Essentials Part 2 (Revised)

Which technique is NOT used to break the command-and-control (C&C) phase of the Cyber-Attack Lifecycle?

• DNS sinkholing and DNS poisoning

• vulnerability and patch management

• blocking outbound traffic to known malicious sites and IP addresses

• c. blocking inbound traffic to known malicious sites and IP addresse

Which option is an example of a logical address?

• IP Address

• Burned-In Address

• MAC Address

• Hardware Address

Perimeter firewalls are designed to protect against what type of traffic?

• East/West

• North/South

• South/West

• South/East

Which password is the strongest?

• mypasswordone

• MyP@s$w0rd1

• mypassw0rd1*

• MyPassword1

Which option is NOT a defining characteristic of an NGFW?

• integrated security tools

• bidirectional full-stack analysis of packets

• adherence to strict port and protocol enforcement for allow or block decisions

• low latency packet processing with minimal throughput loss

Which capability of a Zero-Trust segmentation platform uses a combination of anti-malware, intrusion prevention, and cyberthreat prevention technologies to provide comprehensive protection against both known and unknown threats, including threats on mobile devices?

• Least privilege access control

• Inspection of all traffic

• Secure access

• Cyberthreat protection

Provider applications run on a cloud infrastructure and the consumer does not manage or control the underlying infrastructure in which cloud computing service model?

• public cloud

• software as a service (SaaS)

• infrastructure as a service (IaaS)

• platform as a service (PaaS)

Which VPN technology is the preferred method for securely connecting a remote endpoint device back to an enterprise network?

• Secure Sockets Layer(SSL)

• Secure socket tunneling protocol (SSTP)

• Internet Protocol Security (IPsec)

• Point-to-point tunneling protocol (PPTP)

Which protocol functions at the Transport layer of the OSI model?

• TCP

• FTP

• HTTP

• SMTP

The commonly used name for an intermediate area between a trusted network and an untrusted network is the DMZ.

• True

• False