IBM Cybersecurity Analyst Professional Certificate Assessment Exam Answers

IBM Cybersecurity Analyst Professional Certificate Assessment Exam Quiz Answers

Alert: Jo Respond Green hai wo correct hai but

Jo Green Nahi hai. Usme se jo ek wrong pick tha usko hata diya hai

Question one)

Implementing a Security Awareness training program would be an example of which blazon of control?

  • Authoritative control

Question 2)

Putting locks on a door is an example of which type of control?

  • Preventative

Question iii)

How would you lot classify a piece of malicious code that can replicate itself and spread to new systems?

  • A worm

Question 4)

To engage in packet sniffing, you must implement promiscuous mode on which device ?

  • A network bill of fare
  • An Intrusion Detection Organization (IDS)
  • A sniffing router

Question 5)

Which machinery would assist assure the integrity of a bulletin, but non do much to assure confidentiality or availability.

  • Hashing

Question 6)

An system wants to restrict employee after-hours access to its systems so information technology publishes a policy forbidding employees to work outside of their assigned hours, and and then makes sure the office doors remain locked on weekends. What two (2) types of controls are they using? (Select 2)

  • Concrete
  • Administrative

Question 7)

Which two factors contribute to cryptographic force? (Select two)

  • The use of cyphers that are based on circuitous mathematical algorithms
  • The apply of cyphers that take undergone public scrutiny

Question 8)

Trying to break an encryption key by trying every possible combination of characters is called what?

  • A brute forcefulness attack

Question 9)

Which of the following describes the core goals of IT security?

  • The Open up Web Awarding Security Project (OWASP) Framework
  • The Business Process Management Framework
  • The CIA Triad

Question 10)

Which iii (three) roles are typically found in an Data Security organization? (Select 3)

  • Vulnerability Assessor
  • Chief Information Security Officer (CISO)
  • Penetration Tester

Question 11)

Trouble Management, Change Direction, and Incident Management are all key processes of which framework?

  • ITIL

Question 12)

Alice sends a message to Bob that is intercepted past Trudy. Which scenario describes an integrity violation?

  • Trudy changes the bulletin and and then forwards it on
  • Trudy deletes the message without forwarding it
  • Trudy reads the message
  • Trudy cannot read it because it is encrypted but allows it to be delivered to Bob in its original form

Question 13)

In cybersecurity, Accountability is defined equally what?

  • Being able to map an activeness to an identity

Question xiv)

Multifactor authentication (MFA) requires more than than ane authentication method to be used before identity is authenticated. Which three (3) are authentication methods? (Select 3)

  • Something a person is
  • Something a person has
  • Something a person knows

Question 15)

Which three (3) of the following are Physical Access Controls? (Select 3)

  • Door locks
  • Security guards
  • Fences

Question sixteen)

If you are setting up a Windows 10 laptop with a 32Gb hard drive, which two (2) file organisation could you select? (Select ii)

  • NTFS
  • FAT32

Question 17)

Which three (3) permissions can be assail a file in Linux? (Select 3)

  • write
  • execute
  • read

Question 18)

If cost is the primary concern, which blazon of cloud should exist considered first?

  • Public cloud

Question nineteen)

Consolidating and virtualizing workloads should be done when?

  • Before moving the workloads to the cloud

Question 20)

Which of the post-obit is a self-regulating standard fix by the credit card manufacture in the US?

  • PCI-DSS

Question 21)

Which two (2) of the following set on types target endpoints?

  • Ad Network
  • Spear Phishing

Question 22)

If an Endpoint Detection and Response (EDR) system detects that an endpoint does non have a required patch installed, which argument all-time characterizes the actions information technology is able to take automatically?

  • The endpoint can be quarantined from all network resource except those that allow information technology to download and install the missing patch

Question 23)

Granting access to a user based upon how high upward he is in an organization violates what basic security premise?

  • The principle of least privileges

Question 24)

The Windows Security App available in Windows 10 provides uses with which of the post-obit protections?

  • Firewall and network protection
  • Family options (parental controls)
  • All of the above

Question 25)

Hashing ensures which of the post-obit?

  • Integrity

Question 26)

Which of the following practices helps assure the best results when implementing encryption?

  • Choose a reliable and proven published algorithm
  • Develop a unique cryptographic algorithm for your arrangement and keep them secret

Question 27)

Which of these methods ensures the authentication, non-repudiation and integrity of a digital advice?

  • Use of digital signatures

Question 28)

Which of the post-obit practices will help clinch the confidentiality of data in transit?

  • Disable certificate pinning
  • Have cocky-signed certificates
  • Implement HTTP Strict Transport Protocol (HSTS)

Question 29)

Which three (3) of these are benefits yous can realize from using a NAT (Network Address Translation) router? (Select 3)

  • Allows static 1-to-i mapping of local IP addresses to global IP addresses
  • Allows dynamic mapping of many local IP addresses to a smaller number of global IP address simply when they are needed
  • Allows internal IP addresses to be hidden from outside observers

Question 30)

Which statement all-time describes configuring a NAT router to utilise static mapping?

  • The arrangement volition need equally many registered IP addresses as it has computers that demand Internet access

Question 31)

If a computer needs to send a message to a organization that is part of the local network, where does information technology send the message?

  • To the system'south MAC address

Question 32)

Which are properties of a highly bachelor system?

  • Redundancy, failover and monitoring

Question 33)

Which three (3) of these statements about the UDP protocol are True? (Select iii)

  • UDP is faster than TCP
  • UDP packets are reassembled past the receiving system in whatever order they are received
  • UDP is connectionless

Question 34)

What is one deviation between a Stateful Firewall and a Next Generation Firewall?

  • A NGFW sympathise which awarding sent a given parcel

Question 35)

You are concerned that your organisation is really non very experienced with securing data sources. Which hosting model would crave you to secure the fewest information sources?

  • SaaS

Question 36)

Hassan is an engineer who works a normal day shift from his visitor's headquarters in Austin, TX USA. Which ii (ii) of these activities raise the nigh cause for concern? (Select 2)

  • Each night Hassan logs into his business relationship from an ISP in China
  • Ane evening, Hassan downloads all of the files associated with the new product he is working on

Question 37)

Which 3 (3) of the following are considered safe coding practices? (Select 3)

  • Utilize library functions in place of Os commands
  • Avoid using OS commands whenever possible
  • Avoid running commands through a shell interpreter

Question 38)

Which three (three) items should exist included in the Planning footstep of a penetration test? (Select three)

  • Informing Demand-to-know employees
  • Establishing Boundaries
  • Setting Objectives

Question 39)

Which portion of the pentest report would cover the risk ranking, recommendations and roadmap?

  • Executive Summary

Question 40)

Spare workstations and servers, bare removable media, package sniffers and protocol analyzers, all belong to which Incident Response resource category?

  • Incident Mail-Analysis Resources
  • Incident Analysis Hardware and Software

Question 41)

NIST recommends considering a number of items, including a high level of testing and monitoring, during which stage of a comprehensive Containment, Eradication & Recovery strategy?

  • Recovery

Question 42)

True or False. Digital forensics is effective in solving cyber crimes but is not considered effective in solving tearing crimes such as rape and murder.

  • False

Question 43)

Which 3 (3) are common obstacles faced when trying to examine forensic data? (Select iii)

  • Selecting the correct tools to help filter and exclude irrelevant data
  • Finding the relevant files among the hundreds of thousands found on well-nigh hard drives
  • Bypassing controls such equally passwords

Question 44)

What scripting concept will repeatedly execute the same block of lawmaking while a specified condition remains true?

  • Loops

Question 45)

Which two (2) statements about Python are true? (Select 2)

  • Python code is considered piece of cake to debug compared with other popular programming languages
  • Python code is considered very readable by novice programmers

Question 46)

In the Python statement

pi="three"

What information blazon is the data type of the variable pi?

  • str

Question 47)

What will be printed by the following block of Python lawmaking?

def Add5(in)

 out=in+5

 return out

 print(Add5(ten))

  • xv

Question 48)

Which threat intelligence framework was adult past the US Government to enable consequent characterization and categorization of cyberthreat events?

  • Cyber Threat Framework

Question 49)

True or Simulated. An arrangement'south security immune organisation should be integrated with exterior organizations, including vendors and other 3rd-parties.

  • True

Question 50)

Which three (3) of these are among the peak 12 capabilities that a adept data security and protection solution should provide? (Select 3)

  • Vulnerability assessment
  • Real-fourth dimension alerting
  • Tokenization

Question 51)

Truthful or Faux. For iOS and Android mobile devices, users must collaborate with the operating organization only through a series of applications, but non directly.

  • True

Question 52)

All industries take their own unique data security challenges. Which of these industries has a particular concern with PCI-DSS compliance while having a large number of admission points staffed by low-level employees who have access to payment card data?

  • Retail

Question 53)

True or False. WireShark has an impressive array of features and is distributed free of charge.

  • True

Question 54)

In which component of a Mutual Vulnerability Score (CVSS) would privileges required be reflected?

  • Base-Exploitability Subscore

Question 55)

The Decommission footstep in the DevSecOps Release, Deploy & Decommission phase contains which of these activities?

  • IAM controls to regulate authorization

Question 56)

You calculate that at that place is a two% probability that a cybercriminal will exist able to steal credit menu numbers from your online storefront which will result in $10M in losses to your company. What have you just determined?

  • A chance

Question 57)

Which ane of the OWASP Top 10 Awarding Security Risks would be occur when an application'south API exposes financial, healthcare or other PII data?

  • Sensitive data exposure

Question 58)

Which three (three) of these are Solution Building Blocks (SBBs)? (Select three)

  • Virus Protection
  • Application Firewall
  • Spam Filter

Question 59)

A robust cybersecurity defence force includes contributions from 3 areas, man expertise, security analytics and artificial intelligence. Rapidly analyzing big quantities of unstructured information lends itself best to which of these areas?

  • Artificial intelligence

Question sixty)

The triad of a security operations centers (SOC) is People, Process and Engineering. Which part of the triad would network monitoring belong?

  • Technology

Question 61)

Which of these is a good definition for cyber threat hunting?

  • The act of proactively and aggressively identifying, intercepting, tracking, investigating and eliminating cyber adversaries as early on every bit possible in the cyber impale chain

Question 62)

There is value brought past each of the IBM i2 EIA apply cases. Which ane of these provides firsthand alerting on brand compromises and fraud on the night web.

  • Threat Discovery

.

Question 63)

Which three (3) soft skills are important to accept in an organization's incident response team? (Select 3)

  • Communication
  • Teamwork
  • Problem solving and Critical thinking

Question 64)

Implementing strong endpoint detection and mitigation strategies falls into which phase of the incident response lifecycle?

  • Detection & Analysis

Question 65)

Which 3 (3) of these statistics most phishing attacks are real? (Select 3)

  • Effectually fifteen million new phishing sites are created each month
  • Phishing accounts for near 20% of data breaches
  • 30% of phishing letters are opened by their targeted users

Question 66)

Which 3 (3) of these command processes are included in the PCI-DSS standard? (Select 3)

  • Implement strong access control measures
  • Regularly monitor and test networks
  • Maintain an information security policy

Question 67)

Which three (3) are malware types commonly used in PoS attacks to steal credit card information? (Select 3)

  • Alina
  • BlackPOS
  • vSkimmer

Question 68)

According to a 2019 Ponemon study, what per centum of consumers indicated they would be willing to pay more for a production or service from a provider with better security?

  • 52%

Question 69)

You go a phone telephone call from a technician at the "Windows company" who tells you that they have detected a problem with your system and would like to assist you resolve it. In order to assist, they need you to become to a web site and download a simple utility that will allow them to fix the settings on your computer. Since you only own an Apple tree Mac, you are suspicious of this caller and hang up. What would the set on vector have been if you had downloaded the "uncomplicated utility" every bit asked?

  • Remote Desktop Protocol (RDP)

Question 70)

What is an constructive fully automated way to forestall malware from entering your system as an email attachment?

  • Anti-virus software

 Question 71)

True or False. The big bulk of stolen credit card numbers are used quickly by the thief or a member of his/her family.

  • False

Question 72)

Which iii (3) of these are PCI-DSS requirements for whatever company handling, processing or transmitting credit card data? (Select 3)

  • Restrict access to cardholder information by business need-to-know
  • Assign a unique ID to each person with computer admission
  • Restrict physical access to cardholder data

Question 73)

True or False. Communications of a data alienation should be handled by a squad composed of members of the IR team, legal personnel and public relations.

  • True

Question 74)

A Coordinating incident response team model is characterized past which of the following?

  • Multiple incident response teams within an organization all of whom coordinate their activities just within their country or department
  • Multiple incident response teams within an organisation simply 1 with authority to clinch consequent policies and practices are followed across all teams
  • This term refers to a structure that assures the incident response squad'southward activities are coordinated with senior management and all appropriate departments within and organization

Question 75)

The cyber hunting team and the SOC analysts are informally referred to every bit the ____ and ____ teams, respectively.

  • Blue Red
  • Red, Blue

Question 76)

The partnership between security analysts and technology tin exist said to be grouped into iii domains, human expertise, security analytics and artificial intelligence. The human expertise domain would contain which 3 (3) of these topics?

  • Abstraction
  • Dilemmas
  • Morals

Question 77)

Solution architectures oft incorporate diagrams like the one below. What does this diagram show?

<<Solution Architecture Data Flow.png>>

  • Functional components and data catamenia

Question 78)

Port numbers 1024 through 49151 are known as what?

  • Registered Ports

Question 79)

Which layer of the OSI model to packet sniffers operate on?

  • Data Link

Question lxxx)

True or Simulated. Internal attacks from trusted employees represents equally every bit significant a threat as external attacks from professional cyber criminals.

  • Truthful

Question 81)

Co-ordinate to the FireEye Mandiant's Security Effectiveness Report 2020, what fraction of security tools are deployed with default settings and thus underperform expectations?

  • 80%

Question 82)

Which country had the highest average price per alienation in 2018 at $8.19M

  • United States

Question 83)

Which two (2) of these Python libraries provides useful statistical functions? (Select 2)

  • StatsModels
  • Scikit-larn

Question 84)

What volition print out when this block of Python lawmaking is run?

i=1

#i=i+1

#i=i+2

#i=i+iii

print(i)

  • 1

Question 85)

Which iii (3) statements about Python variables are true? (Select iii)

  • A variable name must commencement with a alphabetic character or the underscore "_" grapheme
  • Variables can change blazon after they take been set
  • Variables do not have to be declared in advance of their use

Question 86)

PowerShell is a configuration management framework for which operating system?

  • Windows

Question 87)

In digital forensics documenting the chain of custody of evidence is critical. Which of these should be included in your concatenation of custody log?

  • All of the above

Question 88)

Forensic assay should always exist conducted on a copy of the original information. Which 2 (2) types of copying are advisable for getting data from a laptop acquired from a terminated employee, if you lot doubtable he has deleted incriminating files? (Select 2)

  • An incremental backup
  • A logical backup

Question 89)

Which of the following would be considered an incident precursor?

  • An warning from your antivirus software indicating it had detected malware on your system
  • An announced threat against your arrangement by a hactivist group

Question xc)

If a penetration test calls for you to create a diagram of the target network including the identity of hosts and servers also equally a list of open ports and published services, which tool would be the best fit for this task?

  • Nmap

Question 91)

Which type of list is considered best for safe coding practice?

  • Whitelist

Question 92)

In reviewing the security logs for a company's headquarters in New York City, which of these activities should not raise much of a security business organization?

  • A recently hired data scientist in the Medical Analytics department has repeatedly attempted to access the corporate financial database
  • An employee has started logging in from home for an hour or so during the concluding 2 weeks of each quarter

Question 93)

Information sources such as newspapers, books and spider web pages are considered which blazon of information?

  • Unstructured data
  • Semi-structured data
  • Structured data

Question 94)

Which iii (3) of these statements about the TCP protocol are Truthful? (Select 3)

  • TCP packets are reassembled by the receiving organization in the order in which they were sent
  • TCP is more reliable than UDP
  • TCP is connection-oriented

Question 95)

In IPv4, how many of the 4 octets are used to define the network portion of the address in a Form B network?

  • 2

Question 96)

A small company with 25 computers wishes to connect them to the Internet using a NAT router. How many Public IP addresses will this company demand to assure all 25 computers can communicate with each other and other systems on the Net if they implement Port Accost Translations?

  • one

Question 97)

Why is symmetric fundamental encryption the almost common choice of methods to encryptic information at rest?

  • There are far more keys available for use
  • It is much faster than asymmetric central encryption

Question 98)

Which of the following statements nearly hashing is True?

  • Hashing uses algorithms that are known as "one-way" functions

Question 99)

Why is hashing non a common method used for encrypting data?

  • Hashing is a one-way process and so the original data cannot be reconstructed from a hash value

Question 100)

Public key encryption incorporating digital signatures ensures which of the post-obit?

  • Confidentiality and Integrity

Question 101)

What is the primary authentication protocol used past Microsoft in Active Directory?

  • Kerberos

Question 102)

Granting access to a user business relationship only those privileges necessary to perform its intended functions is known as what?

  • The principle of least privileges

Question 103)

What is the well-nigh common patch remediation frequency for nearly organizations?

  • Monthly
  • Annually

Question 104)

Island hopping is an attack method commonly used in which scenario?

  • Supply Chain Infiltration
  • Blocking access to a website for all users
  • Compromising a corporate VIP
  • Trojan Horse attacks

Question 105)

Security training for Information technology staff is what type of control?

  • Virtual
  • Operational
  • Physical

Question 106)

Which security concerns follow your workload even after it is successfully moved to the deject?

  • All of the in a higher place

Question 107)

Which form of Deject computing combines both public and private clouds?

  • Hybrid cloud

Question 108)

Which component of the Linux operating arrangement interacts with your computer's hardware?

  • The kernel

Question 109)

The encryption and protocols used to forbid unauthorized admission to data are examples of which type of access control?

  • Technical

Question 110)

In cybersecurity, Authenticity is divers equally what?

  • The property of being genuine and verifiable

Question 111)

ITIL is best described as what?

  • A drove of IT Service Management all-time practices

Question 112)

Which position is in charge of testing the security and effectiveness of figurer information systems?

  • Information Security Auditor

Question 113)

A company wants to preclude employees from wasting time on social media sites. To reach this, a certificate forbidding use of these sites while at work is written and circulated and and so the firewalls are updated to block access to Facebook, Twitter and other popular sites. Which 2 (2) types of security controls has the visitor just implemented? (Select 2)

  • Administrative
  • Technical

Question 114)

An email message that is encrypted, uses a digital signature and carries a hash value would address which aspects of the CIA Triad?

Confidentiality and Integrity

Question 115)

What would a slice of malicious code that gets installed on a figurer and reports back to the controller your keystrokes and other information it can gather from your system exist called?

  • Spyware

Question 116)

Fancy Bears and Anonymous are examples of what?

  • Hacking organizations

Question 117)

Select the respond the fills in the blanks in the correct lodge.

A weakness in a organisation is a/an ____. The potential danger associated with this is a/an ____ that becomes a/an ____ when attacked by a bad player.

  • vulnerability, threat, exploit
  • threat, exposure, risk
  • threat histrion, vulnerability, exposure

Question 118)

Implement a filter to remove flooded packets before they reach the host is a countermeasure to which form of assail?

  • A Deprival of Service (DoS) set on

Question 119)

Trudy intercepts a romantic plain-text message from Alice to her boyfriend Sam. The message upsets Trudy then she forwards it to Bob, making it look like Alice intended information technology for Bob from the beginning. Which aspect of the CIA Triad has Trudy violated ?

  • All of the in a higher place

Question 120)

Which factor contributes nearly to the strength of an encryption organisation?

  • How many people have admission to your public key
  • The length of the encryption fundamental used
  • The number of private keys used by the arrangement

Question 121)

What is an advantage disproportionate key encryption has over symmetric primal encryption?

  • Disproportionate keys can be exchanged more securely than symmetric keys
  • Asymmetric cardinal encryption is harder to break than symmetric key encryption
  • Asymmetric cardinal encryption is faster than symmetric key encryption

Question 122)

Which position is responsible for the "ethical hacking" of an organizations computer systems?

  • A Penetration Tester

Question 123)

Which three (3) are considered best practices, baselines or frameworks? (Select 3)

  • ISO27000 series
  • ITIL
  • COBIT

Question 124)

What does the "A" in the CIA Triad stand for?

  • Availability

Question 125)

Which type of access command is based upon the subject's clearance level and the objects nomenclature?

  • Hierarchical Access Control (HAC)
  • Discretionary Access Control (DAC)
  • Mandatory Admission Control (MAC)
  • Role Based Access Control (RBAC)

Question 126)

Windows 10 stores 64-bit applications in which directory?

  • \Program Files

Question 127)

To build a virtual computing environment, where is the hypervisor installed?

  • Between the applications and the data sources
  • On the cloud's supervisory arrangement
  • Between the hardware and operating organization
  • Between the operating system and applications

Question 128)

An identical e-mail sent to millions of addresses at random would be classified as which type of assail?

  • A Shark attack
  • A Phishing attack

Question 129)

Which statement almost drivers running in Windows kernel mode is truthful?

  • Simply critical processes are permitted to run in kernel style since at that place is nothing to prevent a

Question 130)

Symmetric key encryption by itself ensures which of the following?

  • Confidentiality and Integrity
  • Confidentiality only
  • Confidentiality and Availability

Question 131)

Which argument best describes configuring a NAT router to use dynamic mapping?

  • The organization will need equally many registered IP addresses every bit it has computers that need Internet access
  • Many registered IP addresses are mapped to a single registered IP address using dissimilar port numbers
  • Unregistered IP addresses are mapped to registered IP addresses equally they are needed
  • The NAT router uses each computer's IP address for both internal and external communication

Question 132)

Which address type does a computer utilise to go a new IP address when it boots up?

  • The network's DHCP server address

Question 133)

What is the primary departure betwixt the IPv4 and IPv6 addressing schema?

  • IPv6 is significantly faster than IPv4
  • IPv6 is used just for IOT devices
  • IPv6 allows for billions of times as many possible IP addresses

Question 134)

Which blazon of firewall understands which session a packet belongs to and analyzes it appropriately?

  • A Next Generation Firewall (NGFW)

Question 135)

An employee calls the IT Helpdesk and admits that possibly, just maybe, the links in the email he clicked on this morn were not from the real Lottery Commission. What is the start thing y'all should tell the employee to practise?

  • Run a Port browse
  • Run an antivirus scan

Question 136)

A penetration tester involved in a "Black box" attack would be doing what?

  • Attempting to penetrate a client's systems as if she were an external hacker with no inside knowled

Question 137)

Which Post Incident action would exist concerned with maintaining the proper chain-of-custody?

  • Lessons learned meeting
  • Evidence memory
  • Documentation review & update
  • Utilizing nerveless data

Question 138)

In digital forensics, which three (iii) steps are involved in the drove of data? (Select 3)

  • Develop a plan to learn the data
  • Verify the integrity of the data
  • Larn the data

Question 139)

Which three (3) of the post-obit are considered scripting languages? (Select iii)

  • Perl
  • Bash
  • Python

Question 140)

What is the largest number that volition be printed during the execution of this Python while loop?

i=0

while (i<10):

 impress(i)

 i=i+1

  • nine

Question 141)

Activities performed as a office of security intelligence tin be divided into pre-exploit and post-exploit activities. Which two (two) of these are mail-exploit activities? (Select ii)

  • Gather full situational awareness through advanced security analytics
  • Perform forensic investigation

Question 142)

In that location are many proficient reasons for maintaining comprehensive backups of critical information. Which attribute of the CIA Triad is most impacted by an organization'south backup practices?

  • Availability
  • Integrity
  • Authorization

Question 143)

Which phase of DevSecOps would comprise the activities Internal/External testing, Continuous assurance, and Compliance checking?

  • Examination
  • Lawmaking & build
  • Operate & monitor
  • Program

Question 144)

Which one of the OWASP Top x Application Security Risks would be occur when in that location are no safeguards against a user beingness allowed to execute HTML or JavaScript in the user's browser that can hijack sessions.

  • Cross-site scripting

Question 145)

SIEM license costs are typically calculated based upon which 2 (two) factors? (Select 2)

  • Flows per minute (FPM)
  • Events per 2d (EPS)

Question 146)

True or False. If you lot accept no meliorate identify to start hunting threats, start with a view of the global threat mural and then drill downwardly to a regional view, industry view and finally a view of the threats specific to your own organization.

  • True

Question 147)

True or False. Cloud-based storage or hosting providers are amidst the elevation sources of third-party breaches

  • True

Question 148)

You are looking very hard on the web for the everyman mortgage involvement load y'all tin can find and you come across a charge per unit that is so low information technology could not possibly be true. You check out the site to run into that the terms are and quickly find yous are the victim of a ransomware attack. What was the likely attack vector used by the bad actors?

  • Phishing
  • Malicious Links
  • Software Vulnerabilities

Question 149)

Very provocative articles that come in news feeds or Google searches are sometimes chosen "click-bait". These articles often tempt you to link to other sites that can be infected with malware. What attack vector is used by these click-allurement sites to get you lot to get to the really bad sites?

  • Malicious Links

More New Questions

Question 150)

Which of the post-obit defines a security threat?

  • Whatsoever potential danger capable of exploiting a weakness in a system
  • The likelihood that the weakness in a arrangement will be exploited
  • One case of a weakness being exploited
  • A weakness in a system that could be exploited by a bad actor

Question 151)

Suspicious activeness, like IP addresses or ports existence scanned sequentially, is a sign of which type of assail?

  • A mapping set on
  • A denial of service (DoS) attack
  • A phishing assault
  • An IP spoofing attack

Question 152)

Alice sends a message to Bob that is intercepted by Trudy. Which scenario describes a confidentiality violation?

  • Trudy deletes the message without forwarding it
  • Trudy cannot read it considering it is encrypted but allows it to be delivered to Bob in its original form
  • Trudy changes the message and and then forwards information technology on
  • Trudy reads the message

Question 153)

Which regulation contains the security rule that requires all covered entities to maintain reasonable and appropriate administrative, technical, and concrete safeguards for protecting electronic protected wellness information (e-PHI)?

  • PCI-DSS
  • ISO27000 series
  • HIPAA
  • GDPR
  • NIST 800-53A

Question 154)

A skilful Endpoint Detection and Response system (EDR) should accept which three (iii) of these capabilities? (Select 3)

  • Automatically quarantine noncompliant endpoints
  • Manage encryption keys for each endpoint
  • Manage thousands of devices at once
  • Deploying devices with network configurations

Question 155)

Which argument virtually encryption is Truthful about data in utilize.

  • Data should always be kept encrypted since mod CPUs are fully capable of operating direct on encrypted information
  • It is vulnerable to theft and should exist decrypted but for the briefest possible time while it is being operated on
  • Short of orchestrating a memory dump from a system crash, there is no practical way for malware to go at the data being candy, so dump logs are your only real business organisation
  • Data in active memory registers are not at chance of existence stolen

Question 156)

For added security you decide to protect your network by conducting both a stateless and stateful inspection of incoming packets. How can this be done?

  • This cannot be done The network administrator must cull to run a given network segment in either stateful or stateless mode, and and then select the respective firewall type
  • Install a single firewall that is capable of conducting both stateless and stateful inspections
  • Install a stateful firewall only These advanced devices inspect everything a stateless firewall inspects in improver to state related factors
  • Y'all must install 2 firewalls in series, so all packets pass through the stateless firewall offset and then the stateless firewall

Question 157)

In IPv4, how many of the iv octets are used to define the network portion of the accost in a Course A network?

  • ii
  • 1
  • 4
  • 3

Question 158)

If yous have to rely upon metadata to work with the information at paw, you are probably working with which type of data?

  • Meta-structured information
  • Semi-structured data
  • Structured information
  • Unstructured data

Question 159)

Which two (2) forms of discovery must be conducted online? (Select 2)

  • Port scanning
  • Shoulder surfing
  • Social engineering
  • Packet sniffing

Question 160)

Which Incident Response Squad model describes a team that runs all incident response activities for a company?

  • Distributed
  • Central
  • Coordinating
  • Control

Question 161)

Which is the information protection procedure that prevents a suspicious data request from being completed?

  • Information risk assay
  • Data nomenclature
  • Data discovery
  • Blocking, masking and quarantining

Question 162)

Which form of penetration testing allows the testers partial cognition of the systems they are trying to penetrate in advance of their attack to streamline costs and focus efforts?

  • Cherry Box Testing
  • Gray Box Testing
  • White Box testing
  • Black Box Testing

Question 163)

Which type of application attack would include User denies performing an operation, attacker exploits an application without trace, and aggressor covers her tracks?

  • Auditing and logging
  • Authentication
  • Authority
  • Input validation

Question 164)

True or False. Thorough reconnaissance is an of import footstep in developing an effective cyber kill concatenation.

  • True
  • False

Question 165)

True or False. One of the primary challenges in cyber threat hunting is a lack of useful tools sold by also few vendors.

  • Truthful
  • Faux

Question 166)

True or False. A large company has a data breach involving the theft of employee personnel records only no customer data of any kind. Since no external data was involved, the company does non have to report the breach to police enforcement.

  • True
  • False

Question 167)

You lot are the CEO of a big tech visitor and take but received an aroused email that looks like it came from 1 of your biggest customers. The email says your company is overbilling the customer and asks that you examine the attached invoice. Yous practise but detect it blank, so you answer politely to the sender asking for more details. You never hear dorsum, but a week later your security team tells you lot that your credentials have been used to admission and exfiltrate big amounts of visitor financial data. What kind of attack did you fall victim to?

  • As a phishing attack
  • As a whale set on
  • A shark attack
  • A wing phishing attack

Question 168)

Which of these statements most the PCI-DSS requirements for whatsoever company handling, processing or transmitting credit card data is true?

  • Muti-factor hallmark is required for all new card holders
  • Some form of mobile device management (MDM) must be used on all mobile credit card processing devices
  • All employees with direct access to cardholder data must exist bonded
  • Cardholder data must exist encrypted if it is sent across open or public networks

Which Incident Response Team model describes a team that acts equally consulting experts to advise local IR teams?

  • Control
  • Analogous
  • Distributed
  • O Central

In a Linux file system, which files are contained in the \bin binder?

  • All user binary files, their libraries and headers
  • Executable files such as grep and ping
  • Configuration files such every bit fstab and inittab
  • Directories such as /home and /usr

If a computer needs to send a message to a system that is not function of the local network, where does it transport the message?

  • To the organization's domain proper noun
  • To the system's IP address
  • The network'southward DNS server address
  • To the organization's MAC accost
  • The network'south default gateway address
  • The network's DHCP server address

Which three (three) of these statements virtually the TCP protocol are True? (Select iii)

  • TCP is faster than UDP
  • TCP is connection-oriented
  • TCP packets are reassembled past the receiving system in the order in which they were sent
  • TCP is more reliable than UDP

A professor is not allowed to change a student's final grade after she submits it without completing a special form to explain the circumstances that necessitated the change. This additional step supports which aspect of the CIA Triad?

  • Authorization
  • Integrity
  • Confidentiality
  • Availability

Which of these is the all-time definition of a security risk?

  • An instance of being exposed to losses
  • Any potential danger that is associated with the exploitation of a vulnerability
  • A weakness in a organisation
  • The likelihood of a threat source exploiting a vulnerability

Trudy intercepts a plain text message sent by Alice to Bob, but in no way interferes with its delivery. Which aspect of the CIA Triad was violated?

  • Confidentiality
  • Integrity
  • Availability
  • All of the in a higher place

What is an advantage symmetric primal encryption has over asymmetric key encryption?

  • Symmetric key encryption provides better security confronting Homo-in-the-center attacks than is possible with asymmetric key encryption
  • Symmetric key encryption is faster than asymmetric key encryption
  • Symmetric keys can be exchanged more securely than disproportionate keys
  • Symmetric fundamental encryption is harder to interruption than asymmetric primal encryption

Which type of application attack would include network eavesdropping, dictionary attacks and cookie replays?

  • Configuration direction
  • Authentication
  • Authorization
  • Exception management

Why should you always wait for mutual patterns before starting a new security architecture design?

  • They can help identify best practices
  • They can shorten the development lifecycle
  • Some document complete tested solutions
  • All of the above

Last Update: 09/12/2021

Alert: Jo Answer Green hai wo right hai simply

Jo Green Nahi hai. Usme se jo ek incorrect selection tha usko hata diya hai

PLEASE Look I Will Add MORE NEW QUETIONS..

Too if you take Questions with correct respond  Send me on my E-mail i will update on my weblog..

niyander111@gmail.com

Thanks...