Deck 13: Vulnerability Assessment and Data Security

Question 1

Each packet/datagram contains a source port and destination port.

Answer 1

True

Question 2

What is the name of the process that basically takes a snapshot of the current security of an organization?

A)threat analysis
B)vulnerability appraisal
C)risk assessment
D)threat assessment

Answer 2

B

Question 3

A port in what state below implies that an application or service assigned to that port is listening for any instructions?

A)open port
B)empty port
C)closed port
D)interruptible system

Answer 3

A

Question 4

Realistically,risks can never be entirely eliminated.

Question 5

What is another term used for a security weakness?

A)threat
B)vulnerability
C)risk
D)opportunity

Question 6

Vulnerability scanning should be conducted on existing systems and particularly as new technology equipment is deployed.

Question 7

An administrator running a port scan wants to ensure that no processes are listening on port 23.What state should the port be in?

A)open port
B)secure port
C)hardened port
D)closed port

Question 8

The second step in a vulnerability assessment is to determine the assets that need to be protected.

Question 9

An administrator needs to view packets and decode and analyze their contents.What type of application should the administrator use?

A)application analyzer
B)protocol analyzer
C)threat profiler
D)system analyzer

Question 10

A risk management assessment is a systematic and methodical evaluation of the security posture of the enterprise.

Question 11

During a vulnerability assessment,what type of software can be used to search a system for port vulnerabilities?

A)threat scanner
B)vulnerability profiler
C)port scanner
D)application profiler

Question 12

Which is the term for a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic,yet they are imitations of real data files?

A)port scanner
B)honeynet
C)honeypot
D)honeycomb

Question 13

TCP/IP uses a numeric value as an identifier to the applications and services on these systems.

Question 14

What is the term for a network set up with intentional vulnerabilities?

A)honeynet
B)honeypot
C)honeycomb
D)honey hole

Question 15

Which item below is the standard security checklist against which systems are evaluated for a security posture?

A)profile
B)threat
C)control
D)baseline

Question 16

Determining vulnerabilities often depends on the background and experience of the assessor.

Question 17

The goal of what type of threat evaluation is to better understand who the attackers are,why they attack,and what types of attacks might occur?

A)threat mitigation
B)threat profiling
C)risk modeling
D)threat modeling

Question 18

Netstat displays all current TCP/IP network configuration values and refreshes Dynamic Host Configuration Protocol (DHCP)and DNS settings.

Question 19

Nslookup displays detailed information about how a device is communicating with other network devices.

Question 20

In white box and gray box testing,the first task of the tester is to perform preliminary information gathering on their own from outside the organization,sometimes called open source intelligence (OSINT).

Question 21

What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?

A)active
B)passive
C)invasive
D)evasive

Question 22

If a user uses the operating system's "delete" command to erase data,what type of data removal procedure was used?

A)wiping
B)purging
C)degaussing
D)data sanitation

Question 23

Which of the following is used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools?

A)replication image
B)assessment image
C)penetration framework
D)exploitation framework

Question 24

Which scan examines the current security,using a passive method?

A)application scan
B)system scan
C)threat scan
D)vulnerability scan

Question 25

Which security procedure is being demonstrated if an administrator is using Wireshark to watch for specific inbound and outbound traffic?

A)application search
B)application control
C)firewall monitoring
D)virus control

Question 26

Which of the following is the goal of a vulnerability scan? (Choose all that apply. )

A)identify vulnerabilities
B)identify common misconfigurations
C)identify threat actors
D)identify a lack of security controls

Question 27

What type of scanner sends "probes" to network devices and examine the responses received back to evaluate whether a specific device needs remediation?

A)active
B)non-intrusive
C)passive
D)intrusive

Question 28

What term is defined as the state or condition of being free from public attention to the degree that you determine?

A)freedom
B)secure
C)privacy
D)contentment

Question 29

What security goal do the following common controls address: hashing,digital signatures,certificates,nonrepudiation tools?

A)confidentiality
B)integrity
C)availability
D)safety

Question 30

If a penetration tester has gained access to a network and then tries to move around inside the network to other resources,what procedure is the tester performing?

A)pivot
B)spinning
C)persistence
D)secondary exploitation

Question 31

What type of penetration testing technique is used if the tester has no prior knowledge of the network infrastructure that is being tested?

A)white box
B)gray box
C)black box
D)sealed box

Question 32

Which of the following is a valid data sensitivity labeling and handling category? (Choose all that apply. )

A)high-risk
B)confidential
C)personal health information
D)proprietary

Question 33

Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.

A)active
B)non-intrusive
C)passive
D)intrusive

Question 34

Which of the following groups categorize the risks associated with the use of private data? (Choose all that apply. )

A)Statistical inferences.
B)Associations with groups.
C)Private and consumer data
D)Individual inconveniences and identity theft.

Question 35

Which tester has an in-depth knowledge of the network and systems being tested,including network diagrams,IP addresses,and even the source code of custom applications?

A)white box
B)black box
C)replay
D)system

Question 36

What is the end result of a penetration test?

A)penetration test profile
B)penetration test report
C)penetration test system
D)penetration test view

Question 37

What security goal do the following common controls address: Redundancy,fault tolerance,and patching.?

A)confidentiality
B)integrity
C)availability
D)safety

Question 38

Which data erasing method will permanently destroy a magnetic-based hard disk by reducing or eliminating the magnetic field?

A)wiping
B)purging
C)degaussing
D)data sanitation

Question 39

What process does a penetration tester rely on to access an ever higher level of resources?

A)pivot
B)spinning
C)persistence
D)continuous exploitation

Question 40

What process addresses how long data must be kept and how it is to be secured?

A)legal retention
B)data retention
C)legal and compliance
D)data methodology

Question 41

Explain the concepts of personal data theft and identity theft.

Question 42

List and describe the elements that make up a security posture.

Question 43

List and describe two common uses for a protocol analyzer.

Question 44

List and describe the three categories that TCP/IP divides port numbers into.

Question 45

List two types of hardening techniques.

Question 46

List at least four things that a vulnerability scanner can do.

Question 47

Describe a penetration testing report.

Question 48

Describe the purpose of a honeypot.

Question 49

When a security hardware device fails or a program aborts,which state should it go into?

Question 50

Discuss one type of asset that an organization might have.