ITC 564 EXAM 1 UPDATED ACTUAL QUESTIONS AND
CORRECT ANSWERS
Question:
Ethical hacking is an important element of a
comprehensive security plan, as it provides a method to
test a computer system or network with the purpose of
identifying and addressing _____.
a. PCI DSS
b. vulnerabilities.
c. baselines
d. MARKOV Chains
Answer:
b. vulnerabilities
Question:
Before installing any software, you should make sure
malware protection is used with _____ filtering to block
communication with malicious websites.
a. burst
b. markov
c. egress
Answer:
c. egress
Question:
_____ is one of the original methods to send malware,
spam, and bogus links. It continues to improve in
sophistication.
a. Email
b. Wi-fi
c. Instant Messaging
Answer:
a. Email
Question:
A(n) _____ is when a malicious actor gains access to a
network, and remains undetected for weeks, months and
even years.
a. XSS
b. phreak
c. advanced persistent threat
Answer:
c. advanced persistent threat
Question:
,A _____ attack is a subset of a brute force attack and this
uses a list of common passwords.
a. XSS
b. dictionary
c. burst
Answer:
b. dictionary
Question:
Ricky responded to an intrusion alert which indicated
someone was running an unauthorized port scan on the
network. Ricky immediately notified his supervisor as this
was indicative of a(n) _____ attack.
a. burst
b. passive
c. active
Answer:
b. passive
Question:
Cutting a fiber optic backbone is an example of a _____
attack
a. Physical
b. Malware
c. Brute force
d. Social
Answer:
a. Physical
Question:
Step two of the cyber kill chain is _____, where the
malicious actors are aware of the weak spots in the
organization and they devise a plan to get inside the
network.
a. Command and Control
b. installation
c. weaponization
d. delivery
Answer:
c. weaponization
Question:
An organization must incorporate safeguards into the
security compliance plan to defend against attacks.
Safeguards include administrative, physical, and
_____controls.
a. WAP
b. XSS
, c. technical
d. Symmetric
Answer:
c. technical
Question:
_____ attacks are denial of service attacks that shower the
network with aggressive amounts of traffic to shut down a
service.
a. Burst
b. Markov
c. Vector
Answer:
a. Burst
Question:
Cyber actors use _____ to conceal malicious behavior.
a. Markov models
b. encryption
c. Vectors
Answer:
b. encryption
Question:
The steps to take after an incident include: Identify,
respond, consider possible causes, _____, and resolve and
document.
a. contact TACACS
b. load an XML file
c. develop a solution
d. implement RADIUS
Answer:
c. develop a solution
Question:
A _____ is a hardware or software-based mechanism that
controls in-coming and out-going traffic based on a set
of rules that either permit or deny traffic on a network or
host, and provide access control and active filtering.
a. IPS
b. firewall
c. honeypot
d. IDS
Answer:
b. firewall
Question:
CORRECT ANSWERS
Question:
Ethical hacking is an important element of a
comprehensive security plan, as it provides a method to
test a computer system or network with the purpose of
identifying and addressing _____.
a. PCI DSS
b. vulnerabilities.
c. baselines
d. MARKOV Chains
Answer:
b. vulnerabilities
Question:
Before installing any software, you should make sure
malware protection is used with _____ filtering to block
communication with malicious websites.
a. burst
b. markov
c. egress
Answer:
c. egress
Question:
_____ is one of the original methods to send malware,
spam, and bogus links. It continues to improve in
sophistication.
a. Email
b. Wi-fi
c. Instant Messaging
Answer:
a. Email
Question:
A(n) _____ is when a malicious actor gains access to a
network, and remains undetected for weeks, months and
even years.
a. XSS
b. phreak
c. advanced persistent threat
Answer:
c. advanced persistent threat
Question:
,A _____ attack is a subset of a brute force attack and this
uses a list of common passwords.
a. XSS
b. dictionary
c. burst
Answer:
b. dictionary
Question:
Ricky responded to an intrusion alert which indicated
someone was running an unauthorized port scan on the
network. Ricky immediately notified his supervisor as this
was indicative of a(n) _____ attack.
a. burst
b. passive
c. active
Answer:
b. passive
Question:
Cutting a fiber optic backbone is an example of a _____
attack
a. Physical
b. Malware
c. Brute force
d. Social
Answer:
a. Physical
Question:
Step two of the cyber kill chain is _____, where the
malicious actors are aware of the weak spots in the
organization and they devise a plan to get inside the
network.
a. Command and Control
b. installation
c. weaponization
d. delivery
Answer:
c. weaponization
Question:
An organization must incorporate safeguards into the
security compliance plan to defend against attacks.
Safeguards include administrative, physical, and
_____controls.
a. WAP
b. XSS
, c. technical
d. Symmetric
Answer:
c. technical
Question:
_____ attacks are denial of service attacks that shower the
network with aggressive amounts of traffic to shut down a
service.
a. Burst
b. Markov
c. Vector
Answer:
a. Burst
Question:
Cyber actors use _____ to conceal malicious behavior.
a. Markov models
b. encryption
c. Vectors
Answer:
b. encryption
Question:
The steps to take after an incident include: Identify,
respond, consider possible causes, _____, and resolve and
document.
a. contact TACACS
b. load an XML file
c. develop a solution
d. implement RADIUS
Answer:
c. develop a solution
Question:
A _____ is a hardware or software-based mechanism that
controls in-coming and out-going traffic based on a set
of rules that either permit or deny traffic on a network or
host, and provide access control and active filtering.
a. IPS
b. firewall
c. honeypot
d. IDS
Answer:
b. firewall
Question:
