WGU D315 TEST QUESTIONS AND ANSWERS SURE
A+
✔✔Cyber Attack - Zero Day exploit - ✔✔New unheard vulnerability. Needs to be
patched
✔✔Cyber Attack - DNS tunneling - ✔✔An attacker creates a bad server and connects it
to the attacked domain name system. If now a request comes to the attacked server,
the attacker can tunnel into the client and since dns connections are rarely monitored,
the attacker stays hidden.
✔✔Cyber Attack - XXS attack - ✔✔Cross Site Scripting uses a web form to inject
malicious code.
✔✔Cyber Attack - Social engineering - ✔✔Convince someone to give a you access to
sensitive information
✔✔Cyber Attack - DoS and DDos - ✔✔Denial of Service attacks flood a server with too
much traffic
✔✔Cyber Attack - SQL Injection - ✔✔A technique to add a string of sql code to a query
to gain access to the targeted database
, ✔✔Cyber Attack - ARP Poisoning / ARP Spoofing - ✔✔LAN attack that sends malicious
Address Resolution Protocol packets to a default gateway in order to change the IP to
MAC pairings
✔✔Cyber Attack - Phishing - ✔✔Malicious link that often spoofs a valid site
✔✔Cyber Attack - Malware - ✔✔Software that is designed to disrupt, steal and open
backdoors.
✔✔Virus - ✔✔Software that can replicate itself. Can't be controlled remotely. Main goal
is to modify information
✔✔Worm - ✔✔Software that can replicate itself and can be controlled remotely. Main
goal is to eat system resources
✔✔Trojan Horse - ✔✔Malicious software inside desirable software. Can not replicate
but can be controlled remotely. Main goal is to steal information
✔✔What is AES 256 - ✔✔Advanced Encryption Standard with a symmetric key used in
most enterprise applications (i.e. banking). Fastest encryption method
✔✔What is SSL - ✔✔Secure Sockets Layer encryption with an asymmetric key.
Formerly used in https, but now replaced by TSL
✔✔What is TSL - ✔✔Transport layer security, an asymmetric key that replaced SSL.
used in https
✔✔What is IPsec - ✔✔Internet Protocol Security used to encrypt data in flight with an
asymmetric key commonly used in VPN's
✔✔Where are public keys used - ✔✔Asymmetric encryption uses public and private
keys
✔✔Private Cloud - ✔✔Single Tenant use. Often in one data center and the owner holds
the responsibility
✔✔Public Cloud - ✔✔AWS or MS Azure that offer multiple solutions. Data owner often
does not know where the data is stored (building, rack, disk)
✔✔Hybrid Cloud - ✔✔Mix of different clouds
✔✔Community cloud - ✔✔A cloud that is open only to specific organizations that have
common concerns.
A+
✔✔Cyber Attack - Zero Day exploit - ✔✔New unheard vulnerability. Needs to be
patched
✔✔Cyber Attack - DNS tunneling - ✔✔An attacker creates a bad server and connects it
to the attacked domain name system. If now a request comes to the attacked server,
the attacker can tunnel into the client and since dns connections are rarely monitored,
the attacker stays hidden.
✔✔Cyber Attack - XXS attack - ✔✔Cross Site Scripting uses a web form to inject
malicious code.
✔✔Cyber Attack - Social engineering - ✔✔Convince someone to give a you access to
sensitive information
✔✔Cyber Attack - DoS and DDos - ✔✔Denial of Service attacks flood a server with too
much traffic
✔✔Cyber Attack - SQL Injection - ✔✔A technique to add a string of sql code to a query
to gain access to the targeted database
, ✔✔Cyber Attack - ARP Poisoning / ARP Spoofing - ✔✔LAN attack that sends malicious
Address Resolution Protocol packets to a default gateway in order to change the IP to
MAC pairings
✔✔Cyber Attack - Phishing - ✔✔Malicious link that often spoofs a valid site
✔✔Cyber Attack - Malware - ✔✔Software that is designed to disrupt, steal and open
backdoors.
✔✔Virus - ✔✔Software that can replicate itself. Can't be controlled remotely. Main goal
is to modify information
✔✔Worm - ✔✔Software that can replicate itself and can be controlled remotely. Main
goal is to eat system resources
✔✔Trojan Horse - ✔✔Malicious software inside desirable software. Can not replicate
but can be controlled remotely. Main goal is to steal information
✔✔What is AES 256 - ✔✔Advanced Encryption Standard with a symmetric key used in
most enterprise applications (i.e. banking). Fastest encryption method
✔✔What is SSL - ✔✔Secure Sockets Layer encryption with an asymmetric key.
Formerly used in https, but now replaced by TSL
✔✔What is TSL - ✔✔Transport layer security, an asymmetric key that replaced SSL.
used in https
✔✔What is IPsec - ✔✔Internet Protocol Security used to encrypt data in flight with an
asymmetric key commonly used in VPN's
✔✔Where are public keys used - ✔✔Asymmetric encryption uses public and private
keys
✔✔Private Cloud - ✔✔Single Tenant use. Often in one data center and the owner holds
the responsibility
✔✔Public Cloud - ✔✔AWS or MS Azure that offer multiple solutions. Data owner often
does not know where the data is stored (building, rack, disk)
✔✔Hybrid Cloud - ✔✔Mix of different clouds
✔✔Community cloud - ✔✔A cloud that is open only to specific organizations that have
common concerns.
