курсера 151-300

Which type of firewall inspects XML packet payloads for things like executable code, a target IP address that make sense, and a known source IP address?

• · An XML Gateway.

• · An application-level firewall.

• · A packet-filtering firewall.

• · All of the above.

Which statement about Stateful firewalls is True?

• · They have state tables that allow them to compare current packets with previous packets.

• · They are less secure in general than Stateless firewalls.

• · They are faster than Stateless firewalls.

• · All of the above.

True or False: Most Antivirus/Antimalware software works by comparing a hash of every file encountered on your system against a table of hashs of known virus and malware previously made by the antivirus/antimalware vendor.

• True

• False

Which type of cryptographic attack is characterized by comparing a captured hashed password against a table of many millions of previously hashed words or strings?

• · Known Plaintext

• · Known Ciphertext

• · Brute force

• · Social Engineering

• · Rainbow tables

What are two (2) drawbacks to using symmetric key encryption?

• · The sender and recipient must find a secure way to share the key itself.

• · You need to use a different encryption key with everyone you communicate with, otherwise anyone who has ever received an encrypted message from you could open any message you sent to anyone else using that key.

• · Symmetric key encryption is slower than asymmetric key encryption.

• · A modern supercomputer can break even the most advanced symmetric key in a matter of minutes.

In the video Welcome to People, Process and Operating System Fundamentals for Cybersecurity, Alex mentions especially needing which two (2) technical skills and which two (2) soft skills?

• · Firewalls and Antivirus

• · Effective Communications and Critical Thinking

• · Teamwork and Public

• · Speaking Networking and Programming

• · Leadership and Organization

The statement: “The protection of computer systems from theft or damage to the hardware, software or information on them, as well as from disruption or misdirection of the services they provide.” Is a good definition for what?”

• · The Open Web Application Security Project (OWASP) Framework.

• · The Information Technology Infrastructure Library (ITIL) framework.

• · IT Security

• · The CIA Triad.

• · The Business Process Management Framework.

When looking at security standard and compliance, which three (3) are characteristics of best practices, baselines and frameworks?

• · They are used to improved controls, methodologies and governance for the IT department.

• · They enforce government, industry or client regulations.

• · They seek to improve performance, controls and metrics.

• · They help translate the business needs into technical or operational needs.

• · They are rules to follow for a specific industry.

Which three (3) of these roles would likely exist in an Information Security organization?

• · Director of Human Resources

• · CISO, Chief Information Security Officer

• · Vulnerability Assessor

• · Information Security Architect

• · Product Development Manager

 the video Introduction to Process, which three (3) items were called out as critical to the success of a Security Operations Center (SOC)?

• People

• Tools

• Process

• Bandwidth

• Faraday Cages