IST 266 Final Exam Greenville Technical College – Study Guide, Notes & Practice Questions
(2026 Updated)
Hydra - correct answer ✔✔A security tool would be used to conduct an online password brute
force attack
Stateless Packet Filtering - correct answer ✔✔A type of firewall, which does not track the state
of connections which pass through it
Presentation - correct answer ✔✔which of the following layers of the OSI model is responsible
for data encryption
Engagement - correct answer ✔✔which phase of the penetration testing engagement includes
scanning and exploitation
The Registry - correct answer ✔✔where are the local user accounts stored on a Windows
System; Which are not a domain controller
Least Privilege - correct answer ✔✔A set of job policies, which describes how employees should
only be provided the specific permissions; they need in order to perform their job functions "no
more no less"
Grey Box - correct answer ✔✔Which type of penetration tests, would be conducted with
limited amount of information given to the penetration tester from the client
Kerberos - correct answer ✔✔used to authenticate users in a Windows Active Directory
environment
, Alice's Private Key - correct answer ✔✔Alice needs to digitally sign a file, so that Bob can verify
that the file has not been modified once he receives it over email. Which key would be used to
sign the document
Policies - correct answer ✔✔companies use to ensure employees understand how they are
expected to use business assets for work-related purposes
Nation State Actor - correct answer ✔✔A type of hacker which have the availability of
significant financial resources, and are associated with advanced types of persistent threats
Fingerprint - correct answer ✔✔used to authenticate biometric controls
Shoulder Surfing - correct answer ✔✔which type of social engineering attacks would an
attacker be conducting if they were watching a user's keyboard as they typed their password
Safety - correct answer ✔✔the most important in Industrial Control Environments
Entrapment - correct answer ✔✔what is the process of luring a malicious party by providing
them a target of opportunity; such as a honeypot
NAC - correct answer ✔✔security features would be enabled on a switch to ensure that an
attacker cannot plug a device into an empty network port and automatically obtain an IP
address
IPSec - correct answer ✔✔is considered the most secure type of connection; that would be
used to create a site to site VPN tunnel between two locations
TLS - correct answer ✔✔used to encrypt websites viewed by visitors
(2026 Updated)
Hydra - correct answer ✔✔A security tool would be used to conduct an online password brute
force attack
Stateless Packet Filtering - correct answer ✔✔A type of firewall, which does not track the state
of connections which pass through it
Presentation - correct answer ✔✔which of the following layers of the OSI model is responsible
for data encryption
Engagement - correct answer ✔✔which phase of the penetration testing engagement includes
scanning and exploitation
The Registry - correct answer ✔✔where are the local user accounts stored on a Windows
System; Which are not a domain controller
Least Privilege - correct answer ✔✔A set of job policies, which describes how employees should
only be provided the specific permissions; they need in order to perform their job functions "no
more no less"
Grey Box - correct answer ✔✔Which type of penetration tests, would be conducted with
limited amount of information given to the penetration tester from the client
Kerberos - correct answer ✔✔used to authenticate users in a Windows Active Directory
environment
, Alice's Private Key - correct answer ✔✔Alice needs to digitally sign a file, so that Bob can verify
that the file has not been modified once he receives it over email. Which key would be used to
sign the document
Policies - correct answer ✔✔companies use to ensure employees understand how they are
expected to use business assets for work-related purposes
Nation State Actor - correct answer ✔✔A type of hacker which have the availability of
significant financial resources, and are associated with advanced types of persistent threats
Fingerprint - correct answer ✔✔used to authenticate biometric controls
Shoulder Surfing - correct answer ✔✔which type of social engineering attacks would an
attacker be conducting if they were watching a user's keyboard as they typed their password
Safety - correct answer ✔✔the most important in Industrial Control Environments
Entrapment - correct answer ✔✔what is the process of luring a malicious party by providing
them a target of opportunity; such as a honeypot
NAC - correct answer ✔✔security features would be enabled on a switch to ensure that an
attacker cannot plug a device into an empty network port and automatically obtain an IP
address
IPSec - correct answer ✔✔is considered the most secure type of connection; that would be
used to create a site to site VPN tunnel between two locations
TLS - correct answer ✔✔used to encrypt websites viewed by visitors
