IS-3523 Exam 1 Study set With 100% Correct Answers!!!
1. Which of the following can be found in the TCP
B. source port &
head- er?
destina- tion port
A. source address and destination address
B. source port & destination port
C. source and destination addresses and ports
D. none of the above
2. Which answer below best describes VPN?
E. none of the
above (a vpn is a
A. Varied public network
Virtual Private Net-
B. Valued private network
work)
C. Virtual protocol network
D. Variable phased network
E. none of the above
3. Which answer below makes this sentence
most cor- rect? The increased use of E. c and d only
has made sniffing more difficult.
A. firewalls
B. IDSs
C. network segmentation
D. VPNs
E. c and d only
4. Which answer below best describes FIRST?
C. Forum of Incident
A. First Intrusion Reaction and Security Teams
Response and
B. Forum for Intrusion Reactive Security Teams
Security Teams
C. Forum of Incident Response and Security
Teams
D. none of the above
, IS-3523 Exam 1 Study set With 100% Correct Answers!!!
5. Which answer below best describes CERIAS? B. Center for
Education and
A. Center of Eradicating Restrictive Intrusion
Research in Informa-
Attack Systems
tion Assurance and
B. Center for Education and Research in
Securi- ty
Information Assurance and Security
C. Creative Elicitation for Redundant Incident
Attack Sensing
D. none of the above
6. Match the numbers in the diagram to the appropriate 1 Adversary
Group
role in the MITRE ATT&CK model. 2 Technique
3 Software
1 4 Tactic
2
3
4
7. A mid-level adversary model such as ATT&CK is neces- C. specific;
behavioral
sary to map actions to contexts.
A. general; digitized
B. specific; digitized
C. specific; behavioral
D. general; behavioral
8. Look at the Technique EnterpriseLinks to an A. execution
external site. page of the MITRE ATT&CK through
documentation. How does execution, module
discovery, and lateral movement (in this load,
order) take place with spearfishing shared
attachments? webroot,
, IS-3523 Exam 1 Study set With 100% Correct Answers!!!
and screen capture C. dynamic data
exchange, network
service scanning, and
logon scripts
1. Which of the following can be found in the TCP
B. source port &
head- er?
destina- tion port
A. source address and destination address
B. source port & destination port
C. source and destination addresses and ports
D. none of the above
2. Which answer below best describes VPN?
E. none of the
above (a vpn is a
A. Varied public network
Virtual Private Net-
B. Valued private network
work)
C. Virtual protocol network
D. Variable phased network
E. none of the above
3. Which answer below makes this sentence
most cor- rect? The increased use of E. c and d only
has made sniffing more difficult.
A. firewalls
B. IDSs
C. network segmentation
D. VPNs
E. c and d only
4. Which answer below best describes FIRST?
C. Forum of Incident
A. First Intrusion Reaction and Security Teams
Response and
B. Forum for Intrusion Reactive Security Teams
Security Teams
C. Forum of Incident Response and Security
Teams
D. none of the above
, IS-3523 Exam 1 Study set With 100% Correct Answers!!!
5. Which answer below best describes CERIAS? B. Center for
Education and
A. Center of Eradicating Restrictive Intrusion
Research in Informa-
Attack Systems
tion Assurance and
B. Center for Education and Research in
Securi- ty
Information Assurance and Security
C. Creative Elicitation for Redundant Incident
Attack Sensing
D. none of the above
6. Match the numbers in the diagram to the appropriate 1 Adversary
Group
role in the MITRE ATT&CK model. 2 Technique
3 Software
1 4 Tactic
2
3
4
7. A mid-level adversary model such as ATT&CK is neces- C. specific;
behavioral
sary to map actions to contexts.
A. general; digitized
B. specific; digitized
C. specific; behavioral
D. general; behavioral
8. Look at the Technique EnterpriseLinks to an A. execution
external site. page of the MITRE ATT&CK through
documentation. How does execution, module
discovery, and lateral movement (in this load,
order) take place with spearfishing shared
attachments? webroot,
, IS-3523 Exam 1 Study set With 100% Correct Answers!!!
and screen capture C. dynamic data
exchange, network
service scanning, and
logon scripts
