Midterm PCCSA QUESTIONS with
correct answers 100% 2025
Platform as a Service -PaaS -is best described as: - Correct Answer An online space where customers can
develop, run, and manage applications without the complexity of building and maintaining the
infrastructure typically associated with developing and launching an app.
An attacker only needs to successfully execute one step of the Cyber Kill Chain® to infiltrate a network,
whereas a defender must "be right every time" and break every step of the chain to prevent an attack. -
Correct Answer False
Which of the following are examples of an 'endpoint'? - Correct Answer Desktop, Mobile Phone, Point of
Sale (Terminal)
Botnets are commonly designed to be managed by a CnC -Command and Control -server. - Correct
Answer True
A 'rootkit' is usually associated with which of the following: - Correct Answer Escalation of Privilege
Which of the following WLAN standards is the LEAST secure? Pick two. - Correct Answer WiFi Protected
Setup ( WPS)
Wired Equivalent Privacy (WEP)
What would be the best description of 'polymorphism and metamorphism' ? - Correct Answer hiding
techniques
The ability to withstand a catastrophic series of events is commonly known as: - Correct Answer Fault
Tolerance
The terms 'ingress/egress' best match the following descriptions: - Correct Answer incoming / outgoing
Match the following security conceptsALWC: - Correct Answer Authentication: Biometrics
,Least Privilege: Zero Trust
WEP: Weak IV
Cloud: Virtual Environment
Match the following security conceptsPARI: - Correct Answer Proxy: Firewall
Anti-malware: Heuristics/Signatures
Reconnaissance: Vulnerability Detection
IPSec: L2TP VPN
Match the following security conceptsPMTC: - Correct Answer Phishing: Social Engineering
Monitoring: IDS
Trojan: Masquerade
Confidentiality: AES
True or False. Most cyberattacks today are perpetrated by internal threat actors, such as malicious
employees engaging in corporate espionage. - Correct Answer False
The cloud computing service model in which a provider's applications run on a cloud infrastructure and
the consumer does not manage or control the underlying infrastructure is known as: - Correct Answer
Softwareas a Service (SAAS)
Which of the following techniques and tools are used by an attacker to hide attack communications
traffic? - Correct Answer Port Hopping and Dynamic DNS
Secure Socket Layer (SSL) Encryption
Process and Remote Access Tools (RATs)
True or False. Business intelligence (BI) software consists of tools and techniques used to surface large
amounts of raw unstructured data to perform a variety of tasks including data mining, event processing,
and predictive analytics. - Correct Answer True
, True or False. The process in which end users find personal technology and apps that are more powerful
or capable, more convenient, less expensive, quicker to install, and easier to use, than enterprise IT
solutions is known as consumerization. - Correct Answer True
Which of the following are examples of an endpoint? - Correct Answer Point-Of-Sale (POS) Terminal
Desktop
Smartphone
True or False. An attacker only needs to successfully execute one step of the Cyber Kill Chain® to
infiltrate a network, whereas a defender must "be right every time" and break every step of the chain to
prevent an attack. - Correct Answer False
True or False. The Lockheed Martin Cyber Kill Chain® framework is a five-step process that an attacker
goes through in order to attack a network. - Correct Answer False
What is the name of the international cybercrime group that delivered the 2014 Sony hack and the 2017
HaoBao campaign? - Correct Answer Lazarus
True or False. A decline in the number of Faceliker malware instances was the primary reason why the
number ofransomware attacks declined by 81% from Q4 2017 to Q1 2018. - Correct Answer False
Which of the following techniques is NOT used to break the command and control (CnC) phase of the
Cyber Kill Chain®? - Correct Answer Vulnerability and Patch Management
True or False. Someone with limited hacking and/or programming skills that uses malicious programs
(malware) written by others to attack a computer or network is known as a newbie. - Correct Answer
False
What type of malware typically targets a computer network by replicating itself in order to spread
rapidly? - Correct Answer Worm
Malicious software or code that typically damages,takes control of, or collects information from an
infected endpoint is known as: - Correct Answer Malware
correct answers 100% 2025
Platform as a Service -PaaS -is best described as: - Correct Answer An online space where customers can
develop, run, and manage applications without the complexity of building and maintaining the
infrastructure typically associated with developing and launching an app.
An attacker only needs to successfully execute one step of the Cyber Kill Chain® to infiltrate a network,
whereas a defender must "be right every time" and break every step of the chain to prevent an attack. -
Correct Answer False
Which of the following are examples of an 'endpoint'? - Correct Answer Desktop, Mobile Phone, Point of
Sale (Terminal)
Botnets are commonly designed to be managed by a CnC -Command and Control -server. - Correct
Answer True
A 'rootkit' is usually associated with which of the following: - Correct Answer Escalation of Privilege
Which of the following WLAN standards is the LEAST secure? Pick two. - Correct Answer WiFi Protected
Setup ( WPS)
Wired Equivalent Privacy (WEP)
What would be the best description of 'polymorphism and metamorphism' ? - Correct Answer hiding
techniques
The ability to withstand a catastrophic series of events is commonly known as: - Correct Answer Fault
Tolerance
The terms 'ingress/egress' best match the following descriptions: - Correct Answer incoming / outgoing
Match the following security conceptsALWC: - Correct Answer Authentication: Biometrics
,Least Privilege: Zero Trust
WEP: Weak IV
Cloud: Virtual Environment
Match the following security conceptsPARI: - Correct Answer Proxy: Firewall
Anti-malware: Heuristics/Signatures
Reconnaissance: Vulnerability Detection
IPSec: L2TP VPN
Match the following security conceptsPMTC: - Correct Answer Phishing: Social Engineering
Monitoring: IDS
Trojan: Masquerade
Confidentiality: AES
True or False. Most cyberattacks today are perpetrated by internal threat actors, such as malicious
employees engaging in corporate espionage. - Correct Answer False
The cloud computing service model in which a provider's applications run on a cloud infrastructure and
the consumer does not manage or control the underlying infrastructure is known as: - Correct Answer
Softwareas a Service (SAAS)
Which of the following techniques and tools are used by an attacker to hide attack communications
traffic? - Correct Answer Port Hopping and Dynamic DNS
Secure Socket Layer (SSL) Encryption
Process and Remote Access Tools (RATs)
True or False. Business intelligence (BI) software consists of tools and techniques used to surface large
amounts of raw unstructured data to perform a variety of tasks including data mining, event processing,
and predictive analytics. - Correct Answer True
, True or False. The process in which end users find personal technology and apps that are more powerful
or capable, more convenient, less expensive, quicker to install, and easier to use, than enterprise IT
solutions is known as consumerization. - Correct Answer True
Which of the following are examples of an endpoint? - Correct Answer Point-Of-Sale (POS) Terminal
Desktop
Smartphone
True or False. An attacker only needs to successfully execute one step of the Cyber Kill Chain® to
infiltrate a network, whereas a defender must "be right every time" and break every step of the chain to
prevent an attack. - Correct Answer False
True or False. The Lockheed Martin Cyber Kill Chain® framework is a five-step process that an attacker
goes through in order to attack a network. - Correct Answer False
What is the name of the international cybercrime group that delivered the 2014 Sony hack and the 2017
HaoBao campaign? - Correct Answer Lazarus
True or False. A decline in the number of Faceliker malware instances was the primary reason why the
number ofransomware attacks declined by 81% from Q4 2017 to Q1 2018. - Correct Answer False
Which of the following techniques is NOT used to break the command and control (CnC) phase of the
Cyber Kill Chain®? - Correct Answer Vulnerability and Patch Management
True or False. Someone with limited hacking and/or programming skills that uses malicious programs
(malware) written by others to attack a computer or network is known as a newbie. - Correct Answer
False
What type of malware typically targets a computer network by replicating itself in order to spread
rapidly? - Correct Answer Worm
Malicious software or code that typically damages,takes control of, or collects information from an
infected endpoint is known as: - Correct Answer Malware
