Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Infosec 2
SA1
| Question | Answer |
|---|---|
| Which organization is an international nonprofit organization that offers the CISSP certification? | (ISC)2 |
| What is a benefit to an organization of using SOAR as part of the SIEM system? | SOAR automates incident investigation and responds to workflows based on playbooks. |
| Which personnel in a SOC are assigned the task of hunting for potential threats and implementing threat detection tools? | Tier 3 SME |
| Which three technologies should be included in a SOC security information and event management system? (Choose three.) | security monitoring threat intelligence log management |
| 5. The term cyber operations analyst refers to which group of personnel in a SOC? | Tier 1 personnel |
| 6. How does a security information and event management system (SIEM) in a SOC help the personnel fight against security threats? | by combining data from multiple technologies |
| The employee must have expert-level skills in networking, endpoint, threat intelligence, and malware reverse engineering in order to search for cyber threats hidden within the network. | Threat Hunter |
| Which three are major categories of elements in a security operations center? (Choose three.) | technologies, processes, people |
| Which KPI metric does SOAR use to measure the time required to stop the spread of malware in the network? | Time to control |
| What job would require verification that an alert represents a true security incident or a false positive? | Alert analyst |
| PC displays a message that all user files are locked. To get the files unencrypted, the user sends an email and include a specific ID in the email title. Also includes ways to buy and submit bitcoins as payment. | ransomware |
| Employee connects wirelessly to the company network using a phone. The employee then configures the cell phone to act as wireless access point that will allow employees to connect to the company network. What is this security threat? | rogue access point |
| What are two examples of personally identifiable information (PII)? (Choose two.) | street address credit card number |
| What is the dark web? | It is part of the internet that can only be accessed with special software. |
| The threat actor appeared to have a goal of network disruption and appeared to use a common security hack tool that overwhelmed a particular server. This traffic rendered the server inoperable. How would a cybersecurity analyst classify this threat actor? | amateur |
| A user calls the help desk complaining that the password to access the wireless network has changed without warning. The user is allowed to change the password, but an hour later, the same thing occurs. What might be happening in this situation? | rogue access point |
| Which regulatory law regulates the identification, storage, and transmission of patient personal healthcare information? | HIPAA |
| A worker in the records department of a hospital accidentally sends a medical record of a patient to a printer in another department. When the worker arrives at the printer, the patient record printout is missing. What breach of confidentiality is this? | PHI |
| What type of cyberwarfare weapon is Stuxnet | worm |
| Which example illustrates how malware might be concealed? Pic: MALWARE, HI YOUR BANK.... | An email is sent to the employees of an organization with an attachment that looks like an antivirus update, but the attachment actually consists of spyware. |
| Websites should a user avoid when connecting to a free and open wireless hotspot? | webstes to check account fees |
| In a smart home, owner connected home devices to the Internet, such as the refrigerator and the coffee maker. The owner is concerned that these devices will make the wireless network vulnerable to attacks. What action could be taken to address this issue? | Install the latest firmware versions for the devices. |
| Match the SOC description MTTC (1) MTTR (2) MTTD (3) Dwell Time (4) | time required to stop the incident (1) average time it takes to stop (2) average time it takes to identify (3) length of time of threat actors (4) |
| A group of users on the same network are all complaining about their computers running slowly. After investigating, the technician determines that these computers are part of a zombie network. Which type of malware is used to control these computers? | botnet |
| Which statement describes cyberwarfare | It is Internet-based conflict that involves the penetration of information systems of other nations. |
| 26. Why do IoT devices pose a greater risk than other computing devices on a network? | Most IoT devices do not receive frequent firmware updates |
| Which cyber attack involves a coordinated attack from a botnet of zombie computers? | DDoS |
| What is the main purpose of cyberwarfare? | To gain advantage over adversaries |
| Why would a network administrator choose Linux as an operating system in the Security Operations Center (SOC)? | The administrator has more control over the operating system |
| Which two methods can be used to harden a computing device? (Choose two.) | Ensure physical security Enforce the password history mechanism |
| Which Linux command can be used to display the name of the current working directory? | pwd |
| Consider the result of the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file? ls –l analyst.txt -rwxrw-r-- sales staff 1028 May 28 15:50 analyst.txt | read, write, execute |
| A Linux system boots into the GUI by default, so which application can a network administrator use in order to access the CLI environment? | terminal emulator |
| What is the well-known port address number used by DNS to serve requests? | 53 |
| Which user can override file permissions on a Linux computer? | root user |
| Match the commonly used ports on a Linux server with the corresponding service. SMTP (1) Telnet (2) DNS (3) HTTPS (4) | 25 (1) 23 (2) 53 (3) 443 (4) |
| Match typical Linux log files to the function. /var/log/secure (1) /var/log/messages (2) /var/log/dmesg (3) /var/log/auth.log (4) | used by RedHat and CentOS computers (1) contains generic computer activity logs (2) stores information related to hardware devices and their drivers (3) used by Debian and Ubuntu computers (4) |
| Which type of tool allows administrators to observe and understand every detail of a network transaction? | packet capture software |
| Why is Kali Linux a popular choice in testing the network security of an organization? | It is an open source Linux security distribution containing many penetration tools. |
| Match the octal value to the file permission description in Linux. (Not all options are used.) 000 (1) 001 (2) 010 (3) 101 (4) 110 (5) | no access (1) execute only (2) write only (3) read and execute (4) |
| Displays the name of the current working directory: (1) runs a command as another user: (2) modifies file permissions: (3) shuts down the system: Empty lists the processes that are currently running: (4) | pwd (1) sudo (2) chmod (3) ps (4) |
| What are two advantages of the NTFS file system compared with FAT32? (Choose two.) | NTFS supports larger files NTFS provide more security features |
| A PC user issues the netstat command without any options. What is displayed as the result of this command? | a list of all established active TCP connections |
| Which two commands could be used to check if DNS name resolution is working properly on a Windows PC? (Choose two.) | ping cisco.com nslookup cisco.com |
| What is the purpose of using the net accounts command in Windows? | to review the settings of password and logon requirements for users |
| A technician has installed a third party utility that is used to manage a Windows 7 computer. However, the utility does not automatically start whenever the computer is started. What can the technician do to resolve this problem? | Change the startup type for the utility to Automatic in Services |
| Which statement describes the function of the Server Message Block (SMB) protocol? | It is used to share network resources |
| A user creates a file with .ps1 extension in Windows. What type of file is it? | Powershell script |
| renames a file ~~> creates a new directory ~~> changes the current directory ~~> lists files in a directory ~~> | ren mkdir cd dir |
| A user logs in to Windows with a regular user account and attempts to use an application that requires administrative privileges. What can the user do to successfully use the application? | Right-click the application and choose Run as Administrator |
| An IT technician wants to create a rule on two Windows 10 computers to prevent an installed application from accessing the public Internet. Which tool would the technician use to accomplish this task? | Windows Defender Firewall with Advanced Security |
| What technology was created to replace the BIOS program on modern personal computer motherboards? | UEFI |
| CLI : (1) shell : (2) daemon : (3) (Empty) : a program that manages CPU and RAM allocation to processes, system calls, and file systems | a text based interface that accepts user commands (1) a program that interprets and executes user commands (2) a background process that runs without the need for user interaction (3) |
| What is the outcome when a Linux administrator enters the man man command? | The man man command provides documentation about the man command |
| a type of file that is a reference to another file or directory ~~> (1) a running background process that does not need user interaction ~~> (2) protecting remote access ~~> (3) (Empty) ~~>logging | symlink (1) daemon (2) hardening (3) |
| What are two benefits of using an ext4 partition instead of ext3? (Choose two.) | improved performance increased in size of supported files |
| Consider the result of the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file? ls -l analyst.txt -rwxrw-r-- sales staff 1028 May 28 15:50 analyst.txt | read, write, execute |
| What is the purpose of entering the netsh command on a Windows PC? | to configure networking parameters for the PC |
| Which type of Windows PowerShell command performs an action and returns an output or object to the next command that will be executed? | cmdlets |
| A user creates a file with .ps1 extension in Windows. What type of file is it? | PowerShell script |
| Registry : (1) Windows Firewall : (2) PowerShell : (3) Event Viewer : maintains system logs | a hierarchical database of all system and user information (1) selectively denies traffic on specified interfaces (2) a CLI environment used to run scripts and automate tasks (3) maintains system logs (4) |
| In the Linux shell, which character is used between two commands to instruct the shell to combine and execute these two commands in sequence? | | |
| Why is Linux considered to be better protected against malware than other operating systems? | file system structure, file permissions, and user account restrictions |
| Windows boot loader.exe loads (1) NTOSKRNL.EXE file and HAL.DLL (2) Windows.exe reads the Registry (3) NTOSKRNL.EXE takes over the process (4) Windows.exe is loaded and executes the logon (5) | Step 1 (1) Step 2 (2) Step 3 (3) Step 4 (4) Step 5 (5) |
Created by:
user-1838864
Popular Computers sets