Cisco CyberOps Review 1

Multiple Choice

What does it mean when access to a resource is granted with discretionary control?

• Access can be configured only by an administrator.

• Access can be granted only by the owner of the resource.

• Access is granted to all users.

• Access is read-only for everyone.

Multiple Choice

In the field of information security, the CIA of data is a crucial point of concern. What does CIA refer to?

• The data’s Confidentiality, Integrity, and Availability.

• The data’s Confidentiality, Identity, and Availability.

• The data’s Confidentiality, Integrity, and Authorization.

• The data’s Confidentiality, Identity, and Authorization.

Multiple Choice

Which of the following refers to disassembling an object to understand how it works and study its structure and behavior?

• Threat actor

• Threat hunting

• Reverse engineering

• Malware analysis

Multiple Choice

Which of the following represents the use of a vulnerability to breach a system?

• Exploit

• Threat

• Zero trust

• Vulnerability

Multiple Choice

Which cryptographic key is used by an X.509 certificate?

• Symmetric

• Public

• Private

• Asymmetric

Multiple Choice

Which of the following describes the advantages of application visibility and control?

• Applications and traffic in the network are controlled to protect assets against attacks and manage bandwidth.

• All documents are encrypted with a private key.

• Establishes a platform to test environments for unknown threats.

• Provides a database that stores low-level settings for the operating system.

Multiple Choice

Which of the following is a code injection technique that launches malicious statements via input fields?

• DDoS

• SQLi

• Brute-force

• SSRF

Multiple Choice

Which type of attack can a traditional firewall protect a system against?

• Dumpster diving

• Denial-of-Service (DoS)

• Phishing

• Shoulder surfing

Multiple Choice

Which of the following definitions of the Windows registry is correct?

• A set of pages that currently reside in physical memory.

• A basic unit to which the operating system allocates processor time.

• A set of virtual memory addresses.

• A database that stores low-level settings for the operating system.

Multiple Choice

Which of the following best describes the IIS Log Parser tool?

• A dynamic tool that allows execution of SQL-like queries for log files.

• A tool used to control data sources, such as databases.

• A tool that monitors the availability of log files.

• A tool used for remote database connection.

Multiple Choice

Which of the following terms applies to evidence that supports existing theories derived from an original piece of evidence?

• Corroborative

• Probabilistic

• Accurate

• Indirect

Multiple Choice

Which directory is commonly used in Linux systems to store log files, including syslog and Apache access logs?

• /etc/log

• /root/log

• /lib/log

• /var/log

Multiple Choice

Which of the following terms refers to a case in which an IDS fails to identify an actual attack?

• True positive

• False negative

• True negative

• False positive

Multiple Choice

Which of the following refers to improving data integrity by removing IPS events?

• Digital signing

• Operational cleaning

• Data normalization

• Integrity validation

Multiple Choice

John sent an HTTP GET request to get a file from the web server. Which event artifact will identify the request?

• URI

• HTTPS

• Destination MAC address

• Source IP address

Multiple Select

Which of the following relate to the preparation phase?

(Choose more than one)

• Smartphones available for emergency communication.

• Communication and coordination mechanisms that serve as backups in case of a failure.

• Secure storage facilities.

• None of the above.

Multiple Choice

What is adjusting security according to threats from a hacktivist group known as in NIST SP800-61 r2?

• Adjustment

• Preparation

• Precursor

• Instigator

Multiple Choice

When an instruction is issued stating that more than one person must perform a critical task, which principle is being followed?

• There is no such particular principle

• Separation of duties

• Due diligence

• Free action

Multiple Choice

Which property of information security does encryption support?

• Integrity

• Availability

• Confidentiality

• Sustainability