Mock Exam 1 (Ian Neil)

You work for a ticketing company that sells the best theater tickets in London. Your office holds an emergency supply of 150 tickets that take two hours to sell. What is the terminology for this two-hour period, and what must happen before the two hours expire? Choose the BEST TWO answers.

• The two-hour period is the RTO.

• The two-hour period is the RPO.

• The event that must happen before the two-hour period expires is the RTO.

• The event that must happen before the two-hour period expires is the RPO.

You are an administrator for a college that has 10 intranet web servers, and you need to install an X509 certificate so that they can support HTTPS. You need to use the solution that is the most cost-effective. Which of the following will you use for the certificates?

• Wildcard

• Domain

• Self-signed

• SAN

A group of chartered accountants visited the website belonging to their institution last Friday and were attacked by malware. What type of attack were they the victim of?

• Social Engineering

• Watering Hole Attack

• Remote Access Trojan

• Cross-Site Scripting

A cybersecurity analyst notices the following information in one of the log files on the company web server:

GET http://www.website.com.br/get-files../../../..etc/ passwd 

What type of attack has the analyst just discovered?

• Banner Grabbing

• CSRF

• XSS

• Directory Traversal

• SSL Stripping

Which of the following threat intelligence sources is likely to provide much more accurate data?

• OSINT

• Public/private information sharing centers

• Closed/proprietary

• Threat maps

A cybersecurity administrator wants to add comments to a log file that they are monitoring. Which tool is best for this?

• Nmap

• Head

• Logger

• Tail

A cybersecurity analyst has noticed a suspicious transaction on the server that holds the financial data. The output from the log file shows the following:

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+80000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+200000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+25000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+10000 HTTP 1.1

What type of attack has the analyst just discovered?

• Ransomware

• XSS

• Social Engineering

• CSRF

A cybersecurity team has been attacked by a group of hackers from the internet. The cybersecurity team wishes to find all of the email addresses of this group. Which tool would be the best for this?

• DMitry

• The harvester

• Curl

• Logger

Which of the following tools can be used for banner grabbing? (Select all that apply)

• cURL

• Telnet

• Nmap

• Netcat (nc)

A cybersecurity analyst has just finished reading the monthly release from a security advisory. They have now started searching the log files on all of the database servers. What task are they completing?

• Log analysis

• Risk mitigation

• Vulnerability Testing

• Threat hunting