Cybersecurity Analyst Professional Certificate Assessment Part 2

36. A Vulnerability Assessment should be conducted during which phase of the Discover - Harden - Monitor & Protect - 1 / 1 punto Repeat cycle? Identification & Baseline Raise the Bar Real-Time Monitor & Protection Repeat Correcto Correct! 37. Which type of list is considered best for safe coding practice? 0 / 1 punto Whitelist Checklist Blacklist Shortlist Incorrecto Incorrect, this material was covered in the course Network Security & Database Vulnerabilities, Week 4 - Deep Dive Injection Vulnerability 38. Which two (2) forms of discovery must be conducted online? (Select 2) 1 / 1 punto Social engineering Port scanning Correcto Partially correct! This is 1 of the 2 correct answers Packet sniffing Correcto Partially correct! This is 1 of the 2 correct answers Shoulder surfing 39. A penetration tester involved in a "Black box" attack would be doing what? 1 / 1 punto Attempting to penetrate a client's systems as if she were an external hacker with no inside knowledge of the systems Attempting to penetrate a system as an insider with "employee" level knowledge of the system Attempting to penetrate a system using highly specialized "black box" tools Attempting to penetrate a system for personal gain Correcto Correct! 40. Which Incident Response Team model describes a team that runs all incident response activities for a company? 1 / 1 punto Distributed Coordinating Control Central Correcto Correct! 41. NIST recommends considering a number of items, including a high level of testing and monitoring, during which stage of 1 / 1 punto a comprehensive Containment, Eradication & Recovery strategy? Recovery Containment Eradication Correcto Correct! 42. True or False. Digital forensics is effective in solving cyber crimes but is not considered effective in solving violent crimes 1 / 1 punto such as rape and murder. True False Correcto Correct! 43. In digital forensics documenting the chain of custody of evidence is critical. Which of these should be included in your chain of custody log? The names of every person who has physical custody of any piece of evidence 1 / 1 punto Documenting the actions that are performed on the evidence and at what time Documenting how the evidence was stored when not in use All of the above Correcto Correct! 44. What scripting concept will repeatedly execute the same block of code while a specified condition remains true? 1 / 1 punto Variables Arguments Loops if-then Correcto Correct! 45. Which two (2) statements about Python are true? (Select 2) 1 / 1 punto Python code is written at a very low level to better integrate with operating system functions Python is not considered portable, running only on Linux and Windows machines Python code is considered very readable by novice programmers Correcto Partially correct! This is 1 of the 2 correct answers Python code is considered easy to debug compared with other popular programming languages Correcto Partially correct! This is 1 of the 2 correct answers 46. What will print out when this block of Python code is run? i=1 #i=i+1 #i=i+2 #i=i+3 print(i) 1 3 6 1 / 1 punto nothing will print Correcto Correct! 47. Which two (2) of these Python libraries provides useful statistical functions? (Select 2) 0 / 1 punto Scikit-learn NumPy Esto no debería estar seleccionado Incorrect, this material was covered in the course Penetration Testing, Incident Response and Forensics, Week 4 Introduction to Scripting Pandas Seaborn Matplotlib Esto no debería estar seleccionado Incorrect, this material was covered in the course Penetration Testing, Incident Response and Forensics, Week 4 Introduction to Scripting StatsModels 48. Which country had the highest average cost per breach in 2018 at $8.19M 1 / 1 punto Russia United States China Japan United Kingdom Germany Correcto Correct! 49. According to the FireEye Mandiant's Security Effectiveness Report 2020, what fraction of security tools are deployed with default settings and thus underperform expectations? 80% 1 / 1 punto 50% 25% 10% Correcto Correct! 50. A professor is not allowed to change a student's final grade after she submits it without completing a special form to 1 / 1 punto explain the circumstances that necessitated the change. This additional step supports which aspect of the CIA Triad? Authorization Availability Confidentiality Integrity Correcto Correct! 51. There are many good reasons for maintaining comprehensive backups of critical data. Which aspect of the CIA Triad is 1 / 1 punto most impacted by an organization's backup practices? Availability Confidentiality Integrity Authorization Correcto Correct! 52. All industries have their own unique data security challenges. Which of these industries has a particular concern with PCI-DSS compliance while having a large number of access points staffed by low-level employees who have access to payment card data? Transportation Retail Healthcare Financial 1 / 1 punto Correcto Correct! 53. Which layer of the OSI model do packet sniffers operate on? 1 / 1 punto Session Transport Application Data Link Physical Network Correcto Correct! 54. What organization manages the assignment and registration of port numbers? 1 / 1 punto Internet Assigned Numbers Authority (IANA) Internet Architecture Board (IAB) Internet Port Assignment Authority (IPAA) Internet Engineering Task Force (IETF) Correcto Correct! 55. Which phase of DevSecOps would contain the activities Internal/External testing, Continuous assurance, and Compliance checking? Operate & monitor Test Plan Release, deploy & decommission Code & build Correcto Correct! 1 / 1 punto 56. You calculate that there is a 2% probability that a cybercriminal will be able to steal credit card numbers from your 1 / 1 punto online storefront, which will result in $10M in losses to your company. What have you just determined? A threat A risk A vulnerability A vector Correcto Correct! 57. Which of the OWASP Top 10 Application Security Risks would be occur when an application's API exposes financial, 1 / 1 punto healthcare or other PII data? Broken access control Sensitive data exposure XML external entities (XXE) Security misconfiguration Correcto Correct! 58. Which three (3) of these are Solution Building Blocks (SBBs)? (Select 3) 1 / 1 punto Virus Protection Correcto Partially correct! This is 1 of the 3 correct answers Spam Filter Correcto Partially correct! This is 1 of the 3 correct answers Identity and Access Management Application Firewall Correcto Partially correct! This is 1 of the 3 correct answers 59. A robust cybersecurity defense includes contributions from 3 areas, human expertise, security analytics and artificial intelligence. Rapidly analyzing large quantities of unstructured data lends itself best to which of these areas? Security analytics 1 / 1 punto Artificial intelligence Human expertise Correcto Correct! 60. The partnership between security analysts and technology can be said to be grouped into 3 domains, human expertise, 0 / 1 punto security analytics and artificial intelligence. The human expertise domain would contain which three (3) of these topics? Abstraction Correcto Partially correct! This is 1 of the 3 correct answers Dilemmas Correcto Partially correct! This is 1 of the 3 correct answers Anomaly detection Esto no debería estar seleccionado Incorrect, this material was covered in the course Cyber Threat Intelligence, Week 6 - SIEM Platforms Machine Learning Morals Pattern identification 61. Which of these is a good definition for cyber threat hunting? 1 / 1 punto The act of detecting, investigating, and responding to incidents, including planning and implementing preventative security measures building disaster recovery plans The act of simulating attacks to identify vulnerabilities, testing new software to help protect the company's data, and helping users adhere to new regulations and processes to ensure the network stays safe The act of creating and maintaining corporate security structures and ensuring that they function as designed As highlevel leaders, they also supervise security teams and have a hand in creating security-related policies and procedures The act of proactively and aggressively identifying, intercepting, tracking, investigating and eliminating cyber adversaries as early as possible in the cyber kill chain Correcto Correct! 62. There is value brought by each of the IBM i2 EIA use cases. Which one of these provides immediate alerting on brand compromises and fraud on the dark web. Fraud Investigations 1 / 1 punto Insider Threat VIP Protection Threat Discovery Correcto Correct! 63. True or False. A large company has a data breach involving the theft of employee personnel records but no customer 1 / 1 punto data of any kind. Since no external data was involved, the company does not have to report the breach to law enforcement. True False Correcto Correct! 64. Implementing strong endpoint detection and mitigation strategies falls into which phase of the incident response 1 / 1 punto lifecycle? Containment, Eradication & Recovery Detection & Analysis Post-Incident Activity Preparation Correcto Correct! 65. Which three (3) of these statistics about phishing attacks are real? (Select 3) Around 15 million new phishing sites are created each month Correcto Partially correct! This is 1 of the 3 correct answers Phishing accounts for nearly 20% of data breaches Correcto Partially correct! This is 1 of the 3 correct answers Phishing attempts tripled between 2017 and 2018 30% of phishing messages are opened by their targeted users Correcto Partially correct! This is 1 of the 3 correct answers 1 / 1 punto 66. Which three (3) of these control processes are included in the PCI-DSS standard? (Select 3) 1 / 1 punto Implement strong access control measures Correcto Partially correct! This is 1 of the 3 correct answers Maintain an information security policy Correcto Partially correct! This is 1 of the 3 correct answers Regularly monitor and test networks Correcto Partially correct! This is 1 of the 3 correct answers Require a photo ID for all credit card transactions 1 / 1 punto 67. True or False. The large majority of stolen credit card numbers are used quickly by the thief or a member of his/her family. True False Correcto Correct! 68. True or False. Cloud-based storage or hosting providers are among the top sources of third-party breaches 1 / 1 punto True False Correcto Correct! 69. You get a phone call from a technician at the "Windows company" who tells you that they have detected a problem with your system and would like to help you resolve it. In order to help, they need you to go to a web site and download a simple utility that will allow them to fix the settings on your computer. Since you only own an Apple Mac, you are suspicious of this caller and hang up. What would the attack vector have been if you had downloaded the "simple utility" as asked? Malicious Links Phishing Remote Desktop Protocol (RDP) Software Vulnerabilities Correcto Correct! 1 / 1 punto 70. Very provocative articles that come up in news feeds or Google searches are sometimes called "click-bait". These articles often tempt you to link to other sites that can be infected with malware. What attack vector is used by these click-bait sites to get you to go to the really bad sites? Remote Desktop Protocol (RDP) Malicious Links Phishing Software Vulnerabilities Correcto Correct! 1 / 1 punto