CYBERSECURITY ANALYST QUIZ FEDVTE
KEY CONCEPTS AND REVISION NOTES
◉ DDoS
Answer: Degrade or block the availability of targeted resources to
users by sending requests from multiple systems spread across
the internet. Denial is performed by exhausting the network
bandwidth services rely on. Example resources include specific
websites, email services, DNS, and web-based applications.
(impact)
◉ Botnet
Answer: A network of compromised systems that can be
instructed to perform coordinated tasks and attacks. (Resource
Development)
◉ Bot
Answer: A singular compromised systems that can be instructed
to perform tasks and attacks. (Resource Development)
◉ C2
Answer: The adversary is trying to communicate with
compromised systems to control them. Consists of techniques that
adversaries may use to communicate with systems under their
control within a victim network. Adversaries commonly attempt
to mimic normal, expected traffic to avoid detection
,◉ Zero Trust
Answer: Framework requiring all users, whether in or outside the
organization's network, to be authenticated, authorized, and
continuously validated for security configuration and posture
before being granted or keeping access to applications and data.
◉ account takeover
Answer: An attacker gains unauthorized access to an existing
user's account.
◉ email compromise
Answer: Type of phishing attack that targets organizations, with
the goal of stealing money or critical information. Also known as
BEC.
◉ threat actor
Answer: An individual or a group posing a threat in the
digital/cyber realm.
◉ adversary
Answer: An entity that is not authorized to access or modify
information, or who works to defeat any protections afforded the
information or intends to perform malicious actions against other
cyber resources
, ◉ Tactics
Answer: An adversary's goal: the reason for performing an action.
◉ Techniques
Answer: Represent 'how' an adversary achieves a tactical goal by
performing an action.
◉ Procedures
Answer: Refers to the specific implementation an adversary uses
for techniques or sub-techniques
◉ CVE Attack Vectors
Answer: Physical: The attacker must physically touch the device.
Local: Attacker must have physical or logical access to the device.
Adjacent Network: Attacker must have access to the local network
the affected system is connected to.
Network: The attacker exploits a vulnerability remotely over a
network.
◉ Attack Vectors
Answer: Social Engineering
Compromise weak credentials
Insider threats
Seccurity misconfigurations
KEY CONCEPTS AND REVISION NOTES
◉ DDoS
Answer: Degrade or block the availability of targeted resources to
users by sending requests from multiple systems spread across
the internet. Denial is performed by exhausting the network
bandwidth services rely on. Example resources include specific
websites, email services, DNS, and web-based applications.
(impact)
◉ Botnet
Answer: A network of compromised systems that can be
instructed to perform coordinated tasks and attacks. (Resource
Development)
◉ Bot
Answer: A singular compromised systems that can be instructed
to perform tasks and attacks. (Resource Development)
◉ C2
Answer: The adversary is trying to communicate with
compromised systems to control them. Consists of techniques that
adversaries may use to communicate with systems under their
control within a victim network. Adversaries commonly attempt
to mimic normal, expected traffic to avoid detection
,◉ Zero Trust
Answer: Framework requiring all users, whether in or outside the
organization's network, to be authenticated, authorized, and
continuously validated for security configuration and posture
before being granted or keeping access to applications and data.
◉ account takeover
Answer: An attacker gains unauthorized access to an existing
user's account.
◉ email compromise
Answer: Type of phishing attack that targets organizations, with
the goal of stealing money or critical information. Also known as
BEC.
◉ threat actor
Answer: An individual or a group posing a threat in the
digital/cyber realm.
◉ adversary
Answer: An entity that is not authorized to access or modify
information, or who works to defeat any protections afforded the
information or intends to perform malicious actions against other
cyber resources
, ◉ Tactics
Answer: An adversary's goal: the reason for performing an action.
◉ Techniques
Answer: Represent 'how' an adversary achieves a tactical goal by
performing an action.
◉ Procedures
Answer: Refers to the specific implementation an adversary uses
for techniques or sub-techniques
◉ CVE Attack Vectors
Answer: Physical: The attacker must physically touch the device.
Local: Attacker must have physical or logical access to the device.
Adjacent Network: Attacker must have access to the local network
the affected system is connected to.
Network: The attacker exploits a vulnerability remotely over a
network.
◉ Attack Vectors
Answer: Social Engineering
Compromise weak credentials
Insider threats
Seccurity misconfigurations
