Fundamentals of Information Security [State Exam | Part 1]

Pregunta 1 de 200

1

What is a potential risk when using a free and open wireless hotspot in a public location?

Selecciona una de las siguientes respuestas posibles:

Too many users trying to connect to the Internet may cause a network traffic jam.
The Internet connection can become too slow when many users access the wireless hotspot.
Network traffic might be hijacked and information stolen.
Purchase of products from vendors might be required in exchange for the Internet access.

Explicación

Pregunta 2 de 200

1

How does a security information and event management system (SIEM) in a SOC help the personnel fight against security threats?

Selecciona una de las siguientes respuestas posibles:

by integrating all security devices and appliances in an organization
by analyzing logging data in real time
by combining data from multiple technologies
by dynamically implementing firewall rules

Explicación

Pregunta 3 de 200

1

Which statement best describes a motivation of hacktivists?

Selecciona una de las siguientes respuestas posibles:

They are part of a protest group behind a political cause.
They are curious and learning hacking skills.
They are trying to show off their hacking skills.
They are interested in discovering new exploits.

Explicación

Pregunta 4 de 200

1

If a SOC has a goal of 99.999% uptime, how many minutes of downtime a year would be considered within its goal?

Selecciona una de las siguientes respuestas posibles:

Approximately 5 minutes per year.
Approximately 10 minutes per year.
Approximately 20 minutes per year.
Approximately 30 minutes per year.

Explicación

Pregunta 5 de 200

1

Why do IoT devices pose a greater risk than other computing devices on a network?

Selecciona una de las siguientes respuestas posibles:

Most IoT devices do not require an Internet connection and are unable to receive new updates.
IoT devices cannot function on an isolated network with only an Internet connection.
Most IoT devices do not receive frequent firmware updates.
IoT devices require unencrypted wireless connections.

Explicación

Pregunta 6 de 200

1

Which two services are provided by security operations centers? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

managing comprehensive threat solutions
ensuring secure routing packet exchanges
responding to data center physical break-ins
monitoring network security threats
providing secure Internet connections

Explicación

Pregunta 7 de 200

1

Users report that a database file on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?

Selecciona una de las siguientes respuestas posibles:

man-in-the-middle attack
DoS attack
Ransomware
Trojan horse

Explicación

Pregunta 8 de 200

1

Which organization offers the vendor-neutral CySA+ certification?

Selecciona una de las siguientes respuestas posibles:

IEEE
CompTIA
(ISC)²
GIAC

Explicación

Pregunta 9 de 200

1

What was used as a cyberwarfare weapon to attack a uranium enrichment facility in Iran?

Selecciona una de las siguientes respuestas posibles:

DDoS
SQL injection
PSYOPS
Stuxnet

Explicación

Pregunta 10 de 200

1

Which three technologies should be included in a SOC security information and event management system? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

firewall appliance
security monitoring
log management
intrusion prevention
proxy service
threat intelligence

Explicación

Pregunta 11 de 200

1

Which personnel in a SOC is assigned the task of verifying whether an alert triggered by monitoring software represents a true security incident?

Selecciona una de las siguientes respuestas posibles:

SOC Manager
Tier 2 personnel
Tier 3 personnel
Tier 1 personnel

Explicación

Pregunta 12 de 200

1

Which statement describes cyberwarfare?

Selecciona una de las siguientes respuestas posibles:

Cyberwarfare is an attack carried out by a group of script kiddies.
It is a series of personal protective equipment developed for soldiers involved in nuclear war.
It is simulation software for Air Force pilots that allows them to practice under a simulated war scenario.
It is Internet-based conflict that involves the penetration of information systems of other nations.

Explicación

Pregunta 13 de 200

1

In the operation of a SOC, which system is frequently used to let an analyst select alerts from a pool to investigate?

Selecciona una de las siguientes respuestas posibles:

syslog server
registration system
ticketing system
security alert knowledge-based system

Explicación

Pregunta 14 de 200

1

What name is given to an amateur hacker?

Selecciona una de las siguientes respuestas posibles:

red hat
script kiddie
black hat
blue team

Explicación

Pregunta 15 de 200

1

Which personnel in a SOC are assigned the task of hunting for potential threats and implementing threat detection tools?

Selecciona una de las siguientes respuestas posibles:

Tier 1 Analyst
SOC Manager
Tier 2 Incident Reporter
Tier 3 SME

Explicación

Pregunta 16 de 200

1

What utility is available on a Windows PC to view current running applications and processes?

Selecciona una de las siguientes respuestas posibles:

nslookup
ipconfig
Control Panel
Task Manager

Explicación

Pregunta 17 de 200

1

A user logs in to Windows with a regular user account and attempts to use an application that requires administrative privileges. What can the user do to successfully use the application?

Selecciona una de las siguientes respuestas posibles:

Right-click the application and choose Run as root.
Right-click the application and choose Run as Priviledge.
Right-click the application and choose Run as Administrator.
Right-click the application and choose Run as Superuser.

Explicación

Pregunta 18 de 200

1

A technician can ping the IP address of the web server of a remote company but cannot successfully ping the URL address of the same web server. Which software utility can the technician use to diagnose the problem?

Selecciona una de las siguientes respuestas posibles:

nslookup
tracert
netstat
ipconfig

Explicación

Pregunta 19 de 200

1

Where are the settings that are chosen during the installation process stored?

Selecciona una de las siguientes respuestas posibles:

in the recovery partition
in flash memory
in the Registry
in BIOS

Explicación

Pregunta 20 de 200

1

What technology was created to replace the BIOS program on modern personal computer motherboards?

Selecciona una de las siguientes respuestas posibles:

CMOS
MBR
RAM
UEFI

Explicación

Pregunta 21 de 200

1

Which two things can be determined by using the ping command? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

the number of routers between the source and destination device
the destination device is reachable through the network
the average time it takes each router in the path between source and destination to respond
the IP address of the router nearest the destination device
the average time it takes a packet to reach the destination and for the response to return to the source

Explicación

Pregunta 22 de 200

1

What function is provided by the Windows Task Manager?

Selecciona una de las siguientes respuestas posibles:

It provides an active list of TCP connections.
It maintains system logs.
It selectively denies traffic on specified interfaces.
It provides information on system resources and processes.

Explicación

Pregunta 23 de 200

1

Which type of Windows PowerShell command performs an action and returns an output or object to the next command that will be executed?

Selecciona una de las siguientes respuestas posibles:

scripts
functions
cmdlets
routines

Explicación

Pregunta 24 de 200

1

What would be displayed if the netstat -abno command was entered on a Windows PC?

Selecciona una de las siguientes respuestas posibles:

all active TCP and UDP connections, their current state, and their associated process ID (PID)
only active TCP connections in an ESTABLISHED state
only active UDP connections in an LISTENING state
a local routing table

Explicación

Pregunta 25 de 200

1

Which two commands could be used to check if DNS name resolution is working properly on a Windows PC? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

ipconfig /flushdns
net cisco.com
nslookup cisco.com
ping cisco.com
nbtstat cisco.com

Explicación

Pregunta 26 de 200

1

Refer to the exhibit. A cyber security administrator is attempting to view system information from the Windows PowerShell and recieves the error message shown. “The requested operation requires elevation.”
What action does the administrator need to take to successfully run the command?

Selecciona una de las siguientes respuestas posibles:

Run the command from the command prompt.
Install latest Windows updates.
Restart the abno service in Task Manager.
Run PowerShell as administrator.

Explicación

Pregunta 27 de 200

1

Refer to the exhibit. A cybersecurity analyst is investigating a reported security incident on a Microsoft Windows computer. Which tool is the analyst using?

Selecciona una de las siguientes respuestas posibles:

Event Viewer
PowerShell
Task Manager
Performance Monitor

Explicación

Pregunta 28 de 200

1

For security reasons a network administrator needs to ensure that local computers cannot ping each other. Which settings can accomplish this task?

Selecciona una de las siguientes respuestas posibles:

firewall settings
MAC address settings
smartcard settings
file system settings

Explicación

Pregunta 29 de 200

1

Consider the path representation in Windows CLI C:\Users\Jason\Desktop\mydocu.txt. What does the Users\Jason component represent?

Selecciona una de las siguientes respuestas posibles:

file directory and subdirectory
current file directory
file attribute
storage device or partition

Explicación

Pregunta 30 de 200

1

Which two user accounts are automatically created when a user installs Windows to a new computer? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

superuser
guest
root
administrator
system

Explicación

Pregunta 31 de 200

1

What term is used to describe a logical drive that can be formatted to store data?

Selecciona una de las siguientes respuestas posibles:

partition
track
sector
cluster
volume

Explicación

Pregunta 32 de 200

1

What is the purpose of entering the netsh command on a Windows PC?

Selecciona una de las siguientes respuestas posibles:

to create user accounts
to test the hardware devices on the PC
to change the computer name for the PC
to configure networking parameters for the PC

Explicación

Pregunta 33 de 200

1

A technician is troubleshooting a PC unable to connect to the network. What command should be issued to check the IP address of the device?

Selecciona una de las siguientes respuestas posibles:

ipconfig
ping
tracert
nslookup

Explicación

Pregunta 34 de 200

1

Refer to the exhibit. Which Microsoft Windows application is being used?

Selecciona una de las siguientes respuestas posibles:

Event Viewer
PowerShell
Task Manager
Performance Monitor

Explicación

Pregunta 35 de 200

1

What are two reasons for entering the ipconfig command on a Windows PC? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

to review the network configuration on the PC
to check if the DNS server can be contacted
to ensure that the PC can connect to remote networks
to review the status of network media connections
to display the bandwidth and throughput of the network connection

Explicación

Pregunta 36 de 200

1

What are two advantages of the NTFS file system compared with FAT32? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

NTFS allows the automatic detection of bad sectors.
NTFS is easier to configure.
NTFS allows faster formatting of drives.
NTFS provides more security features.
NTFS supports larger files.
NTFS allows faster access to external peripherals such as a USB drive.

Explicación

Pregunta 37 de 200

1

What is the purpose of using the net accounts command in Windows?

Selecciona una de las siguientes respuestas posibles:

to start a network service
to display information about shared network resources
to show a list of computers and network devices on the network
to review the settings of password and logon requirements for users

Explicación

Pregunta 38 de 200

1

What are two reasons for entering the ping 127.0.0.1 command on a Windows PC? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

to check if the NIC functions as expected
to check if the default gateway is configured correctly
to display the bandwidth and throughput of the network connection
to check if the TCP/IP protocol suite is installed properly
to ensure that the PC can connect to remote networks

Explicación

Pregunta 39 de 200

1

Why would a network administrator choose Linux as an operating system in the Security Operations Center (SOC)?

Selecciona una de las siguientes respuestas posibles:

It is easier to use than other operating systems.
It is more secure than other server operating systems.
The administrator has more control over the operating system.
More network applications are created for this environment

Explicación

Pregunta 40 de 200

1

Which Linux command can be used to display the name of the current working directory?

Selecciona una de las siguientes respuestas posibles:

chmod
pwd
ps
sudo

Explicación

Pregunta 41 de 200

1

Consider the result of the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file?

ls –l analyst.txt
-rwxrw-r-- sales staff 1028 May 28 15:50 analyst.txt

Selecciona una de las siguientes respuestas posibles:

write only
read, write, execute
read, write
read only

Explicación

Pregunta 42 de 200

1

A Linux system boots into the GUI by default, so which application can a network administrator use in order to access the CLI environment?

Selecciona una de las siguientes respuestas posibles:

file viewer
package management tool
terminal emulator
system viewer

Explicación

Pregunta 43 de 200

1

The image displays a laptop that is acting as the SSH client that is communicating with an SSH server.
Refer to the exhibit. Which well-known port number is used by the server?

Selecciona una de las siguientes respuestas posibles:

23
22
21
25

Explicación

Pregunta 44 de 200

1

How is a server different from a workstation computer?

Selecciona una de las siguientes respuestas posibles:

The server works as a standalone computer.
The server is designed to provide services to clients.
The workstation has fewer applications installed.
The workstation has more users who attach to it.

Explicación

Pregunta 45 de 200

1

Which two methods can be used to harden a computing device? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Allow default services to remain enabled.
Update patches on a strict annual basis irrespective of release date.
Enforce the password history mechanism.
Ensure physical security.
Allow USB auto-detection.

Explicación

Pregunta 46 de 200

1

What is the main purpose of the X Window System?

Selecciona una de las siguientes respuestas posibles:

to provide a customizable CLI environment
to provide a basic framework for a GUI
to provide remote access to a Linux-based system
to provide a basic set of penetration testing tools

Explicación

Pregunta 47 de 200

1

Which Linux command is used to manage processes?

Selecciona una de las siguientes respuestas posibles:

kill
grep
chrootkit
ls

Explicación

Pregunta 48 de 200

1

Why is Linux considered to be better protected against malware than other operating systems?

Selecciona una de las siguientes respuestas posibles:

fewer deployments
integrated firewall
customizable penetration and protection tools
file system structure, file permissions, and user account restrictions

Explicación

Pregunta 49 de 200

1

Which two Linux commands might be used before using the kill command? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

top
ls
grep
ps
chroot

Explicación

Pregunta 50 de 200

1

What term is used for operating system updates?

Selecciona una de las siguientes respuestas posibles:

patches
new releases
penetration testing
packages

Explicación

Pregunta 51 de 200

1

What term describes a set of software tools designed to increase the privileges of a user or to grant access to the user to portions of the operating system that should not normally be allowed?

Selecciona una de las siguientes respuestas posibles:

penetration testing
package manager
rootkit
compiler

Explicación

Pregunta 52 de 200

1

What is the well-known port address number used by DNS to serve requests?

Selecciona una de las siguientes respuestas posibles:

60
110
25
53

Explicación

Pregunta 53 de 200

1

Which file system is the primary file system used by Apple in current Macintosh computers? (спорный вопрос = оба варианта ответа подходят, но в книге указан лишь HFS+).

Selecciona una o más de las siguientes respuestas posibles:

CDFS
APFS
ext3
ext2
HFS+

Explicación

Pregunta 54 de 200

1

Which type of tool allows administrators to observe and understand every detail of a network transaction?

Selecciona una de las siguientes respuestas posibles:

malware analysis tool
packet capture software
ticketing system
log manager

Explicación

Pregunta 55 de 200

1

Which command can be utilized to view log entries of NGINX system events in real time?

Selecciona una de las siguientes respuestas posibles:

sudo journalctl –u nginx.service -f
sudo journalctl –f
sudo journalctl –until "1 hour ago"
sudo journalctl –u nginx.services

Explicación

Pregunta 56 de 200

1

What is the purpose of a Linux package manager?

Selecciona una de las siguientes respuestas posibles:

It provides access to settings and the shutdown function.
It is used to compile code that creates an application.
It is used to install an application.
It provides a short list of tasks a particular application can perform.

Explicación

Pregunta 57 de 200

1

Which user can override file permissions on a Linux computer?

Selecciona una de las siguientes respuestas posibles:

only the creator of the file
any user that has 'group' permission to the file
any user that has 'other' permission to the file
root user

Explicación

Pregunta 58 de 200

1

Which Linux file system introduced the journaled file system, which can be used to minimize the risk of file system corruption in the event of a sudden power loss?

Selecciona una de las siguientes respuestas posibles:

ext2
ext3
NFS
CDFS

Explicación

Pregunta 59 de 200

1

What is the method employed by a Linux kernel to create new processes for multitasking of a process?

Selecciona una de las siguientes respuestas posibles:

creating interdependent processes
dynamic processes
pipelining
forking

Explicación

Pregunta 60 de 200

1

What is a purpose of apt-get commands?

Selecciona una de las siguientes respuestas posibles:

to configure an appointment for a specific date and time
to configure and manage task (to-do) lists
to update the operating system
to apportion and configure a part of the hard disk for file storage

Explicación

Pregunta 61 de 200

1

How is a DHCPDISCOVER transmitted on a network to reach a DHCP server?

Selecciona una de las siguientes respuestas posibles:

A DHCPDISCOVER message is sent with a multicast IP address that all DHCP servers listen to as the destination address.
A DHCPDISCOVER message is sent with the broadcast IP address as the destination address.
A DHCPDISCOVER message is sent with the IP address of the default gateway as the destination address.
A DHCPDISCOVER message is sent with the IP address of the DHCP server as the destination address.

Explicación

Pregunta 62 de 200

1

A high school in New York (school A) is using videoconferencing technology to establish student interactions with another high school (school B) in Russia. The videoconferencing is conducted between two end devices through the Internet. The network administrator of school A configures the end device with the IP address 209.165.201.10. The administrator sends a request for the IP address for the end device in school B and the response is 192.168.25.10. Neither school is using a VPN. The administrator knows immediately that this IP will not work. Why?

Selecciona una de las siguientes respuestas posibles:

This is a link-local address.
This is a loopback address.
There is an IP address conflict.
This is a private IP address.

Explicación

Pregunta 63 de 200

1

What is a socket?

Selecciona una de las siguientes respuestas posibles:

the combination of the source and destination sequence numbers and port numbers
the combination of a source IP address and port number or a destination IP address and port number
the combination of the source and destination sequence and acknowledgment numbers
the combination of the source and destination IP address and source and destination Ethernet address

Explicación

Pregunta 64 de 200

1

What part of the URL, http://www.cisco.com/index.html, represents the top-level DNS domain?

Selecciona una de las siguientes respuestas posibles:

www
http
index
com

Explicación

Pregunta 65 de 200

1

Refer to the exhibit. A cybersecurity analyst is viewing captured ICMP echo request packets sent from host A to host B on switch S2. What is the source MAC address of Ethernet frames carrying the ICMP echo request packets?

Selecciona una de las siguientes respuestas posibles:

08-CB-8A-5C-D5-BA
00-D0-D3-BE-79-26
00-60-0F-B1-D1-11
01-90-C0-E4-55-BB

Explicación

Pregunta 66 de 200

1

Refer to the exhibit. A cybersecurity analyst is viewing captured packets forwarded on switch S1. Which device has the MAC address 50:6a:03:96:71:22?

Selecciona una de las siguientes respuestas posibles:

PC-A
router DG
DSN server
router ISP
web server

Explicación

Pregunta 67 de 200

1

Which term is used to describe the process of placing one message format inside another message format?

Selecciona una de las siguientes respuestas posibles:

encoding
multiplexing
encapsulation
segmentation

Explicación

Pregunta 68 de 200

1

Which PDU format is used when bits are received from the network medium by the NIC of a host?

Selecciona una de las siguientes respuestas posibles:

frame
file
packet
segment

Explicación

Pregunta 69 de 200

1

What are two features of ARP? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

An ARP request is sent to all devices on the Ethernet LAN and contains the IP address of the destination host and its multicast MAC address.
If no device responds to the ARP request, then the originating node will broadcast the data packet to all devices on the network segment.
When a host is encapsulating a packet into a frame, it refers to the MAC address table to determine the mapping of IP addresses to MAC addresses.
If a host is ready to send a packet to a local destination device and it has the IP address but not the MAC address of the destination, it generates an ARP broadcast.
If a device receiving an ARP request has the destination IPv4 address, it responds with an ARP reply.

Explicación

Pregunta 70 de 200

1

In NAT translation for internal hosts, what address would be used by external users to reach internal hosts?

Selecciona una de las siguientes respuestas posibles:

outside global
outside local
inside local
inside global

Explicación

Pregunta 71 de 200

1

Refer to the exhibit. PC1 issues an ARP request because it needs to send a packet to PC2. In this scenario, what will happen next?

Selecciona una de las siguientes respuestas posibles:

SW1 will send an ARP reply with the PC2 MAC address.
PC2 will send an ARP reply with its MAC address.
RT1 will send an ARP reply with its Fa0/0 MAC address.
RT1 will send an ARP reply with the PC2 MAC address.
SW1 will send an ARP reply with its Fa0/1 MAC address.

Explicación

Pregunta 72 de 200

1

Which two characteristics are associated with UDP sessions? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Unacknowledged data packets are retransmitted.
Destination devices receive traffic with minimal delay.
Destination devices reassemble messages and pass them to an application.
Transmitted data segments are tracked.
Received data is unacknowledged.

Explicación

Pregunta 73 de 200

1

Refer to the exhibit. What is the global IPv6 address of the host in uncompressed format?

Selecciona una de las siguientes respuestas posibles:

2001:0DB8:0000:0000:0BAF:0000:3F57:FE94
2001:0DB8:0000:0BAF:0000:0000:3F57:FE94
2001:DB80:0000:0000:BAF0:0000:3F57:FE94
2001:0DB8:0000:0000:0000:0BAF:3F57:FE94

Explicación

Pregunta 74 de 200

1

What is the purpose of the routing process?

Selecciona una de las siguientes respuestas posibles:

to provide secure Internet file transfer
to convert a URL name into an IP address
to forward traffic on the basis of MAC addresses
to encapsulate data that is used to communicate across a network
to select the paths that are used to direct traffic to destination networks

Explicación

Pregunta 75 de 200

1

Which application layer protocol uses message types such as GET, PUT, and POST?

Selecciona una de las siguientes respuestas posibles:

SMTP
POP3
DHCP
HTTP
DNS

Explicación

Pregunta 76 de 200

1

Which transport layer feature is used to guarantee session establishment?

Selecciona una de las siguientes respuestas posibles:

UDP sequence number
TCP 3-way handshake
TCP port number
UDP ACK flag

Explicación

Pregunta 77 de 200

1

What is the prefix length notation for the subnet mask 255.255.255.224?

Selecciona una de las siguientes respuestas posibles:

/26
/27
/28
/25

Explicación

Pregunta 78 de 200

1

What are two potential network problems that can result from ARP operation? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Multiple ARP replies result in the switch MAC address table containing entries that match the MAC addresses of hosts that are connected to the relevant switch port.
Network attackers could manipulate MAC address and IP address mappings in ARP messages with the intent of intercepting network traffic.
On large networks with low bandwidth, multiple ARP broadcasts could cause data communication delays.
Manually configuring static ARP associations could facilitate ARP poisoning or MAC address spoofing.
Large numbers of ARP request broadcasts could cause the host MAC address table to overflow and prevent the host from communicating on the network.

Explicación

Pregunta 79 de 200

1

Which TCP mechanism is used to identify missing segments?

Selecciona una de las siguientes respuestas posibles:

sequence numbers
FCS
acknowledgments
window size

Explicación

Pregunta 80 de 200

1

What is the purpose of ICMP messages?

Selecciona una de las siguientes respuestas posibles:

to provide feedback of IP packet transmissions
to monitor the process of a domain name to IP address resolution
to inform routers about network topology changes
to ensure the delivery of an IP packet

Explicación

Pregunta 81 de 200

1

What happens if part of an FTP message is not delivered to the destination?

Selecciona una de las siguientes respuestas posibles:

The message is lost because FTP does not use a reliable delivery method.
The part of the FTP message that was lost is re-sent.
The FTP source host sends a query to the destination host.
The entire FTP message is re-sent.

Explicación

Pregunta 82 de 200

1

What is the primary purpose of NAT?

Selecciona una de las siguientes respuestas posibles:

conserve IPv4 addresses
allow peer-to-peer file sharing
enhance network performance
increase network security

Explicación

Pregunta 83 de 200

1

Why does a Layer 3 device perform the ANDing process on a destination IP address and subnet mask?

Selecciona una de las siguientes respuestas posibles:

to identify the network address of the destination network
to identify the host address of the destination host
to identify the broadcast address of the destination network
to identify faulty frames

Explicación

Pregunta 84 de 200

1

Refer to the exhibit. Using the network in the exhibit, what would be the default gateway address for host A in the 192.133.219.0 network?

Selecciona una de las siguientes respuestas posibles:

192.135.250.1
192.133.219.0
192.133.219.1
192.31.7.1

Explicación

Pregunta 85 de 200

1

Which three IP addresses are private ? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

192.167.10.10
10.1.1.1
192.168.5.5
172.16.4.4
172.32.5.2
224.6.6.6

Explicación

Pregunta 86 de 200

1

What are two types of addresses found on network end devices? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

UDP
return
IP
TCP
MAC

Explicación

Pregunta 87 de 200

1

Which OSI layer header is rewritten with new addressing information by a router when forwarding between LAN segments?

Selecciona una de las siguientes respuestas posibles:

Layer 2
Layer 3
Layer 4
Layer 7

Explicación

Pregunta 88 de 200

1

Which protocol provides authentication, integrity, and confidentiality services and is a type of VPN?

Selecciona una de las siguientes respuestas posibles:

MD5
AES
ESP
IPsec

Explicación

Pregunta 89 de 200

1

What are two uses of an access control list? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

ACLs can control which areas a host can access on a network.
ACLs provide a basic level of security for network access.
Standard ACLs can restrict access to specific applications and ports.
ACLs can permit or deny traffic based upon the MAC address originating on the router.
ACLs assist the router in determining the best path to a destination.

Explicación

Pregunta 90 de 200

1

Which protocol or service is used to automatically synchronize the software clocks on Cisco routers?

Selecciona una de las siguientes respuestas posibles:

SNMP
NTP
DHCP
DNS

Explicación

Pregunta 91 de 200

1

Which wireless parameter is used by an access point to broadcast frames that include the SSID?

Selecciona una de las siguientes respuestas posibles:

passive mode
security mode
channel setting
active mode

Explicación

Pregunta 92 de 200

1

A Cisco router is running IOS 15. What are the two routing table entry types that will be added when a network administrator brings an interface up and assigns an IP address to the interface? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

route that is learned via OSPF
route that is learned via EIGRP
route that is manually entered by a network administrator
directly connected interface
local route interface

Explicación

Pregunta 93 de 200

1

Refer to the exhibit. The network "A" contains multiple corporate servers that are accessed by hosts from the Internet for information about the corporation. What term is used to describe the network marked as "A"?

Selecciona una de las siguientes respuestas posibles:

perimeter security boundary
internal network
DMZ
untrusted network

Explicación

Pregunta 94 de 200

1

What is the role of an IPS?

Selecciona una de las siguientes respuestas posibles:

to detect patterns of malicious traffic by the use of signature files
to filter traffic based on defined rules and connection context
to filter traffic based on Layer 7 information
to enforce access control policies based on packet content

Explicación

Pregunta 95 de 200

1

Which two features are included by both TACACS+ and RADIUS protocols? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

SIP support
password encryption
802.1X support
separate authentication and authorization processes
utilization of transport layer protocols

Explicación

Pregunta 96 de 200

1

What does the TACACS+ protocol provide in a AAA deployment?

Selecciona una de las siguientes respuestas posibles:

AAA connectivity via UDP
compatibility with previous TACACS protocols
authorization on a per-user or per-group basis
password encryption without encrypting the packet

Explicación

Pregunta 97 de 200

1

Which parameter is commonly used to identify a wireless network name when a home wireless AP is being configured?

Selecciona una de las siguientes respuestas posibles:

ESS
SSID
ad hoc
BESS

Explicación

Pregunta 98 de 200

1

What information within a data packet does a router use to make forwarding decisions?

Selecciona una de las siguientes respuestas posibles:

the destination service requested
the destination IP address
the destination host name
the destination MAC address

Explicación

Pregunta 99 de 200

1

Which protocol creates a virtual point-to-point connection to tunnel unencrypted traffic between Cisco routers from a variety of protocols?

Selecciona una de las siguientes respuestas posibles:

GRE
IPsec
OSPF
IKE

Explicación

Pregunta 100 de 200

1

Which two statements are true about NTP servers in an enterprise network? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

NTP servers at stratum 1 are directly connected to an authoritative time source.
NTP servers ensure an accurate time stamp on logging and debugging information.
There can only be one NTP server on an enterprise network.
All NTP servers synchronize directly to a stratum 1 time source.
NTP servers control the mean time between failures (MTBF) for key network devices.

Explicación

Pregunta 101 de 200

1

What is true concerning physical and logical topologies?

Selecciona una de las siguientes respuestas posibles:

Physical topologies display the IP addressing scheme of each network.
Logical topologies refer to how a network transfers data between devices.
The logical topology is always the same as the physical topology.
Physical topologies are concerned with how a network transfers frames.

Explicación

Pregunta 102 de 200

1

Which layer of the hierarchical design model is a control boundary between the other layers?

Selecciona una de las siguientes respuestas posibles:

access
network
distribution
core

Explicación

Pregunta 103 de 200

1

Which protocol or service allows network administrators to receive system messages that are provided by network devices?

Selecciona una de las siguientes respuestas posibles:

NTP
NetFlow
SNMP
syslog

Explicación

Pregunta 104 de 200

1

What is a function of a proxy firewall?

Selecciona una de las siguientes respuestas posibles:

uses signatures to detect patterns in network traffic
drops or forwards traffic based on packet header information
connects to remote servers on behalf of clients
filters IP traffic between bridged interfaces

Explicación

Pregunta 105 de 200

1

What is the function of the distribution layer of the three-layer network design model?

Selecciona una de las siguientes respuestas posibles:

aggregating access layer connections
providing high speed connection to the network edge
providing secure access to the Internet
providing direct access to the network

Explicación

Pregunta 106 de 200

1

Which LAN topology requires a central intermediate device to connect end devices?

Selecciona una de las siguientes respuestas posibles:

star
ring
bus
mesh

Explicación

Pregunta 107 de 200

1

Which device can control and manage a large number of corporate APs?

Selecciona una de las siguientes respuestas posibles:

switch
WLC
router
LWAP

Explicación

Pregunta 108 de 200

1

For which discovery mode will an AP generate the most traffic on a WLAN?

Selecciona una de las siguientes respuestas posibles:

active mode
mixed mode
passive mode
open mode

Explicación

Pregunta 109 de 200

1

What is a feature of the TACACS+ protocol?

Selecciona una de las siguientes respuestas posibles:

It utilizes UDP to provide more efficient packet transfer.
It hides passwords during transmission using PAP and sends the rest of the packet in plaintext.
It encrypts the entire body of the packet for more secure communications.
It combines authentication and authorization as one process.

Explicación

Pregunta 110 de 200

1

What is the only attribute used by standard access control lists to identify traffic?

Selecciona una de las siguientes respuestas posibles:

source MAC address
protocol type
source IP address
source TCP port

Explicación

Pregunta 111 de 200

1

What type of malware has the primary objective of spreading across the network?

Selecciona una de las siguientes respuestas posibles:

virus
worm
Trojan horse
botnet

Explicación

Pregunta 112 de 200

1

Why would a rootkit be used by a hacker?

Selecciona una de las siguientes respuestas posibles:

to gain access to a device without being detected
to do reconnaissance
to reverse engineer binary files
to try to guess a password

Explicación

Pregunta 113 de 200

1

Which type of hacker is motivated to protest against political and social issues?

Selecciona una de las siguientes respuestas posibles:

cybercriminal
script kiddie
vulnerability broker
hacktivist

Explicación

Pregunta 114 de 200

1

What is a characteristic of a Trojan horse as it relates to network security?

Selecciona una de las siguientes respuestas posibles:

Extreme quantities of data are sent to a particular network device interface.
An electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
Too much information is destined for a particular memory block, causing additional memory areas to be affected.
Malware is contained in a seemingly legitimate executable program.

Explicación

Pregunta 115 de 200

1

What is a botnet?

Selecciona una de las siguientes respuestas posibles:

a group of web servers that provide load balancing and fault tolerance
an online video game intended for multiple players
a network that allows users to bring their own technology
a network of infected computers that are controlled as a group

Explicación

Pregunta 116 de 200

1

Which type of Trojan horse security breach uses the computer of the victim as the source device to launch other attacks?

Selecciona una de las siguientes respuestas posibles:

DoS
FTP
data-sending
proxy

Explicación

Pregunta 117 de 200

1

What is the primary goal of a DoS attack?

Selecciona una de las siguientes respuestas posibles:

to prevent the target server from being able to handle additional requests
to scan the data on the target server
to facilitate access to external networks
to obtain all addresses in the address book within the server

Explicación

Pregunta 118 de 200

1

What is a main purpose of launching an access attack on network systems?

Selecciona una de las siguientes respuestas posibles:

to prevent other users from accessing the system
to scan for accessible networks
to gather information about the network
to retrieve data

Explicación

Pregunta 119 de 200

1

What causes a buffer overflow?

Selecciona una de las siguientes respuestas posibles:

launching a security countermeasure to mitigate a Trojan horse
attempting to write more data to a memory location than that location can hold
sending repeated connections such as Telnet to a particular device, thus denying other data sources
sending too much information to two or more interfaces of the same device, thereby causing dropped packets
downloading and installing too many software updates at one time

Explicación

Pregunta 120 de 200

1

A company pays a significant sum of money to hackers in order to regain control of an email and data server. Which type of security attack was used by the hackers?

Selecciona una de las siguientes respuestas posibles:

DoS
spyware
Trojan horse
ransomware

Explicación

Pregunta 121 de 200

1

What is the term used to describe an email that is targeting a specific person employed at a financial institution?

Selecciona una de las siguientes respuestas posibles:

spam
spyware
vishing
target phishing
spear phishing

Explicación

Pregunta 122 de 200

1

Which access attack method involves a software program that attempts to discover a system password by the use of an electronic dictionary?

Selecciona una de las siguientes respuestas posibles:

packet sniffer attack
denial of service attack
buffer overflow attack
brute-force attack
port redirection attack
IP spoofing attack

Explicación

Pregunta 123 de 200

1

In what way are zombies used in security attacks?

Selecciona una de las siguientes respuestas posibles:

They are infected machines that carry out a DDoS attack.
They are maliciously formed code segments used to replace legitimate applications.
They target specific individuals to gain corporate or personal information.
They probe a group of machines for open ports to learn which services are running

Explicación

Pregunta 124 de 200

1

What are two evasion methods used by hackers? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

scanning
encryption
access attack
phishing
resource exhaustion

Explicación

Pregunta 125 de 200

1

What are two purposes of launching a reconnaissance attack on a network? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

to retrieve and modify data
to scan for accessibility
to escalate access privileges
to prevent other users from accessing the system
to gather information about the network and devices

Explicación

Pregunta 126 de 200

1

What are three techniques used in social engineering attacks? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

vishing
phishing
pretexting
buffer overflow
man-in-the-middle
sending junk email

Explicación

Pregunta 127 de 200

1

An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?

Selecciona una de las siguientes respuestas posibles:

port redirection
trust exploitation
buffer overflow
man in the middle

Explicación

Pregunta 128 de 200

1

A user is curious about how someone might know a computer has been infected with malware. What are two common malware behaviors? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

The computer emits a hissing sound every time the pencil sharpener is used.
The computer freezes and requires reboots.
No sound emits when an audio CD is played.
The computer gets increasingly slower to respond.
The computer beeps once during the boot process.

Explicación

Pregunta 129 de 200

1

Which type of security attack would attempt a buffer overflow?

Selecciona una de las siguientes respuestas posibles:

ransomware
reconnaissance
DoS
scareware

Explicación

Pregunta 130 de 200

1

What is a significant characteristic of virus malware?

Selecciona una de las siguientes respuestas posibles:

Virus malware is only distributed over the Internet.
Once installed on a host system, a virus will automatically propagate itself to other systems.
A virus is triggered by an event on the host system.
A virus can execute independently of the host system

Explicación

Pregunta 131 de 200

1

A senior citizen receives a warning on the computer that states that the operating system registry is corrupt and to click a particular link to repair it. Which type of malware is being used to try to create the perception of a computer threat to the user?

Selecciona una de las siguientes respuestas posibles:

DoS
scareware
phishing
adware

Explicación

Pregunta 132 de 200

1

What is the motivation of a white hat attacker?

Selecciona una de las siguientes respuestas posibles:

fine tuning network devices to improve their performance and efficiency
taking advantage of any vulnerability for illegal personal gain
studying operating systems of various platforms to develop a new system
discovering weaknesses of networks and systems to improve the security level of these systems

Explicación

Pregunta 133 de 200

1

What is a ping sweep?

Selecciona una de las siguientes respuestas posibles:

a network scanning technique that indicates the live hosts in a range of IP addresses.
a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain.
a software application that enables the capture of all network packets that are sent across a LAN.
a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services

Explicación

Pregunta 134 de 200

1

What is the term used when a malicious party sends a fraudulent email disguised as being from a legitimate, trusted source?

Selecciona una de las siguientes respuestas posibles:

Trojan
vishing
phishing
backdoor

Explicación

Pregunta 135 de 200

1

What are the three major components of a worm attack? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

an enabling vulnerability
a propagation mechanism
a payload
a probing mechanism
a penetration mechanism
an infecting vulnerability

Explicación

Pregunta 136 de 200

1

Which security threat installs on a computer without the knowledge of the user and then monitors computer activity?

Selecciona una de las siguientes respuestas posibles:

spyware
viruses
worms
adware

Explicación

Pregunta 137 de 200

1

What are two monitoring tools that capture network traffic and forward it to network monitoring devices? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

SPAN
network tap
SNMP
SIEM
Wireshark

Explicación

Pregunta 138 de 200

1

Which technology is an open source SIEM system?

Selecciona una de las siguientes respuestas posibles:

Wireshark
StealWatch
Splunk
ELK

Explicación

Pregunta 139 de 200

1

What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?

Selecciona una de las siguientes respuestas posibles:

IP address spoofing
DHCP starvation
CAM table attack
DHCP spoofing

Explicación

Pregunta 140 de 200

1

Which protocol would be the target of a cushioning attack?

Selecciona una de las siguientes respuestas posibles:

DHCP
HTTP
ARP
DNS

Explicación

Pregunta 141 de 200

1

Which network monitoring capability is provided by using SPAN?

Selecciona una de las siguientes respuestas posibles:

Network analysts are able to access network device log files and to monitor network behavior.
Statistics on packets flowing through Cisco routers and multilayer switches can be captured.
Traffic exiting and entering a switch is copied to a network monitoring device.
Real-time reporting and long-term analysis of security events are enabled.

Explicación

Pregunta 142 de 200

1

Which type of DNS attack involves the cybercriminal compromising a parent domain and creating multiple subdomains to be used during the attacks?

Selecciona una de las siguientes respuestas posibles:

shadowing
amplification and reflection
tunneling
cache poisoning

Explicación

Pregunta 143 de 200

1

Refer to the exhibit. What protocol would be used by the syslog server service to create this type of output for security purposes?

Selecciona una de las siguientes respuestas posibles:

NTP
AAA
ICMP
SNMP

Explicación

Pregunta 144 de 200

1

What is the result of a passive ARP poisoning attack?

Selecciona una de las siguientes respuestas posibles:

Confidential information is stolen.
Network clients experience a denial of service.
Data is modified in transit or malicious data is inserted in transit.
Multiple subdomains are created.

Explicación

Pregunta 145 de 200

1

Which term is used for bulk advertising emails flooded to as many end users as possible?

Selecciona una de las siguientes respuestas posibles:

spam
adware
brute force
phishing

Explicación

Pregunta 146 de 200

1

Which capability is provided by the aggregation function in SIEM?

Selecciona una de las siguientes respuestas posibles:

reducing the volume of event data by consolidating duplicate event records
searching logs and event records of multiple sources for more complete forensic analysis
presenting correlated and aggregated event data in real-time monitoring
increasing speed of detection and reaction to security threats by examining logs from many systems and applications

Explicación

Pregunta 147 de 200

1

Which protocol is attacked when a cybercriminal provides an invalid gateway in order to create a man-in-the-middle attack?

Selecciona una de las siguientes respuestas posibles:

HTTP or HTTPS
ICMP
DNS
DHCP

Explicación

Pregunta 148 de 200

1

Which network monitoring tool can provide a complete audit trail of basic information of all IP flows on a Cisco router and forward the data to a device?

Selecciona una de las siguientes respuestas posibles:

SPAN
Wireshark
NetFlow
SIEM

Explicación

Pregunta 149 de 200

1

What are two methods used by cybercriminals to mask DNS attacks? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

domain generation algorithms
shadowing
fast flux
reflection
tunneling

Explicación

Pregunta 150 de 200

1

Which protocol is exploited by cybercriminals who create malicious iFrames?

Selecciona una de las siguientes respuestas posibles:

HTTP
ARP
DNS
DHCP

Explicación

Pregunta 151 de 200

1

Which SIEM function is associated with speeding up detection of security threats by examining logs and events from different systems?

Selecciona una de las siguientes respuestas posibles:

forensic analysis
retention
correlation
aggregation

Explicación

Pregunta 152 de 200

1

In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?

Selecciona una de las siguientes respuestas posibles:

reset attack
session hijacking attack
port scan attack
SYN flood attack

Explicación

Pregunta 153 de 200

1

In which type of attack is falsified information used to redirect users to malicious Internet sites?

Selecciona una de las siguientes respuestas posibles:

ARP cache poisoning
DNS amplification and reflection
DNS cache poisoning
domain generation

Explicación

Pregunta 154 de 200

1

Refer to the exhibit. A junior network administrator is inspecting the traffic flow of a particular server in order to make security recommendations to the departmental supervisor. Which recommendation should be made?

Selecciona una de las siguientes respuestas posibles:

A more secure protocol should be used.
The total length (TL) field indicates an unsecure Layer 4 protocol is being used.
The person accessing the server should never access it from a device using a private IP address.
The person accessing the server should use the private IP address of the server.

Explicación

Pregunta 155 de 200

1

Which network monitoring tool saves captured packets in a PCAP file?

Selecciona una de las siguientes respuestas posibles:

Wireshark
SIEM
SNMP
NetFlow

Explicación

Pregunta 156 de 200

1

Which cyber attack involves a coordinated attack from a botnet of zombie computers?

Selecciona una de las siguientes respuestas posibles:

ICMP redirect
MITM
DDoS
address spoofing

Explicación

Pregunta 157 de 200

1

How is optional network layer information carried by IPv6 packets?

Selecciona una de las siguientes respuestas posibles:

inside an options field that is part of the IPv6 packet header
inside the Flow Label field
inside the payload carried by the IPv6 packet
inside an extension header attached to the main IPv6 packet header

Explicación

Pregunta 158 de 200

1

What type of attack targets an SQL database using the input field of a user?

Selecciona una de las siguientes respuestas posibles:

Cross-site scripting
SQL injection
buffer overflow
XML injection

Explicación

Pregunta 159 de 200

1

What network monitoring technology enables a switch to copy and forward traffic sent and received on multiple interfaces out another interface toward a network analysis device?

Selecciona una de las siguientes respuestas posibles:

port mirroring
NetFlow
SNMP
network tap

Explicación

Pregunta 160 de 200

1

A web server administrator is configuring access settings to require users to authenticate first before accessing certain web pages. Which requirement of information security is addressed through the configuration?

Selecciona una de las siguientes respuestas posibles:

availability
confidentiality
integrity
scalability

Explicación

Pregunta 161 de 200

1

What component of a security policy explicitly defines the type of traffic allowed on a network and what users are allowed and not allowed to do?

Selecciona una de las siguientes respuestas posibles:

password policies
identification and authentication policies
remote access policies
acceptable use policies

Explicación

Pregunta 162 de 200

1

What is the principle of least privilege access control model?

Selecciona una de las siguientes respuestas posibles:

User access to data is based on object attributes.
Users are granted rights on an as-needed approach.
Users are granted the strictest access control possible to data.
Users control access to data they own.

Explicación

Pregunta 163 de 200

1

Which statement describes a difference between RADIUS and TACACS+?

Selecciona una de las siguientes respuestas posibles:

RADIUS is supported by the Cisco Secure ACS software whereas TACACS+ is not.
RADIUS encrypts only the password whereas TACACS+ encrypts all communication.
RADIUS separates authentication and authorization whereas TACACS+ combines them as one process.
RADIUS uses TCP whereas TACACS+ uses UDP.

Explicación

Pregunta 164 de 200

1

What is the purpose of mobile device management (MDM) software?

Selecciona una de las siguientes respuestas posibles:

It is used to create a security policy.
It is used to implement security policies, setting, and software configurations on mobile devices.
It is used by threat actors to penetrate the system.
It is used to identify potential mobile device vulnerabilities.

Explicación

Pregunta 165 de 200

1

What service determines which resources a user can access along with the operations that a user can perform?

Selecciona una de las siguientes respuestas posibles:

authentication
biometric
authorization
accounting
token

Explicación

Pregunta 166 de 200

1

A company has a file server that shares a folder named Public. The network security policy specifies that the Public folder is assigned Read-Only rights to anyone who can log into the server while the Edit rights are assigned only to the network admin group. Which component is addressed in the AAA network service framework?

Selecciona una de las siguientes respuestas posibles:

automation
accounting
authentication
authorization

Explicación

Pregunta 167 de 200

1

In threat intelligence communications, what set of specifications is for exchanging cyberthreat information between organizations?

Selecciona una de las siguientes respuestas posibles:

Trusted automated exchange of indicator information (TAXII)
Structured threat information expression (STIX)
Automated indicator sharing (AIS)
Common vulnerabilities and exposures (CVE)

Explicación

Pregunta 168 de 200

1

What three items are components of the CIA triad? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

integrity
availability
confidentiality
access
scalability
intervention

Explicación

Pregunta 169 de 200

1

A company is experiencing overwhelming visits to a main web server. The IT department is developing a plan to add a couple more web servers for load balancing and redundancy. Which requirement of information security is addressed by implementing the plan?

Selecciona una de las siguientes respuestas posibles:

integrity
scalability
availability
confidentiality

Explicación

Pregunta 170 de 200

1

Which AAA component can be established using token cards?

Selecciona una de las siguientes respuestas posibles:

authorization
authentication
auditing
accounting

Explicación

Pregunta 171 de 200

1

Which method is used to make data unreadable to unauthorized users?

Selecciona una de las siguientes respuestas posibles:

Encrypt the data.
Fragment the data.
Add a checksum to the end of the data.
Assign it a username and password.

Explicación

Pregunta 172 de 200

1

Which two areas must an IT security person understand in order to identify vulnerabilities on a network? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

number of systems on each network
network baseline data
data analysis trends
hardware used by applications
important applications used

Explicación

Pregunta 173 de 200

1

Which three services are provided by the AAA framework? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

autoconfiguration
automation
authorization
authentication
autobalancing
accounting

Explicación

Pregunta 174 de 200

1

How does BYOD change the way in which businesses implement networks?

Selecciona una de las siguientes respuestas posibles:

BYOD provides flexibility in where and how users can access network resources.
BYOD requires organizations to purchase laptops rather than desktops.
BYOD users are responsible for their own network security, thus reducing the need for organizational security policies.
BYOD devices are more expensive than devices that are purchased by an organization.

Explicación

Pregunta 175 de 200

1

Which technology provides the framework to enable scalable access security?

Selecciona una de las siguientes respuestas posibles:

AutoSecure
role-based CLI access
authentication, authorization, and accounting
Simple Network Management Protocol
Cisco Configuration Professional communities

Explicación

Pregunta 176 de 200

1

Which device is usually the first line of defense in a layered defense-in-depth approach?

Selecciona una de las siguientes respuestas posibles:

access layer switch
internal router
edge router
firewall

Explicación

Pregunta 177 de 200

1

In a defense-in-depth approach, which three options must be identified to effectively defend a network against attacks? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

assets that need protection
location of attacker or attackers
total number of devices that attach to the wired and wireless network
threats to assets
vulnerabilities in the system
past security breaches

Explicación

Pregunta 178 de 200

1

Which section of a security policy is used to specify that only authorized individuals should have access to enterprise data?

Selecciona una de las siguientes respuestas posibles:

statement of authority
statement of scope
campus access policy
Internet access policy
identification and authentication policy
acceptable use policy

Explicación

Pregunta 179 de 200

1

Which type of access control applies the strictest access control and is commonly used in military or mission critical applications?

Selecciona una de las siguientes respuestas posibles:

mandatory access control (MAC)
discretionary access control (DAC)
attribute-based access control (ABAC)
Non-discretionary access control

Explicación

Pregunta 180 de 200

1

Which algorithm is used to automatically generate a shared secret for two systems to use in establishing an IPsec VPN?

Selecciona una de las siguientes respuestas posibles:

SSL
DES
AH
DH
ESP
3DES

Explicación

Pregunta 181 de 200

1

A security specialist is tasked to ensure that files transmitted between the headquarters office and the branch office are not altered during transmission. Which two algorithms can be used to achieve this task? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

3DES
HMAC
AES
SHA-1
MD5

Explicación

Pregunta 182 de 200

1

In which way does the use of HTTPS increase the security monitoring challenges within enterprise networks?

Selecciona una de las siguientes respuestas posibles:

HTTPS traffic can carry a much larger data payload than HTTP can carry.
HTTPS traffic is much faster than HTTP traffic.
HTTPS traffic does not require authentication.
HTTPS traffic enables end-to-end encryption.

Explicación

Pregunta 183 de 200

1

What technology has a function of using trusted third-party protocols to issue credentials that are accepted as an authoritative identity?

Selecciona una de las siguientes respuestas posibles:

hashing algorithms
digital signatures
symmetric keys
PKI certificates

Explicación

Pregunta 184 de 200

1

Which three algorithms are designed to generate and verify digital signatures? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

IKE
DSA
RSA
ECDSA
AES
3DES

Explicación

Pregunta 185 de 200

1

What are two properties of a cryptographic hash function? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Complex inputs will produce complex hashes.
Hash functions can be duplicated for authentication purposes.
The hash function is one way and irreversible.
The input for a particular hash algorithm has to have a fixed size.
The output is a fixed length.

Explicación

Pregunta 186 de 200

1

Which statement is a feature of HMAC?

Selecciona una de las siguientes respuestas posibles:

HMAC uses a secret key that is only known to the sender and defeats man-in-the-middle attacks.
HMAC uses protocols such as SSL or TLS to provide session layer confidentiality.
HMAC uses a secret key as input to the hash function, adding authentication to integrity assurance.
HMAC is based on the RSA hash function.

Explicación

Pregunta 187 de 200

1

Which two statements describe the characteristics of symmetric algorithms? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

They are commonly used with VPN traffic.
They use a pair of a public key and a private key.
They are commonly implemented in the SSL and SSH protocols.
They provide confidentiality, integrity, and availability.
They are referred to as a pre-shared key or secret key.

Explicación

Pregunta 188 de 200

1

Which encryption algorithm is an asymmetric algorithm?

Selecciona una de las siguientes respuestas posibles:

AES
SEAL
DH
3DES

Explicación

Pregunta 189 de 200

1

Which statement describes the use of certificate classes in the PKI?

Selecciona una de las siguientes respuestas posibles:

Email security is provided by the vendor, not by a certificate.
A vendor must issue only one class of certificates when acting as a CA.
A class 5 certificate is more trustworthy than a class 4 certificate.
The lower the class number, the more trusted the certificate.

Explicación

Pregunta 190 de 200

1

What is the focus of cryptanalysis?

Selecciona una de las siguientes respuestas posibles:

developing secret codes
breaking encrypted codes
implementing encrypted codes
hiding secret codes

Explicación

Pregunta 191 de 200

1

Two users must authenticate each other using digital certificates and a CA. Which option describes the CA authentication procedure?

Selecciona una de las siguientes respuestas posibles:

The users must obtain the certificate of the CA and then their own certificate.
The CA is always required, even after user verification is complete.
CA certificates are retrieved out-of-band using the PSTN, and the authentication is done in-band over a network.
After user verification is complete, the CA is no longer required, even if one of the involved certificates expires.

Explicación

Pregunta 192 de 200

1

When implementing keys for authentication, if an old key length with 4 bits is increased to 8 bits, which statement describes the new key space?

Selecciona una de las siguientes respuestas posibles:

The key space is increased by 3 times.
The key space is increased by 8 times.
The key space is increased by 15 times.
The key space is increased by 16 times.

Explicación

Pregunta 193 de 200

1

What is the service framework that is needed to support large-scale public key-based technologies?

Selecciona una de las siguientes respuestas posibles:

PKI
RSA
3DES
HMAC

Explicación

Pregunta 194 de 200

1

What are the two important components of a public key infrastructure (PKI) used in network security? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

symmetric encryption algorithms
certificate authority
intrusion prevention system
digital certificates
pre-shared key generation

Explicación

Pregunta 195 de 200

1

A company is developing a security policy to ensure that OSPF routing updates are authenticated with a key. What can be used to achieve the task?

Selecciona una de las siguientes respuestas posibles:

SHA-1
HMAC
AES
MD5
3DES

Explicación

Pregunta 196 de 200

1

An online retailer needs a service to support the nonrepudiation of the transaction. Which component is used for this service?

Selecciona una de las siguientes respuestas posibles:

the private key of the retailer
the digital signatures
the unique shared secret known only by the retailer and the customer
the public key of the retailer

Explicación

Pregunta 197 de 200

1

Which statement describes the Software-Optimized Encryption Algorithm (SEAL)?

Selecciona una de las siguientes respuestas posibles:

It uses a 112-bit encryption key.
It requires more CPU resources than software-based AES does.
It is an example of an asymmetric algorithm.
SEAL is a stream cipher.

Explicación

Pregunta 198 de 200

1

What role does an RA play in PKI?

Selecciona una de las siguientes respuestas posibles:

a super CA
a subordinate CA
a backup root CA
a root CA

Explicación

Pregunta 199 de 200

1

What technology allows users to verify the identity of a website and to trust code that is downloaded from the Internet?

Selecciona una de las siguientes respuestas posibles:

encryption
asymmetric key algorithm
digital signature
hash algorithm

Explicación

Pregunta 200 de 200

1

Which three services are provided through digital signatures? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

accounting
authenticity
compression
nonrepudiation
integrity
encryption

	Creado por Good Guy Beket hace más de 5 años

Advanced (State Exam) Fundamentals of Information Security [Teachers: Abdulanova Altynay, Sagymbekova Azhar; STATE EXAM] ▼ Test sobre Fundamentals of Information Security [State Exam | Part 1], creado por Good Guy Beket el 18/03/2019.

Fundamentals of Information Security [State Exam | Part 1]

Pregunta 1 de 200

What is a potential risk when using a free and open wireless hotspot in a public location?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 2 de 200

How does a security information and event management system (SIEM) in a SOC help the personnel fight against security threats?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 3 de 200

Which statement best describes a motivation of hacktivists?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 4 de 200

If a SOC has a goal of 99.999% uptime, how many minutes of downtime a year would be considered within its goal?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 5 de 200

Why do IoT devices pose a greater risk than other computing devices on a network?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 6 de 200

Which two services are provided by security operations centers? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Explicación

Pregunta 7 de 200

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 8 de 200

Which organization offers the vendor-neutral CySA+ certification?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 9 de 200

What was used as a cyberwarfare weapon to attack a uranium enrichment facility in Iran?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 10 de 200

Which three technologies should be included in a SOC security information and event management system? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

Explicación

Pregunta 11 de 200

Which personnel in a SOC is assigned the task of verifying whether an alert triggered by monitoring software represents a true security incident?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 12 de 200

Which statement describes cyberwarfare?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 13 de 200

In the operation of a SOC, which system is frequently used to let an analyst select alerts from a pool to investigate?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 14 de 200

What name is given to an amateur hacker?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 15 de 200

Which personnel in a SOC are assigned the task of hunting for potential threats and implementing threat detection tools?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 16 de 200

What utility is available on a Windows PC to view current running applications and processes?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 17 de 200

A user logs in to Windows with a regular user account and attempts to use an application that requires administrative privileges. What can the user do to successfully use the application?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 18 de 200

A technician can ping the IP address of the web server of a remote company but cannot successfully ping the URL address of the same web server. Which software utility can the technician use to diagnose the problem?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 19 de 200

Where are the settings that are chosen during the installation process stored?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 20 de 200

What technology was created to replace the BIOS program on modern personal computer motherboards?

Selecciona una de las siguientes respuestas posibles:

Refer to the exhibit. A cyber security administrator is attempting to view system information from the Windows PowerShell and recieves the error message shown. “The requested operation requires elevation.”
What action does the administrator need to take to successfully run the command?