networking threats, assessments, and defenses
Which of the following does NOT describe an area that separates threat actors from defenders? 1. DMZ 2. Air gap 3. Secure area 4. Containment space
Containment Space
Tomaso is explaining to a colleague the different types of DNS attacks. Which DNS attack would only impact a single user? 1. DNS hijack attack 2. DNS poisoning attack 3. DNS overflow attack 4. DNS resource attack
DNS poisoning attack
What is the difference between a DoS and a DDoS attack? 1. DoS attacks are faster than DDoS attacks. 2. DoS attacks use fewer computers than DDoS attacks. 3. DoS attacks do not use DNS servers as DDoS attacks do. 4. DoS attacks use more memory than DDoS attacks.
DOS attacks use fewer computers than DDOS attacks
Calix was asked to protect a system from a potential attack on DNS. What are the locations he would need to protect? 1. Web server buffer and host DNS server 2. Reply referrer and domain buffer 3. Web browser and browser add-on 4. Host table and external DNS server
Host table and external DNS server
Which of the following is NOT a reason that threat actors use PowerShell for attacks? 1. It cannot be detected by antimalware running on the computer. 2. It leaves behind no evidence on a hard drive. 3. It can be invoked prior to system boot. 4. Most applications flag it as a trusted application.
It can be invoked prior to system boot
Which of the following is NOT true about VBA? 1. It is commonly used to create macros. 2. It is built into most Microsoft Office applications. 3. It is included in select non-Microsoft products. 4. It is being phased out and replaced by PowerShell.
It is being phased out and replaced by Powershell
What is the result of an ARP poisoning attack? 1. The ARP cache is compromised. 2. Users cannot reach a DNS server. 3. MAC addresses are altered. 4. An internal DNS must be used instead of an external DNS.
MAC addresses are altered
Deacon has observed that the switch is broadcasting all packets to all devices. He suspects it is the result of an attack that has overflowed the switch MAC address table. Which type of attack is this? 1. MAC spoofing attack 2. MAC cloning attack 3. MAC flooding attack 4. MAC overflow attack
MAC flooding attack
Which attack intercepts communications between a web browser and the underlying OS? 1.Interception 2.Man-in-the-browser (MITB) 3.DIG 4.ARP poisoning
Man-in-the-browser (MITB)
Proteus has been asked to secure endpoints that can be programmed and have an IP address so that they cannot be used in a DDoS attack. What is the name for this source of DDoS attack? 1. Network 2. Application 3. IoT 4. Operational Technology
Operational Technology
Which of the following is a tool for editing packets and then putting the packets back onto the network to observe their behavior? 1. Tcpreplay 2. Tcpdump 3. Wireshark 4. Packetdump
Tcpreplay
Which of the following is NOT a Microsoft defense against macros? 1. Protected View 2. Trusted documents 3. Trusted domain 4. Trusted location
Trusted domain
Eros wants to change a configuration file on his Linux computer. He first wants to display the entire file contents. Which tool would he use? 1. head 2. show 3. display 4. cat
cat
Which utility sends custom TCP/IP packets? 1. curl 2. hping 3. shape 4. pingpacket
hping
Theo uses the Python programming language and does not want his code to contain vulnerabilities. Which of the following best practices would Theo NOT use? 1. Only use compiled and not interpreted Python code. 2. Use the latest version of Python. 3. Use caution when formatting strings. 4. Download only vetted libraries.
only use complied and not interpreted Python code
Which of the following sensors can detect an object that enters the sensor's field? 1. Proximity 2. Field detection 3. IR verification 4. Object recognition
proximity
Which of the following is a third-party OS penetration testing tool? 1. theHarvester 2. scanless 3. Nessus 4. sn1per
sn1per
What is Bash? 1. The command-language interpreter for Linux/UNIX OSs 2. The open source scripting language that contains many vulnerabilities 3. A substitute for SSH 4. The underlying platform on which macOS is built
the command-language interpreter for Linux/UNIX OSs
Gregory wants to look at the details about the patch a packet takes from his Linux computer to another device. Which Linux command-line utility will he use? 1. tracepacket 2. trace 3. tracert 4. traceroute
traceroute
Estevan has recommended that the organization hire and deploy two security guards in the control room to limit the effect if one of the guards has been compromised. What is Estevan proposing? 1. Dual observation protocol (DOP) 2. Compromise mitigation assessment (CMA) 3. Two-person integrity/control 4. Multiplayer recognition
two-person integrity/control