RomanNum3ral
/
cai
mirror of https://github.com/aliasrobotics/cai.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cai/benchmarks/cybermetric/CyberMetric-500-v1.json

5006 lines
214 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"questions": [
{
"question": "Which of the following is a desirable property of a biometric system?",
"answers": {
"A": "Permanent",
"B": "Transferability",
"C": "Uniformity",
"D": "Forgiveness"
},
"solution": "A"
},
{
"question": "In TCP/IP networking, which protocol is used to hold network addresses and routing information in a packet?",
"answers": {
"A": "HTTP",
"B": "IP",
"C": "Routing Information Protocol (RIP)",
"D": "TCP"
},
"solution": "B"
},
{
"question": "In the context of unexpected negative outcomes in personal privacy policies, what responsibility lies with both the provider and the consumer regarding the retention time of private information?",
"answers": {
"A": "Both the provider and the consumer are responsible for setting the appropriate retention time",
"B": "Neither the provider nor the consumer has a responsibility for setting the appropriate retention time",
"C": "Only the consumer is responsible for setting an appropriate retention time",
"D": "Only the provider is responsible for ensuring the appropriate retention time"
},
"solution": "A"
},
{
"question": "What type of attack involves an attacker behaving as a store-and-forward or proxy mechanism between two communicating systems?",
"answers": {
"A": "Buffer overflow attack",
"B": "Man-in-the-Middle attack",
"C": "DDoS attack",
"D": "Sniffer attack"
},
"solution": "B"
},
{
"question": "What is the fundamental purpose of logging and monitoring in an organization's security measures?",
"answers": {
"A": "To store backups of critical data",
"B": "To track, record, and review activity to detect and respond to security incidents",
"C": "To manage and enforce user access controls",
"D": "To create a record of all employee activities"
},
"solution": "B"
},
{
"question": "What is the benefit of structured walk-throughs in disaster recovery testing?",
"answers": {
"A": "Observe live actions in a controlled environment",
"B": "Conduct a full shut-down and restoration at the primary site",
"C": "Test operational response to disaster scenarios",
"D": "Interrupt real operations at the primary site"
},
"solution": "C"
},
{
"question": "Which security process metric would most assist in determining an appropriate backup frequency for a database server?",
"answers": {
"A": "RTO",
"B": "MTBF",
"C": "RPO",
"D": "MTD"
},
"solution": "C"
},
{
"question": "What constitutional amendment outlines the burden placed on investigators to have a valid search warrant before conducting certain searches?",
"answers": {
"A": "Third Amendment",
"B": "First Amendment",
"C": "Second Amendment",
"D": "Fourth Amendment"
},
"solution": "D"
},
{
"question": "Which tool is frequently used to directly access websites without a browser and is often utilized for testing and identifying potential API vulnerabilities?",
"answers": {
"A": "SSH",
"B": "cURL",
"C": "FTP",
"D": "Telnet"
},
"solution": "B"
},
{
"question": "What is the distinguishing characteristic of symmetric-key cryptography?",
"answers": {
"A": "It tends to be CPU intensive",
"B": "It uses the same key for encryption and decryption",
"C": "It provides integrity protection to data",
"D": "It uses different but related keys for encryption and decryption"
},
"solution": "B"
},
{
"question": "What is the result of 5521211 modulo 1337?",
"answers": {
"A": "11111",
"B": "33",
"C": "602",
"D": "738"
},
"solution": "D"
},
{
"question": "Which of the following is an example of a strong password?",
"answers": {
"A": "Password123456",
"B": "ME_Fgh4_al445!A",
"C": "Qwerty!",
"D": "123456"
},
"solution": "B"
},
{
"question": "Which model consists of the Application Layer, Host-to-Host Layer, Internet Layer, and Network Access Layer?",
"answers": {
"A": "OSI model",
"B": "WAN model",
"C": "LAN model",
"D": "TCP/IP model"
},
"solution": "D"
},
{
"question": "What is the primary purpose of 'inference engine' in the context of expert systems?",
"answers": {
"A": "To infer new facts and solve problems using rules and facts in the knowledge base",
"B": "To encrypt messages passed across the Internet",
"C": "To enable recognition of an entity by a system",
"D": "To control access to resources in a system"
},
"solution": "A"
},
{
"question": "What is the primary objective of conducting code reviews for bespoke and custom software applications within the Payment Card Industry Data Security Standard guidelines?",
"answers": {
"A": "To expedite the deplxoyment of bespoke and custom software into production",
"B": "To exploit potential coding vulnerabilities in production software",
"C": "To ensure bespoke and custom software meets performance benchmarks under heavy load",
"D": "To ensure that bespoke and custom software cannot be exploited via coding vulnerabilities"
},
"solution": "D"
},
{
"question": "Which principle of cybersecurity focuses on ensuring that data is accurate and trustworthy?",
"answers": {
"A": "Resilience",
"B": "Availability",
"C": "Authenticity",
"D": "Integrity"
},
"solution": "D"
},
{
"question": "An IDS installed on the network perimeter sees a spike in traffic during off-duty hours and begins logging and alerting. Which type of IDS is in place?",
"answers": {
"A": "Packet filtering",
"B": "Anomaly based",
"C": "Signature based",
"D": "Stateful"
},
"solution": "B"
},
{
"question": "What is the main benefit of WebAssembly?",
"answers": {
"A": "Executes at native speed on client machines",
"B": "Runs both client-side in web browsers and server-side as part of web applications",
"C": "Enforces the same origin policy",
"D": "Supports a wide variety of I/O mechanisms"
},
"solution": "A"
},
{
"question": "Which term describes a program that is used to detect, prevent, and remove malware?",
"answers": {
"A": "Firewall",
"B": "Antivirus",
"C": "Proxy server",
"D": "Router"
},
"solution": "B"
},
{
"question": "Which of the following refers to a situation where an employee intentionally or unintentionally causes a data breach?",
"answers": {
"A": "Spyware",
"B": "Insider threat",
"C": "Phishing",
"D": "Denial of Service"
},
"solution": "B"
},
{
"question": "What does SSID stand for in the context of wireless networking security?",
"answers": {
"A": "Service Set Identifier",
"B": "System Service Identifier",
"C": "System Secure Identifier",
"D": "Secure Signal Identifier"
},
"solution": "A"
},
{
"question": "What is the purpose of release management?",
"answers": {
"A": "Coordinating other service management and support functions",
"B": "Facilitate the execution of vulnerability assessments within the internal network",
"C": "Developing formal procedures for managing the release of new patches",
"D": "Automating the distribution of tested and licensed software / hardware, optimizing IT infrastructure to meet business needs"
},
"solution": "D"
},
{
"question": "What is the formula to determine the number of connections in a full mesh network?",
"answers": {
"A": "n^2",
"B": "n(n - 1)/2",
"C": "n + 1",
"D": "n(n + 1)/2"
},
"solution": "B"
},
{
"question": "What does information assurance primarily focus on within the realm of information security?",
"answers": {
"A": "Ethics",
"B": "Measurement",
"C": "Quality",
"D": "Confidentiality"
},
"solution": "B"
},
{
"question": "What is the primary goal of a stream cipher in encryption?",
"answers": {
"A": "To encrypt one bit at a time as it is being transmitted",
"B": "To encrypt entire message blocks at once",
"C": "To encrypt data transmission over networks",
"D": "To encrypt data at rest"
},
"solution": "A"
},
{
"question": "What is the significance of regular software updates in cybersecurity?",
"answers": {
"A": "They make the system more vulnerable",
"B": "They decrease the risk of cyber attacks",
"C": "They reduce the need for antivirus software",
"D": "They speed up computer performance"
},
"solution": "B"
},
{
"question": "Who is responsible for implementing the planning, budgeting, and performance of the organization's information security components?",
"answers": {
"A": "Administrator",
"B": "CISO",
"C": "MGR",
"D": "CEO"
},
"solution": "B"
},
{
"question": "How many rounds are there in the DES cipher?",
"answers": {
"A": "12",
"B": "16",
"C": "24",
"D": "8"
},
"solution": "B"
},
{
"question": "Which of the following is not part of the C.I.A. Triad in information security?",
"answers": {
"A": "Confidentiality",
"B": "Security",
"C": "Integrity",
"D": "Availability"
},
"solution": "B"
},
{
"question": "What is the most pervasive means of protecting sensitive data both at rest and in transit in a cloud environment?",
"answers": {
"A": "Authentication and Identity Management",
"B": "Data Encryption and Key Management",
"C": "Tokenization",
"D": "Multitenancy"
},
"solution": "B"
},
{
"question": "What is the primary purpose of conducting a risk analysis in cybersecurity?",
"answers": {
"A": "To assess the risk level for the organization",
"B": "To formulate the most important IT security procedures for the organization",
"C": "To create a risk assessment statement",
"D": "To determine the level of exposure to identified threats and identify possible safeguards or controls"
},
"solution": "D"
},
{
"question": "What is the main security policy that governs bookkeeping applications in banking systems?",
"answers": {
"A": "Bell-LaPadula security policy",
"B": "Clark-Wilson security policy",
"C": "Chinese Wall security policy",
"D": "Biba integrity model"
},
"solution": "B"
},
{
"question": "What makes digital watermarking a limited form of steganography, only appropriate for protecting and proving ownership?",
"answers": {
"A": "It securely encrypts the file",
"B": "It compresses the file into a smaller size",
"C": "It introduces errors into the file",
"D": "It modifies the file without obstructing its use"
},
"solution": "D"
},
{
"question": "What is the recommended method for deriving a shared secret following elliptic curve key agreement?",
"answers": {
"A": "Dual elliptic curve deterministic random bit generator",
"B": "Diffie-Hellman key exchange",
"C": "Schulte's modified hash-based key derivation function",
"D": "Key derivation through extraction-then-expansion"
},
"solution": "D"
},
{
"question": "Which type of attack involves crafting URL strings to execute malicious commands to access back-end database data?",
"answers": {
"A": "Buffer Overflow",
"B": "SQL injection",
"C": "Cross-Site Scripting",
"D": "Input Manipulation"
},
"solution": "B"
},
{
"question": "Which statement is true regarding the Federal Sentencing Guidelines in relation to computer crime?",
"answers": {
"A": "Establishing guidelines for investigating computer crimes",
"B": "Creating regulations for the admissibility of evidence in court",
"C": "Regulating the export of encryption products",
"D": "Imposing liability on senior corporate officers for non-compliance with the law"
},
"solution": "D"
},
{
"question": "In the context of encrypting data for secure communication, which encryption algorithm is typically preferred for its speed and efficiency?",
"answers": {
"A": "RSA-2048",
"B": "AES-256",
"C": "Both of them",
"D": "None of them"
},
"solution": "B"
},
{
"question": "Which federal government agency has responsibility for ensuring the security of government computer systems that are not used to process sensitive and/or classified information?",
"answers": {
"A": "National Security Agency",
"B": "National Institute of Standards and Technology",
"C": "Federal Bureau of Investigation",
"D": "Secret Service"
},
"solution": "B"
},
{
"question": "Which of the following best describes an unexpected negative outcome in the context of personal privacy policies?",
"answers": {
"A": "An unwanted outcome that is planned by the provider or the consumer to achieve a specific advantage",
"B": "An unexpected outcome that leads to a loss for the provider, consumer, or both, such as loss of private information, money, time, or job",
"C": "An outcome resulting from a well-formed policy match, leading to mutual benefit",
"D": "An outcome that is anticipated by both the provider and the consumer, leading to mutual gain"
},
"solution": "B"
},
{
"question": "What is the purpose of using a debugger in malware analysis?",
"answers": {
"A": "To examine the behavior and functions of the malware",
"B": "To bypass security controls on the system",
"C": "To remove malware from an infected system",
"D": "To share malware samples with other analysts"
},
"solution": "A"
},
{
"question": "What is the purpose of the Low Orbit Ion Cannon in the context of cybersecurity?",
"answers": {
"A": "Launching attacks on spacecraft",
"B": "Denial of service attacks",
"C": "Buffer overflows",
"D": "SQL injection attacks"
},
"solution": "B"
},
{
"question": "Which wireless attack occurs when a hacker operates a false access point that automatically clones the identity of an access point based on a client device's request to connect?",
"answers": {
"A": "Rogue Access Points",
"B": "War driving",
"C": "RFID attack",
"D": "Evil Twin"
},
"solution": "D"
},
{
"question": "Which protocol binds logical (IP) addresses to physical addresses in a TCP/IP network?",
"answers": {
"A": "ARP",
"B": "ACK",
"C": "AES",
"D": "AIS"
},
"solution": "A"
},
{
"question": "What is the primary purpose of a firewall?",
"answers": {
"A": "To filter and block traffic between separate subnets",
"B": "To protect data after it passes out of or into the private network",
"C": "To prevent unauthorized disclosure of information by users",
"D": "To block unauthorized traffic within a subnet"
},
"solution": "A"
},
{
"question": "Which type of access control list (ACL) is typically used to specify the criteria for filtering packets by source and destination IP addresses, as well as the type of application used?",
"answers": {
"A": "Protocol ACL",
"B": "IP ACL",
"C": "Firewall ACL",
"D": "MAC address ACL"
},
"solution": "B"
},
{
"question": "How is the process of columnar transposition cryptanalysis by cribbing used to test the possible width N?",
"answers": {
"A": "By analyzing the length of the ciphertext",
"B": "By searching for a complete set of subcribs",
"C": "By sorting the positions of the plaintext",
"D": "By encrypting the plaintext multiple times"
},
"solution": "C"
},
{
"question": "What is the responsibility of an intrusion detection system (IDS)?",
"answers": {
"A": "Performing regular vulnerability scans",
"B": "Monitoring and analyzing network traffic",
"C": "Encrypting sensitive data",
"D": "Identifying and blocking unauthorized access"
},
"solution": "B"
},
{
"question": "What is the primary role of the Network Layer in the TCP/IP stack?",
"answers": {
"A": "Adding data flow between applications on different hosts",
"B": "Collaborating with the Physical Layer to place packets onto the transmission medium",
"C": "Sending the completed packet onto the transmission medium",
"D": "Handling packet addressing and routing through the network"
},
"solution": "D"
},
{
"question": "What is the purpose of implementing monitoring systems?",
"answers": {
"A": "Monitoring the configuration and configuration change of devices",
"B": "Ensuring availability and functionality of systems",
"C": "Recording access to information by means of system and security logging",
"D": "Protection from compromising radiation"
},
"solution": "B"
},
{
"question": "Which essential element of an audit report is not considered to be a basic concept of the audit?",
"answers": {
"A": "Recommendations of the auditor",
"B": "Results of the audit",
"C": "Scope of the audit",
"D": "Purpose of the audit"
},
"solution": "A"
},
{
"question": "What is the primary advantage of using UDP over TCP?",
"answers": {
"A": "Reliability",
"B": "Speed of data transfer",
"C": "Error recovery",
"D": "Data integrity"
},
"solution": "B"
},
{
"question": "What is the role of a VPN (Virtual Private Network) in cybersecurity?",
"answers": {
"A": "To boost network performance by bypassing firewalls and filters",
"B": "To establish secure and encrypted connections over a public network, such as the internet",
"C": "To provide access to confidential data without authentication",
"D": "To create a secluded network for non-sensitive data"
},
"solution": "B"
},
{
"question": "If you saw the following command line, what would you be capturing? tcpdump -i eth2 host 192.168.10.5",
"answers": {
"A": "Traffic just from 192.168.10.5",
"B": "Traffic to and from 192.168.10.5",
"C": "All traffic other than from 192.168.86.5",
"D": "Traffic just to 192.168.10.5"
},
"solution": "B"
},
{
"question": "What is vishing?",
"answers": {
"A": "A form of malware that spreads through voice calls",
"B": "A form of phishing attack using voice calls",
"C": "A social media influence campaign",
"D": "A type of attack targeting physical security"
},
"solution": "B"
},
{
"question": "What is the primary reason for capturing network packets?",
"answers": {
"A": "To encrypt network communication",
"B": "To identify network interfaces",
"C": "To resolve MAC addresses",
"D": "To acquire network traffic addressed to systems other than your own"
},
"solution": "D"
},
{
"question": "What common tool can be used for launching an ARP poisoning attack?",
"answers": {
"A": "Cain & Abel",
"B": "Nmap",
"C": "Scooter",
"D": "Tcpdump"
},
"solution": "A"
},
{
"question": "What does the RC4 stream cipher use to produce pseudo-random bits for encryption and decryption?",
"answers": {
"A": "A fixed key",
"B": "The least significant bit of the plaintext",
"C": "A public key",
"D": "A random permutation of integers"
},
"solution": "D"
},
{
"question": "What is the purpose of adding a frame check sequence (FCS) or checksum to a message before encryption?",
"answers": {
"A": "To provide random access memory for message processing",
"B": "To ensure authenticity and integrity of the message",
"C": "To decrypt the message for secure storage",
"D": "To ignore the message content before encrypting it"
},
"solution": "B"
},
{
"question": "Which stage of the risk assessment process involves identifying threats, vulnerabilities, likelihood, and impact?",
"answers": {
"A": "Conduct",
"B": "Maintenance",
"C": "Pre-assessment",
"D": "Characterisation"
},
"solution": "A"
},
{
"question": "What type of information can typically be found in public filings and reports of public companies through the Electronic Data Gathering, Analysis, and Retrieval (EDGAR) system?",
"answers": {
"A": "Organizational network configuration information",
"B": "Details about employee backgrounds and personal lives",
"C": "Legal agreements and contracts with clients",
"D": "Financial statements, business operations, executive compensation"
},
"solution": "D"
},
{
"question": "Which of the following is NOT a form of computer/network surveillance?",
"answers": {
"A": "Keyboard monitoring",
"B": "Use of Closed-Circuit Television (CCTV)",
"C": "Use of network sniffers",
"D": "Review of audit logs"
},
"solution": "B"
},
{
"question": "Which of the following is a characteristic of a worm?",
"answers": {
"A": "Requires user interaction to spread",
"B": "Self-replicates and spreads independently",
"C": "Aargets specific individuals or organizations",
"D": "A worm is an item that runs silently"
},
"solution": "B"
},
{
"question": "Which technique aims to identify changes in normal routines by examining patterns of a user's activity?",
"answers": {
"A": "Vulnerability Assessment",
"B": "Behavior-based IDS",
"C": "Data Mining",
"D": "User Profile Analysis"
},
"solution": "B"
},
{
"question": "In binary representation, what is the result of the bitwise XOR operation between 110101 and 101010",
"answers": {
"A": "011111",
"B": "100111",
"C": "0",
"D": "111111"
},
"solution": "A"
},
{
"question": "Which type of authorization focuses on very specific functions that individually define specific tasks?",
"answers": {
"A": "Fine Grain Authorization",
"B": "Coarse Grain Authorization",
"C": "Least Privileges",
"D": "Separation of Duties"
},
"solution": "A"
},
{
"question": "Which of the following is an example of an inappropriate activity in the context of cybersecurity?",
"answers": {
"A": "Using strong encryption to protect sensitive data",
"B": "Following company policies for secure data handling",
"C": "Downloading and distributing copyrighted material using company resources",
"D": "Storing sensitive company information securely"
},
"solution": "C"
},
{
"question": "What does the CIA triad stand for in the context of cybersecurity?",
"answers": {
"A": "Confidentiality, Identity, Availability",
"B": "Control, Inference, Authorization",
"C": "Confidentiality, Integrity, Availability",
"D": "Confidentiality, Integrity, Accessibility"
},
"solution": "C"
},
{
"question": "A key schedule is:",
"answers": {
"A": "A method of generating keys by the use of random numbers",
"B": "Using distributed computing resources to conduct a brute force attack on a symmetric algorithm",
"C": "A list of cryptographic keys to be used at specified dates and times",
"D": "A set of subkeys derived from a secret key"
},
"solution": "D"
},
{
"question": "Which type of forensic principle ensures that evidence is clear, easy to understand, and believable by a jury?",
"answers": {
"A": "Completeness",
"B": "Reliability",
"C": "Believability",
"D": "Admissibility"
},
"solution": "C"
},
{
"question": "Why is it important to contain and preserve evidence in incident response in cybersecurity?",
"answers": {
"A": "To notify management and legal authorities",
"B": "To eradicate the problem quickly",
"C": "To prevent evidence contamination and loss",
"D": "To apply the need-to-know security principle"
},
"solution": "C"
},
{
"question": "Which of the following is a common form of social engineering attack?",
"answers": {
"A": "Antivirus",
"B": "Phishing",
"C": "Firewall",
"D": "Encryption"
},
"solution": "B"
},
{
"question": "What is the term for the concept that requires an object to be cleared of all data remnants after it has been used?",
"answers": {
"A": "Object reuse",
"B": "Polymorphism",
"C": "Layering",
"D": "Multi use"
},
"solution": "A"
},
{
"question": "Which type of firewall analyzes the status of traffic?",
"answers": {
"A": "Circuit level",
"B": "Packet filtering",
"C": "Stateful inspection",
"D": "NIDS"
},
"solution": "C"
},
{
"question": "Which type of computer crime involves the intercepting of RF signals generated by computers or terminals?",
"answers": {
"A": "Network intrusions",
"B": "Emanation eavesdropping",
"C": "Theft of passwords",
"D": "Denial of Service attacks"
},
"solution": "B"
},
{
"question": "Which nmap command is used to perform a TCP SYN scan, also known as a half-open scan, to determine which ports are open on a target system?",
"answers": {
"A": "nmap -sP",
"B": "nmap -sT",
"C": "nmap -SYN",
"D": "nmap -sS"
},
"solution": "D"
},
{
"question": "In cryptography, what is the purpose of using a key-derivation function (KDF)?",
"answers": {
"A": "Generate public keys",
"B": "Authenticate digital signatures",
"C": "Encrypt data using a password",
"D": "KDF are algorithms used to transform a secret into crucial parameters like keys and Initialization Vectors (IVs)"
},
"solution": "D"
},
{
"question": "What type of attack involves sending messages to force endpoints to reauthenticate to the access point, essentially logging out the endpoints?",
"answers": {
"A": "Wi-Fi scanning attack",
"B": "Key reinstallation attack",
"C": "Evil twin attack",
"D": "Deauthentication attack"
},
"solution": "D"
},
{
"question": "The principle of 'secure by default' is inherently aligned with which cybersecurity principle?",
"answers": {
"A": "Least Privilege",
"B": "Security by design",
"C": "Constrained Delegation",
"D": "Defense in Depth"
},
"solution": "B"
},
{
"question": "What is the primary goal of the Transport Layer Security (TLS) protocol?",
"answers": {
"A": "Privacy and authentication between two communicating applications",
"B": "Privacy and data integrity between two communicating applications",
"C": "Authentication and data integrity between two communicating applications",
"D": "Privacy, authentication, and data integrity between two communicating applications"
},
"solution": "D"
},
{
"question": "What is the primary factor that can save a company when it comes to the failure of equipment and servers?",
"answers": {
"A": "Change management",
"B": "Vulnerability scanning",
"C": "Data archiving",
"D": "Multifactor authentication"
},
"solution": "C"
},
{
"question": "Which of the following is a common social engineering technique used to deceive individuals into providing sensitive information?",
"answers": {
"A": "Denial of Service attack",
"B": "Data breach",
"C": "Malware infection",
"D": "Phishing"
},
"solution": "D"
},
{
"question": "Which block cipher is known as the Data Encryption Standard?",
"answers": {
"A": "DES",
"B": "RC4",
"C": "Feistel Cipher",
"D": "A5/1"
},
"solution": "A"
},
{
"question": "Which of the following actions can help a user minimize exposure to security weaknesses associated with broadband access methods?",
"answers": {
"A": "Disabling or hiding processes that advertise services or automatically respond to inquiries",
"B": "Purchasing higher bandwidth from the service provider",
"C": "Regularly updating the Wi-Fi access point password",
"D": "Utilizing exclusively licensed wireless systems"
},
"solution": "A"
},
{
"question": "What is a crucial role of the internal auditors in the context of cybersecurity?",
"answers": {
"A": "Developing security policies and guidelines for the organization",
"B": "Providing an independent review of controls and compliance",
"C": "Responding to and recovering from disruptive incidents",
"D": "Performing penetration tests and vulnerability analyses"
},
"solution": "B"
},
{
"question": "Users on a network authenticate using a hardware token and a four-digit PIN. Which authentication method does this describe?",
"answers": {
"A": "Multifactor authentication",
"B": "Two-factor authentication",
"C": "Token authentication",
"D": "Three-factor authentication"
},
"solution": "B"
},
{
"question": "In 2016, which operating system occupied 90 percent of the desktop market and was among the largest attack surfaces?",
"answers": {
"A": "Windows",
"B": "iOS",
"C": "Mac OS",
"D": "Linux"
},
"solution": "A"
},
{
"question": "Which layer 4 transport protocol addresses in the IP header field by using a numeric value?",
"answers": {
"A": "TCP",
"B": "IMAP",
"C": "ICMP",
"D": "SSH"
},
"solution": "A"
},
{
"question": "What performance issue can SSL introduce when used in a web server?",
"answers": {
"A": "Increased network bandwidth",
"B": "Reduced CPU and memory usage",
"C": "Enhanced latency in HTTP service time",
"D": "Faster encryption speed"
},
"solution": "C"
},
{
"question": "What is the major concern with a single sign-on (SSO) implementation that allows one login session for all authorized resources?",
"answers": {
"A": "Increased system performance",
"B": "Reduced network traffic",
"C": "Retroactive security measures",
"D": "Potential session stealing"
},
"solution": "D"
},
{
"question": "Which of the following is an example of sensitive authentication data (SAD) used in payment card transactions?",
"answers": {
"A": "Three-digit or four-digit card verification code",
"B": "Expiration date of the payment card",
"C": "Transaction amount and currency",
"D": "Cardholder's name and address"
},
"solution": "A"
},
{
"question": "What is the term used to describe data during its transmission?",
"answers": {
"A": "Static integrity",
"B": "Dynamic / 'data in motion'",
"C": "Static confidentiality",
"D": "None of the above"
},
"solution": "B"
},
{
"question": "In an LDAP injection attack, how does the attacker manipulate the LDAP query to bypass authentication?",
"answers": {
"A": "By inserting additional scripting into web forms to modify the LDAP query",
"B": "By intercepting the communication between the client and server and altering the LDAP query in transit",
"C": "By adding characters such as &)(&) after the username to end the query and then provide any password",
"D": "By using tools such as StackGuard to manipulate the LDAP query"
},
"solution": "C"
},
{
"question": "What is a widespread security flaw in web applications that attackers often exploit, specifically concerning the backend database?",
"answers": {
"A": "SQL injection",
"B": "Denial-of-service attacks",
"C": "Cross-site scripting (XSS)",
"D": "Buffer overflows"
},
"solution": "A"
},
{
"question": "What type of malware is designed to allow a remote user to completely control a system, regardless of local security controls or policies?",
"answers": {
"A": "RAT (Remote-access Trojan/tool)",
"B": "Data diddler",
"C": "Worm",
"D": "Virus"
},
"solution": "A"
},
{
"question": "What is the primary authentication method for validating each device in a machine certificate and EAP-TLS based architecture?",
"answers": {
"A": "Certificate-based digital signatures",
"B": "Raw public key digital signatures",
"C": "PSKs",
"D": "EAP"
},
"solution": "A"
},
{
"question": "What is the purpose of a public-key infrastructure (PKI) in the context of cybersecurity?",
"answers": {
"A": "To enable secure communication without the need for digital certificates and public keys",
"B": "To provide a fast and efficient encryption method for large-scale data transmission",
"C": "To ensure the secrecy of communication by using a single key for encryption and decryption",
"D": "To authenticate and verify the validity of public keys and manage digital certificates"
},
"solution": "D"
},
{
"question": "What is the primary purpose of biometric authentication?",
"answers": {
"A": "To verify email addresses",
"B": "To remember user credentials",
"C": "To identify individuals based on unique biological traits",
"D": "To generate secure passwords"
},
"solution": "C"
},
{
"question": "What are the three essential functions performed by a complete access control system within the security system?",
"answers": {
"A": "Monitoring, management, and response",
"B": "Limiting access, creating an alarm, and providing a record of all accesses",
"C": "Determining the security requirements, planning the security layout, and identifying potential security risks",
"D": "Identifying authorized persons, and determining the requirements for authorized entrants, and examining the geography of the facility"
},
"solution": "B"
},
{
"question": "A pentester is configuring a Windows laptop for a test. In setting up Wireshark, what driver and library are required to allow the NIC to work in promiscuous mode?",
"answers": {
"A": "promsw",
"B": "winprom",
"C": "libpcap",
"D": "winpcap"
},
"solution": "D"
},
{
"question": "How does the use of capa aid in malware analysis?",
"answers": {
"A": "It provides a secure platform for executing malware samples",
"B": "It develops new countermeasures to mitigate malware threats",
"C": "It categorizes and identifies malware behaviors based on established frameworks",
"D": "It automatically generates malware for testing purposes"
},
"solution": "C"
},
{
"question": "Which cryptographic algorithm is a modern, secure algorithm among the following choices?",
"answers": {
"A": "RC4",
"B": "AES-256",
"C": "Triple DES (3DES)",
"D": "Skipjack"
},
"solution": "B"
},
{
"question": "What are the primary types of authentication as categorized by the 'something you know, something you have, something you are' model?",
"answers": {
"A": "Discretionary, Nondiscretionary, Role-based",
"B": "Type 1, Type 2, Type 3",
"C": "Knowledge, Possession, Inheritance",
"D": "Discretionary, Biometric, Token"
},
"solution": "B"
},
{
"question": "Why is it important to regularly update software and security patches?",
"answers": {
"A": "To fix vulnerabilities and security weaknesses that could be exploited by attackers",
"B": "To address any compatibility issues with other software",
"C": "To increase the performance of software applications",
"D": "To enhance user experience and interface design"
},
"solution": "A"
},
{
"question": "What is the best description of UDP protocol?",
"answers": {
"A": "It offers reliability and error recovery",
"B": "It is primarily used for secure data transfer",
"C": "It is connectionless and doesn't offer reliability or error recovery",
"D": "It is slower than TCP"
},
"solution": "C"
},
{
"question": "Which integrity model focuses on preventing unauthorized modifications to data or programs by comparing integrity levels between subjects and objects?",
"answers": {
"A": "Brewer-Nash",
"B": "Goguen-Meseguer",
"C": "Biba",
"D": "Sutherland"
},
"solution": "C"
},
{
"question": "What is the compliance date for the HIPAA Privacy rule according to its final publication?",
"answers": {
"A": "August 12, 1998",
"B": "April 14, 2002",
"C": "April 14, 2003",
"D": "October 16, 2002"
},
"solution": "C"
},
{
"question": "Which action can an adversary perform in the Dolev-Yao adversary model?",
"answers": {
"A": "Forge",
"B": "Delete",
"C": "Eavesdrop",
"D": "All of the above"
},
"solution": "D"
},
{
"question": "Which one of the following tools can be used to launch a distributed denial of service attack against a system or network?",
"answers": {
"A": "Trinoo",
"B": "Satan",
"C": "Nmap",
"D": "Saint"
},
"solution": "A"
},
{
"question": "Which characteristic is concerned with preventing and detecting potential deviations or undesirable behavior early enough to take appropriate action?",
"answers": {
"A": "Timeliness",
"B": "Completeness",
"C": "Accountability",
"D": "Economy"
},
"solution": "A"
},
{
"question": "What is the primary goal of cybersecurity risk assessment?",
"answers": {
"A": "To maximize security through excessive controls",
"B": "To identify and mitigate potential security threats",
"C": "To ignore existing vulnerabilities",
"D": "To completely eliminate all security risks"
},
"solution": "B"
},
{
"question": "According to NIST, which choice below is not an accepted security self-testing technique?",
"answers": {
"A": "Password Cracking",
"B": "War Dialing",
"C": "Virus Distribution",
"D": "Virus Detection"
},
"solution": "C"
},
{
"question": "What is the main risk associated with running a virtual computer?",
"answers": {
"A": "If a virtual computer fails, immediate failure of other virtual computers",
"B": "If a virtual computer fails, immediate failure of the physical server",
"C": "If the physical server fails, all other physical servers immediately go offline",
"D": "If the physical server fails, all virtual machines hosted on it promptly become offline"
},
"solution": "D"
},
{
"question": "What research problem is considered the most important in the field of secure distributed systems?",
"answers": {
"A": "Designing secure time protocols",
"B": "Resilience in the face of malice",
"C": "Recovering from phishing attacks",
"D": "Complexities of naming"
},
"solution": "B"
},
{
"question": "What type of keys are used in XML encryption to encrypt data for performance reasons?",
"answers": {
"A": "Symmetric encryption keys",
"B": "Public keys",
"C": "Private keys",
"D": "Hybrid keys"
},
"solution": "A"
},
{
"question": "Which of the following is a fundamental security practice for creating secure passwords?",
"answers": {
"A": "Using a mix of uppercase and lowercase letters, numbers, and symbols",
"B": "Using common phrases or easily guessable sequences",
"C": "Using the same password for multiple accounts",
"D": "Using short and easily memorable passwords"
},
"solution": "A"
},
{
"question": "What is the term for the social engineering attack focused on stealing credentials or identity information?",
"answers": {
"A": "Vishing",
"B": "Smishing",
"C": "Whaling",
"D": "Phishing"
},
"solution": "D"
},
{
"question": "Which of the following statements about risk is true?",
"answers": {
"A": "A qualitative risk analysis should be preferred for assigning monetary values",
"B": "Implementation of preventive controls is sufficient for risk mitigation",
"C": "Risk is the probability of the exploitation of vulnerabilities by a threat agent",
"D": "The risk of an internal security breach by employees is less than that posed by external threats"
},
"solution": "C"
},
{
"question": "Who should approve exceptions to security procedures for the organizational element to which the procedures apply?",
"answers": {
"A": "Policy evaluation committee",
"B": "Audit function",
"C": "Managers and employees of proponent element",
"D": "Department vice president"
},
"solution": "D"
},
{
"question": "In IPsec, what is the main difference between transport mode and tunnel mode?",
"answers": {
"A": "Transport mode provides confidentiality for connections between hosts, while tunnel mode is used to protect connections between security gateways",
"B": "Transport mode adds additional padding for traffic flow confidentiality, while tunnel mode provides anti-replay protection",
"C": "Transport mode is used for data origin authentication, while tunnel mode provides connectionless integrity",
"D": "Transport mode encrypts only the IP payload, while tunnel mode encrypts the entire IP packet"
},
"solution": "D"
},
{
"question": "What is the role of the three-way handshake in establishing a TCP connection?",
"answers": {
"A": "To request the establishment of a connection",
"B": "To acknowledge the request for connection",
"C": "To complete the establishment of a connection",
"D": "All of the above"
},
"solution": "D"
},
{
"question": "What can be done with the information obtained from open-source intelligence about a target company?",
"answers": {
"A": "Conducting systematic attacks on the network infrastructure",
"B": "Acquiring details about locations and organizational structure of the company",
"C": "Automating the collection of vulnerabilities within the organization",
"D": "Manipulating the target organization through social engineering attacks"
},
"solution": "B"
},
{
"question": "What term describes the act of breaking a larger message into smaller chunks for efficient transmission?",
"answers": {
"A": "Ciphertext",
"B": "Steganography",
"C": "Enumeration",
"D": "Fragmentation"
},
"solution": "D"
},
{
"question": "Which model is primarily concerned with confidentiality?",
"answers": {
"A": "Clark-Wilson",
"B": "Biba",
"C": "Bell-LaPadula",
"D": "Chinese Wall"
},
"solution": "C"
},
{
"question": "Which attack involves injecting malicious code or SQL commands into input fields to gain unauthorized access to a system?",
"answers": {
"A": "SQL injection",
"B": "Modification attack",
"C": "Replay attack",
"D": "Spam attack"
},
"solution": "A"
},
{
"question": "What is the purpose of risk identification, analysis, and mitigation in a continuous risk management process?",
"answers": {
"A": "To reduce the impact of risks to acceptable levels",
"B": "To prioritize risks based on their impact",
"C": "To ensure compliance with regulations",
"D": "To integrated risks into the enterprise risk management process"
},
"solution": "A"
},
{
"question": "How does HTTP serve as a potential protocol for tunneling data?",
"answers": {
"A": "By allowing a large area for payload content within the request and reply messages",
"B": "By using strong encryption that makes it difficult to inspect the payload content",
"C": "By providing strict access control and limited space for payload content",
"D": "By limiting the types of data that can be transmitted through the protocol"
},
"solution": "A"
},
{
"question": "What is the function of a stateful inspection firewall?",
"answers": {
"A": "Monitors and matches network packets to a set of rules",
"B": "Performs deep packet inspection",
"C": "Enforces security policy at the application layer",
"D": "Inspects the state of network connections"
},
"solution": "D"
},
{
"question": "What is the purpose of establishing a Configuration Management Plan (CMP) and configuring the Configuration Control Board (CCB) in the CM process?",
"answers": {
"A": "To correlate CM to the International Standards Organization (ISO) 9000 series of quality systems criteria",
"B": "To support the implementation of a new Configuration Management methodology",
"C": "To maintain control over the established work product configurations and ensure the human element functions properly",
"D": "To ensure all configuration items are maintained under strict configuration control"
},
"solution": "C"
},
{
"question": "What kind of attack can succeed following URL encoding?",
"answers": {
"A": "Directory traversal",
"B": "SQL injection",
"C": "Cross-site scripting (XSS)",
"D": "All of the provided answer"
},
"solution": "D"
},
{
"question": "What is another term for secret key encryption?",
"answers": {
"A": "PKI",
"B": "Asymmetric encryption",
"C": "Symmetric encryption",
"D": "Public key"
},
"solution": "C"
},
{
"question": "What type of analysis involves evaluating the assembly language code of an executable without running the program?",
"answers": {
"A": "Malware analysis",
"B": "Dynamic analysis",
"C": "Static analysis",
"D": "Behavioral analysis"
},
"solution": "C"
},
{
"question": "Which IPSec component defines the security services and parameters agreed upon by two entities to communicate securely?",
"answers": {
"A": "SAML (Security Association Markup Language)",
"B": "Tunnel negotiation",
"C": "Oakley negotiation",
"D": "Security Association (SA)"
},
"solution": "D"
},
{
"question": "Which of the following is an example of a hashing algorithm?",
"answers": {
"A": "AES",
"B": "RSA",
"C": "MD5",
"D": "3DES"
},
"solution": "C"
},
{
"question": "Which hashing algorithm would you suggest for securing passwords in 2024?",
"answers": {
"A": "MD5",
"B": "SHA2-256",
"C": "bcrypt",
"D": "SHA1"
},
"solution": "C"
},
{
"question": "What is the primary goal of social engineering in a cybersecurity attack?",
"answers": {
"A": "To exploit system vulnerabilities for financial gain",
"B": "To gain unauthorized access by manipulating people",
"C": "To initiate denial-of-service attacks on critical infrastructure",
"D": "To spread malicious software and compromise data"
},
"solution": "B"
},
{
"question": "What is the primary purpose of ARP spoofing?",
"answers": {
"A": "To capture packets of specific conversations between endpoints",
"B": "To intercept DNS requests and respond to them faster than the legitimate server",
"C": "To intercept network data through false IP-MAC address pairings",
"D": "To capture and analyze packet captures"
},
"solution": "C"
},
{
"question": "What should an information security manager be particularly mindful of when implementing a security control?",
"answers": {
"A": "A promotion to production procedure",
"B": "What the organization’s competition is doing",
"C": "Change control management",
"D": "The impact on the end-user community"
},
"solution": "D"
},
{
"question": "What is the main function of a Security Information and Event Management (SIEM) system?",
"answers": {
"A": "To ignore routine events and only raise alerts when it detects serious intrusion patterns",
"B": "To provide centralized logging and real-time analysis of events occurring on systems throughout an organization",
"C": "To perform manual review of logs and look for relevant data",
"D": "To detect and prevent the unauthorized transfer of data outside the organization"
},
"solution": "B"
},
{
"question": "What are examples of physical and environmental protection controls for LAN and WAN security?",
"answers": {
"A": "User identification and authentication",
"B": "Surge protection and battery backup power",
"C": "Hardware and system software maintenance controls",
"D": "Backup and contingency planning"
},
"solution": "B"
},
{
"question": "What is the main purpose of a salt in the context of hashing algorithms?",
"answers": {
"A": "To match the hash key length with the input data length",
"B": "To add flavor to the encrypted data",
"C": "To generate unique hash values for different file types",
"D": "To increase the complexity of password hashes"
},
"solution": "D"
},
{
"question": "What database technology could further limit the potential for SQL injection attacks?",
"answers": {
"A": "Column encryption",
"B": "Parameterized queries",
"C": "Triggers",
"D": "Concurrency control"
},
"solution": "B"
},
{
"question": "What are the key challenges faced by IT professionals that drive the adoption of data loss protection (DLP) solutions?",
"answers": {
"A": "Increasing the number of corporate devices and resources",
"B": "Optimizing internal network performance and speed",
"C": "Ensuring data security and compliance with data privacy regulations",
"D": "Maintaining user productivity and internet connectivity"
},
"solution": "C"
},
{
"question": "Which of the following represents the correct notation for an IPv6 address with zero suppression?",
"answers": {
"A": "AB01:0:1A:C:0000:0000:3A1C:1B1F",
"B": "AB01:0:1A:C::3A1C:1B1E",
"C": "AB01:0000:OO1A:000C:0000:0000:3A1C:1B1F",
"D": "AB01:0:1A:C:0:0:3A1C:1B1E"
},
"solution": "B"
},
{
"question": "What is a preferred method that most professionals in the network security field may use to assess the threat of intrusion?",
"answers": {
"A": "Participating in information warfare games",
"B": "Reading technical articles",
"C": "Conducting self-hack audits (penetration testing)",
"D": "If evaluated correctly, A, B, and C could all be accurate"
},
"solution": "D"
},
{
"question": "What is the process of hiding text within an image called?",
"answers": {
"A": "Encryption",
"B": "Steganography",
"C": "Spyware",
"D": "Hiding"
},
"solution": "B"
},
{
"question": "In public key cryptography, a trap door is a secret mechanism that enables you to easily accomplish the reverse function in a one-way function. It is essential for which of the following algorithm(s)?",
"answers": {
"A": "Neither RSA nor Diffie-Hellman",
"B": "Diffie-Hellman only",
"C": "RSA only",
"D": "Both RSA and Diffie-Hellman"
},
"solution": "C"
},
{
"question": "Which of the following types of firewall inspects the contents of incoming or outgoing TCP, UDP, ICMP packets and decides whether to forward or reject them based on specific packet policies set in the organization's security policy?",
"answers": {
"A": "SOCKS Proxy",
"B": "Application-level firewall",
"C": "Packet filter firewall",
"D": "Proxy server"
},
"solution": "C"
},
{
"question": "Which of the following is NOT a type of computer backup (file copying method)?",
"answers": {
"A": "Primary",
"B": "Update",
"C": "Duplicate",
"D": "Archive"
},
"solution": "A"
},
{
"question": "Which of the following is an essential component of effective cybersecurity education and awareness?",
"answers": {
"A": "Use of complex technical jargon",
"B": "Encouraging a culture of reporting security incidents",
"C": "Minimizing user involvement in security practices",
"D": "Putting all responsibility on the IT department"
},
"solution": "B"
},
{
"question": "Which protocol provides a full-duplex, reliable, virtual circuit for data transport?",
"answers": {
"A": "Address Resolution Protocol (ARP)",
"B": "Transmission Control Protocol (TCP)",
"C": "Internet Protocol (IP)",
"D": "User Datagram Protocol (UDP)"
},
"solution": "B"
},
{
"question": "Which protocol adds encryption for transmitted information and is commonly used for securing web traffic?",
"answers": {
"A": "HTTP",
"B": "SSH",
"C": "FTP",
"D": "SSL/TLS"
},
"solution": "D"
},
{
"question": "Which best describes a vulnerability scan?",
"answers": {
"A": "A way to find open ports",
"B": "A way to diagram a network",
"C": "A proxy attack",
"D": "A way to automate the discovery of vulnerabilities"
},
"solution": "D"
},
{
"question": "Which of the following is a fundamental principle of cybersecurity risk management?",
"answers": {
"A": "Complete elimination of all risks",
"B": "Acceptance of all risks",
"C": "Ignoring potential risks",
"D": "Balancing risks and benefits"
},
"solution": "D"
},
{
"question": "What practice is necessary to ensure no unauthorized activity, fraud, or collusion in security operations?",
"answers": {
"A": "Separation of duties",
"B": "Least privilege",
"C": "Penetration test",
"D": "Need to know"
},
"solution": "A"
},
{
"question": "What statute is designed to combat unauthorized access to computer systems and data in the United States?",
"answers": {
"A": "Computer Misuse Act",
"B": "Computer Fraud and Abuse Act",
"C": "Economic Espionage Act",
"D": "CLOUD Act"
},
"solution": "B"
},
{
"question": "Which of the following manages digital certificates?",
"answers": {
"A": "Certificate authority",
"B": "Hub",
"C": "Public key",
"D": "Police"
},
"solution": "A"
},
{
"question": "Which LAN transmission method involves sending a packet from a single source to multiple destinations on the network?",
"answers": {
"A": "Multicast",
"B": "Broadcast",
"C": "Unicast",
"D": "Token-Passing"
},
"solution": "A"
},
{
"question": "What is the best type of water-based fire suppression system for a computer facility?",
"answers": {
"A": "Preaction system",
"B": "Wet pipe system",
"C": "Deluge system",
"D": "Dry pipe system"
},
"solution": "A"
},
{
"question": "Norbert is a system administrator who is researching a technology that will secure network traffic from potential sniffing by unauthorized machines. What technology can Norbert implement?",
"answers": {
"A": "SNMP",
"B": "FTP",
"C": "LDAP",
"D": "SSH"
},
"solution": "D"
},
{
"question": "What is the primary purpose of Software as a Service (SaaS) in cloud computing?",
"answers": {
"A": "To provide voice communication for users",
"B": "To specialize in computer telephony integration",
"C": "To connect two or more networks to form an internetwork",
"D": "To offer on-demand access to applications over the internet"
},
"solution": "D"
},
{
"question": "What is a SAN?",
"answers": {
"A": "A specialized storage area that is dedicated to one server to alleviate data storage pain points",
"B": "A regular local area network (LAN) used for storage and backup purposes",
"C": "A data storage system consisting of various storage elements and devices communicating in efficient harmony over a network",
"D": "A high-speed network that allows any-to-any connections across the network using interconnected elements such as routers, gateways, hubs, switches, and directors"
},
"solution": "C"
},
{
"question": "What type of cipher is the Caesar cipher?",
"answers": {
"A": "Concealment",
"B": "Substitution cipher",
"C": "Transposition cipher",
"D": "Poly-alphabetic cipher"
},
"solution": "B"
},
{
"question": "What is the purpose of User Account Control (UAC) in Windows?",
"answers": {
"A": "To disable all security measures for ease of use",
"B": "To give all users full administrative rights",
"C": "To prevent unauthorized access and user error",
"D": "To bypass the logon process for standard users"
},
"solution": "C"
},
{
"question": "Which statement below is correct regarding VLANs?",
"answers": {
"A": "A VLAN restricts flooding to only those ports included in the VLAN",
"B": "A VLAN is less secure when implemented in conjunction with private port switching",
"C": "A 'closed' VLAN configuration is the least secure VLAN configuration",
"D": "A VLAN is a network segmented physically, not logically"
},
"solution": "A"
},
{
"question": "What role does encryption play in protecting data at rest and in transit in a computer network?",
"answers": {
"A": "It ensures the integrity and authenticity of data by digitally signing all network communications",
"B": "It protects data from unauthorized access by converting it into a format that is unreadable without the proper decryption key",
"C": "It monitors and logs network activities to detect and mitigate potential security breaches",
"D": "It filters and blocks unwanted web traffic from reaching the network's servers and workstations"
},
"solution": "B"
},
{
"question": "Which field in a DKIM signature contains the identifier of the responsible person or organization associated with the signing domain?",
"answers": {
"A": "d",
"B": "v",
"C": "a",
"D": "h"
},
"solution": "A"
},
{
"question": "Which of the following is NOT a common method of detecting potential security incidents in IT environments?",
"answers": {
"A": "Updating system security policies to prevent potential incidents",
"B": "Intrusion detection and prevention systems that send alerts to administrators",
"C": "Automated tools scanning audit logs for predefined events",
"D": "End users reporting unusual activity or incidents to IT personnel"
},
"solution": "A"
},
{
"question": "Is it possible to factorize a large 2048-bit number in polynomial time?",
"answers": {
"A": "No, it is not possible with classical computers",
"B": "It is only possible with quantum computers using Shor's algorithm",
"C": "It depends on the factors of the large number",
"D": "Yes, it is a problem that can be easily solved using modern computer algebra systems"
},
"solution": "C"
},
{
"question": "Which method of security testing simulates one or more attacks on a system?",
"answers": {
"A": "Password analysis",
"B": "Network mapping",
"C": "Penetration testing",
"D": "Vulnerability scanning"
},
"solution": "C"
},
{
"question": "What property of 'e' makes it efficient for RSA encryption?",
"answers": {
"A": "It is less than f(n)",
"B": "It is relatively prime to f(n)",
"C": "It is a prime number",
"D": "It has a single 1 bit in its binary representation"
},
"solution": "D"
},
{
"question": "Who has the final responsibility for the preservation of the organization’s information?",
"answers": {
"A": "Technology providers",
"B": "Senior management",
"C": "Users",
"D": "Application owners"
},
"solution": "B"
},
{
"question": "What is the block size of the AES-192 algorithm?",
"answers": {
"A": "256 bits",
"B": "192 bits",
"C": "64 bits",
"D": "128 bits"
},
"solution": "D"
},
{
"question": "What is the loopback address in IPv6?",
"answers": {
"A": "0.0.0.0",
"B": "0:0:0:0:0:0:0:1",
"C": "127.0.0.1",
"D": "::1"
},
"solution": "D"
},
{
"question": "Which organisation developed the first globally-applicable security standard for consumer IoT?",
"answers": {
"A": "ETSI",
"B": "IEEE",
"C": "NIST",
"D": "IETF"
},
"solution": "A"
},
{
"question": "Which of the following is a common cybersecurity best practice to protect against data breaches?",
"answers": {
"A": "Using unpatched software",
"B": "Implementing multi-factor authentication",
"C": "Sharing passwords with trusted colleagues",
"D": "Storing sensitive data in plain text"
},
"solution": "B"
},
{
"question": "What kind of transmission systems are commonly used in military communication?",
"answers": {
"A": "Fiber-optic communication",
"B": "Underwater fiber-optic cables",
"C": "Low-probability-of-intercept (LPI) radio links",
"D": "High-frequency satellite communication"
},
"solution": "C"
},
{
"question": "Which of the following should be included in a security awareness program according to PCI DSS requirements?",
"answers": {
"A": "Awareness of the acceptable use of end-user technologies",
"B": "Awareness of threats and vulnerabilities that could impact the security of the CDE",
"C": "Acknowledgments from third-party service providers that they are responsible for the security of account data",
"D": "All of the above"
},
"solution": "D"
},
{
"question": "What is the main purpose of W⊕X memory policy in operating systems?",
"answers": {
"A": "Restricting the userspace from accessing kernel memory",
"B": "Preventing unauthorized access to kernel memory",
"C": "Preventing execution of instructions in the data area",
"D": "Randomizing memory locations"
},
"solution": "C"
},
{
"question": "What is the primary goal of penetration testing?",
"answers": {
"A": "To evaluate the robustness of security systems and identify vulnerabilities",
"B": "To exploit vulnerabilities",
"C": "To eliminate all vulnerabilities in the system",
"D": "To simulate unauthorized attacks without actually exploiting vulnerabilities"
},
"solution": "A"
},
{
"question": "What is one of the most important goals of data hiding in computer forensics?",
"answers": {
"A": "To provide incontestable proof of the existence of digital evidence",
"B": "To provide assurance of content integrity",
"C": "To prevent access to data by authorized personnel",
"D": "To render information useless for further analysis"
},
"solution": "B"
},
{
"question": "Who is responsible for building IT security controls into the design and implementations of the systems?",
"answers": {
"A": "Data/information owner",
"B": "Information System Auditor",
"C": "IT personnel",
"D": "End User"
},
"solution": "C"
},
{
"question": "What is an example of a common terrorist tactic?",
"answers": {
"A": "Peaceful protest",
"B": "Cultural exchange programs",
"C": "Sabotage",
"D": "Environmental conservation"
},
"solution": "C"
},
{
"question": "What is the main purpose of multi-factor authentication in cybersecurity?",
"answers": {
"A": "To limit user privileges within the network",
"B": "To ensure compliance with government regulations",
"C": "To adds an extra layer of security by requiring multiple forms of verification",
"D": "To monitor network traffic for security threats"
},
"solution": "C"
},
{
"question": "Which type of malicious code has more capabilities than tools that run strictly in a sandbox and is capable of accessing services and resources not available to code that runs in a restricted environment?",
"answers": {
"A": "Trojan horse",
"B": "ActiveX attack code",
"C": "Virus",
"D": "Worm"
},
"solution": "B"
},
{
"question": "What is the purpose of Network Address Translation (NAT)?",
"answers": {
"A": "To encrypt data transmissions over a network",
"B": "To translate private IP addresses to public IP addresses",
"C": "To route packets within a private network",
"D": "To manage user authentication and access control"
},
"solution": "B"
},
{
"question": "What type of attack attempts to shut down a target by making it temporarily or permanently unavailable?",
"answers": {
"A": "Denial of service (DoS) attack",
"B": "Session splicing",
"C": "Evasion attack",
"D": "Source routing"
},
"solution": "A"
},
{
"question": "What is an example of a dynamic and effective policy for network security?",
"answers": {
"A": "Focusing solely on vulnerability assessment",
"B": "Blocking all currently known threats",
"C": "Simply being reactive to hits and intrusions",
"D": "Specifying which devices are allowed access and which applications are allowed to run"
},
"solution": "D"
},
{
"question": "Which cybersecurity principle is used to prevent browser-based attacks by denying or terminating malicious scripts from running within the context of the original site?",
"answers": {
"A": "Misdirection",
"B": "Social Engineering",
"C": "Cross-Site Scripting (XSS) Mitigation",
"D": "Reconnaissance"
},
"solution": "C"
},
{
"question": "How does UNIX typically verify the integrity of the filesystem after a system crash?",
"answers": {
"A": "Using internal consistency checks",
"B": "Cross-referencing user files",
"C": "Running checksum calculations",
"D": "Verifying user passwords"
},
"solution": "A"
},
{
"question": "Which principle states that in a secured environment, users should be granted the minimum amount of access necessary for them to complete their required work tasks or job responsibilities?",
"answers": {
"A": "Job rotation",
"B": "Principle of least privilege",
"C": "Separation of duties",
"D": "Collusion"
},
"solution": "B"
},
{
"question": "Which layer of the OSI model is responsible for maintaining session and connection control between two devices?",
"answers": {
"A": "Network layer",
"B": "Presentation layer",
"C": "Transport layer",
"D": "Session layer"
},
"solution": "D"
},
{
"question": "A distributed network is a type of computer network that is spread over different networks typically in different locations. If you were using this type of system a good way to speed access to large files would be to implement which of the following?",
"answers": {
"A": "Content Distribution Network",
"B": "Proxy for web caching",
"C": "Reverse proxy for load balancing",
"D": "Private cloud for laaS"
},
"solution": "A"
},
{
"question": "What type of cybersecurity attack involves flooding a network or server with an overwhelming amount of traffic to disrupt normal operation?",
"answers": {
"A": "Phishing attack",
"B": "DDoS attack",
"C": "SQL injection attack",
"D": "Man-in-the-middle attack"
},
"solution": "B"
},
{
"question": "Which of the following creates a fixed-length output from a variable-length input?",
"answers": {
"A": "MD5",
"B": "SHA1",
"C": "SHA3",
"D": "All of the above"
},
"solution": "D"
},
{
"question": "In the incident response process, what is the first phase?",
"answers": {
"A": "Post-incident activity",
"B": "Containment, eradication, and recovery",
"C": "Preparation",
"D": "Detection and analysis"
},
"solution": "C"
},
{
"question": "Which of the following is an example of a zero-day exploit?",
"answers": {
"A": "An attack exploiting a vulnerability unknown to the public",
"B": "An attack occurring within 24 hours after release of a system patch",
"C": "An attack using a known exploit on an unpatched system",
"D": "An attack where the attacker is physically positioned between two systems"
},
"solution": "A"
},
{
"question": "Which administrative control ensures that all users are properly authorized for system and service access?",
"answers": {
"A": "Supervision",
"B": "Performance evaluations",
"C": "User Registration for Computer Access",
"D": "Background investigations"
},
"solution": "C"
},
{
"question": "Two-factor authentication can be established by combining something you have, you are, and which of the following terms?",
"answers": {
"A": "You need",
"B": "You touch",
"C": "You know",
"D": "You read"
},
"solution": "C"
},
{
"question": "How can the importance of backup be effectively communicated to users?",
"answers": {
"A": "By making backup mandatory through strict rules and regulations",
"B": "By providing unlimited resources to every user for backup",
"C": "By implementing complex backup procedures to emphasize its significance",
"D": "By emphasizing scenarios in which backup saves the day and making backup easy and desirable"
},
"solution": "D"
},
{
"question": "In the context of virtualization, what is the function of a hypervisor?",
"answers": {
"A": "Hosting applications on the cloud",
"B": "Managing hardware resources and network connections",
"C": "Encrypting data on virtual servers",
"D": "Creating, managing, and operating virtual machines"
},
"solution": "D"
},
{
"question": "What was the objective of placing a voltage multiplier circuit internally in smartcards?",
"answers": {
"A": "To resist EEPROM freeze due to VPP exposure",
"B": "To secure against power analysis attacks",
"C": "To protect against physical probing attacks",
"D": "To prevent clock frequency detection attacks"
},
"solution": "A"
},
{
"question": "What does the Address Resolution Protocol (ARP) do in a network?",
"answers": {
"A": "Resolves domain names to IP addresses",
"B": "Allocates IP addresses to network devices",
"C": "Translates IP addresses to media access control (MAC) addresses",
"D": "Verifies that a host is reachable"
},
"solution": "C"
},
{
"question": "What function does the Internet Control Message Protocol (ICMP) primarily serve?",
"answers": {
"A": "Sends messages between network devices regarding network health",
"B": "Enables the collection of network information",
"C": "Facilitates file transfer",
"D": "Supports file sharing"
},
"solution": "A"
},
{
"question": "What is the term used to describe a program that appears to be legitimate but performs malicious activities?",
"answers": {
"A": "Adware",
"B": "Spyware",
"C": "Rootkit",
"D": "Trojan horse"
},
"solution": "D"
},
{
"question": "Which metric defines the acceptable amount of time to restore a function after a disaster?",
"answers": {
"A": "Recovery Point Objective (RPO)",
"B": "Disaster Restoration Tolerance (DRT)",
"C": "Time Recovery Acceptance Level (TRAL)",
"D": "Recovery Time Objective (RTO)"
},
"solution": "D"
},
{
"question": "Why is Ernest Vincent Wright's novel 'Gadsby' famous?",
"answers": {
"A": "The sale of the book being hampered by the restrictions on its content",
"B": "The significance of the letter E in English words",
"C": "The challenge of creating a coherent novel without using the letter E",
"D": "Such a novel does not exist in literature"
},
"solution": "C"
},
{
"question": "Which principle aims to diminish the damage a corrupt subject or incorrect software may do to the security properties of a system?",
"answers": {
"A": "Economy of mechanism",
"B": "Open design",
"C": "Complete mediation",
"D": "Least privilege"
},
"solution": "D"
},
{
"question": "For which security objective(s) should system owners and data owners be accountable?",
"answers": {
"A": "Integrity and availability",
"B": "Availability and confidentiality",
"C": "Availability integrity and confidentiality",
"D": "Integrity"
},
"solution": "C"
},
{
"question": "Norbert is considering altering his organization's log retention policy to delete logs at the end of each day. What is the most important reason that he should avoid this approach?",
"answers": {
"A": "Log files are protected and cannot be altered",
"B": "An incident may not be discovered for several days and valuable evidence could be lost",
"C": "Disk space is cheap, and log files are used frequently",
"D": "Any information in a log file is useless after it is several hours old"
},
"solution": "B"
},
{
"question": "In the 802.11 wireless standard, Temporal Key Integrity Protocol (TKIP) was introduced for symmetric key generation. Which additional security measure was defined in the standard for strong encryption",
"answers": {
"A": "Advanced Encryption Standard (AES)",
"B": "Digital signatures for non-repudiation",
"C": "A mandatory RADIUS server for strong authentication",
"D": "RC4 as a strong replacement for WEP"
},
"solution": "A"
},
{
"question": "What is the term for Security as a Service (SECaaS)?",
"answers": {
"A": "The implementation of intrusion detection systems and prevention systems in a cloud environment",
"B": "A modern protocol solution designed to secure communications in the cloud through encryption",
"C": "A suite of security offerings provided by the cloud service provider to offload security responsibility from the client",
"D": "A comprehensive set of standards and recommendations for cloud computing security"
},
"solution": "C"
},
{
"question": "Which choice is NOT an accurate description of C.I.A.?",
"answers": {
"A": "I stands for integrity",
"B": "A stands for authorization",
"C": "A stands for availability",
"D": "C stands for confidentiality"
},
"solution": "B"
},
{
"question": "How many bits are in an IPv6 address?",
"answers": {
"A": "256",
"B": "32",
"C": "128",
"D": "64"
},
"solution": "C"
},
{
"question": "What is the purpose of periodic reviews of user accounts and access privileges?",
"answers": {
"A": "To ensure all user accounts have access to the highest privileges",
"B": "To demonstrate adherence to regulatory requirements",
"C": "To create a record of all user accounts",
"D": "To identify and remove any inappropriate access and privileges"
},
"solution": "D"
},
{
"question": "The goals of integrity do NOT include",
"answers": {
"A": "Prevention of the modification of information by unauthorized users",
"B": "Accountability of responsible individuals",
"C": "Prevention of the unauthorized or unintentional modification of authorized information",
"D": "Preservation of internal and external consistency"
},
"solution": "B"
},
{
"question": "What is the tool used to enumerate users, themes, and plugins in a WordPress installation?",
"answers": {
"A": "wpscan",
"B": "dirb",
"C": "nmap",
"D": "metasploit"
},
"solution": "A"
},
{
"question": "What is the term for making a message unreadable to anyone except the intended recipient?",
"answers": {
"A": "Permutation",
"B": "Transposition",
"C": "Cryptography",
"D": "Encryption"
},
"solution": "D"
},
{
"question": "What role requires specific training in social engineering?",
"answers": {
"A": "The Scheduler",
"B": "The Operator",
"C": "The Help Desk",
"D": "The Librarian"
},
"solution": "C"
},
{
"question": "Which tool is commonly used for capturing packets in Unix systems?",
"answers": {
"A": "tshark",
"B": "tcpdump",
"C": "Wireshark",
"D": "All of the above"
},
"solution": "D"
},
{
"question": "What is the preferred method to protect against attacks on administrative accounts on a firewall?",
"answers": {
"A": "Strong physical security around the firewall host",
"B": "Hiding the administrative accounts",
"C": "Encrypting all administrative communications",
"D": "Multiple layers of safeguards to establish the appropriate level of protection"
},
"solution": "D"
},
{
"question": "What is the primary communications technology used by many mobile devices, especially cell phones and smartphones?",
"answers": {
"A": "SCADA systems",
"B": "Narrow-band wireless",
"C": "Cellular network or wireless network",
"D": "Bluetooth technology"
},
"solution": "C"
},
{
"question": "What is the primary focus of security engineering?",
"answers": {
"A": "Controlling potential threats and protecting against intelligent and malicious adversaries",
"B": "Securing electronic records and transactions from unauthorized access",
"C": "Protecting property and traditional privacy methods",
"D": "Preventing malfunctions caused by random errors and mistakes"
},
"solution": "A"
},
{
"question": "What security measure can prevent data alteration and theft even if an unauthorized remote user gains access to a computer system?",
"answers": {
"A": "Biometrics",
"B": "Physical Devices",
"C": "Encryption",
"D": "Dynamic Access Control"
},
"solution": "C"
},
{
"question": "Which of the following are benefits of a gas-based fire suppression system?",
"answers": {
"A": "May be able to extinguish the fire faster than a water discharge system",
"B": "Extinguishes the fire by removing oxygen",
"C": "Can be deployed throughout a company facility",
"D": "All provided answers"
},
"solution": "D"
},
{
"question": "What structure is used to prevent cars from ramming a building?",
"answers": {
"A": "Honeypot",
"B": "Gates",
"C": "Bollard",
"D": "Fences"
},
"solution": "C"
},
{
"question": "In a brute force attack, reducing the time required per iteration can make the attack more effective, especially when performed in what type of scenario using obtained username and password hashes?",
"answers": {
"A": "offline",
"B": "online",
"C": "encrypted",
"D": "authenticated"
},
"solution": "A"
},
{
"question": "What is the primary purpose of a padded cell system in relation to intrusion detection?",
"answers": {
"A": "Attract unauthorized users",
"B": "Simulate a real network for intruders",
"C": "Isolate detected intruders",
"D": "Send alerts to administrators"
},
"solution": "C"
},
{
"question": "Which of the following defines the entity’s security objectives and principles?",
"answers": {
"A": "Security policies",
"B": "Operational procedures",
"C": "Risk assessment framework",
"D": "Incident response plan"
},
"solution": "A"
},
{
"question": "Which layer of the OSI model is responsible for encoding data into a format all systems can understand?",
"answers": {
"A": "Transport layer",
"B": "Presentation layer",
"C": "Application layer",
"D": "Session layer"
},
"solution": "B"
},
{
"question": "What is a common first line of defense in cybersecurity to prevent unauthorized access to a system?",
"answers": {
"A": "Firewall",
"B": "Public Wi-Fi",
"C": "Open access policy",
"D": "Intrusion detection system"
},
"solution": "A"
},
{
"question": "Which of the following is NOT a core concept of the CIA triad in cybersecurity?",
"answers": {
"A": "Authentication",
"B": "Integrity",
"C": "Availability",
"D": "Confidentiality"
},
"solution": "A"
},
{
"question": "Which of the following is a major security problem with FTP?",
"answers": {
"A": "Password files are stored in an unsecure area on disk",
"B": "Memory traces can corrupt file access",
"C": "User IDs and passwords are unencrypted",
"D": "FTP sites are unregistered"
},
"solution": "C"
},
{
"question": "What is the purpose of implementing a security policy for mobile computing devices?",
"answers": {
"A": "To mitigate inherent security risks associated with mobile devices",
"B": "To ensure all employees have access to mobile devices",
"C": "To prioritize use of personal rather than company-owned mobile devices",
"D": "To restrict the use of mobile devices in the network"
},
"solution": "A"
},
{
"question": "What is the primary goal of a penetration test?",
"answers": {
"A": "To create a backup of the system data",
"B": "To simulate a real-world attack on the system",
"C": "To upgrade the system's security software",
"D": "To identify and document vulnerabilities in a system"
},
"solution": "D"
},
{
"question": "Which system would you install to provide detective capabilities within a network?",
"answers": {
"A": "HIDS",
"B": "NIDS",
"C": "HIPS",
"D": "NIPS"
},
"solution": "B"
},
{
"question": "Which of the following is true for a host-based IDS?",
"answers": {
"A": "It monitors an entire network",
"B": "It’s invisible to attackers and authorized users",
"C": "It’s ineffective on switched networks",
"D": "It monitors a single system"
},
"solution": "D"
},
{
"question": "Which type of malicious code is triggered by a specific occurrence, such as a specific time or date?",
"answers": {
"A": "Polymorphic virus",
"B": "Trojan horse",
"C": "Worm",
"D": "Logic bomb"
},
"solution": "D"
},
{
"question": "What is the primary purpose of a penetration test in cybersecurity?",
"answers": {
"A": "To implement access control mechanisms",
"B": "To detect and remove malware",
"C": "To simulate an attack on a system to identify vulnerabilities that could be exploited",
"D": "To monitor network traffic for suspicious activities"
},
"solution": "C"
},
{
"question": "You are setting up a network intrusion detection system on a server and need to monitor the server's network traffic. Which mode should you configure the network adapter to operate in?",
"answers": {
"A": "Full-duplex mode",
"B": "Auto-configuration mode",
"C": "Half-duplex mode",
"D": "Promiscuous mode"
},
"solution": "D"
},
{
"question": "Which method is used to overwhelm a system with requests or processing tasks in a denial of service (DoS) attack?",
"answers": {
"A": "Ping attack",
"B": "SYN flood attack",
"C": "Smurf attack",
"D": "Phishing attack"
},
"solution": "B"
},
{
"question": "Which type of secret key algorithm is used in IPsec for encryption and decryption?",
"answers": {
"A": "Hash functions",
"B": "RSA algorithm",
"C": "Block ciphers",
"D": "Stream ciphers"
},
"solution": "C"
},
{
"question": "Which type of system storage is the MOST volatile during forensic investigations?",
"answers": {
"A": "Virtual memory",
"B": "RAM",
"C": "Hard drive",
"D": "CPU cache"
},
"solution": "D"
},
{
"question": "What should an ethical hacker receive from the target organization before conducting any hacking activities?",
"answers": {
"A": "Security Audit Plan",
"B": "Non-Disclosure Agreement (NDA)",
"C": "Hacker's Code of Conduct",
"D": "Verbal Consent"
},
"solution": "B"
},
{
"question": "What is the purpose of the 'Authority Key Identifier' extension in the X.509 certificate format?",
"answers": {
"A": "Identify the public key used to verify the signature on the certificate or CRL",
"B": "Identify the public key being certified",
"C": "Indicate the algorithm used to sign the certificate",
"D": "Identify the Certificate Authority (CA) that created and signed the certificate"
},
"solution": "A"
},
{
"question": "What is the primary purpose of patch management in a computing environment?",
"answers": {
"A": "To ensure that all software and systems are kept up-to-date with the latest version releases",
"B": "To monitor and block all incoming network traffic from potentially malicious sources",
"C": "To automate the process of removing outdated software and systems from the environment",
"D": "To mitigate known vulnerabilities through the timely application of patches and updates"
},
"solution": "D"
},
{
"question": "What type of control is used to determine how well security policies and procedures are complied with?",
"answers": {
"A": "Performance evaluations",
"B": "Required vacations",
"C": "Security reviews and audits",
"D": "Background investigations"
},
"solution": "C"
},
{
"question": "What is the purpose of continuously improving cybersecurity guidelines and their application notes?",
"answers": {
"A": "To categorize security measures into groups",
"B": "To react to new technologies, use cases, and risks",
"C": "To prevent all identified threats",
"D": "To eliminate all cybersecurity risks"
},
"solution": "B"
},
{
"question": "Which of the following is responsible for authenticating wireless access point (WAP) connections?",
"answers": {
"A": "The e-mail server and port 143",
"B": "The AAA server and port 1812",
"C": "The Lightweight Directory Access Protocol (LDAP) server and port 389",
"D": "The DHCP server and port 68"
},
"solution": "B"
},
{
"question": "If you were to see the subnet mask 255.255.248.0, what CIDR notation (prefix) would you use to indicate the same thing?",
"answers": {
"A": "/23",
"B": "/22",
"C": "/21",
"D": "/20"
},
"solution": "C"
},
{
"question": "What type of attack aims to obtain passwords without directly engaging a target?",
"answers": {
"A": "Nontechnical Attacks",
"B": "Password Guessing",
"C": "Active Online Attacks",
"D": "Passive Online Attacks"
},
"solution": "D"
},
{
"question": "What is the purpose of intrusion detection systems (IDS) in a network?",
"answers": {
"A": "To prevent denial of service attacks",
"B": "To analyze network traffic for potential security threats",
"C": "To manage access control lists",
"D": "To encrypt data transmitted over the network"
},
"solution": "B"
},
{
"question": "Which function of an ISMS assesses how individual components meet the enterprise information security baseline-derived obligations?",
"answers": {
"A": "Tasks",
"B": "Assessments",
"C": "Procedures",
"D": "Metrics"
},
"solution": "B"
},
{
"question": "Which RAID level is not fault tolerant?",
"answers": {
"A": "RAID 1",
"B": "RAID 0",
"C": "RAID 5",
"D": "RAID 6"
},
"solution": "B"
},
{
"question": "What is the total length of the resulting message digest from applying SHA-512?",
"answers": {
"A": "8*128 bits",
"B": "16*16 bits",
"C": "32*16 bits",
"D": "32*32 bits"
},
"solution": "C"
},
{
"question": "What is the principle of granting programs or people access only to those resources necessary to complete a specific task or their job?",
"answers": {
"A": "Data hiding",
"B": "Abstraction",
"C": "Layering",
"D": "Least privilege"
},
"solution": "D"
},
{
"question": "What is the primary purpose of authentication in the context of cybersecurity?",
"answers": {
"A": "To verify the validity of a claimed identity",
"B": "To trace and monitor subject's activities",
"C": "To restrict access to specific resources",
"D": "To manage access permissions"
},
"solution": "A"
},
{
"question": "The SEI Software Capability Maturity Model is based on the premise that:",
"answers": {
"A": "The maturity of an organization's software processes cannot be measured",
"B": "Software development is an art that cannot be measured by conventional means",
"C": "Good software development is a function of the number of expert programmers in the organization",
"D": "The quality of a software product is a direct function of the quality of its associated software development and maintenance processes"
},
"solution": "D"
},
{
"question": "Which of the following is an example of a passive attack exploiting compromising emanations?",
"answers": {
"A": "Phishing attacks",
"B": "Man-in-the-middle attacks",
"C": "Denial of Service (DoS) attacks",
"D": "Side channel attacks"
},
"solution": "D"
},
{
"question": "What is the primary function of a kernel-level RootKit in cybersecurity attacks?",
"answers": {
"A": "To patch the kernel to provide very low-level access to the system",
"B": "To install backdoors and grant initial system access to the attacker",
"C": "To modify system behavior and replace critical system programs",
"D": "To remap program execution requests and avoid detection by administrators"
},
"solution": "A"
},
{
"question": "Which security measure is the most important goal of all security solutions?",
"answers": {
"A": "Human safety",
"B": "Maintaining integrity and",
"C": "Prevention of disclosure",
"D": "Sustaining availability"
},
"solution": "A"
},
{
"question": "What is the main purpose of a primary key in a database table?",
"answers": {
"A": "To store all unique values of the table",
"B": "To uniquely identify records in the table",
"C": "To relate to foreign keys in other tables",
"D": "To provide an additional layer of security for the database"
},
"solution": "B"
},
{
"question": "Which of the following is a fundamental security design principle?",
"answers": {
"A": "Least astonishment",
"B": "Least privilege",
"C": "Least common mechanism",
"D": "Isolation"
},
"solution": "B"
},
{
"question": "What is the primary objective of change management within ITIL?",
"answers": {
"A": "To standardize and authorize the controlled implementation of IT changes",
"B": "To resolve the root cause of incidents to minimize the adverse impact of incidents and problems on the business",
"C": "To minimize disruption to the business by restoring service operations to agreed levels as quickly as possible",
"D": "To control production configurations such as standardization, status monitoring, and asset identification"
},
"solution": "A"
},
{
"question": "What is the appropriate solution for maintaining the confidentiality and integrity of data transmissions over unsecured channels?",
"answers": {
"A": "File Transfer Protocol (FTP)",
"B": "Virtual Private Network (VPN)",
"C": "Intrusion Prevention System (IPS)",
"D": "Antivirus Software"
},
"solution": "B"
},
{
"question": "What should be included in the report produced after a penetration test?",
"answers": {
"A": "Detailed technical information about the precise methods used",
"B": "Replay of the test engagement in live presentation form",
"C": "Documentation of the vulnerabilities of the target and the attack methods used",
"D": "List of procedures and policies exploited during the test"
},
"solution": "C"
},
{
"question": "What should an organization inform employees of when it comes to email monitoring?",
"answers": {
"A": "That email is being monitored and the consequences",
"B": "That email monitoring will not be enforced",
"C": "The consequences of unprofessional emails",
"D": "The personal emails are not allowed"
},
"solution": "A"
},
{
"question": "What is a key factor in maintaining management's commitment to an information security program?",
"answers": {
"A": "Ensuring that employees are aware of their rights and responsibilities",
"B": "Implementing a lax security policy",
"C": "Keeping management aware and involved",
"D": "Having regular team-building workshops for employees"
},
"solution": "C"
},
{
"question": "Which document provides the recommendation for elliptic curve cryptography?",
"answers": {
"A": "NIST SP 800-56C",
"B": "NIST SP 800-63-3",
"C": "NIST SP 800-57 Part 1",
"D": "NIST SP 800-186-4"
},
"solution": "D"
},
{
"question": "Which security mode requires users to have a clearance, authorization and need to know for all information processed by the system, allowing the system to handle multiple classification levels?",
"answers": {
"A": "Compartmented",
"B": "Controlled",
"C": "Dedicated",
"D": "Limited access"
},
"solution": "C"
},
{
"question": "What value is located at the (0,0) position in the AES S-Box table?",
"answers": {
"A": "0x63",
"B": "0x00",
"C": "0x01",
"D": "0x7C"
},
"solution": "A"
},
{
"question": "What is the maximum number of IP addresses in an IPv6 subnet?",
"answers": {
"A": "6 bit",
"B": "32 bit",
"C": "6*16 bit",
"D": "8*16 bit"
},
"solution": "D"
},
{
"question": "Why is anonymity on the Internet a concern in the context of cybersecurity?",
"answers": {
"A": "It leads to a lack of accountability for one's actions",
"B": "It encourages online collaboration and cooperation",
"C": "It allows for free expression and exchange of ideas",
"D": "It promotes healthy debates and discussions"
},
"solution": "A"
},
{
"question": "Why does the ticket issued by the TGS in the Kerberos protocol include a timestamp and a lifetime?",
"answers": {
"A": "To ensure that the client's password is not transmitted in plaintext",
"B": "To authenticate the server to the user",
"C": "To prevent unauthorized use of the service ticket by limiting its validity period",
"D": "To securely distribute keys and cookies between the TGS and the server"
},
"solution": "C"
},
{
"question": "What is a key reason why social engineering can provide an effective attack strategy during a physical penetration test?",
"answers": {
"A": "It requires extensive technical knowledge",
"B": "It exploits weaknesses in the target's protection systems",
"C": "It takes advantage of the lack of awareness on the part of the target",
"D": "It does not involve any personal interaction"
},
"solution": "C"
},
{
"question": "Which function performs modular exponentiation (square and multiply) to calculate x^e mod N? (choose the most likely option)",
"answers": {
"A": "Chinese Remainder Theorem",
"B": "MILLER_RABIN_TEST",
"C": "ModExp",
"D": "SDESKeySchedule"
},
"solution": "C"
},
{
"question": "What is used to perform modular exponentiation using fast algorithms in Sage?",
"answers": {
"A": "LS1_data",
"B": "S0_data",
"C": "SDESKeySchedule",
"D": "IntegerModRing"
},
"solution": "D"
},
{
"question": "What is the purpose of the Security Parameters Index (SPI) in IPsec?",
"answers": {
"A": "It uniquely identifies the sender of the packet",
"B": "It indicates the level of encryption for the IP packet",
"C": "It indicates whether the association is an AH or ESP security association",
"D": "It enables the receiving system to select the Security Association (SA) under which a received packet will be processed"
},
"solution": "D"
},
{
"question": "What is a potential consequence of a coordinated information warfare attack on the power grid?",
"answers": {
"A": "It may result in prolonged outages affecting more developed countries",
"B": "It can inflict significant economic damage and bring a country to its knees",
"C": "It can lead to a rapid system restart from a backup, limiting lasting impact",
"D": "It is unlikely to cause significant deaths or be perceived differently from conventional military attacks"
},
"solution": "B"
},
{
"question": "Which port number is used by default for syslog?",
"answers": {
"A": "23",
"B": "21",
"C": "69",
"D": "514"
},
"solution": "D"
},
{
"question": "What is the focus of a security audit or vulnerability assessment?",
"answers": {
"A": "Identifying vulnerabilities and recommend mitigation measures",
"B": "Locating threats",
"C": "Enacting threats",
"D": "Exploiting vulnerabilities"
},
"solution": "A"
},
{
"question": "What is the purpose of a Crisis Communications Plan (CCP)?",
"answers": {
"A": "Ensuring rapid system recovery after a major disruption",
"B": "Addressing communications with personnel and the public during a crisis",
"C": "To provide disaster recovery procedures at an alternate site",
"D": "Facilitating recovery of major disruptions at an alternate site"
},
"solution": "B"
},
{
"question": "Which security mechanism is used to distinguish between human users and bots by requiring a response to a challenge?",
"answers": {
"A": "CAPTCHA",
"B": "Multi-factor Authentication",
"C": "Two-factor Authentication",
"D": "Encryption"
},
"solution": "A"
},
{
"question": "What is the main activity of configuration management?",
"answers": {
"A": "Status accounting",
"B": "Configuration control",
"C": "Identifying configuration structures and items within the scope of IT infrastructure",
"D": "Planning"
},
"solution": "C"
},
{
"question": "What is the purpose of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?",
"answers": {
"A": "To manage network security protocols",
"B": "To authenticate and issue digital certificates",
"C": "To encrypt user's private keys",
"D": "To secure network communications"
},
"solution": "B"
},
{
"question": "What is the purpose of Internet Control Message Protocol (ICMP) in a network?",
"answers": {
"A": "To direct data across a network based on short path labels rather than longer network addresses",
"B": "To provide encryption, access control, nonrepudiation, and message authentication using IP-based protocols",
"C": "To manage communications between data acquisition systems and the system control equipment",
"D": "To determine the health of a network or a specific link"
},
"solution": "D"
},
{
"question": "What is the process of making an operating system secure from attack called?",
"answers": {
"A": "Hardening",
"B": "Tuning",
"C": "Sealing",
"D": "Locking down"
},
"solution": "A"
},
{
"question": "In UNIX, what is the role of the 'shadow' file in securing passwords?",
"answers": {
"A": "It stores the encrypted passwords in a separate file",
"B": "It logs all system reboots",
"C": "It records all executed commands",
"D": "It records the last time a user logged in"
},
"solution": "A"
},
{
"question": "What do most macro viruses infect?",
"answers": {
"A": "Files created using Microsoft Office applications",
"B": "Files stored in the system's Master Boot Record",
"C": "Files used by the operating system for system boot",
"D": "Files stored in the system's registry"
},
"solution": "A"
},
{
"question": "What does BS 25999-1:2006 cover?",
"answers": {
"A": "Process, principles, and terminology for business continuity management",
"B": "A framework for IT security assurance",
"C": "Best practices for implementing security measures",
"D": "Guidelines for initiating and maintaining information security in an organization"
},
"solution": "A"
},
{
"question": "In the second step of a directed attack, what is a common method used by attackers to gain access to a target?",
"answers": {
"A": "Exploit attacks",
"B": "Password attacks",
"C": "None of the above",
"D": "Both A and B correct"
},
"solution": "D"
},
{
"question": "The primary responsibility of the information security steering committee is:",
"answers": {
"A": "Information security policy development",
"B": "Direction setting and performance monitoring",
"C": "Information security control implementation",
"D": "Provision of information security training for employees"
},
"solution": "B"
},
{
"question": "Which topology has built-in redundancy because of its many client connections?",
"answers": {
"A": "Token ring",
"B": "Bus",
"C": "Hybrid",
"D": "Mesh"
},
"solution": "D"
},
{
"question": "Which of the following is a tool used for web mirroring in footprinting?",
"answers": {
"A": "Google Earth",
"B": "SiteDigger",
"C": "Netcraft",
"D": "HTTrack"
},
"solution": "D"
},
{
"question": "What concept ensures that the integrity of the delivered software is protected?",
"answers": {
"A": "Configuration management",
"B": "Remote access/ remote deletion",
"C": "Mobile devices under lock and key",
"D": "Fire alarm system"
},
"solution": "A"
},
{
"question": "What is the type of verification factor that requires the user to have something with them, such as a handheld token or a smart card?",
"answers": {
"A": "Type 4",
"B": "Type 1",
"C": "Type 3",
"D": "Type 2"
},
"solution": "D"
},
{
"question": "Why is it important to define security boundaries in both physical and logical environments?",
"answers": {
"A": "To restrict access to high-security areas only",
"B": "To prevent unauthorized access to sensitive data",
"C": "To segregate organizational processes for efficiency",
"D": "To control the flow of information across different security requirements"
},
"solution": "D"
},
{
"question": "Which of the following is a common vulnerability scanner used for network vulnerability assessments?",
"answers": {
"A": "masscan",
"B": "Zenmap",
"C": "Metasploit",
"D": "Nessus"
},
"solution": "D"
},
{
"question": "A DDoS attack occurs when a hacker has deposited remote-controlled agents zombies or bots onto numerous secondary victims and then uses the deployed bots as a single entity to attack a primary target. What class of computer crime would this be reported as?",
"answers": {
"A": "Computer-resisted crime",
"B": "Computer incidental crime",
"C": "Computer-targeted crime",
"D": "Computer due care crime"
},
"solution": "C"
},
{
"question": "Why is the Tunnel mode preferred for VPNs in IPsec?",
"answers": {
"A": "It requires IPsec protocol support in the end hosts for secure communication",
"B": "It allows direct communication between end hosts without involving the edge routers",
"C": "It encrypts all traffic including the IP source and destination addresses, making traffic analysis harder",
"D": "It simplifies key negotiation, as edge devices can handle connections on behalf of multiple hosts"
},
"solution": "C"
},
{
"question": "What is the purpose of the Bell-LaPadula model in cybersecurity?",
"answers": {
"A": "Preventing unauthorized access to data",
"B": "Ensuring the integrity of data",
"C": "Enforcing proper user authentication",
"D": "Controlling unauthorized modification of data"
},
"solution": "A"
},
{
"question": "What is the term used to refer to an algorithm that can perform encryption or decryption?",
"answers": {
"A": "Symmetric key",
"B": "Asymmetric key",
"C": "Key",
"D": "Cipher"
},
"solution": "D"
},
{
"question": "What information does a buffer overflow intend to control?",
"answers": {
"A": "Buffer pointer",
"B": "Frame pointer",
"C": "Instruction pointer",
"D": "Stack pointer"
},
"solution": "C"
},
{
"question": "Which symmetric encryption scheme is recommended for use in SRTP?",
"answers": {
"A": "AES in ECB mode",
"B": "DES in CBC mode",
"C": "RC4",
"D": "AES in GCM mode"
},
"solution": "D"
},
{
"question": "What is the main reason for the administrator account not being activated by default in Windows?",
"answers": {
"A": "To prevent unauthorized access to the system",
"B": "To reduce the risk of network attacks",
"C": "To enhance the level of security on the system",
"D": "To simplify user management"
},
"solution": "C"
},
{
"question": "What is the benefit of open source code for software developers?",
"answers": {
"A": "Open source code exposes the code to potential hackers for scrutiny",
"B": "Open source code makes it easier to hide security flaws",
"C": "Open source code is less prone to security flaws",
"D": "Open source code allows for faster development of new software"
},
"solution": "D"
},
{
"question": "Which type of transmission media uses a pair of parabolic antennas to transmit and receive signals?",
"answers": {
"A": "Microwave",
"B": "Optical fibers",
"C": "Infrared",
"D": "Coaxial cables"
},
"solution": "A"
},
{
"question": "Which of the following is a good practice for detecting unauthorized changes on payment pages?",
"answers": {
"A": "Reviewing audit logs once a month",
"B": "Implementing intrusion detection systems",
"C": "Regularly monitoring the system clock",
"D": "Installing additional antivirus software"
},
"solution": "B"
},
{
"question": "What is one key element in an IT security awareness program?",
"answers": {
"A": "Entirely outsourced to external vendors",
"B": "Supported and led by example from management",
"C": "Quadratically linked with IT system patching",
"D": "Complex and technical in its delivery"
},
"solution": "B"
},
{
"question": "What must an information protection department continually provide to the entire organization to promote awareness of information protection issues?",
"answers": {
"A": "No communication",
"B": "Restricted access to information",
"C": "Boring and infrequent memos",
"D": "Information and training"
},
"solution": "D"
},
{
"question": "Which processor architecture is commonly licensed for use in embedded systems like mobile phones and consumer electronic devices?",
"answers": {
"A": "ARM",
"B": "Intel",
"C": "Motorola",
"D": "AMD"
},
"solution": "A"
},
{
"question": "What is the primary purpose of RADIUS and TACACS in a network environment?",
"answers": {
"A": "To centralize the authentication of remote dial-up connections",
"B": "To establish secure connections for voice and video conferencing",
"C": "To provide security for WAN communication technologies",
"D": "To support remote journaling and electronic vaulting"
},
"solution": "A"
},
{
"question": "What is the objective of risk management when risks are deemed tolerable?",
"answers": {
"A": "To replace or abandon the aspect of the system at risk",
"B": "To reduce risks with reasonable methods to a level as low as reasonably possible (ALARP)",
"C": "To utilize risks for pursuing opportunities and achieving desirable outcomes",
"D": "To embrace and accept the risks without any intervention"
},
"solution": "B"
},
{
"question": "What is the preferred encryption option for sending large amounts of data?",
"answers": {
"A": "Symmetric encryption",
"B": "Asymmetric encryption",
"C": "Public Key Cryptography",
"D": "Diffie-Hellman scheme"
},
"solution": "A"
},
{
"question": "What is the essential requirement for the security of the Discrete Logarithm Integrated Encryption Scheme (DLIES) to be maintained?",
"answers": {
"A": "The order q of the base point P should be at least q >= 1024",
"B": "Randomly choose two primes p and q such that p*q > 2048 bits",
"C": "The length of the prime number p should be at least 3000 bits",
"D": "All of the above"
},
"solution": "C"
},
{
"question": "What is the primary objective of a Web Application Firewall (WAF) in cybersecurity?",
"answers": {
"A": "To encrypt network traffic between web servers",
"B": "To prevent unauthorized access to network services",
"C": "To protect web applications from security threats",
"D": "To manage user authentication and authorization for web services"
},
"solution": "C"
},
{
"question": "What is the most basic and minimum step for securing WLANs according to best practices?",
"answers": {
"A": "Enable WPA2 encryption on all access points as a minimum security measure",
"B": "Change the default SSID",
"C": "Turn off the 2.4GHz frequency band and switch exclusively to the 5GHz band",
"D": "All of the above"
},
"solution": "A"
},
{
"question": "What is the primary security objective of a one-time pad?",
"answers": {
"A": "Confidentiality",
"B": "Data integrity",
"C": "Availability",
"D": "Authentication"
},
"solution": "A"
},
{
"question": "Which biometric property is concerned with the ability of users to resist or refuse to participate in a system that uses biometric identification?",
"answers": {
"A": "Secondary use",
"B": "Autonomy of the users",
"C": "Characteristic replacement",
"D": "Ease of use"
},
"solution": "B"
},
{
"question": "What is the term for the practice of requesting sensitive information from individuals in order to gain unauthorized access or misuse of their personal information?",
"answers": {
"A": "Phishing",
"B": "Denial of Service (DoS)",
"C": "Malware",
"D": "Hacking"
},
"solution": "A"
},
{
"question": "What technology is used to verify information as it is entered into a web application, preventing database manipulation and buffer overflows?",
"answers": {
"A": "Input Validation",
"B": "Cross-Site Scripting (XSS)",
"C": "Session Management",
"D": "Buffer overflow"
},
"solution": "A"
},
{
"question": "What is the primary benefit of using a content-dependent access control mechanism in a database?",
"answers": {
"A": "To prevent updates to the existing data",
"B": "To limit access to specific fields or cells based on their content",
"C": "To simplify database management procedures",
"D": "To restrict access based on the user's context"
},
"solution": "B"
},
{
"question": "What is the common share name used for interprocess communication?",
"answers": {
"A": "C$",
"B": "IPC$",
"C": "ADMIN$",
"D": "INTERCOM$"
},
"solution": "B"
},
{
"question": "What is the purpose of using a nonce in cryptographic processes?",
"answers": {
"A": "To provide data integrity and authenticity",
"B": "To establish secure network connections",
"C": "To prevent replay attacks and ensure the freshness of messages",
"D": "To manage network protocols"
},
"solution": "C"
},
{
"question": "What type of database may JSON be most likely to represent?",
"answers": {
"A": "Key-value",
"B": "SQL",
"C": "Document-based",
"D": "Relational"
},
"solution": "C"
},
{
"question": "What is the primary purpose of segmentation in the context of PCI DSS?",
"answers": {
"A": "To reduce the number of PCI DSS requirements applicable to an entity",
"B": "To limit the scope of the PCI DSS assessment and minimize the potential for security breaches",
"C": "To completely remove the applicability of PCI DSS for a merchant's cardholder data environment",
"D": "To eliminate the need for implementing PCI DSS controls"
},
"solution": "B"
},
{
"question": "What method is recommended to protect e-mail servers from virus-infected messages that enter the internal networks through portable computing devices and remote access to remote email accounts?",
"answers": {
"A": "Upgrading the e-mail clients with the latest security patches",
"B": "Installing antivirus software on all workstations",
"C": "Scanning all email messages on the internal e-mail servers",
"D": "Blocking IMAP and POP TCP ports on the firewalls"
},
"solution": "C"
},
{
"question": "What is the primary method of propagation for a worm?",
"answers": {
"A": "Moving from one systems to another across networks",
"B": "Infecting system memory and continuously reinfecting files",
"C": "Self-replication within the same file",
"D": "Infecting documents through macro scripts"
},
"solution": "A"
},
{
"question": "Which of the following is a valid reason for an organization to consider using the customized approach to meet a PCI DSS requirement?",
"answers": {
"A": "To define a compensating control",
"B": "Legitimate and documented technical or business constraints",
"C": "Simplification of the annual PCI DSS assessment process",
"D": "To avoid the need for ongoing monitoring of controls"
},
"solution": "B"
},
{
"question": "What should be included in the Security Plan/Concept of Operations in the C&A process?",
"answers": {
"A": "Guidance on potential threats and vulnerabilities",
"B": "Security measures to address system security requirements",
"C": "List of system deficiencies",
"D": "An analysis of the system architecture"
},
"solution": "B"
},
{
"question": "Which of the following would lower the level of password security?",
"answers": {
"A": "After a set number of failed attempts, the server will lock the user out, forcing her to call the administrator to re-enable her account",
"B": "All passwords are set to expire after 30 days",
"C": "Passwords must be greater than eight characters and contain at least one special character",
"D": "Complex passwords that users cannot change are randomly generated by the administrator"
},
"solution": "D"
},
{
"question": "Which domain would be considered suspicious and potentially fraudulent?",
"answers": {
"A": "login.microsoft.com",
"B": "www.microsoft.com",
"C": "microsoft.secure-login.com",
"D": "secure-login.microsoft.com"
},
"solution": "C"
},
{
"question": "What is the main purpose of server enumeration in the context of cybersecurity?",
"answers": {
"A": "Determining what services are running and extracting information from those services",
"B": "Scanning for system vulnerabilities",
"C": "Identifying network protocols and port numbers",
"D": "Extracting user information from a network"
},
"solution": "A"
},
{
"question": "What is the primary objective of an injection attack?",
"answers": {
"A": "To obtain sensitive information of users",
"B": "To overload the server with massive amounts of data",
"C": "To test the server's response time",
"D": "To pass exploit code to the server through poorly designed input validation"
},
"solution": "D"
},
{
"question": "What technology is used to control access both to wired and wireless LANs under the IEEE 802.1x standard?",
"answers": {
"A": "Authentication servers",
"B": "Dynamic WEP keys",
"C": "MAC address checking",
"D": "Router filters"
},
"solution": "A"
},
{
"question": "Which action capability in panels grants the ability to insert a new row?",
"answers": {
"A": "Update/Display All",
"B": "Add",
"C": "Update/Display",
"D": "Correction"
},
"solution": "B"
},
{
"question": "Which cryptographic algorithm is commonly used as the asymmetric component in a hybrid cryptosystem?",
"answers": {
"A": "CBC (Cipher Block Chaining)",
"B": "DES (Data Encryption Standard)",
"C": "AES (Advanced Encryption Standard)",
"D": "RSA (Rivest‐Shamir‐Adleman)"
},
"solution": "D"
},
{
"question": "During a Xmas tree scan what indicates a port is closed?",
"answers": {
"A": "A single RST packet",
"B": "ACK",
"C": "No return response",
"D": "SYN"
},
"solution": "A"
},
{
"question": "In the OSI model, which layer consists of the physical media and infrastructure of networks?",
"answers": {
"A": "Session",
"B": "Presentation",
"C": "Data Link",
"D": "Physical"
},
"solution": "D"
},
{
"question": "What is the primary requirement for an Random Bit Generator's (RBG) output to be used for generating cryptographic keys?",
"answers": {
"A": "The RBG's output should have a length that matches the target data to be protected",
"B": "The RBG's output should be computationally indistinguishable from random bits and provide sufficient entropy to support the security strength required for the target data",
"C": "The RBG's output should be as long as possible to ensure maximal randomness",
"D": "The RBG's output should have precisely the same length as the symmetric key to be generated"
},
"solution": "B"
},
{
"question": "Which technique focuses on identifying the presence of malware in binary application?",
"answers": {
"A": "Concolic execution",
"B": "Fuzzing",
"C": "Symbolic execution",
"D": "Reverse engineering"
},
"solution": "D"
},
{
"question": "According to the model for network security, what are the two components of all techniques for providing security?",
"answers": {
"A": "Security-related transformation and shared secret information",
"B": "Public key and private key",
"C": "Confidentiality and integrity",
"D": "Message encoding and sender verification"
},
"solution": "A"
},
{
"question": "Which type of attack involves altering the contents of a message during transmission?",
"answers": {
"A": "Replay attack",
"B": "Passive attack",
"C": "Traffic analysis",
"D": "Modification of messages"
},
"solution": "D"
},
{
"question": "At what location does the Michelangelo virus move the original boot sector of a floppy disk?",
"answers": {
"A": "Sector 5 (0,0,10)",
"B": "Sector 0 (0,0,7)",
"C": "Sector 3 (for 360 kb diskettes) or 14 (for 1.2 or 1.44 MB diskettes)",
"D": "Sector 2 (0,0,6)"
},
"solution": "C"
},
{
"question": "What is the primary aim of recovery in response to a security incident?",
"answers": {
"A": "Implement additional security measures to prevent similar incidents in the future",
"B": "Restore the system to its normal functioning and minimize the impact of the incident",
"C": "Publicly disclose the details of the security incident to increase transparency",
"D": "Identify the origin of the security incident and take legal action against the perpetrators"
},
"solution": "B"
},
{
"question": "What does the term 'rooting' mean in the context of a mobile device?",
"answers": {
"A": "Enhancing battery life",
"B": "Utilizing a network vulnerability",
"C": "Tampering with digital rights management security",
"D": "Increasing device processing speed"
},
"solution": "C"
},
{
"question": "Which DoS attack sends large amounts of ICMP Echo traffic to a broadcast IP address with a spoofed source address of a victim?",
"answers": {
"A": "Smurf attack",
"B": "SYN flood attack",
"C": "Ping of Death",
"D": "Botnet attack"
},
"solution": "A"
},
{
"question": "What does the abbreviation 'SDK' stand for in the context of software security?",
"answers": {
"A": "Software Development Kit",
"B": "System Deflection Key",
"C": "Software Delegation Kernel",
"D": "System Development Key"
},
"solution": "A"
},
{
"question": "Which design concept limits access to systems from outside users while protecting users and systems inside the LAN?",
"answers": {
"A": "DMZ",
"B": "VLAN",
"C": "I&A",
"D": "Router"
},
"solution": "A"
},
{
"question": "What is a major concern related to the aggregation of personal information into large databases in healthcare?",
"answers": {
"A": "Reduction in data theft incidents",
"B": "Enhanced operational efficiency",
"C": "Improved patient care",
"D": "Increased likelihood of data abuse and privacy violations"
},
"solution": "D"
},
{
"question": "When establishing information security policies and procedures, what is essential for an organization to ensure?",
"answers": {
"A": "That policies and procedures comply with the latest industry security trends",
"B": "That policies and procedures are kept up to date, documented, known to all affected parties, and actively used",
"C": "That only documented policies are used",
"D": "That policies and procedures are strictly followed by the IT department"
},
"solution": "B"
},
{
"question": "Which of the following is a purpose of having synchronized system clocks?",
"answers": {
"A": "To compare log files from different systems",
"B": "To accelerate system performance",
"C": "To standardize file naming conventions",
"D": "To reduce power consumption"
},
"solution": "A"
},
{
"question": "Which access control model would be found in a firewall?",
"answers": {
"A": "Mandatory access control",
"B": "Discretionary access control",
"C": "Role-based access control",
"D": "Rule-based access control"
},
"solution": "D"
},
{
"question": "What does the principle of 'least privilege' in cybersecurity refer to?",
"answers": {
"A": "Allowing all users access to all resources",
"B": "Granting administrators unrestricted access to all resources",
"C": "Granting users the minimum level of access required to perform their tasks",
"D": "Limiting the number of users accessing the system"
},
"solution": "C"
},
{
"question": "What is the main purpose of a honeypot in a network environment?",
"answers": {
"A": "To identify insider abuses of a system",
"B": "To provide services to public networks without direct access to the internal network",
"C": "To act as a decoy and draw attackers away from critical resources",
"D": "To examine and reassemble fragmented traffic passing through a network"
},
"solution": "C"
},
{
"question": "What is the primary purpose of source code obfuscation?",
"answers": {
"A": "To make the code unreadable and tough to reverse engineer",
"B": "To improve the performance of the program",
"C": "To make the code more efficient and faster",
"D": "To enhance the security of the source code"
},
"solution": "A"
},
{
"question": "What does DNS stand for in networking?",
"answers": {
"A": "Digital Network Server",
"B": "Data Name Source",
"C": "Domain Name Service",
"D": "Dynamic Network System"
},
"solution": "C"
},
{
"question": "Which type of detection technique executes a program and monitors the execution to detect vulnerabilities?",
"answers": {
"A": "Heuristic static detection",
"B": "Model checking",
"C": "Sound static verification",
"D": "Dynamic detection"
},
"solution": "D"
},
{
"question": "What is the name of the worm that infected more than 360,000 computers across the globe on July 19, 2001?",
"answers": {
"A": "Nimda",
"B": "Code Red",
"C": "Morris",
"D": "SadMind"
},
"solution": "B"
},
{
"question": "How many major categories do the TCSEC criteria define?",
"answers": {
"A": "Three",
"B": "Two",
"C": "Five",
"D": "Four"
},
"solution": "D"
},
{
"question": "What type of attack occurs when an attacker intercepts and alters communication between two parties without their knowledge?",
"answers": {
"A": "SQL Injection",
"B": "Cross-Site Scripting (XSS) Attack",
"C": "Man-in-the-Middle (MitM) Attack",
"D": "Distributed Denial of Service (DDoS) Attack"
},
"solution": "C"
},
{
"question": "Which of the following is a component of physical security?",
"answers": {
"A": "Firewalls",
"B": "Intrusion detection systems",
"C": "Virus scanning software",
"D": "Locks and alarms"
},
"solution": "D"
},
{
"question": "Which method of programming uses encapsulated code sets called objects?",
"answers": {
"A": "Structured programming",
"B": "Procedural programming",
"C": "Object-oriented programming",
"D": "Functional programming"
},
"solution": "C"
},
{
"question": "What is the purpose of covering tracks in the ethical hacking process?",
"answers": {
"A": "To gain initial access to the target's system",
"B": "To protect the target's system from further attacks",
"C": "To hide or delete any evidence of the attack",
"D": "To maintain continuous access to the target's system"
},
"solution": "C"
},
{
"question": "How often are unauthorized changes to critical files checked by a change-detection mechanism according to PCI DSS 4.0 Requirement?",
"answers": {
"A": "At least once every week",
"B": "Periodically based on a risk analysis",
"C": "At least once every month",
"D": "At least once every 6 months"
},
"solution": "A"
},
{
"question": "What is the primary role of the IP header in the TCP/IP protocol suite?",
"answers": {
"A": "Removing physical layer headers upon receiving data",
"B": "Adding the transport layer header to the transmitted data",
"C": "Packet addressing and routing through the network",
"D": "Removing the data encapsulation upon receiving data"
},
"solution": "C"
},
{
"question": "What is a potential symptom of a network intrusion when large numbers of unsuccessful login attempts are detected?",
"answers": {
"A": "Successful system authentication",
"B": "Stable system behavior",
"C": "Increased system performance",
"D": "Unsuccessful system authentication"
},
"solution": "D"
},
{
"question": "What technology is commonly used to secure mobile banking and e-commerce applications?",
"answers": {
"A": "TLS (Transport Layer Security)",
"B": "PKI (Public Key Infrastructure)",
"C": "WAP (Wireless Application Protocol)",
"D": "WEP (Wired Equivalency Protocol)"
},
"solution": "A"
},
{
"question": "Which category of penetration testing methodologies includes those developed by specific entities offering network security services or certifications?",
"answers": {
"A": "Standard methodologies",
"B": "Public methodologies",
"C": "Open source methodologies",
"D": "Proprietary methodologies"
},
"solution": "D"
},
{
"question": "What is physical security?",
"answers": {
"A": "The protection of data from hacker attacks",
"B": "The act of securing a building or location to prevent unauthorized access, theft, or damage to physical assets",
"C": "The prevention of natural disasters caused by environmental factors",
"D": "The enforcement of technical security controls to prevent data breaches"
},
"solution": "B"
},
{
"question": "Which of the following is NOT one of the five disaster recovery plan testing types?",
"answers": {
"A": "Simulation",
"B": "Checklist",
"C": "Availability",
"D": "Full Interruption"
},
"solution": "C"
},
{
"question": "What role does a Key Generator fulfill in Attribute-Based Encryption (ABE) in a distributed system?",
"answers": {
"A": "It creates cryptographic keys for securing communication between federated systems",
"B": "It generates private keys based on attribute sets to enforce decryption policies",
"C": "It generates private keys based on role-based access policies for users and resources",
"D": "It provides secure connections for the transfer of attribute certificates and access tokens"
},
"solution": "B"
},
{
"question": "What does TCP-level filtering provide that makes it more advantageous than packet filtering?",
"answers": {
"A": "Ease of maintaining a blacklist",
"B": "Ability to block IP spoofing",
"C": "Increased speed in filtering malicious traffic",
"D": "Additional functionality such as virtual private networking"
},
"solution": "D"
},
{
"question": "What is typically part of an information policy?",
"answers": {
"A": "Authentication",
"B": "Acceptable use",
"C": "Classification of information",
"D": "Employee termination procedure"
},
"solution": "C"
},
{
"question": "How many keys exist in a public/private key pair?",
"answers": {
"A": "0",
"B": "2",
"C": "1",
"D": "4"
},
"solution": "B"
},
{
"question": "Which type of criminal operation is characterised by setting up web pages that resemble the original ones as much as possible to steal sensitive information?",
"answers": {
"A": "Disinformation",
"B": "Click fraud",
"C": "Phishing",
"D": "Ransomware"
},
"solution": "C"
},
{
"question": "What does the CIA triad in cryptography emphasize?",
"answers": {
"A": "Confidentiality, Integrity, Authenticity",
"B": "Confidentiality, Integrity, Availability",
"C": "Confidentiality, Authenticity, Nonrepudiation",
"D": "Confidentiality, Availability, Nonrepudiation"
},
"solution": "B"
},
{
"question": "Which key combination helps to secure the logon process in Windows?",
"answers": {
"A": "Alt+F4",
"B": "Ctrl+Alt+Del",
"C": "Ctrl+Shift+Esc",
"D": "Windows+R"
},
"solution": "B"
},
{
"question": "Which of the following tools is commonly used for network packet analysis and troubleshooting?",
"answers": {
"A": "Wireshark",
"B": "Metasploit",
"C": "Nmap",
"D": "Hydra"
},
"solution": "A"
},
{
"question": "Which risk category involves the business processes within an organization?",
"answers": {
"A": "Personnel",
"B": "Technological",
"C": "Operational",
"D": "Economic"
},
"solution": "C"
},
{
"question": "What type of attack consumes the resources on a web server, preventing it from being used by legitimate users?",
"answers": {
"A": "Buffer Overflow attack",
"B": "Cross-Site Scripting (XSS) attack",
"C": "Denial-of-Service (DoS) attack",
"D": "IP Fragmentation/Fragmentation Attack"
},
"solution": "C"
},
{
"question": "What is the main purpose of encryption in email communication?",
"answers": {
"A": "To protect the message from being intercepted",
"B": "To enhance the speed of message transmission",
"C": "To verify the authenticity of the message",
"D": "To ensure the email content is readable by any recipient"
},
"solution": "A"
},
{
"question": "Who is responsible for developing strategic plans for the IT department?",
"answers": {
"A": "The Chief Information Officer",
"B": "The Chief Risk Officer",
"C": "The Human Resources Manager",
"D": "The Security Director"
},
"solution": "A"
},
{
"question": "What technology allows an automated tool to interact with a human interface?",
"answers": {
"A": "Virtual Applications",
"B": "Screen Scraping",
"C": "Multimedia Collaboration",
"D": "Remote Desktop Services"
},
"solution": "B"
},
{
"question": "What does a 'dropper' type of malware typically do after being installed on a system?",
"answers": {
"A": "Reverts back to a known clean state",
"B": "Grabs other software to install",
"C": "Performs a dynamic analysis of the system",
"D": "Delivers an updated version of the operating system"
},
"solution": "B"
},
{
"question": "During which phase of the incident response process is the incident response plan developed and documented?",
"answers": {
"A": "Detection and analysis",
"B": "Post-incident activity",
"C": "Containment, eradication, and recovery",
"D": "Preparation"
},
"solution": "D"
},
{
"question": "What is the term used to categorize hackers into three separate classifications?",
"answers": {
"A": "Hat system",
"B": "Western movie system",
"C": "Hacker spectrum",
"D": "Cowboy classifications"
},
"solution": "A"
},
{
"question": "What is the name of the tool that scans for open ports through a firewall by utilizing the TTL field in IP packets?",
"answers": {
"A": "TTL scanner",
"B": "Firewall scanner",
"C": "ACK pseudo-connection",
"D": "Firewalk"
},
"solution": "D"
},
{
"question": "What attack involves inserting an unauthorized person in the communication path between two users to intercept and modify packets?",
"answers": {
"A": "Known Plaintext Attack",
"B": "Chosen Cipher-Text Attack",
"C": "MITM Attack",
"D": "Brute-Force Attack"
},
"solution": "C"
},
{
"question": "What is the term used to describe processes running at the same time?",
"answers": {
"A": "Concurrent",
"B": "Parallel",
"C": "Sequential",
"D": "Simultaneous"
},
"solution": "A"
},
{
"question": "Which security feature can help prevent buffer overflow attacks by marking certain memory regions as non-executable?",
"answers": {
"A": "Data Execution Prevention (DEP)",
"B": "Buffer Overflow Prevention (BOP)",
"C": "Intrusion Detection System (IDS)",
"D": "Address Space Layout Randomization (ASLR)"
},
"solution": "A"
},
{
"question": "Which type of P2P protocol is mainly used for data dissemination applications and does not use a structured addressing scheme?",
"answers": {
"A": "Unstructured P2P",
"B": "Hybrid P2P",
"C": "Hierarchical P2P",
"D": "Structured P2P"
},
"solution": "A"
},
{
"question": "What is the primary function of a SIEM solution in cybersecurity?",
"answers": {
"A": "Encrypting log files for secure storage",
"B": "Capturing and analyzing packets to uncover vulnerabilities and monitor systems",
"C": "Real-time monitoring of systems and logs, and automation of alerts",
"D": "Providing alternate path to manage devices with no network connection"
},
"solution": "C"
},
{
"question": "What is the purpose of NOP sleds in buffer overflow exploits?",
"answers": {
"A": "To encrypt the payload",
"B": "To alter the content of the NOP register",
"C": "To insert no-operation instructions for padding",
"D": "To alter the content of the EIP register"
},
"solution": "C"
},
{
"question": "What is the primary advantage of protecting something as a trade secret instead of a patent?",
"answers": {
"A": "The potential for indefinite protection and ownership",
"B": "The exclusive rights to the information for a specific period of time",
"C": "The ability to publicly disclose the information without losing protection",
"D": "The ability to license the secret to others and the public disclosure requirement"
},
"solution": "A"
},
{
"question": "Which type of fire suppression system uses inert gases to reduce oxygen levels and extinguish fires?",
"answers": {
"A": "Dry pipe system",
"B": "Water mist system",
"C": "Clean agent system",
"D": "Carbon dioxide (CO2) system"
},
"solution": "C"
},
{
"question": "How would you calculate risk?",
"answers": {
"A": "Probability / loss",
"B": "Probability * mitigation factor",
"C": "(Loss + mitigation factor) * (loss/probability)",
"D": "Probability * loss"
},
"solution": "D"
},
{
"question": "What year did NIST approve the Federal Information Processing Standards (FIPS) 180-2, which contains specifications for the Secure Hash Standard?",
"answers": {
"A": "2002",
"B": "2000",
"C": "2001",
"D": "2003"
},
"solution": "A"
},
{
"question": "Which security measure is used to prevent unauthorized access to a computer network?",
"answers": {
"A": "Firewalls",
"B": "Debugging tools",
"C": "Open ports",
"D": "Password sharing"
},
"solution": "A"
},
{
"question": "Which tool is commonly used to obtain registration information and contact details of a domain name?",
"answers": {
"A": "Tracert",
"B": "Netcraft",
"C": "NSlookup",
"D": "Whois"
},
"solution": "D"
},
{
"question": "What does a layered defense strategy provide in physical security?",
"answers": {
"A": "Controlling access through different types of encryption methods",
"B": "Multiple layers of physical barriers to deny all access",
"C": "Enhances access control confidence through some redundancy and expanded protection",
"D": "Isolating information systems from external access"
},
"solution": "C"
},
{
"question": "What is encryption used for in cybersecurity?",
"answers": {
"A": "To protect data by converting it into a code that can only be read with a decryption key",
"B": "To detect and prevent malware infections",
"C": "To optimize network performance",
"D": "To track and monitor internet usage"
},
"solution": "A"
},
{
"question": "What should continuity planners be aware of and incorporate into the crisis management planning amid homeland security concerns?",
"answers": {
"A": "Cloud-based security solutions",
"B": "Methods of mass data collection",
"C": "Network architecture optimization",
"D": "Forensic preparations including computer forensic teams"
},
"solution": "D"
},
{
"question": "Management of your company has recently become increasingly concerned with security. You have been asked to provide examples of controls that will help to prevent security breaches. Which control is an example of this?",
"answers": {
"A": "Security policy",
"B": "Job rotation",
"C": "Audit logs",
"D": "Backups"
},
"solution": "A"
},
{
"question": "What technology is usually deployed in conjunction with unauthenticated ADS-B to mitigate some of its security vulnerabilities?",
"answers": {
"A": "Near-Field Communication (NFC)",
"B": "General Packet Radio Service (GPRS)",
"C": "Long Term Evolution (LTE)",
"D": "Multilateration (MLAT)"
},
"solution": "D"
},
{
"question": "What is the primary purpose of intrusion detection systems?",
"answers": {
"A": "Preventing and responding to unauthorized access attempts",
"B": "Filtering spam emails",
"C": "Detecting and responding to unauthorized access attempts",
"D": "Encrypting network traffic"
},
"solution": "C"
},
{
"question": "What factors should a tester consider when scheduling an attack in the attack phase of a penetration test?",
"answers": {
"A": "The opportunity to cause maximum damage to the target",
"B": "The availability of tools for social engineering",
"C": "The probability of getting caught by the target's intrusion response interval",
"D": "The amount of time a real adversary can be expected to attempt to penetrate the system"
},
"solution": "D"
},
{
"question": "Which layer of the OSI model facilitates communication between the Physical and Network layers and primarily deals with the media access control (MAC) address?",
"answers": {
"A": "Transport layer",
"B": "Data Link layer",
"C": "Session layer",
"D": "Network layer"
},
"solution": "B"
},
{
"question": "What is the primary goal of an Information Security Governance strategy?",
"answers": {
"A": "To minimize the impact of security incidents on the organization",
"B": "To obtain senior management commitment and support",
"C": "To enforce compliance with information security policies",
"D": "To prioritize options to mitigate risks"
},
"solution": "B"
},
{
"question": "Who should know about the penetration test beforehand?",
"answers": {
"A": "Only the senior management",
"B": "Limit the number of employees who know about the test to the technicians responsible for the networks and computer systems",
"C": "All employees except the IT department",
"D": "Everyone in the organization"
},
"solution": "B"
},
{
"question": "In a layered defense, what does deterrence aim to achieve?",
"answers": {
"A": "Simulate additional layers of protection",
"B": "Delay unauthorized access attempts",
"C": "Discourage attempts by making the prize less appealing than the risk",
"D": "Increase the number of access control systems"
},
"solution": "C"
},
{
"question": "Which statement is true of the Rijndael algorithm?",
"answers": {
"A": "Rijndael uses variable block lengths and variable key lengths",
"B": "Rijndael uses variable block lengths and fixed key lengths",
"C": "Rijndael uses fixed block lengths and fixed key lengths",
"D": "Rijndael uses fixed block lengths and variable key lengths"
},
"solution": "A"
},
{
"question": "Which statement is true of the AES algorithm?",
"answers": {
"A": "AES uses variable block lengths and variable key lengths",
"B": "AES uses variable block lengths and fixed key lengths",
"C": "AES uses fixed block lengths and fixed key lengths",
"D": "AES uses fixed block lengths and variable key lengths"
},
"solution": "D"
},
{
"question": "You are tasked with deploying a biometric system for the company's data center, with management requiring the system to have the lowest crossover error rate (CER). Which biometric term helps determine CER?",
"answers": {
"A": "ERR",
"B": "ACL",
"C": "FAR",
"D": "EAR"
},
"solution": "C"
},
{
"question": "Which of the following cannot be linked over a VPN?",
"answers": {
"A": "A system connected to the Internet and a LAN connected to the Internet",
"B": "Two systems on the same LAN",
"C": "Two systems without an intermediary network connection",
"D": "Two distant LANs"
},
"solution": "C"
},
{
"question": "What is the displacement sequence of the permutation (0, 1, 2) for a rotor system (m=3)?",
"answers": {
"A": "(0, 0, 0)",
"B": "(0, 1, 2)",
"C": "(1, 2, 0)",
"D": "(1, 1, 1)"
},
"solution": "A"
},
{
"question": "How does a website identify returning users using cookies?",
"answers": {
"A": "By monitoring users' mouse-clicking choices",
"B": "By storing the users' personal data",
"C": "Checking the unique identifier code, previously recorded in your cookie file",
"D": "By prompting users to enter their login credentials"
},
"solution": "C"
},
{
"question": "What does AAA stand for in the context of network security?",
"answers": {
"A": "Application, Authentication, and Authorization",
"B": "Authentication, Authorization, and Accountability",
"C": "Access, Authorization, and Accounting",
"D": "Accounting, Authentication, and Authorization"
},
"solution": "B"
},
{
"question": "What is the purpose of multi-factor authentication in cybersecurity?",
"answers": {
"A": "To verify a user's identity using only one factor",
"B": "To allow access to a network from multiple geographic locations",
"C": "To enhance security by requiring multiple forms of verification from the user",
"D": "To limit access to a network to a single device"
},
"solution": "C"
},
{
"question": "What is the term used to describe the protection of natural persons with regard to the processing of personal data and on the free movement of such data?",
"answers": {
"A": "General Data Protection Regulation (GDPR)",
"B": "Security Data Protection Act (SDPA)",
"C": "Data Privacy and Security Regulation (DPSR)",
"D": "Personal Data Protection Directive (PDPD)"
},
"solution": "A"
},
{
"question": "Which access control model leverages a central authority that regulates access based on security labels, such as the clearance level of a subject and the classification of the object?",
"answers": {
"A": "Role-Based Access Control (RBAC)",
"B": "Discretionary Access Control (DAC)",
"C": "Mandatory Access Control (MAC)",
"D": "Access Control Matrix"
},
"solution": "C"
},
{
"question": "What is true regarding the potential vulnerability of biometrics?",
"answers": {
"A": "Biometrics have potential vulnerabilities to software-based attacks and revocation may be challenging",
"B": "Biometric systems are replaceable and revocable",
"C": "Biometrics are immune to software-based attacks",
"D": "Revocation of a broken biometric is straightforward"
},
"solution": "A"
},
{
"question": "Which type of attack uses numerous hosts to overwhelm a target with an excessive amount of traffic?",
"answers": {
"A": "Man-in-the-middle attack",
"B": "Phishing attack",
"C": "Trojan horse attack",
"D": "Distributed Denial of Service (DDoS) attack"
},
"solution": "D"
},
{
"question": "Which of the following is a type of malware that relies on someone or something else to propagate from one system to another?",
"answers": {
"A": "Trojan",
"B": "Virus",
"C": "Rabbit",
"D": "Worm"
},
"solution": "B"
},
{
"question": "What is the main defense against wireless disassociation attacks?",
"answers": {
"A": "Implementing Wi-Fi Protected Access (WPA)",
"B": "Using outdated wireless technology",
"C": "Disabling wireless security",
"D": "Deploying a Wireless Intrusion Detection System (WIDS)"
},
"solution": "D"
},
{
"question": "What file is instrumental in preventing dictionary attacks against Unix systems?",
"answers": {
"A": "/etc/shadow",
"B": "/etc/pwlog",
"C": "/etc/passwd",
"D": "/etc/security"
},
"solution": "A"
},
{
"question": "Which mode of operation involves generating a MAC value and encrypting the plaintext in separate passes?",
"answers": {
"A": "GCM",
"B": "CFB",
"C": "CCM",
"D": "ECB"
},
"solution": "C"
},
{
"question": "What is the primary purpose of using proxies in cybersecurity?",
"answers": {
"A": "To block IP addresses and prevent any incoming network connections",
"B": "To provide additional encryption for transmitted data",
"C": "To strictly monitor and log all network traffic for security purposes",
"D": "To hide the user's IP address and location, making it difficult to trace their activities"
},
"solution": "D"
},
{
"question": "What is the purpose of periodically changing passwords or passphrases?",
"answers": {
"A": "To provide more time for a malicious individual to crack the password/passphrase",
"B": "To allow for more rapid detection and response to address potentially compromised credentials",
"C": "To prevent unauthorized users from gaining access to the user account through use of a shared authentication factor",
"D": "To offer less time for a malicious individual to crack a password/passphrase and less time to use a compromised password"
},
"solution": "D"
},
{
"question": "How can Google hacking be valuable in a cybersecurity investigation?",
"answers": {
"A": "To create fake Google search results",
"B": "To extract data from Google's databases",
"C": "To reveal hidden or sensitive information from Google search results",
"D": "To manipulate website content in Google's index"
},
"solution": "C"
},
{
"question": "Which tool is an intrusion detection system (IDS)?",
"answers": {
"A": "Tripwire",
"B": "Nessus",
"C": "Snort",
"D": "Ethereal"
},
"solution": "C"
},
{
"question": "Which protocol is used to create a secure environment in a wireless network?",
"answers": {
"A": "WEP",
"B": "WPA2",
"C": "WTLS",
"D": "WAP"
},
"solution": "B"
},
{
"question": "What is the purpose of the OOV (Order of Volatility) phase in incident response procedures?",
"answers": {
"A": "To preserve and collect volatile evidence",
"B": "To track man hours and expenses during incident response",
"C": "To analyze network traffic for patterns",
"D": "To allocate resources for incident response"
},
"solution": "A"
},
{
"question": "What type of policies and procedures should an organization develop to implement the HIPAA Security requirements?",
"answers": {
"A": "Procedures for physical security only",
"B": "Only physical safeguards",
"C": "Only technical security mechanisms",
"D": "Policies/standards, procedures, tools/infrastructure, and operational activities"
},
"solution": "D"
},
{
"question": "What is the proper sequence of the TCP three-way-handshake?",
"answers": {
"A": "SYN-ACK, ACK, ACK",
"B": "SYN, SYN-ACK, ACK",
"C": "SYN-SYN, SYN-ACK, SYN",
"D": "ACK, SYN-ACK, SYN"
},
"solution": "B"
},
{
"question": "Which port is commonly used by SMB when operating over TCP without NetBIOS?",
"answers": {
"A": "137",
"B": "139",
"C": "135",
"D": "445"
},
"solution": "D"
},
{
"question": "What is the focus of proactive mitigating technologies for control systems?",
"answers": {
"A": "Reactively responding to attacks to minimize their impact",
"B": "Implementing design choices to protect the CPS prior to any attack",
"C": "Reconfiguring the system online once an attack has been detected",
"D": "Identifying and blocking all potential attacks before they occur"
},
"solution": "B"
},
{
"question": "Which social engineering technique involves manipulating a person into providing information or a service they otherwise would never have given?",
"answers": {
"A": "Phishing",
"B": "Impersonation",
"C": "Pretexting",
"D": "Tailgating"
},
"solution": "C"
},
{
"question": "What should be included in a comprehensive business resumption plan?",
"answers": {
"A": "A regular review of the plan at least once every five years",
"B": "Listing of all union representatives",
"C": "Contact information for IT support personnel",
"D": "Detailed data flow diagrams showing internal and external system dependencies"
},
"solution": "D"
},
{
"question": "The Bell-LaPadula model addresses which one of the following items?",
"answers": {
"A": "Definition of a secure state transition",
"B": "Information flow from high to low",
"C": "The creation and destruction of subjects and objects",
"D": "Covert channels"
},
"solution": "B"
},
{
"question": "What would be the result of sending the string AAAAAAAAAAAAAAAAA into a variable that has been allocated space for 8 bytes?",
"answers": {
"A": "Heap spraying",
"B": "SQL injection",
"C": "Buffer overflow",
"D": "Slowloris attack"
},
"solution": "C"
},
{
"question": "According to the latest NIST guidelines what is the recommended password-change interval?",
"answers": {
"A": "30 days",
"B": "1 day",
"C": "20 days",
"D": "No need. Action is required only if there's a security breach or evidence of compromise"
},
"solution": "D"
},
{
"question": "What is the purpose of the Crossover Error Rate (CER) in evaluating biometric devices",
"answers": {
"A": "To compare the False Rejection Rate (FRR) of different biometric devices",
"B": "To compare the accuracy of similar biometric devices from different vendors or different models from the same vendor",
"C": "To assess the acceptance level of biometric factors",
"D": "To measure the throughput rate of biometric devices"
},
"solution": "B"
},
{
"question": "What is an essential requirement for the internal state of deterministic random number generators?",
"answers": {
"A": "Protection against readout and manipulation",
"B": "Constant reseeding requirement",
"C": "Dependence on reliable physical resources",
"D": "Regular update of entropy sources"
},
"solution": "A"
},
{
"question": "Which of the following is NOT one of the three primary models of access control?",
"answers": {
"A": "Mandatory Access Control",
"B": "Discretionary Access Control",
"C": "Context-Dependent Access Control",
"D": "Non-Discretionary Access Control"
},
"solution": "C"
},
{
"question": "What is the purpose of the Authority Revocation List (ARL) in X.509 certificates?",
"answers": {
"A": "To list all revoked certificates for a CA",
"B": "To list all issued certificates by a CA",
"C": "To list issued CA certificates",
"D": "To list revoked CA certificates"
},
"solution": "D"
},
{
"question": "What is the primary purpose of the traceroute program in network testing?",
"answers": {
"A": "To monitor and control internet traffic flow",
"B": "To identify the physical location of network routers",
"C": "To encrypt and secure data transmissions within the network",
"D": "To determine the path and time taken for data packets to reach their destination"
},
"solution": "D"
},
{
"question": "Which type of attack involves creating a block of data with the same hash value as the original data?",
"answers": {
"A": "Brute-force attack",
"B": "Rainbow table attack",
"C": "Collision attack",
"D": "Frequency attack"
},
"solution": "C"
},
{
"question": "What does ATM stand for in networking?",
"answers": {
"A": "Automatic Transfer Mode",
"B": "Advanced Transfer Method",
"C": "Asynchronous Transfer Mode",
"D": "Asynchronous Transmission Mode"
},
"solution": "C"
},
{
"question": "What kind of behavior would most likely indicate a host is infected with Storm-Worm, according to the Network for Education and Research in Oregon?",
"answers": {
"A": "Connection to a Storm-Worm C&C network",
"B": "One-way or two-way traffic",
"C": "Presence of Internet Control Messaging Protocol errors",
"D": "Lack of FINS"
},
"solution": "A"
},
{
"question": "What does DDoS stand for?",
"answers": {
"A": "Double Denial of Service",
"B": "Distributed Denial of Service",
"C": "Dual Denial of Services",
"D": "Denial of Distributed Services"
},
"solution": "B"
},
{
"question": "Why is two-factor authentication considered more secure than traditional password-based authentication methods?",
"answers": {
"A": "It associates each user with a unique digital certificate that serves as an additional layer of identity verification",
"B": "It combines something the user knows (e.g., password) with something the user has (e.g., a mobile device or security token) for authentication",
"C": "It limits access to sensitive information based on user roles and permissions within the network infrastructure",
"D": "It requires users to use a combination of upper and lower case letters, numbers, and special characters to create strong passwords"
},
"solution": "B"
},
{
"question": "What is the basis of the one-time pad encryption scheme's unbreakable nature?",
"answers": {
"A": "High complexity in encryption algorithms",
"B": "Usage of long encryption keys",
"C": "Use of random set of characters as long as the message",
"D": "Employing public and private key pairs"
},
"solution": "C"
},
{
"question": "Which of the following is an example of a standard network security control device?",
"answers": {
"A": "Firewall",
"B": "Security awareness training program",
"C": "CCTV surveillance system",
"D": "Biometric authentication system"
},
"solution": "A"
},
{
"question": "Which protocol uses secure tokens instead of requiring users to provide login credentials such as usernames and passwords for authentication and authorization against third-party web applications?",
"answers": {
"A": "SAML",
"B": "SSL",
"C": "OAuth",
"D": "LDAP"
},
"solution": "C"
},
{
"question": "Which asset category includes the cost of replacing IT facilities, hardware, and supporting supplies?",
"answers": {
"A": "Intangible assets",
"B": "Tangible assets",
"C": "Replacement costs for data and software",
"D": "Value of availability, confidentiality, and integrity"
},
"solution": "B"
},
{
"question": "What is the hexadecimal value of a NOP instruction in an Intel system?",
"answers": {
"A": "0x90",
"B": "90x0",
"C": "0x99",
"D": "0x80"
},
"solution": "A"
},
{
"question": "What is the primary function of the National Software Reference Library (NSRL) in digital forensics?",
"answers": {
"A": "Maintaining a repository of known software, file profiles, and file signatures for computer forensic investigations",
"B": "Developing cryptographic algorithms for secure communications",
"C": "Providing tools to automatically repair damaged files in forensic investigations",
"D": "Creating a database of unidentified malware for cybersecurity research"
},
"solution": "A"
},
{
"question": "Which flag is used with nmblookup to perform a broadcast address lookup for a specific system?",
"answers": {
"A": "-S",
"B": "-B",
"C": "-a",
"D": "-R"
},
"solution": "B"
},
{
"question": "What is the most effective technical strategy to defend the integrity and availability of computer-based data?",
"answers": {
"A": "Firewall protection",
"B": "Physical security measures",
"C": "Password encryption",
"D": "Data backup"
},
"solution": "D"
},
{
"question": "Which wireless encryption mechanism uses Temporal Key Integrity Protocol (TKIP) and is the successor to WEP?",
"answers": {
"A": "WPA",
"B": "802.11i",
"C": "EAP",
"D": "WPA2"
},
"solution": "A"
},
{
"question": "Which mechanism is used by PKI to allow immediate verification of a certificate's validity?",
"answers": {
"A": "CRL",
"B": "MD5",
"C": "SSHA",
"D": "OCSP"
},
"solution": "D"
},
{
"question": "What is the most effective method for controlling dial-up access to a computer system?",
"answers": {
"A": "Intercepting calls and verifying the identity of the caller (using a dynamic password mechanism)",
"B": "Adding modems to personal computers",
"C": "Implementing call-back systems",
"D": "Using a different phone number each time"
},
"solution": "A"
},
{
"question": "Which of the following acts as a proxy between two different systems to support interaction and simplify the work of programmers?",
"answers": {
"A": "Abstraction",
"B": "ODBC",
"C": "SDLC",
"D": "DSS"
},
"solution": "B"
},
{
"question": "Which of the following factors is used to prove or verify the identity of an individual or process on a computer system?",
"answers": {
"A": "Something you are",
"B": "Something you know",
"C": "All provided answers",
"D": "Something you have"
},
"solution": "C"
},
{
"question": "According to NIST guidelines, what is a recommended practice for creating a strong password?",
"answers": {
"A": "Implementing complex composition rules requiring a mix of character types",
"B": "Setting mandatory periodic password changes for all users",
"C": "Encouraging the use of longer, more memorable passphrases",
"D": "Requiring the use of password hints for easier recall"
},
"solution": "C"
},
{
"question": "Why is it important for developers to be responsible for fixing their own bugs?",
"answers": {
"A": "To shift responsibility to the project manager",
"B": "To avoid extra workload for the testing team",
"C": "To increase developers' accountability and ownership",
"D": "To encourage a blame culture"
},
"solution": "C"
},
{
"question": "What is the main advantage of using optical fiber as a transmission medium?",
"answers": {
"A": "Flexibility",
"B": "Easier installation",
"C": "Low cost",
"D": "High bandwidth"
},
"solution": "D"
},
{
"question": "What is the purpose of a service-level agreement (SLA) in the context of business continuity?",
"answers": {
"A": "To define the obligations of the service provider to the client",
"B": "To provide high-availability architecture",
"C": "To outline a disaster recovery plan",
"D": "To ensure the fault tolerance of systems"
},
"solution": "A"
},
{
"question": "What type of device helps to define an organization's perimeter and serve to deter casual trespassing?",
"answers": {
"A": "Security camera",
"B": "Fence",
"C": "Proximity access control system",
"D": "Firewall"
},
"solution": "B"
},
{
"question": "What network devices can be secured and monitored to protect against potential attacks and unauthorized access?",
"answers": {
"A": "Routers",
"B": "Switches",
"C": "All provided answers",
"D": "Servers"
},
"solution": "C"
},
{
"question": "What is the purpose of covert channel analysis in the context of operations security?",
"answers": {
"A": "To ensure that all potential covert storage channels are protected against",
"B": "To protect against both covert storage and covert timing channels",
"C": "To detect and mitigate the impact of a loss event through data recovery procedures",
"D": "To preserve data integrity during the testing of a system"
},
"solution": "B"
},
{
"question": "Which of the following would be the best example of a deterrent control?",
"answers": {
"A": "A guard posted outside the door",
"B": "A log aggregation system",
"C": "Hidden cameras onsite",
"D": "Backup recovery systems"
},
"solution": "A"
},
{
"question": "What is the purpose of using strong cryptography to protect cardholder data during transmission over open, public networks?",
"answers": {
"A": "To ensure the data is secured from unauthorized access or interception during transmission",
"B": "To increase the speed of data transmission over open, public networks",
"C": "To provide access to authorized individuals to monitor the transmission process",
"D": "To improve the efficiency of network routing protocols"
},
"solution": "A"
},
{
"question": "Which encryption algorithm is commonly referred to as Rijndael?",
"answers": {
"A": "RSA",
"B": "AES",
"C": "MD5",
"D": "3DES"
},
"solution": "B"
},
{
"question": "What happens when the rotor of an Enigma machine is rotated by 26 positions (the number of letters in the English alphabet)?",
"answers": {
"A": "The substitution mapping is shifted by 26 positions in the same direction",
"B": "The substitution mapping is shifted by 26 positions in the opposite direction",
"C": "The substitution mapping remains unchanged",
"D": "The rotor stops functioning"
},
"solution": "C"
},
{
"question": "Which principle specifies that programs and users should be given the least privilege necessary to accomplish their jobs?",
"answers": {
"A": "Well-formed transactions",
"B": "Separation of duties",
"C": "Delegation of authority",
"D": "Least privilege"
},
"solution": "D"
},
{
"question": "Where are local passwords for Windows accounts stored on the machine?",
"answers": {
"A": "C:\\Windows\\Users\\Passwords\\",
"B": "C:\\Program Files\\Passwords\\",
"C": "C:\\Local\\Passwords\\",
"D": "C:\\System32\\Config\\SAM"
},
"solution": "D"
},
{
"question": "What is Tor used for?",
"answers": {
"A": "To make it more difficult to trace a user's Internet activity",
"B": "To hide the process of scanning",
"C": "To automate scanning",
"D": "To hide the banner on a system"
},
"solution": "A"
},
{
"question": "What is the main goal of the National Information Assurance Partnership (NIAP) in the United States?",
"answers": {
"A": "To establish a formal cooperative liaison with WG3",
"B": "To develop standardized sets of IT security requirements for procurement",
"C": "To establish a cost-effective evaluation of security-capable IT products",
"D": "To align the security criteria used in North America and Europe"
},
"solution": "C"
},
{
"question": "What is the primary purpose of business continuity plans?",
"answers": {
"A": "To recover from natural disasters",
"B": "To conduct regular audits of the organization's security systems",
"C": "To minimize the effects of a disruptive event on a company",
"D": "To increase the cost associated with a disruptive event"
},
"solution": "C"
},
{
"question": "You have selected the option in your IDS to notify you via email if it senses any network irregularities. Checking the logs, you notice a few incidents but you didn’t receive any alerts. What protocol needs to be configured on the IDS?",
"answers": {
"A": "POP3",
"B": "SNMP",
"C": "NTP",
"D": "SMTP"
},
"solution": "D"
},
{
"question": "What is the primary task of intrusion detection systems?",
"answers": {
"A": "Escalating intrusion attempts to a higher authority for resolution",
"B": "Preventing all types of network attacks",
"C": "Detecting bad activities and signs of compromise",
"D": "Filtering web content for inappropriate material"
},
"solution": "C"
},
{
"question": "Which of the following is a mechanism for managing digital certificates through a system of trust?",
"answers": {
"A": "PKI",
"B": "PKCS",
"C": "ISA",
"D": "SSL"
},
"solution": "A"
},
{
"question": "A cybersecurity policy should address:",
"answers": {
"A": "Guidelines for acceptable use of technology",
"B": "Methods for hacking into computer systems",
"C": "Means to install unauthorized software",
"D": "Techniques to exploit software vulnerabilities"
},
"solution": "A"
},
{
"question": "Which protocol can provide authentication and integrity of the packet by use of a message digest of the accompanying data?",
"answers": {
"A": "TLS",
"B": "HTTPS",
"C": "AH and ESP",
"D": "DNSSEC"
},
"solution": "C"
},
{
"question": "Why is it important to take great care in ensuring that the report produced after a penetration test is only distributed to those with a need-to-know?",
"answers": {
"A": "To maintain secrecy for the tester's methods and techniques",
"B": "To ensure the report does not contain overly revealing information about the target's vulnerabilities",
"C": "To protect the sensitive information about the vulnerabilities and attack methods from unauthorized access",
"D": "To prevent the report from being used as evidence in legal action against the target"
},
"solution": "C"
},
{
"question": "What type of access control is not controlled by the owner of an object?",
"answers": {
"A": "Discretionary Access Control (DAC)",
"B": "Mandatory Access Control (MAC)",
"C": "Non-discretionary Access Control (NDAC)",
"D": "Trusted Access Control (TAC)"
},
"solution": "B"
},
{
"question": "What technique do hackers use to impersonate a trusted system before attempting to gain access to external resources?",
"answers": {
"A": "Worm attack",
"B": "Trojan horse",
"C": "Logic bomb",
"D": "IP spoofing"
},
"solution": "D"
},
{
"question": "Which of the following represents a compensating control?",
"answers": {
"A": "Data loss prevention",
"B": "Network access control",
"C": "Additional logging and auditing",
"D": "All of the above can be compensating control"
},
"solution": "D"
},
{
"question": "What neural-linguistic programming method suggests that people learn visually and need to see a picture or diagram to understand?",
"answers": {
"A": "Visual",
"B": "Mechanical",
"C": "Biological",
"D": "Auditory"
},
"solution": "A"
},
{
"question": "What is the role of the 64-bit value Wt used in each of the 80 rounds in SHA-512?",
"answers": {
"A": "It represents the output of the final hash value after processing all message blocks",
"B": "A 64-bit value derived from the current 1024-bit block being processed, using a message schedule",
"C": "It signifies a constant value that remains the same across all rounds and all message blocks",
"D": "It is used exclusively for padding the message blocks to ensure they are 1024 bits in length"
},
"solution": "B"
},
{
"question": "Which principle involves avoiding or reducing data redundancies and anomalies in relational databases?",
"answers": {
"A": "Memory Leak Prevention",
"B": "De-normalization",
"C": "Normalization",
"D": "Garbage Collection"
},
"solution": "C"
},
{
"question": "Which type of IDS is responsible for monitoring activities on a system?",
"answers": {
"A": "Log file monitor (LFM)",
"B": "File integrity-checking mechanism (FIM)",
"C": "Host-based intrusion detection system (HIDS)",
"D": "Network-based IDS (NIDS)"
},
"solution": "C"
},
{
"question": "Which of the following is an example of a symmetric key algorithm?",
"answers": {
"A": "RSA",
"B": "Elliptic Curve",
"C": "IDEA",
"D": "Diffie-Hellman"
},
"solution": "C"
},
{
"question": "Which type of key is used to decrypt the hash of a digital signature?",
"answers": {
"A": "Recovery keys",
"B": "Public keys",
"C": "Private keys",
"D": "Session keys"
},
"solution": "B"
},
{
"question": "The hashing algorithm in the Digital Signature Standard (DSS) generates a message digest of:",
"answers": {
"A": "160 bits",
"B": "56 bits",
"C": "120 bits",
"D": "130 bits"
},
"solution": "A"
},
{
"question": "Which choice below is NOT an example of an issue-specific policy?",
"answers": {
"A": "Virus-checking disk policy",
"B": "E-mail privacy policy",
"C": "Defined router ACLs",
"D": "Unfriendly employee termination policy"
},
"solution": "C"
},
{
"question": "Which IEEE protocol defines the Spanning Tree protocol?",
"answers": {
"A": "IEEE 802.3",
"B": "IEEE 802.1D",
"C": "IEEE 802.11",
"D": "IEEE 802.5"
},
"solution": "B"
},
{
"question": "Which is not a common wireless network authentication mechanism?",
"answers": {
"A": "802.1X",
"B": "WPA",
"C": "RC4",
"D": "WEP"
},
"solution": "C"
},
{
"question": "What is the main purpose of the Internet Assigned Numbers Authority (IANA) in the context of cybersecurity?",
"answers": {
"A": "Regulating internet domain names and IP addresses",
"B": "Monitoring and preventing social engineering attacks",
"C": "Establishing global cybersecurity standards",
"D": "Developing network intrusion detection systems"
},
"solution": "A"
}
]
}
Reference in New Issue View Git Blame Copy Permalink