Quiz
.
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (30)
1Penetration testing is the practice of finding vulnerabilities and risks with the purpose of
securing a computer or network. Penetration testing falls under which all-encompassing term?- ABlue teaming
- BNetwork scanning
- CEthical hacking
- DRed teaming
2Heather is performing a penetration test. She has gathered a lot of valuable information about
her target already. Heather has used some hacking tools to determine that, on her target
network, a computer named Production Workstation has port 445 open. Which step in the
ethical hacking methodology is Heather performing?- AGain access
- BScanning and enumeration
- CMaintain access
- DReconnaissance
3Which of the following is the third step in the ethical hacking methodology?
- AGain access
- BReconnaissance
- CScanning and enumeration
- DClear your tracks
4Miguel is performing a penetration test on his client's web-based application. Which
penetration test frameworks should Miguel utilize?- ANIST SP 800-115
- BOSSTMM
- COWASP
- DISO/IEC 27001
5The penetration testing life cycle is a common methodology used when performing a
penetration test. This methodology is almost identical to the ethical hacking methodology.
Which of the following is the key difference between these methodologies?- AReporting
- BGain access
- CReconnaissance
- DMaintain access
6You are executing an attack in order to simulate an outside attack. Which type of penetration
test are you performing?- AWhite box
- BBlack hat
- CBlack box
- DWhite hat
7Which of the following best describes a gray box penetration test?
- AThe ethical hacker has no information regarding the target or network.
- BThe ethical hacker is given full knowledge of the target or network.
- CThe ethical hacker is given strict guidelines about what can be targeted.
- DThe ethical hacker has partial information about the target or network.
8Randy was just hired as a penetration tester for the red team. Which of the following best
describes the red team?- AIs a team of specialists that focus on the organization's defensive security.
- BPerforms offensive security tasks to test the network's security.
- CActs as a pipeline between teams and can work on any side.
- DIs responsible for establishing and implementing policies.
9The Stuxnet worm was discovered in 2010 and was used to gain sensitive information on Iran's
industrial infrastructure. This worm was probably active for about five years before being
discovered. During this time, the attacker had access to the target. Which type of attack was
Stuxnet?- AVirus
- BTrojan horse
- CAPT
- DLogic bomb
10Which type of threat actor only uses skills and knowledge for defensive purposes?
- AScript kiddie
- BGray hat
- CHacktivist
- DWhite hat
11Which statement best describes a suicide hacker?
- AThis hacker is only concerned with taking down their target for a cause. They have no concerns about being caught.
- BThis hacker may cross the line of what is ethical, but usually has good intentions and isn't being malicious.
- CThis hacker is motivated by religious or political beliefs and wants to create severe disruption or widespread fear.
- DThis hacker's main purpose is to protest an event and draw attention to their views and opinions.
12Miguel has been practicing his hacking skills. He has discovered a vulnerability on a system that
he did not have permission to attack. Once Miguel discovered the vulnerability, he anonymously
alerted the owner and instructed him how to secure the system. What type of hacker is Miguel
in this scenario?- AGray hat
- BScript kiddie
- CState-sponsored
- DWhite hat
13The process of analyzing an organization's security and determining its security holes is known
as:- AEthical hacking
- BEnumeration
- Cpenetration testing
- DThreat modeling
14Which of the following best describes a script kiddie?
- AA hacker whose main purpose is to draw attention to their political views.
- BA hacker willing to take more risks because the payoff is a lot higher.
- CA hacker who helps companies see the vulnerabilities in their security.
- DA hacker who uses scripts written by much more talented individuals.
15Any attack involving human interaction of some kind is referred to as:
- AAttacker manipulation
- BA white hat hacker
- CSocial engineering
- DAn opportunistic attack
16Using a fictitious scenario to persuade someone to perform an action or give information they
aren't authorized to share is called:- APretexting
- BPreloading
- CFootprinting
- DImpersonation
17You are instant messaging a coworker, and you get a malicious link. Which type of social
engineering attack is this?- ASpim
- BSurf
- CSpam
- DHoax
18Brandon is helping Fred with his computer. He needs Fred to enter his username and password
into the system. Fred enters the username and password while Brandon is watching him.
Brandon explains to Fred that it is not a good idea to allow anyone to watch you type in
usernames or passwords. Which type of social engineering attack is Fred referring to?- AEavesdropping
- BKeyloggers
- CShoulder surfing
- DSpam and spim
19Which of the following best describes an inside attacker?
- AAn unintentional threat actor; the most common threat.
- BA good guy who tries to help a company see their vulnerabilities.
- CAn agent who uses their technical knowledge to bypass security.
- DAn attacker with lots of resources and money at their disposal.
20Compliments, misinformation, feigning ignorance, and being a good listener are tactics of which
social engineering technique?- AElictitation
- BInterrogation
- CPreloading
- DImpersonation
21You get a call from one of your best customers. The customer is asking about your company's
employees, teams, and managers. What should you do?- AYou should not provide any information except your manager's name and number.
- BYou should provide the information as part of quality customer service.
- CYou should not provide any information and forward the call to the help desk.
- DYou should put the caller on hold and then hang up.
22Jason is at home, attempting to access the website for his music store. When he goes to the
website, it has a simple form asking for name, email, and phone number. This is not the music
store website. Jason is sure the website has been hacked. How did the attacker accomplish this
hack?- ADNS cache poisoning
- BHost file modification
- CSocial networking
- DFeigning ignorance
23An attack that targets senior executives and high-profile victims is referred to as:
- AScrubbing
- BPharming
- CVishing
- DWhaling
24While reviewing video files from your organization's security cameras, you notice a suspicious
person using piggybacking to gain access to your building. The individual in question did not
have a security badge. Which of the following would you most likely implement to keep this
from happening in the future?- AMantraps
- BCable locks
- CAnti-passback
- DScrubbing
25Implementing emergency lighting that runs on protected power and automatically switches on
when the main power goes off is part of which physical control?- APhysical access logs
- BEmployee and visitor safety
- CPhysical access controls
- DPerimeter barriers
26Closed-circuit television can be used as both a preventative tool (to monitor live events) or as an
investigative tool (to record events for later playback). Which camera is more vandal-resistant
than other cameras?- AA Pan Tilt Zoom camera
- BA bullet camera
- CA c-mount camera
- DA dome camera
27Important aspects of physical security include which of the following?
- AInfluencing the target's thoughts, opinions, and emotions before something happens.
- BPreventing interruptions of computer services caused by problems such as fire.
- CImplementing adequate lighting in parking lots and around employee entrances.
- DIdentifying what was broken into, what is missing, and the extent of the damage.
28A person in a dark grey hoodie has jumped the fence at your research center. A security guard
has detained this person, denying him physical access. Which of the following areas of physical
security is the security guard currently in?- ASecurity factors
- BLayered defense
- CSecurity sequence
- DPhysical control
29On her way to work, Angela accidentally left her backpack with a company laptop at the coffee
shop. What type of threat has she caused the company?- AEnvironmental threat
- BCloud threat
- CExternal threat
- DMan-made threat
30The U.S. Department of Commerce has an agency with the goal of protecting organizational
operations, assets, and individuals from threats such as malicious cyber-attacks, natural
disasters, structural failures, and human errors. Which of the following agencies was created for
this purpose?- ANIST
- BCAPEC
- CNVD
- DJPCERT
Informações
- Descrição
- ......
- Autor
- JANET MORENO CANO
- Idioma
- English
- Visualizações
- 6
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz