event records of multiple sources for more complete forensic analysis
- Cpresenting correlated and aggregated event data in real-time monitoring
- Dincreasing speed of detection and reaction to security threats by examining logs from many systems and applications
7Which SIEM function is associated with speeding up detection of security threats by examining logs and events from different systems?
- Aforensic analysis
- Bretention
- Ccorrelation
- Daggregation
8Which algorithm is used to automatically generate a shared secret for two systems to use in establishing an IPsec VPN?
- ASSL
- BDES
- CAH
- DDH
- EESP
- F3DES
9Which statement describes the Software-Optimized Encryption Algorithm (SEAL)?
- AIt uses a 112-bit encryption key.
- BIt requires more CPU resources than software-based AES does.
- CIt is an example of an asymmetric algorithm.
- DSEAL is a stream cipher
10What technology allows users to verify the identity of a website and to trust code that is downloaded from the Internet?
- Aencryption
- Basymmetric key algorithm
- Cdigital signature
- Dhash algorithm
11The IT company is recommending the use of PKI applications. In which two instances might the entrepreneur make use of PKIs? (Choose two.)
- A802 is authentication
- BHTTPS web service
- CFTP transfers
- DLocal NTP server
- EFile and directory access permission
12What is the term used to describe an email that is targeting a specific person employed at a financial institution?
- Aspam
- Bspyware
- Cvishing
- Dtarget phishing
- Espear phishing
13What type of malware has the primary objective of spreading across the network?
- Avirus
- Bworm
- CTrojan horse
- Dbotnet
14Which type of Trojan horse security breach uses the computer of the victim as the source device to launch other attacks?
- ADoS
- BFTP
- Cdata-sending
- Dproxy
15A company pays a significant sum of money to hackers in order to regain control of an email and data server. Which type of security attack was used by the hackers?
- ADoS
- Bspyware
- CTrojan horse
- Dransomware
16What is the term used when a malicious party sends a fraudulent email disguised as being from a legitimate, trusted source?
- ATrojan
- Bvishing
- Cphishing
- Dbackdoor
17A user is curious about how someone might know a computer has been infected with malware. What are two common malware behaviors? (Choose two.)
- AThe computer emits a hissing sound every time the pencil sharpener is used.
- BThe computer freezes and requires reboots
- CNo sound emits when an audio CD is played
- DThe computer gets increasingly slower to respond
- EThe computer beeps once during the boot process.
18Why would a rootkit be used by a hacker?
- Ato gain access to a device without being detected
- Bto do reconnaissance
- Cto reverse engineer binary files
- Dto try to guess a password
19Which access attack method involves a software program that attempts to discover a system password by the use of an electronic dictionary?
- Apacket sniffer attack
- Bdenial of service attack
- Cbuffer overflow attack
- Dbrute-force attack
- Eport redirection attack
- FIP spoofing attack
20What are two evasion methods used by hackers? (Choose two.)
- Ascanning
- Bencryption
- Caccess attack
- Dphishing
- Eresource exhaustion
21Which type of hacker is motivated to protest against political and social issues?
- Acybercriminal
- Bscript kiddie
- Cvulnerability broker
- Dhacktivist
22What is a significant characteristic of virus malware?
- AVirus malware is only distributed over the Internet.
- BOnce installed on a host system, a virus will automatically propagate itself to other systems.
- CA virus is triggered by an event on the host system.
- DA virus can execute independently of the host system.
23What are three techniques used in social engineering attacks? (Choose three.)
- Avishing
- Bphishing
- Cpretexting
- Dbuffer overflow
- Eman-in-the-middle
- Fsending junk email
24What are two purposes of launching a reconnaissance attack on a network? (Choose two.)
- Ato retrieve and modify data
- Bto scan for accessibility
- Cto escalate access privileges
- Dto prevent other users from accessing the system
- Eto gather information about the network and devices
25What is a main purpose of launching an access attack on network systems?
- Ato prevent other users from accessing the system
- Bto scan for accessible networks
- Cto gather information about the network
- Dto retrieve data
26What is a characteristic of a Trojan horse as it relates to network security?
- AExtreme quantities of data are sent to a particular network device interface.
- BAn electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
- CToo much information is destined for a particular memory block, causing additional memory areas to be affected.
- DMalware is contained in a seemingly legitimate executable program.
27In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?
- Areset attack
- Bsession hijacking attack
- Cport scan attack
- DSYN flood attack
28Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable. Which type of attack was achieved?
- AAccess
- BDoS
- CDDoS
- DSocial engineering
29Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable. What would be the threat attribution in this case?
- AEvaluating the server alert data
- BObtaining the most volatile evidence
- CDetermining who is responsible for the attack
- DReporting the incident to the proper authorities
30What component of a security policy explicitly defines the type of traffic allowed on a network and what users are allowed and not allowed to do?
- Apassword policies
- Bidentification and authentication policies
- Cremote access policies
- Dacceptable use policies
31Which AAA component can be established using token cards?
- Aauthorization
- Bauthentication
- Cauditing
- Daccounting
32What service determines which resources a user can access along with the operations that a user can perform?
- Aauthentication
- Bbiometric
- Cauthorization
- Daccounting
- Etoken
33A web server administrator is configuring access settings to require users to authenticate first before accessing certain web pages. Which requirement of information security is addressed through the configuration?
- Aavailability
- Bconfidentiality
- Cintegrity
- Dscalability
34A company has a file server that shares a folder named Public. The network security policy specifies that the Public folder is assigned Read-Only rights to anyone who can log into the server while the Edit rights are assigned only to the network admin group. Which component is addressed in the AAA network service framework?
- Aautomation
- Baccounting
- Cauthentication
- Dauthorization
35A company is experiencing overwhelming visits to a main web server. The IT department is developing a plan to add a couple more web servers for load balancing and redundancy. Which requirement of information security is addressed by implementing the plan?
- Aintegrity
- Bscalability
- Cavailability
- Dconfidentiality
36In a defense-in-depth approach, which three options must be identified to effectively defend a network against attacks? (Choose three.)
- Aassets that need protection
- Blocation of attacker or attackers
- Ctotal number of devices that attach to the wired and wireless network
- Dthreats to assets
- Evulnerabilities in the system
- Fpast security breaches
37Which section of a security policy is used to specify that only authorized individuals should have access to enterprise data?
- Astatement of authority
- Bstatement of scope
- Ccampus access policy
- DInternet access policy
- Eidentification and authentication policy
38Which type of access control applies the strictest access control and is commonly used in military or mission critical applications?
- Amandatory access control (MAC)
- Bdiscretionary access control (DAC)
- Cattribute-based access control (ABAC)
- DNon-discretionary access control
39In addressing a risk that has low potential impact and relatively high cost of mitigation or reduction, which strategy will accept the risk and its consequences?
- Arisk reduction
- Brisk avoidance
- Crisk retention
- Drisk sharing
40Which criterion in the Base Metric Group Exploitability metrics reflects the proximity of the threat actor to the vulnerable component?
- Auser interaction
- Battack vector
- Cattack complexity
- Dprivileges required
41Which statement describes the term attack surface?
- AIt is the total sum of vulnerabilities in a system that is accessible to an attacker.
- BIt is the group of hosts that experiences the same attack.
- CIt is the network interface where attacks originate.
- DIt is the total number of attacks toward an organization within a day.
42What type of antimalware program is able to detect viruses by recognizing various characteristics of a known malware file?
- Abehavior-based
- Bagent-based
- Csignature-based
- Dheuristic-based
43The IT security personnel of an organization notice that the web server deployed in the DMZ is frequently targeted by threat actors. The decision is made to implement a patch management system to manage the server. Which risk management strategy method is being used to respond to the identified risk?
- Arisk avoidance
- Brisk retention
- Crisk reduction
- Drisk sharing
44For network systems, which management system addresses the inventory and control of hardware and software configurations?
- Aasset management
- Bvulnerability management
- Crisk management
- Dconfiguration management
45Which type of antimalware software detects and mitigates malware by analyzing suspicious activities?
- Aheuristics-based
- Bpacket-based
- Cbehavior-based
- Dsignature-based
46Which security procedure would be used on a Windows workstation to prevent access to a specific set of websites?
- Awhitelisting
- BHIDS
- Cblacklisting
- Dbaselining
47Which two criteria in the Base Metric Group Exploitability metrics are associated with the complexity of attacks?
- Ascope
- Battack complexity
- Cuser interaction
- Dattack vector
- Eprivileges required
48What is a host-based intrusion detection system (HIDS)?
- AIt identifies potential attacks and sends alerts but does not stop the traffic.
- BIt detects and stops potential direct attacks but does not scan for malware.
- CIt is an agentless system that scans files on a host for potential malware.
- DIt combines the functionalities of antimalware applications with firewall protection.
49In addressing an identified risk, which strategy aims to stop performing the activities that create risk?
- Arisk reduction
- Brisk avoidance
- Crisk retention
- Drisk sharing
50Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor or actors appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable.The security team at this company has removed the compromised server and preserved it with the security hack still embedded. What type of evidence is this?
- ABest
- BClassified
- CCorroborating
- DIndirect
51What programs provide a complete audit trail of basic information about every IP flow forwarded on a device?
- ASPAN
- BWireshark
- CNetFlow
- DSIEM
52Grey Hat Hackers are
- ACommit crimes and do unethical things but not for personal gain or to cause damage. OR
May compromise network and then disclose the problem so the organization can fix the problem. - Bwws
- ACommit crimes and do unethical things but not for personal gain or to cause damage. OR
53“Vulnerability Broker” Threat Actors
- ADiscover exploits and report them to vendors, sometimes for prizes or rewards
- Bwws
54Definition of the attack " Sniffer "
- Aan application or device that can read, monitor, and capture network data exchanges and read network packets
- Bwws
55What is the significant characteristic of worm malware?
- AExecutes arbitrary code and installs itself in the memory of the infected device.
Automatically replicates itself and spreads across the network from system to system.
Components of a worm attack include an exploiting vulnerability, delivering a malicious payload, and self-propagation.
Virus requires a host program to run, worms can run by themselves. - Bwws
- AExecutes arbitrary code and installs itself in the memory of the infected device.
56White Hat Hackers are
- AEthical hackers who use their programming skills for good, ethical, and legal purposes.
Perform penetration tests to discover vulnerabilities and report to developers before exploitation. - Bwws
- AEthical hackers who use their programming skills for good, ethical, and legal purposes.
57Black Hat Hackers are
- AUnethical criminals who violate security for personal gain, or for malicious reasons, such as attacking networks.
- Bwws
58Types of attacks targeting IP:
- AICMP attacks
DoS attacks
DDoS attacks
Address spoofing attacks
Man-in-the-middle attack (MITM)
Session hijacking - Bwws
- AICMP attacks
Informationen
- Beschreibung
- Engineering (final) Quiz am turn on the blender please, erstellt von Mister Potato am 29/03/2019.
- Autor
- Mister Potato
- Sprache
- English
- Aufrufe
- 57
- Schlagwörter
- Bewertung
- 5,0 von 5 · 1 Bewertung Bewerte dieses Quiz