General Concepts
Which factor in the CIA Triasd is critical for ensuring that encryption will not be compromised through cryptographic attacks?
Integrity
What type of backup site is this, which requires the greatest amount of configuration before it can be used in a failover instance?
Cold Site
Which threat actor is known for using public hacking tools with minimal levels of sophistication?
Script Kiddie/Unskilled Attacker
What does VPN mean?
Virtual Private Network
Which protocol allows for secure transfer of information over the internet/web?
HTTPS
What type of deceptive technologies used to entice an attacker would a "passwords.txt" file be an example of?
Honeyfile
What is the PRIMARY role of a UPS?
To provide short term power if an outage occurs.
Several executives have reported emails they've received that appear to be from the CEO requesting information on some of their clients. Other employees have not reported the emails, so it appears that only the executives have received them.
What type of phishing attack is being perpetrated?
Whaling
What does PaaS mean?
Platform as a Service
Which process is used to ensure that data is retained long enough to keep a business in compliance with legal requirements?
Archiving
An auditor is comparing a financial company's security processes to established industry standards. What activity are they involved in?
Gap Analysis
What does SD-WAN stand for?
Software Defined Wide Area Network
What vulnerability occurs when a user installs an application onto a mobile device from an unauthorized source/vendor?
Side loading
What does ABAC mean when it comes to ACLs?
Attribute Based Access Controls
What type of control type would an IDS / Vulnerability scanner be?
Detective Control
An administrator has a dual-boot system with Windows and Linux installed on a single disk. They want to encrypt the entire Linux portion of the disk but do not need Windows to be encrypted.
Which encryption level for data at rest should they use in this situation?
Partition Level
Which type of backup copies all files, regardless of their archive bit status, and then clears the archive bits after the backup is complete?
Full
An attacker is looking to capture and steal credit card information and banking details. They install malicious software that silently collects data and sends it to an attacker without the user's knowledge.
This is an example of which of the following?
Spyware
What does RSA mean?
Rivest–Shamir–Adleman
What action should be taken on a user account after the user is no longer affiliated with an organization?
Deprovisioning
An IT consultant is reviewing a small business's infrastructure and environment. They discover that the organization is using a powerful workstation as a server and user device. The system runs Windows 10 for user interaction and has hypervisor software that is running several servers.
Which type of hypervisor is being used in this situation?
Type II / Hosted
A company has been managing its IT infrastructure manually, which has led to errors in configuration. What practice can they start using to define and manage their IT infrastructure through scripts to improve automation, scalability, and repeatability?
IaC (Infrastructure as Code)
What type of attack occurs when an attacker captures a NTLM authentication then uses it to gain unauthorized access to a system?
Credential Replay
What does SASE mean?
Secure Access Service Edge
A company is having an issue with wireless connectivity in their office. They want to get a visualization of wireless signal strength, so they can decide where to add more access points. What can they create to accomplish this?
Heat Map