Month: June 2022

1. Which management activity is the most effective way to mitigate software vulnerabilities and is required by some security compliance regulations? Asset management Configuration management Enterprise patch management Mobile device management Vulnerability management 2. Which device management activity addresses the inventory and control of hardware and software configurations? …

1. Which risk response accepts the risk and its consequences? Risk avoidance Risk reduction Risk retention Risk sharing 2. Which risk response outsources some of the risk to other parties, such as Security as a Service? Risk avoidance Risk reduction Risk retention Risk sharing 3. Which risk response …

1. Which CVSS metric captures the level of access that is required for a successful exploit of the vulnerability? Attack complexity Attack vector Privileges required Scope User interaction 2. Which CVSS metric expresses the number of components, software, hardware, or networks, that are beyond the attacker’s control and …

1. What refers to the amount of data passing from a given source to a given destination in a given period of time? Asset value Critical asset address space Ports used Session duration Total throughput 2. What is the term for the time between the establishment of a …

1. What allows Linux system administrators to configure network access rules that are part of the Linux kernel Netfilter modules? Policy-based strategy nftables iptables Windows Firewall Windows Defender Firewall 2. Which of the following uses a profile-based approach to configuring firewall functionality? iptables Windows firewall Policy-based strategy TCP …

1. True or False? Endpoints are hosts on the network that can access or be accessed by other hosts on the network. Endpoints are hosts or devices on the network that can access or be accessed by other hosts on the network. True False 2. Which type of …

1. True or False? In asymmetric encryption, encryption and decryption use the same key. True False 2. What is an example of a symmetric encryption algorithm? Internet Key Exchange (IKE) Secure Socket Layer (SSL) Secure Shell (SSH) Advanced Encryption Standard (AES) 3. Which algorithm provides asymmetric encryption? Data …

1. What is the free service that is offered by the U.S. Department of Homeland Security? AIS CVE FireEye Helix Talos 2. What is a world leading threat intelligence team with a goal to help protect enterprise users, data, and infrastructure from active adversaries? AIS CVE FireEye Helix …

1. Which access control model is based on attributes of the object (resource) to be accessed, the subject (user) accessing the resource, and environmental factors regarding how the object is to be accessed, such as time of day? non-discretionary access control discretionary access control mandatory access control attribute-based …

1. What enables a threat actor to impersonate the default gateway and receive all traffic that is sent to hosts that are not on the local LAN segment? DNS tunneling cross-site scripting ARP cache poisoning iFrame attacks 2. What should a cybersecurity analyst look for to detect DNS …