Quiz 13 Flashcards
What process does a penetration tester rely on to access an ever-higher level of resources?
continuous exploitation
persistence
pivot
spinning
persistence
Which item below is the standard security checklist against which systems are evaluated for a security posture?
baseline
control
profile
threat
baseline
Which is the term for a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, yet they are imitations of real data files?
honeypot
honeynet
honeycomb
port scanner
honeypot
Vulnerability scanning should be conducted on existing systems and particularly as new technology equipment is deployed.
True
False
True
In white box and gray box testing, the first task of the tester is to perform preliminary information gathering on their own from outside the organization, sometimes called open source intelligence (OSINT).
True
False
False
The second step in a vulnerability assessment is to determine the assets that need to be protected.
True
False
False
Netstat displays all current TCP/IP network configuration values and refreshes Dynamic Host Configuration Protocol (DHCP) and DNS settings.
True
False
False
What type of penetration testing technique is used if the tester has no prior knowledge of the network infrastructure that is being tested?
black box
gray box
white box
sealed box
black box
Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.
active
intrusive
passive
non-intrusive
non-intrusive
Which tester has an in-depth knowledge of the network and systems being tested, including network diagrams, IP addresses, and even the source code of custom applications?
white box
replay
system
black box
white box
What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?
active
invasive
passive
evasive
passive
What process addresses how long data must be kept and how it is to be secured?
legal and compliance
data methodology
legal retention
data retention
data retention
The goal of what type of threat evaluation is to better understand who the attackers are, why they attack, and what types of attacks might occur?
threat mitigation
threat profiling
threat modeling
risk modeling
threat modeling
Which data erasing method will permanently destroy a magnetic-based hard disk by reducing or eliminating the magnetic field?
wiping
degaussing
purging
data sanitation
degaussing
What term is defined as the state or condition of being free from public attention to the degree that you determine?
privacy
secure
contentment
freedom
privacy
An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?
protocol analyzer
system analyzer
application analyzer
threat profiler
protocol analyzer
Nslookup displays detailed information about how a device is communicating with other network devices.
True
False
False
Which scan examines the current security, using a passive method?
threat scan
vulnerability scan
system scan
application scan
vulnerability scan
Realistically, risks can never be entirely eliminated.
True
False
True
Which of the following groups categorize the risks associated with the use of private data? (Choose all that apply.)
Private and consumer data.
Individual inconveniences and identity theft.
Associations with groups.
Statistical inferences.
Individual inconveniences and identity theft.
Associations with groups.
Statistical inferences.
What security goal do the following common controls address: hashing, digital signatures, certificates, nonrepudiation tools?
confidentiality
safety
integrity
availability
integrity
What is another term used for a security weakness?
vulnerability
risk
opportunity
threat
vulnerability
A port in what state below implies that an application or service assigned to that port is listening for any instructions?
empty port
interruptible system
closed port
open port
open port
A risk management assessment is a systematic and methodical evaluation of the security posture of the enterprise.
True
False
False
Which item below is the standard security checklist against which systems are evaluated for a security posture?
baseline
control
profile
threat
baseline
What is the name of the process that basically takes a snapshot of the current security of an organization?
threat assessment
threat analysis
risk assessment
vulnerability appraisal
vulnerability appraisal
An administrator running a port scan wants to ensure that no processes are listening on port 23. What state should the port be in?
secure port
closed port
open port
hardened port
closed port
What security goal do the following common controls address: Redundancy, fault tolerance, and patching?
integrity
availability
confidentiality
safety
availability
What is the end result of a penetration test?
penetration test profile
penetration test view
penetration test system
penetration test report
penetration test report
What type of scanner sends “probes” to network devices and examines the responses received back to evaluate whether a specific device needs remediation?
non-intrusive
passive
active
intrusive
active
Which of the following is used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools?
assessment image
replication image
exploitation framework
penetration framework
exploitation framework
TCP/IP uses a numeric value as an identifier to the applications and services on these systems.
True
False
True
Which of the following are the goals of a vulnerability scan? (Choose all that apply.)
identify a lack of security controls
identify vulnerabilities
identify common misconfigurations
identify threat actors
identify a lack of security controls
identify vulnerabilities
identify common misconfigurations
If a penetration tester has gained access to a network and then tries to move around inside the network to other resources, what procedure is the tester performing?
persistence
secondary exploitation
pivot
spinning
pivot
What is the term for a network set up with intentional vulnerabilities?
honeycomb
honeypot
honey hole
honeynet
honeynet
If a user uses the operating system’s “delete” command to erase data, what type of data removal procedure was used?
degaussing
data sanitation
wiping
purging
purging
Each packet/datagram contains a source port and destination port.
True
False
True
During a vulnerability assessment, what type of software can be used to search a system for port vulnerabilities?
application profiler
port scanner
vulnerability profiler
threat scanner
port scanner
Determining vulnerabilities often depends on the background and experience of the assessor.
True
False
True
What process does a penetration tester rely on to access an ever-higher level of resources?
continuous exploitation
persistence
pivot
spinning
persistence
Which security procedure is being demonstrated if an administrator is using Wireshark to watch for specific inbound and outbound traffic?
virus control
firewall monitoring
application control
application search
firewall monitoring
Which of the following is a valid data sensitivity labeling and handling category? (Choose all that apply.)
proprietary
confidential
personal health information
high-risk
proprietary
confidential
What security goal do the following common controls address: Redundancy, fault tolerance, and patching.?
confidentiality
integrity
availability
safety
availability
