1. Which risk response accepts the risk and its consequences? Risk avoidance Risk reduction Risk retention Risk sharing 2. Which risk response outsources some of the risk to other parties, such as Security as a Service? Risk avoidance Risk reduction Risk retention Risk sharing 3. Which risk response …

1. Which CVSS metric captures the level of access that is required for a successful exploit of the vulnerability? Attack complexity Attack vector Privileges required Scope User interaction 2. Which CVSS metric expresses the number of components, software, hardware, or networks, that are beyond the attacker’s control and …

1. What refers to the amount of data passing from a given source to a given destination in a given period of time? Asset value Critical asset address space Ports used Session duration Total throughput 2. What is the term for the time between the establishment of a …

1. What allows Linux system administrators to configure network access rules that are part of the Linux kernel Netfilter modules? Policy-based strategy nftables iptables Windows Firewall Windows Defender Firewall 2. Which of the following uses a profile-based approach to configuring firewall functionality? iptables Windows firewall Policy-based strategy TCP …

1. True or False? Endpoints are hosts on the network that can access or be accessed by other hosts on the network. Endpoints are hosts or devices on the network that can access or be accessed by other hosts on the network. True False 2. Which type of …

1. True or False? In asymmetric encryption, encryption and decryption use the same key. True False 2. What is an example of a symmetric encryption algorithm? Internet Key Exchange (IKE) Secure Socket Layer (SSL) Secure Shell (SSH) Advanced Encryption Standard (AES) 3. Which algorithm provides asymmetric encryption? Data …

1. What is the free service that is offered by the U.S. Department of Homeland Security? AIS CVE FireEye Helix Talos 2. What is a world leading threat intelligence team with a goal to help protect enterprise users, data, and infrastructure from active adversaries? AIS CVE FireEye Helix …

1. Which access control model is based on attributes of the object (resource) to be accessed, the subject (user) accessing the resource, and environmental factors regarding how the object is to be accessed, such as time of day? non-discretionary access control discretionary access control mandatory access control attribute-based …

1. What enables a threat actor to impersonate the default gateway and receive all traffic that is sent to hosts that are not on the local LAN segment? DNS tunneling cross-site scripting ARP cache poisoning iFrame attacks 2. What should a cybersecurity analyst look for to detect DNS …

1. Which attack exploits the three-way handshake? TCP reset attack UDP flood attack TCP SYN Flood attack DoS attack TCP session hijacking 2. Two hosts have established a TCP connection and are exchanging data. A threat actor sends a TCP segment with the RST bit set to both …