1. Which attack exploits the three-way handshake? TCP reset attack UDP flood attack TCP SYN Flood attack DoS attack TCP session hijacking 2. Two hosts have established a TCP connection and are exchanging data. A threat actor sends a TCP segment with the RST bit set to both …

1. Which attack is being used when threat actors position themselves between a source and destination to transparently monitor, capture, and control the communication? Address Spoofing Attack Amplification and Reflection Attacks ICMP Attack MiTM Attack Session Hijacking 2. Which attack is being used when threat actors gain access …

1. What type of attack is tailgating? Reconnaissance Access DoS Social Engineering 2. What type of attack is a password attack? Reconnaissance Access DoS Social Engineering 3. What type of attack is port scanning? Reconnaissance Access DoS Social Engineering 4. What type of attack is man-in-the-middle? Reconnaissance Access …

1. Which malware executes arbitrary code and installs copies of itself in the memory of the infected computer? The main purpose of this malware is to automatically replicate from system to system across the network. Adware Rootkit Spyware Virus Worm 2. Which malware is non-self-replicating type of malware? …

1. Which penetration testing tool uses algorithm schemes to encode the data, which then prevents access to the data? Packet Sniffers Encryption Tools Vulnerability Exploitation Tools Forensic Tools Debuggers 2. Which penetration testing tool is used by black hats to reverse engineer binary files when writing exploits? They …

1. What term is used for a sign that a threat actor maybe be preparing to attack an asset? CSIRT precursor indicator event incident incident handling 2. What term is used for the group of people who provide incident response services to an organization? precursor indicator event incident …

1. The definition of computer security incidents and related terms element is in which part of the incident response plan? policy plan procedure 2. The strategy and goals element is in which part of the incident response plan? plan procedure policy 3. The organizational structure and definition of …

1. What part of the Diamond Model represents the threat actor? adversary infrastructure direction capability result victim 2. What part of the Diamond model represents the network path that is used for an exploit? adversary infrastructure direction capability result victim 3. What part of the Diamond Model represents …

1. In which step does the threat actor exploit the vulnerability and gain control of the target? reconnaissance action on objectives installation delivery exploitation 2. In which step is the weapon transmitted to the target through the use of a website, removable USB media, an email attachment, or …

1. Which type of evidence was indisputably in the possession of the accused? indirect evidence direct evidence corroborating evidence best evidence 2. Which type of evidence supports an assertation that is developed from best evidence? direct evidence indirect evidence corroborating evidence best evidence 3. Which type of evidence …