Test Out - 1.0 Security Concepts and 2.0 Threats, Vulnerabilities and Mitigations

Question 1

ASA stands for

Answer 1

Adaptive Security Appliance

Question 2

Operation controls are controls for the

Answer 2

human element

Question 3

Compensating controls are a partial control solution

Answer 3

that is implemented when a control cannot fully meet a requirement

Question 4

Detective controls monitor network activity and inform the security team of a

Answer 4

potential security event.

Question 5

Corrective controls attempt to fix

Answer 5

any controls that aren’t working properly.

Question 6

Deterrent controls discourage malicious actors

Answer 6

from attempting to breach a network.

Question 7

Shadow IT is devices added to the network by

Answer 7

internal employees

Question 8

Steps in General attack strategy are

Answer 8

Reconnaissance
breaching
Escalating privileges
Staging
Exploiting

Question 9

Part of a social engineering attack

Answer 9

Research
Development
Exploitation

Question 10

Difference between Disinformation and Misinformation

Answer 10

Disinformation they want to decieve
Misinformation they do not want to decieve but it is incorrect information.

Question 11

A pharming attack redirects users from a legitimate website

Answer 11

to a malicious one.

Question 12

Vishing is what

Answer 12

Voice phishing

Question 14

RSA, Diffie-Hellman, ECC, DSA and ElGamal are used in which type of encryption

Answer 14

asymmetric

Question 15

Blowfish and DES are used in which type of encryption

Answer 15

symmetric

Question 16

Encryption key strength of AES, Twofish, IDEA, DES

Answer 16

DES - 56 bit
AES 128, 192, 256
TwoFish upto 256
IDEA 128

Question 17

How does the following cipher mode operate CTR (counter mode)

Answer 17

uses a nonce (a unique, random value) combined with a counter that is incremented for each block of plaintext.

Question 18

How does the following cipher mode operate Electronic Code Book (ECB)

Answer 18

Encrypts each block independently (no nonce or counter).

Question 19

How does the following cipher mode operate Cipher Feebback Mode (CBC)

Answer 19

Uses previous ciphertext to generate the next encryption block (no counter).

Question 20

How does the following cipher mode operate Cipher Block Chaining (CBC)

Answer 20

Uses the previous ciphertext block as an input to the next block encryption (no counter).