ITSY 1342 Final Exam Review

1. There are five phases in the security intelligence life cycle. During which phase do you gather and process information from your internal sources, such as system and application logs?

2. Which type of security control identifies, logs, and reports incidents as they happen?

3. You are instant messaging a coworker, and you get a malicious link. Which type of social engineering attack is this?

4. Which type of framework is fairly rigid and requires that specific controls be implemented?

5. Sophisticated attacks executed by highly skilled hackers with a specific target or objective in mind are classified as which type of threat?

6. Misconfigurations occur throughout a network. What is the primary cause of misconfigurations?

7. Threats that do not have an existing fix, do not have any security fixes, and do not have available patches are called what?

8. Creating a baseline is vital to managing vulnerabilities. What is the FIRST step in creating this baseline?

9. What do partial, risk-informed, repeatable, and adaptive achievements indicate?

10. Which team is responsible for defending the network against attacks in a risk training scenario?

11. During which phase of the Kill Chain framework is malware code encapsulated into commonly used file formats, such as PDF files, image files, or Word documents?

12. Hackers use social networking, dumpster diving, social engineering, and web surfing during which portion of their reconnaissance?

13. A list of actions and objectives taken to mitigate risk is known as a:

14. What are the three factors to keep in mind with physical security?

15. Threat actors can be divided into different types based on their methods and motivations. Which type of hacker usually targets government agencies, corporations, or other entities they are protesting?

16. Which type of testing is typically done by an internal tester who has full knowledge of the network, computer system, and infrastructure?

17. Which of the following BEST describes an unknown penetration test?

18. Threats are usually ranked from high to low. A higher number indicates a dangerous threat. A lower number indicates threats that may be annoyances but aren't necessarily malicious in nature. What is this high-to-low scale known as?

19. During which phase of the Kill Chain framework does an intruder extract or destroy data?

20. Which security function identifies and evaluates threats in hopes of reducing their impact?

21. PII, if exposed or captured by attackers, can be used to exploit and blackmail. What is PII?

22. COBIT, ITIL, and ISO are examples of which type of framework?

23. Any attack involving human interaction of some kind is referred to as which of the following?

24. Which of the following best describes a script kiddie?

25. When performing active reconnaissance, a malicious actor may try to do which of the following?

26. During the reconnaissance phase, an attacker is looking for common attack vectors. Which of the following services is MOST likely to be targeted?

27. How many numbering authorities comprise the CVE?

28. One component of the ALE calculation is ARO. What does ARO represent?

29. Compliments, misinformation, feigning ignorance, and being a good listener are tactics of which social engineering technique?

30. Which security control category controls system oversight?

31. When a host initiates a connection to a server via the TCP Protocol, a three-way handshake is used. What is the host's final reply?

32. Which security function reacts quickly and efficiently after an issue has been detected?

33. An organization's user data server is backed up daily. Referencing the CIA triad, this is an example of which of the following?

34. Which type of test simulates an insider threat by giving the tester partial information about the network and computer systems?

35. Which of the following is a device used by the blue team to lure an unsuspecting attacker to aimlessly explore?

36. Which of the following would the red team MOST likely use?

37. You want to properly dispose of papers with sensitive content. You want to ensure that it's nearly impossible for a dumpster diver to put the information back together. What should you do?

38. Which type of intelligence helps security professionals respond to incidents or make decisions on the spot?

39. A hacker wants to leverage social media to glean information coming from a certain location. Which tool is BEST suited for the job?

40. What seven-phase framework did Lockheed Martin develop to identify an attacker's step-by-step attack process?

41. Which of the following BEST describes Retina CS for Mobile?

42. Security guards are included in which control category?

43. Which threat modeling measurement is used to describe how an attack can exploit a vulnerability?

44. Which team is responsible for trying to infiltrate and attack a network?

45. Gathering information about a system, its components, and how they work together is known as which of the following?

46. Restoring data from backup is an example of which type of security control?

47. Which of the following is true about confidence levels in the intrusion analysis Diamond Model?

48. Which framework includes the Reconnaissance, Weaponization, Delivery, Exploitation, Installation, Command and Control, and Actions on Objectives phases?

49. Which type of information contains intellectual property?

50. Which of the following is an example of IAM?