ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ITS CYBERSECURITY PRACTICE EXAM
A self-propagating malicious code that can propagate to other systems on
the network and consume resources that could lead to a denial-of-service
attack is called a _____.
worm
A computer malware code that replicates itself on the target computer and
spreads through the network causing damage and distributing additional
harmful payloads is called a _____.
virus
A program that appears to be useful or harmless but contains hidden code
that can compromise the target system on which it runs is called a _____.
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
,ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Trojan horse
What are the two classes of encryption algorithms? (Choose 2.)
Asymmetric
Symmetric
Which algorithm is a one-way mathematical function that is used to provide
data integrity?
SHA-2
Why is it important to block incoming IP broadcast addresses and reserved
private IP addresses from entering your network?
These types of addresses are easier to use for IP spoofing attacks.
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
,ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
You are a junior cybersecurity analyst. An employee reports to you that her
laptop was stolen. For which three reasons should you escalate this event
to the Computer Security Incident Response Team (CSIRT)? (Choose 3.)
Potential network disruption or denial of service
Exposure of sensitive or confidential information
Unauthorized use of resources
Which classification of alert should be escalated to security investigators?
True positive
Which term refers to the combined sum of all potential threat vectors in
defense-in-depth security?
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
, ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Attack surface
You receive an email from your teacher that has a link to a class poll for a
pizza party. You click the link which takes you to the school portal to log in.
Later, you discover this was a phishing email and your credentials were
stolen. Which part of the CIA Triad was compromised in this attack?
Confidentiality
A major power surge occurs in the middle of making authorized changes to
the company payroll server which results in equipment failure. The
equipment is replaced and the data is restored from a previous, good
backup. Which part of the CIA Triad was preserved?
Availability
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ITS CYBERSECURITY PRACTICE EXAM
A self-propagating malicious code that can propagate to other systems on
the network and consume resources that could lead to a denial-of-service
attack is called a _____.
worm
A computer malware code that replicates itself on the target computer and
spreads through the network causing damage and distributing additional
harmful payloads is called a _____.
virus
A program that appears to be useful or harmless but contains hidden code
that can compromise the target system on which it runs is called a _____.
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
,ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Trojan horse
What are the two classes of encryption algorithms? (Choose 2.)
Asymmetric
Symmetric
Which algorithm is a one-way mathematical function that is used to provide
data integrity?
SHA-2
Why is it important to block incoming IP broadcast addresses and reserved
private IP addresses from entering your network?
These types of addresses are easier to use for IP spoofing attacks.
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
,ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
You are a junior cybersecurity analyst. An employee reports to you that her
laptop was stolen. For which three reasons should you escalate this event
to the Computer Security Incident Response Team (CSIRT)? (Choose 3.)
Potential network disruption or denial of service
Exposure of sensitive or confidential information
Unauthorized use of resources
Which classification of alert should be escalated to security investigators?
True positive
Which term refers to the combined sum of all potential threat vectors in
defense-in-depth security?
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
, ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Attack surface
You receive an email from your teacher that has a link to a class poll for a
pizza party. You click the link which takes you to the school portal to log in.
Later, you discover this was a phishing email and your credentials were
stolen. Which part of the CIA Triad was compromised in this attack?
Confidentiality
A major power surge occurs in the middle of making authorized changes to
the company payroll server which results in equipment failure. The
equipment is replaced and the data is restored from a previous, good
backup. Which part of the CIA Triad was preserved?
Availability
ITS ITS
CYBERSECURITY
ITS
CYBERSECURITY
CYBERSECURITY
PRACTICE
PRACTICE
PRACTICE
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
EXAM.pdf!!!!!!!!!!!!!!!!!!!!!!!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@@@@@@@@@@@@@@@@@@@@!!!!!!!!!!!!!!!!!!!!!!!!!!!!!