CASP+ Chapter 3 - Review

What term describes the search for an insider threat or shadow IT, which, until discovered, had been "flying under the radar"?

LoJax, Bad Rabbit, and NotPetya are three examples of what?

You discover log entries that raise suspicion that a security incident might have occurred. You decide more investigation is needed. What describes what you found?

What is a key strength the disgruntled employee has over an outsider?

Your manager asks if you've noticed any abnormal volumes of network traffic or other network issues. What logs might help you answer those concerns?

Which of the following alerts warns the security analyst or administrator of the likelihood that data was exfiltrated out of the network?

What intrusion detection processing technique is common for identifying a positive match but struggles to keep up with today's traffic speeds and volumes?

Which of the following can block traffic based on the source and destination address?

In the following example of an access control list, which of the following answers is true?

hostname R1

!

Interface ethernet0

Ip access-group102 in

!

access-list 102 deny tcp any any eq 23

access list 102 permit ip any any

You got an alert that unusual changes were made to files in a customer directory. What type of alert was this?