FedVTE Cybersecurity Analyst exam with
answers
Any changes in behavior or deviation from baselines that result in an alert is an
activity that's part of: - ....🔰VERIFIED ANSWERS.... ✔✔Continuous
monitoring
Because virtual machines run separately from the physical host operating
system, and they are commonly leveraged for sandbox testing, security
measures such as disabling unnecessary services, and applying updates, are not
applicable. - ....🔰VERIFIED ANSWERS.... ✔✔False
Which of the following is NOT a best practice for securing wireless
environments? - ....🔰VERIFIED ANSWERS.... ✔✔Broadcasting the access
point SSID using proper network name only
Which of the following is an example of restricting access to files based on the
identity of the user or group? - ....🔰VERIFIED ANSWERS....
✔✔Discretionary Access Control
Which of the following is a common environmental reconnaissance task that is
performed to help gain insight on how an organization's networked systems are
connected, or mapping the network? - ....🔰VERIFIED ANSWERS....
✔✔Topology discovery
, For most efficient logging activities and analysis, it is a best practice to only log
and monitor incoming firewall traffic. - ....🔰VERIFIED ANSWERS....
✔✔False
Social engineering attacks attempt to convince a person to unwittingly take
some action which will help an attacker. - ....🔰VERIFIED ANSWERS....
✔✔True
If you were setting up an IDS with the desire to detect exploits for unknown or
unreleased vulnerabilities which type of IDS would you use? - ....🔰VERIFIED
ANSWERS.... ✔✔Anomaly detection
The 20 critical security controls developed by the Center for Internet Security,
also known as the SANS Top 20, are constructed using a combination of
information learned from: - ....🔰VERIFIED ANSWERS.... ✔✔Known attacks,
effective defenses, industry experts
Which of the following vulnerability scan methods uses push technology and is
dependent on network connectivity? - ....🔰VERIFIED ANSWERS....
✔✔Server-based
The federal version of certification and accreditation guidance that applies to
departments and agencies within the Department of Defense is: - ....🔰
VERIFIED ANSWERS.... ✔✔DIACAP
Which of the following assessment types is performed with the penetration
testers having zero insight into the target organization's network topology, and
the organization's security team is unaware a penetration test is occurring? -
....🔰VERIFIED ANSWERS.... ✔✔Black box
answers
Any changes in behavior or deviation from baselines that result in an alert is an
activity that's part of: - ....🔰VERIFIED ANSWERS.... ✔✔Continuous
monitoring
Because virtual machines run separately from the physical host operating
system, and they are commonly leveraged for sandbox testing, security
measures such as disabling unnecessary services, and applying updates, are not
applicable. - ....🔰VERIFIED ANSWERS.... ✔✔False
Which of the following is NOT a best practice for securing wireless
environments? - ....🔰VERIFIED ANSWERS.... ✔✔Broadcasting the access
point SSID using proper network name only
Which of the following is an example of restricting access to files based on the
identity of the user or group? - ....🔰VERIFIED ANSWERS....
✔✔Discretionary Access Control
Which of the following is a common environmental reconnaissance task that is
performed to help gain insight on how an organization's networked systems are
connected, or mapping the network? - ....🔰VERIFIED ANSWERS....
✔✔Topology discovery
, For most efficient logging activities and analysis, it is a best practice to only log
and monitor incoming firewall traffic. - ....🔰VERIFIED ANSWERS....
✔✔False
Social engineering attacks attempt to convince a person to unwittingly take
some action which will help an attacker. - ....🔰VERIFIED ANSWERS....
✔✔True
If you were setting up an IDS with the desire to detect exploits for unknown or
unreleased vulnerabilities which type of IDS would you use? - ....🔰VERIFIED
ANSWERS.... ✔✔Anomaly detection
The 20 critical security controls developed by the Center for Internet Security,
also known as the SANS Top 20, are constructed using a combination of
information learned from: - ....🔰VERIFIED ANSWERS.... ✔✔Known attacks,
effective defenses, industry experts
Which of the following vulnerability scan methods uses push technology and is
dependent on network connectivity? - ....🔰VERIFIED ANSWERS....
✔✔Server-based
The federal version of certification and accreditation guidance that applies to
departments and agencies within the Department of Defense is: - ....🔰
VERIFIED ANSWERS.... ✔✔DIACAP
Which of the following assessment types is performed with the penetration
testers having zero insight into the target organization's network topology, and
the organization's security team is unaware a penetration test is occurring? -
....🔰VERIFIED ANSWERS.... ✔✔Black box
