GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Test - 1

Mary T 25 questions

Take the quiz

Questions in this quiz (25)

  1. 1Which of these threat actors would be MOST likely to attack systems for direct financial gain?
    1. AHacktivist
    2. BNation State
    3. CCompetitor
    4. DOrganized Crime
  2. 2An IPS at your company has found a sharp increase in traffic from all-in-one printers. After researching, your security team has found a vulnerability associated with these devices that allows the device to be remotely controlled by a third-party. Which category would BEST describe these devices?
    1. AMFD
    2. BRTOS
    3. CSoC
    4. DloT
  3. 3Which of the following standards provides information on privacy and managing PII?
    1. AISO 27001
    2. BISO 31000
    3. CISO 27701
    4. DISO 27002
  4. 4An attacker calls into a company’s help desk and pretends to be the director of the company’s manufacturing department. The attacker states that they have forgotten their password and they need to have the password reset quickly for an important meeting. What kind of attack would BEST describe this phone call?
    1. ATailgating
    2. BOn-Path
    3. CSocial Engineering
    4. DVishing
  5. 5A security team has been provided with a non-credentialed vulnerability scan report created by a third-party. Which of the following would they expect to see on this report?
    1. AA list of all unpatched operating system files
    2. BThe version of web server software in use
    3. CA list of local user accounts
  6. 6A security administrator is concerned about data exfiltration resulting from the use of malicious phone charging stations. Which of the following would be the BEST way to protect against this threat?
    1. AUSB data blocker
    2. BMFA
    3. CPersonal firewall
    4. DFDE
  7. 7A security engineer runs a monthly vulnerability scan. The scan doesn’t list any vulnerabilities for Windows servers, but a significant vulnerability was announced last week and none of the servers are patched yet. Which of the following best describes this result?
    1. ACredentialed
    2. BExploit
    3. CFalse negative
    4. DZero-day attack
  8. 8A department store policy requires that a floor manager approves each transaction when a gift certificate is used for payment. The security team has found that some of these transactions have been processed without the approval of a manager. Which of the following would provide a separation of duties to enforce this store policy?
    1. AImplement a discretionary access control policy
    2. BRequire an approval PIN for the cashier and a separate approval PIN for the manager
    3. CDisable all gift certificate transactions for cashiers
    4. DUse a WAF to monitor all gift certificate transactions
  9. 9A security administrator needs to identify all references to a Javascript file in the HTML of a web page. Which of the following tools should be used to view the source of the web page and search through the file for a specific filename? (Select TWO)
    1. Agrep
    2. Bhead
    3. Ctail
    4. Dnmap
    5. Ecurl
    6. Fopenssl
    7. Gscanless
  10. 10A network administrator has installed a new access point, but only a portion of the wireless devices are able to connect to the network. Other devices can see the access point, but they are not able to connect even when using the correct wireless settings. Which of the following security features was MOST likely enabled?
    1. A802.1 X authentication
    2. BMAC filtering
    3. CSSID broadcast suppression
    4. DAnti-spoofing

Information

Description
12th grade Computer science Quiz on Test - 1, created by Mary T on 28/05/2022.
Author
Mary T
Language
English
Views
0
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?