Practice

1. During a Fagan code inspection, which process can redirect to the planning stage?

A. Overview

B. Preparation

C. Meeting

D. Rework

Correct! Wrong!

2. Who is the best facilitator for a post-incident lessons-learned session?

A. CEO

B. CSIRT leader

C. Independent facilitator

D. First responder

Correct! Wrong!

3. A cross-site scripting attack is an example of what type of threat vector?

A. Impersonation

B. Email

C. Attrition

D. Web

Correct! Wrong!

4. Which of the following is a switch attack?

A. MAC overflow

B. XSS

C. CSRF

D. Inference

Correct! Wrong!

5. Susan has been asked to identify the applications that start when a Windows system does. Where should she look first?

A. INDX files

B. Volume shadow copies

C. The Registry

D. The MFT

Correct! Wrong!

6. What organization manages the global IP address space?

A. NASA

B. ARIN

C. WorldNIC

D. IANA

Correct! Wrong!

7. How many phases does the Spiral model cycle through?

A. Three

B. Four

C. Five

D. Six

Correct! Wrong!

8. Which one of the following is an example of a computer security incident?

A. User accesses a secure file

B. Administrator changes a file’s permission settings

C. Intruder breaks into a building

D. Former employee crashes a server

Correct! Wrong!

9. Using the Agile sprint process, what step will occur at step 2 in the previous

A. Development

B. Design

C. Testing

D. Gathering user stories

Correct! Wrong!

10. The Dirty COW attack is an example of what type of vulnerability?

A. Malicious code

B. Privilege escalation

C. Buffer overflow

LDAP injection

Correct! Wrong!

11. What is the key difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

A. An IPS only relies on a fixed set of rules, or heuristics, when analyzing traffic.

B. An IDS only analyzes TCP traffic, whereas an IPS analyzes only UDP traffic.

C. An IDS only detects suspicious traffic, whereas an IPS detects and blocks malicious traffic.

D. An IPS only detects suspicious traffic, whereas an IDS detects and blocks malicious traffic.

Correct! Wrong!

12. Which of the following transmissions is not provided by the NetFlow network protocol?

A. Source IP address

B. Destination IP address

C. Default gateway address

D. TCP source port

Correct! Wrong!

13. Which kind of packet capture technique is preferred for a resource-limited environment?

A. Header capture

B. Footer capture

C. Full packet captures

D. Payload captures

Correct! Wrong!

14. Why might it be useful to analyze individual system logs in addition to network traffic?

A. Activity on the end points is usually much easier to observe than on the network.

B. It is impossible to analyze obfuscated or encrypted network traffic.It is impossible to analyze obfuscated or encrypted network traffic.

C. End points are unable to log their system activity.

D. There aren’t any useful standards for logging system activity.

Correct! Wrong!

15. When performing a capture for wireless analysis, what mode must the wireless card support?

A. Managed

B. Ad hoc

C. Mesh

D. Monitor

Correct! Wrong!

16. The largest unit of data that traverses a network in a single exchange is referred to as what?

A. ICMP

B. MTU

C. MTU

D. CDMA

Correct! Wrong!

17. What is the total size, in bytes, of the packet’s payload?

A. 84

B. 64

C. 44

D. 24

Correct! Wrong!

18. Roughly how much time elapsed between the first ping request and reply?

A. 35 seconds

B. 35 milliseconds

C. 350 milliseconds

D. .350 milliseconds

Correct! Wrong!

19. What is the name of the Windows utility that allows you to easily monitor various program, security, and system activity logs on your computer?

A. Nmap

B. Event Viewer

C. Console

D. Putty

Correct! Wrong!

20. Which of the following is the correct term for a network device designed to deflect attempts to compromise the security of an information system?

A. ACL

B. VLAN

C. Jump box

D. Honeypot

Correct! Wrong!

Practice

1. During a Fagan code inspection, which process can redirect to the planning stage?

2. Who is the best facilitator for a post-incident lessons-learned session?

3. A cross-site scripting attack is an example of what type of threat vector?

4. Which of the following is a switch attack?

5. Susan has been asked to identify the applications that start when a Windows system does. Where should she look first?

6. What organization manages the global IP address space?

7. How many phases does the Spiral model cycle through?

8. Which one of the following is an example of a computer security incident?

9. Using the Agile sprint process, what step will occur at step 2 in the previous

10. The Dirty COW attack is an example of what type of vulnerability?

11. What is the key difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

12. Which of the following transmissions is not provided by the NetFlow network protocol?

13. Which kind of packet capture technique is preferred for a resource-limited environment?

14. Why might it be useful to analyze individual system logs in addition to network traffic?

15. When performing a capture for wireless analysis, what mode must the wireless card support?

16. The largest unit of data that traverses a network in a single exchange is referred to as what?

17. What is the total size, in bytes, of the packet’s payload?

18. Roughly how much time elapsed between the first ping request and reply?

19. What is the name of the Windows utility that allows you to easily monitor various program, security, and system activity logs on your computer?

20. Which of the following is the correct term for a network device designed to deflect attempts to compromise the security of an information system?

0 responses on "Practice"

Leave a Message Cancel reply

Login

Register

Practice

1. During a Fagan code inspection, which process can redirect to the planning stage?

2. Who is the best facilitator for a post-incident lessons-learned session?

3. A cross-site scripting attack is an example of what type of threat vector?

4. Which of the following is a switch attack?

5. Susan has been asked to identify the applications that start when a Windows system does. Where should she look first?

6. What organization manages the global IP address space?

7. How many phases does the Spiral model cycle through?

8. Which one of the following is an example of a computer security incident?

9. Using the Agile sprint process, what step will occur at step 2 in the previous

10. The Dirty COW attack is an example of what type of vulnerability?

11. What is the key difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

12. Which of the following transmissions is not provided by the NetFlow network protocol?

13. Which kind of packet capture technique is preferred for a resource-limited environment?

14. Why might it be useful to analyze individual system logs in addition to network traffic?

15. When performing a capture for wireless analysis, what mode must the wireless card support?

16. The largest unit of data that traverses a network in a single exchange is referred to as what?

17. What is the total size, in bytes, of the packet’s payload?

18. Roughly how much time elapsed between the first ping request and reply?

19. What is the name of the Windows utility that allows you to easily monitor various program, security, and system activity logs on your computer?

20. Which of the following is the correct term for a network device designed to deflect attempts to compromise the security of an information system?

0 responses on "Practice"

Leave a Message Cancel reply