File format of a packet capture - ANSWER pcap
Password cracking tools - ANSWER John the Ripper / Cain & Abel
IDS - ANSWER Bro
IPS - ANSWER Sourcefire, Snort, & Bro
Hashing algorithms - ANSWER MD5 & SHA
Mobile device Forensic Suite - ANSWER Cellebrite
Popular packet capture tools - ANSWER Wireshark & tcpdump
Popular wireless packet capturing tool - ANSWER Aircrack-ng
Network Scanning tool - ANSWER NMAP
Popular network firewalls - ANSWER Cisco, Palo Alto, & Checkpoint
Command line tool to check connectivity - ANSWER Ping & tracert/ traceroute
1
, Software testing technique using random input - ANSWER Fuzzing
Training employees in multiple job roles - ANSWER cross training
forcing two employees to share authorization with a role - ANSWER dual control
Cloud based security suite - ANSWER SecaaS (security as a service)
Open standard AAA server - ANSWER RADIUS
Cisco's AAA server - ANSWER TACACS+
Types of context-based authentication - ANSWER Time, location, frequency, and
behavioral
Security centric framework - ANSWER NIST
Policy governing how long to store data - ANSWER Data retention policy
Policy governing appropriate utilization of company assets - ANSWER Acceptable use
policy
Type of threat with no known solution or patch - ANSWER Zero-day threat
Type of threat which is ongoing and highly trained - ANSWER Advanced persistent
threat
2
Password cracking tools - ANSWER John the Ripper / Cain & Abel
IDS - ANSWER Bro
IPS - ANSWER Sourcefire, Snort, & Bro
Hashing algorithms - ANSWER MD5 & SHA
Mobile device Forensic Suite - ANSWER Cellebrite
Popular packet capture tools - ANSWER Wireshark & tcpdump
Popular wireless packet capturing tool - ANSWER Aircrack-ng
Network Scanning tool - ANSWER NMAP
Popular network firewalls - ANSWER Cisco, Palo Alto, & Checkpoint
Command line tool to check connectivity - ANSWER Ping & tracert/ traceroute
1
, Software testing technique using random input - ANSWER Fuzzing
Training employees in multiple job roles - ANSWER cross training
forcing two employees to share authorization with a role - ANSWER dual control
Cloud based security suite - ANSWER SecaaS (security as a service)
Open standard AAA server - ANSWER RADIUS
Cisco's AAA server - ANSWER TACACS+
Types of context-based authentication - ANSWER Time, location, frequency, and
behavioral
Security centric framework - ANSWER NIST
Policy governing how long to store data - ANSWER Data retention policy
Policy governing appropriate utilization of company assets - ANSWER Acceptable use
policy
Type of threat with no known solution or patch - ANSWER Zero-day threat
Type of threat which is ongoing and highly trained - ANSWER Advanced persistent
threat
2
