Chapter 9: Network Risk Management Flashcards
A person posing as an employee strikes up a conversation with a legitimate employee as they walk into a secured area, in an attempt to gain access. What kind of social engineering is this?
tailgating
baiting
phishing
quid pro quo
tailgating
A variant of BYOD, what does CYOD allow employees or students to do?
They can supply their choice of cloud application or storage.
They can choose a device from a limited number of options.
They can use whatever devices they wish to bring.
They can supply their own software on a computer or mobile device.
They can choose a device from a limited number of options.
An RFID label on a box is an example of what type of physical security detection method?
video surveillance via CCTV
asset tracking tagging
tamper detection
motion detection technology
asset tracking tagging
An attack that relies on redirected and captured secure transmissions as they occur is known as what type of attack?
man-in-the-middle attack
session hijacking attack
buffer overflow
banner-grabbing attack
man-in-the-middle attack
How often should you require users to change their passwords?
every 90 days
every 60 days
every 30 days
every 120 days
every 60 days
If multiple honeypots are connected to form a larger network, what term is used to describe the network?
honeycomb
combolure
lurenet
honeynet
honeynet
In a red team-blue team exercise, what is the purpose of the blue team?
You Answered
The blue team is tasked with attacking the network.
The blue team consists of regulators that ensure no illegal activity is undertaken.
The blue team must observe the actions of the red team.
The blue team is charged with the defense of the network.
The blue team is charged with the defense of the network.
In the typical social engineering attack cycle, what occurs at Phase 3?
The attacker researches the desired target for clues as to vulnerabilities.
The attacker exploits an action undertaken by the victim in order to gain access.
The attacker executes an exit strategy in such a way that does not leave evidence or raise suspicion.
The attacker builds trust with the target and attempts to gain more information.
The attacker exploits an action undertaken by the victim in order to gain access.
The concept of giving employees and contractors only enough access and privileges to do their jobs is known by what term?
minimal access/minimal exposure
limited liability access
least-risk privilege profile
principle of least privilege
principle of least privilege
Utilized by China’s so-called “Great Firewall”, what type of attack can prevent user access to web pages, or even redirect them to illegitimate web pages?
DNS poisoning
denial-of-service attack
MAC address spoofing
rogue DHCP server
denial-of-service attack
What document addresses the specific concerns related to special access given to administrators and certain support staff?
password policy
privileged user agreement
acceptable use policy
non-disclosure agreement
privileged user agreement
What is the Nmap utility used for?
Correct!
It is a port scanning utility that can identify open ports on a host.
It is a software firewall that can be used to secure a vulnerable host.
It is used to identify unsecured sensitive data on the network, such as credit cards.
It is an automated vulnerability and penetration testing framework.
It is a port scanning utility that can identify open ports on a host.
What statement regarding denial-of-service (DoS) attacks is accurate?
A denial-of-service attack prevents legitimate users from accessing normal network resources.
A denial-of-service attack is no longer a major concern due to the increased throughput available on most networks.
A denial-of-service attack occurs when a MAC address is impersonated on the network.
A denial-of-service attack is generally a result of a disgruntled employee.
A denial-of-service attack prevents legitimate users from accessing normal network resources.
What statement regarding the different versions of the SHA hashing algorithm is accurate?
SHA-0 is the most secure version of SHA.
SHA-1 supports a 128-bit hash function.
SHA-2 only supports a 256-bit hash.
SHA-2 and SHA-3 both support the same hash lengths.
SHA-2 and SHA-3 both support the same has lengths.
What type of door access control is a physical or electronic lock that requires a code in order to open the door?
cipher lock
key fob lock
biometric lock
encrypted lock
cipher lock
