17503397
Descripción
Test por Mister Potato, actualizado hace más de 1 año
|
Creado por Mister Potato
hace más de 5 años
|
|
Pregunta 1
Pregunta
A security specialist is tasked to ensure that files transmitted between the headquarters office and the branch office are not altered during transmission. Which two algorithms can be used to achieve this task? (Choose two.)
Respuesta
-
3DES
-
HMAC
-
AES
-
SHA-1
-
MD5
Pregunta 2
Pregunta
What technology has a function of using trusted third-party protocols to issue credentials that are accepted as an authoritative identity?
Respuesta
-
hashing algorithms
-
digital signatures
-
symmetric keys
-
PKI certificates
Pregunta 3
Pregunta
What are the two important components of a public key infrastructure (PKI) used in network security? (Choose two.)
Respuesta
-
symmetric encryption algorithms
-
certificate authority
-
intrusion prevention system
-
digital certificates
-
pre-shared key generation
Pregunta 4
Pregunta
Which statement describes statistical data in network security monitoring processes?
Respuesta
-
It shows the results of network activities between network hosts.
-
It contains conversations between network hosts.
-
It is created through an analysis of other forms of network data.
-
It lists each alert message along with statistical information.
Pregunta 5
Pregunta
How does a web proxy device provide data loss prevention (DLP) for an enterprise?
Respuesta
-
by checking the reputation of external web servers
-
by functioning as a firewall
-
by inspecting incoming traffic for potential exploits
-
by scanning and logging outgoing traffic
Pregunta 6
Pregunta
Which capability is provided by the aggregation function in SIEM?
Respuesta
-
reducing the volume of event data by consolidating duplicate event records
-
searching logs and event records of multiple sources for more complete forensic analysis
-
presenting correlated and aggregated event data in real-time monitoring
-
increasing speed of detection and reaction to security threats by examining logs from many systems and applications
Pregunta 7
Pregunta
Which SIEM function is associated with speeding up detection of security threats by examining logs and events from different systems?
Respuesta
-
forensic analysis
-
retention
-
correlation
-
aggregation
Pregunta 8
Pregunta
Which algorithm is used to automatically generate a shared secret for two systems to use in establishing an IPsec VPN?
Respuesta
-
SSL
-
DES
-
AH
-
DH
-
ESP
-
3DES
Pregunta 9
Pregunta
Which statement describes the Software-Optimized Encryption Algorithm (SEAL)?
Respuesta
-
It uses a 112-bit encryption key.
-
It requires more CPU resources than software-based AES does.
-
It is an example of an asymmetric algorithm.
-
SEAL is a stream cipher
Pregunta 10
Pregunta
What technology allows users to verify the identity of a website and to trust code that is downloaded from the Internet?
Respuesta
-
encryption
-
asymmetric key algorithm
-
digital signature
-
hash algorithm
Pregunta 11
Pregunta
The IT company is recommending the use of PKI applications. In which two instances might the entrepreneur make use of PKIs? (Choose two.)
Respuesta
-
802 is authentication
-
HTTPS web service
-
FTP transfers
-
Local NTP server
-
File and directory access permission
Pregunta 12
Pregunta
What is the term used to describe an email that is targeting a specific person employed at a financial institution?
Respuesta
-
spam
-
spyware
-
vishing
-
target phishing
-
spear phishing
Pregunta 13
Pregunta
What type of malware has the primary objective of spreading across the network?
Respuesta
-
virus
-
worm
-
Trojan horse
-
botnet
Pregunta 14
Pregunta
Which type of Trojan horse security breach uses the computer of the victim as the source device to launch other attacks?
Respuesta
-
DoS
-
FTP
-
data-sending
-
proxy
Pregunta 15
Pregunta
A company pays a significant sum of money to hackers in order to regain control of an email and data server. Which type of security attack was used by the hackers?
Respuesta
-
DoS
-
spyware
-
Trojan horse
-
ransomware
Pregunta 16
Pregunta
What is the term used when a malicious party sends a fraudulent email disguised as being from a legitimate, trusted source?
Respuesta
-
Trojan
-
vishing
-
phishing
-
backdoor
Pregunta 17
Pregunta
A user is curious about how someone might know a computer has been infected with malware. What are two common malware behaviors? (Choose two.)
Respuesta
-
The computer emits a hissing sound every time the pencil sharpener is used.
-
The computer freezes and requires reboots
-
No sound emits when an audio CD is played
-
The computer gets increasingly slower to respond
-
The computer beeps once during the boot process.
Pregunta 18
Pregunta
Why would a rootkit be used by a hacker?
Respuesta
-
to gain access to a device without being detected
-
to do reconnaissance
-
to reverse engineer binary files
-
to try to guess a password
Pregunta 19
Pregunta
Which access attack method involves a software program that attempts to discover a system password by the use of an electronic dictionary?
Respuesta
-
packet sniffer attack
-
denial of service attack
-
buffer overflow attack
-
brute-force attack
-
port redirection attack
-
IP spoofing attack
Pregunta 20
Pregunta
What are two evasion methods used by hackers? (Choose two.)
Respuesta
-
scanning
-
encryption
-
access attack
-
phishing
-
resource exhaustion
Pregunta 21
Pregunta
Which type of hacker is motivated to protest against political and social issues?
Respuesta
-
cybercriminal
-
script kiddie
-
vulnerability broker
-
hacktivist
Pregunta 22
Pregunta
What is a significant characteristic of virus malware?
Respuesta
-
Virus malware is only distributed over the Internet.
-
Once installed on a host system, a virus will automatically propagate itself to other systems.
-
A virus is triggered by an event on the host system.
-
A virus can execute independently of the host system.
Pregunta 23
Pregunta
What are three techniques used in social engineering attacks? (Choose three.)
Respuesta
-
vishing
-
phishing
-
pretexting
-
buffer overflow
-
man-in-the-middle
-
sending junk email
Pregunta 24
Pregunta
What are two purposes of launching a reconnaissance attack on a network? (Choose two.)
Respuesta
-
to retrieve and modify data
-
to scan for accessibility
-
to escalate access privileges
-
to prevent other users from accessing the system
-
to gather information about the network and devices
Pregunta 25
Pregunta
What is a main purpose of launching an access attack on network systems?
Respuesta
-
to prevent other users from accessing the system
-
to scan for accessible networks
-
to gather information about the network
-
to retrieve data
Pregunta 26
Pregunta
What is a characteristic of a Trojan horse as it relates to network security?
Respuesta
-
Extreme quantities of data are sent to a particular network device interface.
-
An electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
-
Too much information is destined for a particular memory block, causing additional memory areas to be affected.
-
Malware is contained in a seemingly legitimate executable program.
Pregunta 27
Pregunta
In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?
Respuesta
-
reset attack
-
session hijacking attack
-
port scan attack
-
SYN flood attack
Pregunta 28
Pregunta
Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable. Which type of attack was achieved?
Respuesta
-
Access
-
DoS
-
DDoS
-
Social engineering
Pregunta 29
Pregunta
Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable. What would be the threat attribution in this case?
Respuesta
-
Evaluating the server alert data
-
Obtaining the most volatile evidence
-
Determining who is responsible for the attack
-
Reporting the incident to the proper authorities
Pregunta 30
Pregunta
What component of a security policy explicitly defines the type of traffic allowed on a network and what users are allowed and not allowed to do?
Respuesta
-
password policies
-
identification and authentication policies
-
remote access policies
-
acceptable use policies
Pregunta 31
Pregunta
Which AAA component can be established using token cards?
Respuesta
-
authorization
-
authentication
-
auditing
-
accounting
Pregunta 32
Pregunta
What service determines which resources a user can access along with the operations that a user can perform?
Respuesta
-
authentication
-
biometric
-
authorization
-
accounting
-
token
Pregunta 33
Pregunta
A web server administrator is configuring access settings to require users to authenticate first before accessing certain web pages. Which requirement of information security is addressed through the configuration?
Respuesta
-
availability
-
confidentiality
-
integrity
-
scalability
Pregunta 34
Pregunta
A company has a file server that shares a folder named Public. The network security policy specifies that the Public folder is assigned Read-Only rights to anyone who can log into the server while the Edit rights are assigned only to the network admin group. Which component is addressed in the AAA network service framework?
Respuesta
-
automation
-
accounting
-
authentication
-
authorization
Pregunta 35
Pregunta
A company is experiencing overwhelming visits to a main web server. The IT department is developing a plan to add a couple more web servers for load balancing and redundancy. Which requirement of information security is addressed by implementing the plan?
Respuesta
-
integrity
-
scalability
-
availability
-
confidentiality
Pregunta 36
Pregunta
In a defense-in-depth approach, which three options must be identified to effectively defend a network against attacks? (Choose three.)
Respuesta
-
assets that need protection
-
location of attacker or attackers
-
total number of devices that attach to the wired and wireless network
-
threats to assets
-
vulnerabilities in the system
-
past security breaches
Pregunta 37
Pregunta
Which section of a security policy is used to specify that only authorized individuals should have access to enterprise data?
Respuesta
-
statement of authority
-
statement of scope
-
campus access policy
-
Internet access policy
-
identification and authentication policy
Pregunta 38
Pregunta
Which type of access control applies the strictest access control and is commonly used in military or mission critical applications?
Respuesta
-
mandatory access control (MAC)
-
discretionary access control (DAC)
-
attribute-based access control (ABAC)
-
Non-discretionary access control
Pregunta 39
Pregunta
In addressing a risk that has low potential impact and relatively high cost of mitigation or reduction, which strategy will accept the risk and its consequences?
Respuesta
-
risk reduction
-
risk avoidance
-
risk retention
-
risk sharing
Pregunta 40
Pregunta
Which criterion in the Base Metric Group Exploitability metrics reflects the proximity of the threat actor to the vulnerable component?
Respuesta
-
user interaction
-
attack vector
-
attack complexity
-
privileges required
Pregunta 41
Pregunta
Which statement describes the term attack surface?
Respuesta
-
It is the total sum of vulnerabilities in a system that is accessible to an attacker.
-
It is the group of hosts that experiences the same attack.
-
It is the network interface where attacks originate.
-
It is the total number of attacks toward an organization within a day.
Pregunta 42
Pregunta
What type of antimalware program is able to detect viruses by recognizing various characteristics of a known malware file?
Respuesta
-
behavior-based
-
agent-based
-
signature-based
-
heuristic-based
Pregunta 43
Pregunta
The IT security personnel of an organization notice that the web server deployed in the DMZ is frequently targeted by threat actors. The decision is made to implement a patch management system to manage the server. Which risk management strategy method is being used to respond to the identified risk?
Respuesta
-
risk avoidance
-
risk retention
-
risk reduction
-
risk sharing
Pregunta 44
Pregunta
For network systems, which management system addresses the inventory and control of hardware and software configurations?
Respuesta
-
asset management
-
vulnerability management
-
risk management
-
configuration management
Pregunta 45
Pregunta
Which type of antimalware software detects and mitigates malware by analyzing suspicious activities?
Respuesta
-
heuristics-based
-
packet-based
-
behavior-based
-
signature-based
Pregunta 46
Pregunta
Which security procedure would be used on a Windows workstation to prevent access to a specific set of websites?
Respuesta
-
whitelisting
-
HIDS
-
blacklisting
-
baselining
Pregunta 47
Pregunta
Which two criteria in the Base Metric Group Exploitability metrics are associated with the complexity of attacks?
Respuesta
-
scope
-
attack complexity
-
user interaction
-
attack vector
-
privileges required
Pregunta 48
Pregunta
What is a host-based intrusion detection system (HIDS)?
Respuesta
-
It identifies potential attacks and sends alerts but does not stop the traffic.
-
It detects and stops potential direct attacks but does not scan for malware.
-
It is an agentless system that scans files on a host for potential malware.
-
It combines the functionalities of antimalware applications with firewall protection.
Pregunta 49
Pregunta
In addressing an identified risk, which strategy aims to stop performing the activities that create risk?
Respuesta
-
risk reduction
-
risk avoidance
-
risk retention
-
risk sharing
Pregunta 50
Pregunta
Use the following scenario to answer the questions. A company has just had a cybersecurity incident. The threat actor or actors appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server with a large amount of traffic, which rendered the server inoperable.The security team at this company has removed the compromised server and preserved it with the security hack still embedded. What type of evidence is this?
Respuesta
-
Best
-
Classified
-
Corroborating
-
Indirect
Pregunta 51
Pregunta
What programs provide a complete audit trail of basic information about every IP flow forwarded on a device?
Respuesta
-
SPAN
-
Wireshark
-
NetFlow
-
SIEM
Pregunta 52
Pregunta
Grey Hat Hackers are
Respuesta
-
Commit crimes and do unethical things but not for personal gain or to cause damage. OR May compromise network and then disclose the problem so the organization can fix the problem.
-
wws
Pregunta 53
Pregunta
“Vulnerability Broker” Threat Actors
Respuesta
-
Discover exploits and report them to vendors, sometimes for prizes or rewards
-
wws
Pregunta 54
Pregunta
Definition of the attack " Sniffer "
Respuesta
-
an application or device that can read, monitor, and capture network data exchanges and read network packets
-
wws
Pregunta 55
Pregunta
What is the significant characteristic of worm malware?
Respuesta
-
Executes arbitrary code and installs itself in the memory of the infected device. Automatically replicates itself and spreads across the network from system to system. Components of a worm attack include an exploiting vulnerability, delivering a malicious payload, and self-propagation. Virus requires a host program to run, worms can run by themselves.
-
wws
Pregunta 56
Pregunta
White Hat Hackers are
Respuesta
-
Ethical hackers who use their programming skills for good, ethical, and legal purposes. Perform penetration tests to discover vulnerabilities and report to developers before exploitation.
-
wws
Pregunta 57
Pregunta
Black Hat Hackers are
Respuesta
-
Unethical criminals who violate security for personal gain, or for malicious reasons, such as attacking networks.
-
wws
Pregunta 58
Pregunta
Types of attacks targeting IP:
Respuesta
-
ICMP attacks DoS attacks DDoS attacks Address spoofing attacks Man-in-the-middle attack (MITM) Session hijacking
-
wws
¿Quieres crear tus propios Tests gratis con GoConqr? Más información.