Cybersecurity Analyst Professional Certificate Assessment Part 1

1. Implementing a Security Awareness training program would be an example of which type of control? 1 / 1 punto Operational control Technical control Physical control Administrative control Correcto Correct! 2. Requiring all employees to complete annual security awareness training is an example of which type of control? 1 / 1 punto Preventative Administrative Deterrent Corrective Correcto Correct! 3. How would you classify a piece of malicious code that can replicate itself and spread to new systems? 1 / 1 punto Spyware A Trojan Horse A worm A virus Correcto Correct! 4. Suspicious activity, like IP addresses or ports being scanned sequentially, is a sign of which type of attack? A mapping attack An IP spoofing attack A denial of service (DoS) attack 1 / 1 punto A phishing attack Correcto Correct! 1 / 1 punto 5. Trudy intercepts a plain text message sent by Alice to Bob, but in no way interferes with its delivery. Which aspect of the CIA Triad was violated? Confidentiality Integrity Availability All of the above Correcto Correct! 6. Trudy intercepts a romantic plain-text message from Alice to her boyfriend Sam. The message upsets Trudy so she 1 / 1 punto forwards it to Bob, making it look like Alice intended it for Bob from the beginning. Which aspect of the CIA Triad has Trudy violated? Confidentiality Integrity Availability All of the above Correcto Correct! 7. A penetration tester that gains access to a system without permission and then exploits it for personal gain is said to 1 / 1 punto wear what color hat? Black White Gray Green Correcto Correct! 8. Trying to break an encryption key by trying every possible combination of characters is called what? 1 / 1 punto A social engineering attack A rainbow table attack A brute force attack A known cyphertext attack Correcto Correct! 9. Which position is in charge of testing the security and effectiveness of computer information systems? 1 / 1 punto Chief Information Officer (CIO) Information Security Architect Information Security Auditor Information Security Analyst Correcto Correct! 10. Which three (3) roles are typically found in an Information Security organization? (Select 3) 1 / 1 punto Vulnerability Assessor Correcto Partially correct! This is 1 of the 3 correct answers Finance Security Guard Chief Information Security Officer (CISO) Correcto Partially correct! This is 1 of the 3 correct answers Penetration Tester Correcto Partially correct! This is 1 of the 3 correct answers 11. Problem Management, Change Management, and Incident Management are all key processes of which framework? NIST 800-53 ITIL 1 / 1 punto GDPR PCI-DSS Correcto Correct! 12. Alice sends a message to Bob that is intercepted by Trudy. Which scenario describes an integrity violation? 1 / 1 punto Trudy cannot read it because it is encrypted but allows it to be delivered to Bob in its original form Trudy reads the message Trudy deletes the message without forwarding it Trudy changes the message and then forwards it on Correcto Correct! 13. In cybersecurity, Accountability is defined as what? 1 / 1 punto The property of being genuine and verifiable The first or original copy of a document or message Being able to map an action to an identity Being able to apply financial management to a process Correcto Correct! 14. Your bank just implemented 2-factor authentication. Before you can access your account. Which two (2) pairs of factors would satisfy the "2-factor" criteria? (Select 2) Your bank's ATM card and a PIN number Correcto Partially correct! This is 1 of the 2 correct answers Your password and PIN number Your fingerprint scan and face scan Your password and fingerprint scan Correcto Partially correct! This is 1 of the 2 correct answers 1 / 1 punto Voice recognition and face scan 15. The encryption and protocols used to prevent unauthorized access to data are examples of which type of access control? 1 / 1 punto Technical Embedded Physical Administrative Correcto Correct! 16. A Windows 10 user has 10 files with exactly the same name. Which statement must be true for these files? 1 / 1 punto The files may be on the same hard drive but must be in different partitions The files must be on different hard drives The files may be in the same directory The files must be in different directories Correcto Correct! 17. In a Linux file system, which files are contained in the \bin folder? 0 / 1 punto Configuration files such as fstab and inittab Directories such as /home and /usr All user binary files, their libraries and headers Executable files such as grep and ping Incorrecto Incorrect, this material was covered in the course Cybersecurity Roles, Processes & Operating System Security, Week 5 Linux Operating System Security Basics 18. A small and underfunded startup company should consider using which type of cloud first? Hybrid cloud 1 / 1 punto Public cloud Private cloud Universal cloud Correcto Correct! 19. Which security concerns follow your workload even after it is successfully moved to the cloud? 1 / 1 punto Data security Disaster Recovery/Business Continuity Planning Identity and Access Management Compliance All of the above Correcto Correct! 20. Security training for IT staff is what type of control? 0 / 1 punto Operational Virtual Technical Physical Incorrecto Incorrect, this material was covered in the course Cybersecurity Compliance Framework & System Administration, Week 1 - Compliance Frameworks and Industry Standards 21. Which two (2) of the following attack types target endpoints? SQL Injection Denial of Service (DoS) Spear Phishing Correcto Partially correct! This is 1 of the 2 correct answers 1 / 1 punto Ad Network Correcto Partially correct! This is 1 of the 2 correct answers 22. A good Endpoint Detection and Response system (EDR) should have which three (3) of these capabilities? (Select 3) 1 / 1 punto Automatically quarantine noncompliant endpoints Correcto Partially correct! This is 1 of the 3 correct answers Manage thousands of devices at once Correcto Partially correct! This is 1 of the 3 correct answers Deploying devices with network configurations Correcto Partially correct! This is 1 of the 3 correct answers Manage encryption keys for each endpoint 23. Granting access to a user account only those privileges necessary to perform its intended functions is known as what? 1 / 1 punto Role Based Access Control (RBAC) The principle of top-down control The principle of least privileges The principle of unified access control Correcto Correct! 24. In Linux, Bash, tcsh and sh are what? 1 / 1 punto Shells Distros Commands Directories Correcto Correct! 25. Hashing ensures which of the following? 1 / 1 punto Confidentiality Integrity Availability All of the above Correcto Correct! 26. Which statement is True of Hash functions? 0 / 1 punto The length of the hash string is proportional to the length of the input so the approximate message length can be derived from a hash Hashes are becoming easier to reverse engineer since computers are becoming more powerful Using hashing is a good way to assure the confidentiality of the messages you send Hashing is a reliable way to assure the integrity of a message Incorrecto Incorrect, this material was covered in the course Cybersecurity Compliance Framework & System Administration, Week 4 - Cryptography and Compliance Pitfalls 27. Which of these methods ensures the authentication, non-repudiation and integrity of a digital communication? 1 / 1 punto Use of asymmetric key encryption Use of digital signatures Use of symmetric key encryption Use of hashing Correcto Correct! 28. Which of the following practices will help assure the confidentiality of data in transit? Implement HTTP Strict Transport Protocol (HSTS) Always compress files before sending if you are using TLS Accept self-signed certificates 1 / 1 punto Disable certificate pinning Correcto Correct! 29. A small company with 25 computers wishes to connect them to the Internet using a NAT router. How many Public IP 1 / 1 punto addresses will this company need to assure all 25 computers can communicate with each other and other systems on the Internet if they implement Port Address Translations? 0 1 25 26 Correcto Correct! 30. Which statement best describes configuring a NAT router to use overload mapping? 0 / 1 punto Unregistered IP addresses are mapped to registered IP addresses as they are needed Many unregistered IP addresses are mapped to a single registered IP address using different port numbers The NAT router uses each computer's IP address for both internal and external communication The organization will need as many registered IP addresses as it has computers that need Internet access Incorrecto Incorrect, this material was covered in the course Network Security & Database Vulnerabilities, Week 1 - TCP/IP Framework 31. If a computer needs to send a message to a system that is part of the local network, where does it send the message? 1 / 1 punto The network's DNS server address To the system's MAC address To the system's domain name To the system's IP address Correcto Correct! 32. In IPv4, how many of the 4 octets are used to define the network portion of the address in a Class B network? 1 1 / 1 punto 2 3 4 Correcto Correct! 33. Which three (3) of these statements about the TCP protocol are True? (Select 3) 1 / 1 punto TCP is faster than UDP TCP packets are reassembled by the receiving system in the order in which they were sent Correcto Partially correct! This is 1 of the 3 correct answers TCP is more reliable than UDP Correcto Partially correct! This is 1 of the 3 correct answers TCP is connection-oriented Correcto Partially correct! This is 1 of the 3 correct answers 34. Which type of firewall understands which session a packet belongs to and analyzes it accordingly? 1 / 1 punto A Session Firewall (SFW) An Advanced Firewall (AFW) A Next Generation Firewall (NGFW) A Connection Firewall (CFW) Correcto Correct! 35. You are concerned that your organization is really not very experienced with securing data sources. Which hosting model would require you to secure the fewest data sources? IaaS SaaS On premise 1 / 1 punto