CERTIPORT IT SPECIALIST CERTIFICATION
TEST PAPER VERIFIED QUESTIONS AND
SOLUTIONS PACK
●● nation state actor
Answer: Highly skilled attackers sponsored by governments for cyber
espionage or warfare
●● script kiddies
Answer: Individuals who want to break into computers to create
damage, yet lack the advanced knowledge of computers and networks
needed to do so.
●● insiders
Answer: legitimate users who purposely or accidentally misuse their
access to the environment and cause some kind of business-affecting
incident
●● competitors
Answer: Other companies or entities operating in the same industry or
market
●● criminal syndicates
,Answer: Threat actors who have moved from traditional criminal
activities to more rewarding and less risky online attacks.
●● shadow it
Answer: IT systems, devices, software, or services managed without
explicit organizational approval
●● method to prevent spoofing
Answer: 2FA or two factor authentication
●● an employee accidentally sending out info to an external email
address is an example of
Answer: insider hacker
●● active reconnaissance
Answer: A penetration testing method used to collect information. It
sends data to systems and analyzes responses to gain information on the
target. Compare with passive reconnaissance.
●● passive reconnaissance
Answer: Using searches online for publicly accessible information that
can reveal valuable insight about a system.
●● watering hole attack
, Answer: compromises legitimate websites frequented by a specific
group to infect their users
●● pharming attack
Answer: redirects users to fake websites, often by manipulating dns
settings without need a user to click a malicious link
●● 5 pillars of information assurance
Answer: availability, integrity, authentication, confidentiality,
nonrepudiation
●● availability
Answer: ensures information is ready for use and at the required
performance level
●● integrity
Answer: guarantees data, associated systems only accesible or
modifiable by authorized users
●● authentication
Answer: ensures users are who they say they are (i.e. user
names/passwords, biometrics, digital certificates and security tokens
●● confidentiality
TEST PAPER VERIFIED QUESTIONS AND
SOLUTIONS PACK
●● nation state actor
Answer: Highly skilled attackers sponsored by governments for cyber
espionage or warfare
●● script kiddies
Answer: Individuals who want to break into computers to create
damage, yet lack the advanced knowledge of computers and networks
needed to do so.
●● insiders
Answer: legitimate users who purposely or accidentally misuse their
access to the environment and cause some kind of business-affecting
incident
●● competitors
Answer: Other companies or entities operating in the same industry or
market
●● criminal syndicates
,Answer: Threat actors who have moved from traditional criminal
activities to more rewarding and less risky online attacks.
●● shadow it
Answer: IT systems, devices, software, or services managed without
explicit organizational approval
●● method to prevent spoofing
Answer: 2FA or two factor authentication
●● an employee accidentally sending out info to an external email
address is an example of
Answer: insider hacker
●● active reconnaissance
Answer: A penetration testing method used to collect information. It
sends data to systems and analyzes responses to gain information on the
target. Compare with passive reconnaissance.
●● passive reconnaissance
Answer: Using searches online for publicly accessible information that
can reveal valuable insight about a system.
●● watering hole attack
, Answer: compromises legitimate websites frequented by a specific
group to infect their users
●● pharming attack
Answer: redirects users to fake websites, often by manipulating dns
settings without need a user to click a malicious link
●● 5 pillars of information assurance
Answer: availability, integrity, authentication, confidentiality,
nonrepudiation
●● availability
Answer: ensures information is ready for use and at the required
performance level
●● integrity
Answer: guarantees data, associated systems only accesible or
modifiable by authorized users
●● authentication
Answer: ensures users are who they say they are (i.e. user
names/passwords, biometrics, digital certificates and security tokens
●● confidentiality
