Technical Cybersecurity

Question 1

The OSI model has 6 layers T/F?

Answer 1

False It has 7

Application layer
Presentation layer
Session layer
Transport layer
Network layer
Datalink layer
Physical layer

Question 2

Which protocol is used for managing network devices?

SSH
SNMP
HTTPS

Answer 2

SNMP (simple network management protocol) collecting and organising information about managed devices on IP networks and for modifying information to change device behaviour

Question 3

What protocol is used for managing network traffic?

ICMP
TCP
UDP

Answer 3

ICMP internet control message protocol is a network layer protocol used by network devices to diagnose network communication issues. ICMP is mainly used to determine whether or not data is reaching its intended destination.

Question 4

What is Data Loss Prevention? DLP

Preventing data exfiltration
Preventing data encryption
Preventing data backups

Answer 4

Preventing data exfiltration - which sends out data through a techniques, dlp combats this.

Question 5

What is data exfiltration?
Encrypting data
Stealing data
Backing up data

Answer 5

Stealing data - techniques include
Phishing
USB keys
Uploads to cloud
Downloads to insecure devices
Credentials stealing

Question 6

Which protocol is used for managing network connections?
ICMP
TCP
UDP

Answer 6

TCP keeps the connection going whereas ICMP reports on availability but not connection themselves and UDP does not care about conversation.

Question 7

What is the difference between symmetric-key and asymmetric-key cryptography?

1. Symmetric key uses the same key for encryption and decryption, while asymmetric uses different keys
2. Asymmetric is faster than symmetric
3. Symmetric is more secure than asymmetric

Answer 7

Symmetric key uses the same key for encryption and decryption, while asymmetric uses different keys

Question 8

A zero day vulnerability is a vulnerability known to the public and has a patch. T/F

Answer 8

False - zero days have been known for zero days and therefore are unknown and have no patch

Question 9

The data link layer is responsible for providing end to end connectivity between devices on a network T/F

Answer 9

False - the data link layer is responsible for node to node delivery of data not a physical end to end connection

Question 10

What is the relationship between the Mitre attack framework and the NiST cyber security framework, CSF?

1. Mitre attack provides the technical data for the CSF
2. The two frameworks are completely separate and unrelated
3. The CSF provides additional information for the tactics and techniques in the mitre attack framework
4. The CSF provides the overarching structure of the mitre attack framework

Answer 10

The CSF provides additional information for the tactics and techniques in the mitre attack framework.

Question 11

The OSI model is a conceptual model that characterises and standardises the communication function of a telecommunication or computing system T/F

Answer 11

True

Question 12

The presentation layer is responsible for routing data between network devices T/F

Answer 12

False - presentation layer responds to service requests from the application layer and issues service requests to the session layer through a unique presentation service access point PSAP.

Question 13

What is a key in cryptography?
1. A type of steganography technique
2. A type of encryption algorithm
3. A piece of information used to encrypt or decrypt a message

Answer 13

A piece of information used to encrypt or decrypt a message

Question 14

What is the difference between steganography and cryptography?
1. Steganography makes the message unreadable, cryptography hides the existence of the message.
2. Steganography provides authentication and cryptography provides confidentiality
3. Steganography hides the existence of the message, cryptography makes the message unreadable.
4. Steganography provides confidentiality and cryptography provides authentication

Answer 14

Steganography hides the existence of the message, cryptography makes the message unreadable.

Question 15

The transport layer is to ensure end to end delivery true or false

Answer 15

False - the transport layer takes data from the session layer and moves it to the network layer

Question 16

The network layer is responsible for managing the logical addressing of devices on the network, as well as determining the most efficient path for data to travel between devices. True or false

Answer 16

True

Question 17

The application layer is the highest layer in the OSI model true or false

Answer 17

True

Question 18

The OSI model is a protocol suite that can be used to transmit data over a network? True or false

Answer 18

False - it is a hypothetical model not used to transmit data

Question 19

What is the significance of the attack matrix of the mitre attack framework?
1. It provides a roadmap of the implementation of security controls
2. It provides a comprehensive view of the tactics and techniques used by threat actors
3. It summarises the results of risk assessments
4. It lists all the vulnerabilities that need to be addressed

Answer 19

2. It provides a comprehensive view of the tactics and techniques used by threat actors

Question 20

What is a common method used by threat actors to establish a C2 channel with an infected machine?

Answer 20

Using a beaconing technique to initiate communication with the C2 server