ISC2 - Chapter 4 - Module 2

What does SIEM mean?

• System Information and Event Manager

• System Information and Enterprise Manager

• Security Information and Event Manager

• Security Information and Enterprise Manager

Which type of attack embeds malicious payload inside a reputable or trusted software?

• Trojans

• Phishing

• Rootkits

• DDOS

Which type of attack has the PRIMARY objective controlling the system from outside?

• Trojans

• DDOS

• Rootkits

• Backdoors

Which devices would be more effective in detecting an intrusion into a network?

• Firewalls

• HIDS

• NIDS

• Anti-malware

Which type of attack attempts to gain information by observing the device's power consumption?

• Trojans

• Side channels

• DOS

• Worm

Which type of attack will most effectively maintain remote access and control over the victim's computer?

• Rootkits

• Trojans

• Phishing

• Cross-Site Scripting

Which type of attack attempts to trick the user into revealing personal information by sending a fraudulent message?

• DDOS

• Trojan

• Phishing

• Side channel

Malicious emails that aim to attack company executives are an example of:?

• DDOS

• Spear phishing

• Phishing

• Whaling

Which devices have the PRIMARY objective of collecting and analyzing security events?

• SIEMs

• Firewalls

• Routers

• Switches

Which type of attack has the PRIMARY objective of encrypting devices and their data, and then demanding a ransom payment for the decryption key?

• Rootkits

• Ransomware

• Phishing

• Cross-Site Scripting