CERTIPORT IT SPECIALIST EXAMPREP
COMPLETE QUESTIONS AND VERIFIED
SOLUTIONS GUIDE
●● Adversary
Answer: An adversary is an organization or threat actor responsible for
leveraging a capability against a victim to fulfill its goals.
●● Capability
Answer: Refers to the tools and techniques used by an adversary in an
event.
●● Infrastructure
Answer: Includes the physical or logical communication structures such
as IP or e-mail addresses, domain names, and others, employed by an
adversary to deliver a capability.
●● Victim
Answer: A target against whom attacks are initiated, vulnerabilities are
exploited, or capabilities are used. It can be organizations, people, or
assets, such as target email or IP addresses, domains, and so on.wep
●● Reasons for Successful Attacks
,Answer: -Widespread Vulnerabilities
-Configuration Issues
-Poorly Designed Software
-Hardware Limitations
-Enterprise-Based Issues
●● Threat Actor
Answer: A person or element with power to carry out a threat. An
individual or entity responsible for cyber incidents against the
technology equipment or enterprises and users.
●● Information Security
Answer: The tasks of securing information that is in a digital format:
- Manipulated by a microprocessor / In Processing
-Preserved on a storage device / At Rest
- Transmitted over a network / In Transmit
●● BYOD
Answer: Allows users to use their own personal mobile devices for
business purposes.
●● Corporate owned, personally enabled (COPE)
,Answer: Employees choose from a selection of company-approved
devices.
●● Choose Your Own Device (CYOD)
Answer: Employees choose from a limited selection of approved devices
but the employee pays the upfront cost of the device while the business
owns the contract.
●● Virtual Desktop Infrastructure (VDI)
Answer: Stores sensitive applications and data on a remote server that is
accessed through a smartphone
●● Corporate-owned
Answer: Device is purchased and owned by the enterprise
●● Common Vulnerabilities and Exposures (CVE)
Answer: A tool that identifies vulnerabilities in operating systems and
application software. The CVE identifies vulnerabilities in operating
systems and application software.
●● Application Layer
Answer: The seventh layer of the OSI model. Application layer
protocols enable software programs to negotiate formatting, procedural,
security, synchronization, and other requirements with the network.
, Protocols Consists of FTP, HTTP, HTTPS, POP3, SMTP, IMAP. Device:
Computer
●● Presentation Layer
Answer: The sixth layer of the OSI model. Protocols in the Presentation
layer translate between the application and the network. Here, data are
formatted in a schema that the network can understand, with the format
varying according to the type of network used. The Presentation layer
also manages data encryption and decryption, such as the scrambling of
system passwords. Protocols: Compression, encryption
●● Session Layer
Answer: The fifth layer in the OSI model. This layer establishes and
maintains communication between two nodes on the network. It can be
considered the "traffic cop" for network communications. Protocols:
Logon/logoff, NetBIOS, Negotiation
●● Transport Layer
Answer: The fourth layer of the OSI model. In this layer protocols
ensure that data are transferred from point A to point B reliably and
without errors. this layer services include flow control, acknowledgment,
error correction, segmentation, reassembly, and sequencing. Protocols:
TCP, UDP
●● Network Layer
COMPLETE QUESTIONS AND VERIFIED
SOLUTIONS GUIDE
●● Adversary
Answer: An adversary is an organization or threat actor responsible for
leveraging a capability against a victim to fulfill its goals.
●● Capability
Answer: Refers to the tools and techniques used by an adversary in an
event.
●● Infrastructure
Answer: Includes the physical or logical communication structures such
as IP or e-mail addresses, domain names, and others, employed by an
adversary to deliver a capability.
●● Victim
Answer: A target against whom attacks are initiated, vulnerabilities are
exploited, or capabilities are used. It can be organizations, people, or
assets, such as target email or IP addresses, domains, and so on.wep
●● Reasons for Successful Attacks
,Answer: -Widespread Vulnerabilities
-Configuration Issues
-Poorly Designed Software
-Hardware Limitations
-Enterprise-Based Issues
●● Threat Actor
Answer: A person or element with power to carry out a threat. An
individual or entity responsible for cyber incidents against the
technology equipment or enterprises and users.
●● Information Security
Answer: The tasks of securing information that is in a digital format:
- Manipulated by a microprocessor / In Processing
-Preserved on a storage device / At Rest
- Transmitted over a network / In Transmit
●● BYOD
Answer: Allows users to use their own personal mobile devices for
business purposes.
●● Corporate owned, personally enabled (COPE)
,Answer: Employees choose from a selection of company-approved
devices.
●● Choose Your Own Device (CYOD)
Answer: Employees choose from a limited selection of approved devices
but the employee pays the upfront cost of the device while the business
owns the contract.
●● Virtual Desktop Infrastructure (VDI)
Answer: Stores sensitive applications and data on a remote server that is
accessed through a smartphone
●● Corporate-owned
Answer: Device is purchased and owned by the enterprise
●● Common Vulnerabilities and Exposures (CVE)
Answer: A tool that identifies vulnerabilities in operating systems and
application software. The CVE identifies vulnerabilities in operating
systems and application software.
●● Application Layer
Answer: The seventh layer of the OSI model. Application layer
protocols enable software programs to negotiate formatting, procedural,
security, synchronization, and other requirements with the network.
, Protocols Consists of FTP, HTTP, HTTPS, POP3, SMTP, IMAP. Device:
Computer
●● Presentation Layer
Answer: The sixth layer of the OSI model. Protocols in the Presentation
layer translate between the application and the network. Here, data are
formatted in a schema that the network can understand, with the format
varying according to the type of network used. The Presentation layer
also manages data encryption and decryption, such as the scrambling of
system passwords. Protocols: Compression, encryption
●● Session Layer
Answer: The fifth layer in the OSI model. This layer establishes and
maintains communication between two nodes on the network. It can be
considered the "traffic cop" for network communications. Protocols:
Logon/logoff, NetBIOS, Negotiation
●● Transport Layer
Answer: The fourth layer of the OSI model. In this layer protocols
ensure that data are transferred from point A to point B reliably and
without errors. this layer services include flow control, acknowledgment,
error correction, segmentation, reassembly, and sequencing. Protocols:
TCP, UDP
●● Network Layer
