Test 17

Question 1

Which of the following statements describe the features of dynamic code analysis? (Select 3 answers)

Answer 1

Typically used later in the software development lifecycle
Analyzes runtime properties like memory usage, performance, and error handling to identify issues such as memory leaks, performance bottlenecks, and runtime errors
Involves executing the code and analyzing its behavior at runtime

Question 2

Which of the terms listed below refers to tracking and managing software application components, such as third-party libraries and other dependencies?

Answer 2

Package monitoring

Question 3

Which of the following terms refers to threat intelligence gathered from publicly available sources?

Answer 3

OSINT

Question 4

Which of the terms listed below refers to a US government initiative for real-time sharing of cyber threat indicators?

Answer 4

AIS

Question 5

What is STIX?

Answer 5

Common language for describing cyber threat information

Question 6

A dedicated transport mechanism for cyber threat information is called:

Answer 6

TAXII

Question 7

Which of the following provides insights into the methods and tools used by cybercriminals to carry out attacks?

Answer 7

TTP

Question 8

Which of the following statements does not apply to dark web?

Answer 8

You left the correct answer unselected.
Forms a large part of the deep web

Question 9

Penetration testing: (Select all that apply)

Answer 9

Bypasses security controls ( Missed)
Actively tests security controls ( Missed)
Exploits vulnerabilities

Question 10

A responsible disclosure program is a formal process established by an organization to encourage security researchers and ethical hackers to report vulnerabilities they discover in the organization’s systems or software. A bug bounty program is a specific type of responsible disclosure program that offers financial rewards to security researchers for reporting valid vulnerabilities.

Answer 10

True

Question 11

An antivirus software identifying non-malicious file as a virus due to faulty virus signature file is an example of:

Answer 11

False positive error

Question 12

Which of the answers listed below refers to a situation where no alarm is raised when an attack has taken place?

Answer 12

False negative

Question 13

A measure of the likelihood that a security system will incorrectly reject an access attempt by an authorized user is referred to as:

Answer 13

FRR

Question 14

Which of the following terms refers to a framework and knowledge base that provides understanding of TTPs used during cyberattacks?

Answer 14

ATT&CK

Question 15

Which of the answers listed below refers to an industry standard for assessing and scoring the severity of computer system security vulnerabilities?

Answer 15

CVSS

Question 16

Which of the following refers to a system that identifies, defines, and catalogs publicly known cybersecurity vulnerabilities?

Answer 16

CVE

Question 17

What is Exposure Factor (EF) in vulnerability analysis?

Answer 17

The degree of loss that a realized threat would have on a specific asset

Question 18

Which of the statements listed below does not refer to a vulnerability response and remediation technique?

Answer 18

Applying updates or fixes provided by software vendors to address the vulnerability (patching)
Ensuring financial recovery from the costs associated with a successful cyberattack (insurance)
Dividing a network into smaller, isolated zones to limit the potential impact of a vulnerability (segmentation)
Mitigating the risk associated with a vulnerability that cannot be immediately patched by implementing alternative security measures (compensating controls)
Delaying or forgoing a patch for a specific system, e.g., when applying a patch may not be feasible due to compatibility issues or potential disruptions to critical systems (exceptions and exemptions)

Question 19

The practice of isolating potentially malicious or suspicious entities to prevent them from causing harm to the rest of the network or system is known as:

Answer 19

Quarantine

Question 20

Which of the following answers refer to SCAP? (Select 3 answers)

Answer 20

A collection of standards developed by NIST ( Missed)
Provides a common language for communicating security information ( Missed)
Allows different security tools to share data and work together more effectively

Question 21

Which of the answers listed below refer to SIEM? (Select 3 answers)

Answer 21

Designed to provide a centralized user interface for accessing collected data ( Missed)

Enables real-time threat detection, incident response, and compliance monitoring ( Missed)
A type of security system designed to collect logs and events from various sources

Question 22

Which of the following acronyms refers to software or hardware-based security solutions designed to detect and prevent unauthorized use and transmission of confidential information?

Answer 22

DLP

Question 23

Simple Network Management Protocol (SNMP) is a UDP-based, application layer protocol used in network management systems to monitor network-attached devices. SNMP is typically integrated into most modern network infrastructure devices such as routers, bridges, switches, servers, printers, copiers, fax machines, and other network-attached devices. An SNMP-managed network comprises three essential components: a managed device, a network-management software module that resides on a managed device (Agent), and a Network Management Station (NMS), which runs applications responsible for monitoring and controlling managed devices, as well as collecting SNMP information from Agents. The manager receives notifications (Traps and InformRequests) on UDP port 162, while the SNMP Agent receives requests on UDP port 161.

Answer 23

True

Question 24

An SNMP-compliant device includes a virtual database containing information about configuration and state of the device that can be queried by an SNMP management station. This type of data repository is referred to as:

Answer 24

MIB

Question 25

Of the three existing versions of the Simple Network Management Protocol (SNMP), versions 1 and 2 (SNMPv1 and SNMPv2) offer authentication based on community strings sent in an unencrypted form (a.k.a. cleartext). SNMPv3 provides packet encryption, authentication, and hashing mechanisms that allow for checking whether data has changed in transit.

Answer 25

True