Quiz 3

Question 1

Which of the following is NOT considered a weak configuration?

Answer 1

Lack of vendor support

Question 2

Network traffic logs show a large spike in traffic. When you review the logs, you see lots of TCP connection attempts from an unknown external server. The destination port of the TCP connections seems to increment by one with each new connection attempt. This is most likely an example of what kind of activity from which tool?

Answer 2

Active reconnaissance w/ Nmap

Question 3

Which of the following Class networks is correctly matched with its equivalent CIDR notation value?

Answer 3

Class A = CIDR / 8

Question 4

Which of the following is NOT a function of a SIEM system?

Answer 4

Spam filtering

Question 5

Why are false negatives more concerning than false positives in vulnerability scan results?

Answer 5

A false negative is a missed vulnerability, whereas a false positive is reported vulnerability that may be recognized not to be an actual vulnerability later

Question 6

Which of the following is a fully configured enviornment similar to the normal operating environment that can be operational immediately or within a few hours depending on its configuration & the needs of the organization?

Answer 6

Hot site

Question 7

You want to protect your organization’s network from a certain malware that you know always reaches out to attacker.tld for command & control traffic. You push an updated hosts file to all devices in your organization so that “attacker.tld” will now only resolve to a certain IP address that you designate. This is an example of what technique?

Answer 7

DNS Sinkhole

Question 8

Correctly implementing TLS encryption for HTTPS using only modern trusted cipher suites is an example of which of the following?

Answer 8

Protecting data in transit

Question 9

What should a legitimate penetration tester always have?

Answer 9

Written permission memo including scope & rules of engagement

Question 10

Purple team

Answer 10

Establish defenses, test defenses, repeat, & collaborate

Question 11

Red team

Answer 11

Specialized, highly skilled, & mimic real world threat actors by focusing on offense

Question 12

White team

Answer 12

Impartial judges if competitive scoring is involved or simply outside coordinators

Question 13

Blue team

Answer 13

Establish defenses, then monitor & handle incident response