2.3-General Attack Strategy

Which of the following is a type of technical exploit?

• Virus scan

• Port scan

• Firewall

• Antivirus

What is another term for a network reconnaissance technique that involves sending ICMP echo requests to a range of IP addresses?

• Port scan

• Ping sweep

• Phishing

• Sniffing

Which of the following is the first step in the cyber attack process as mentioned in the summary?

• Breaching

• Staging

• Reconnaissance

• Exploiting

What is the step before 'Exploiting' in the cyber attack process according to the summary?

• Reconnaissance

• Breaching

• Staging

• Escalating privileges

Which of the following is not a step in the cyber attack process listed in the summary?

• Reconnaissance

• Staging

• Patching

• Breaching

What is the principle depicted in the diagram for a general defense strategy in cybersecurity?

• Principle of Maximum Privilege

• Principle of Least Privilege

• Principle of Shared Responsibility

• Principle of Open Access

Which of the following is a principle of layered defenses in security?

• Increase complexity

• Grant all privileges

• Defense mechanisms

• Avoid randomization

What is a recommended practice to enhance security according to the summary?

• Complicate things

• Keep things simple

• Provide maximum privileges

• Standardize behaviors

What should be minimized according to the principle of least privilege in security?

• User training

• Access rights

• Security software

• Random behaviors

What is one of the strategies mentioned in the summary to make it harder for attackers to predict system behavior?

• Simplify user interfaces

• Randomize behaviors

• Decrease defense mechanisms

• Use common passwords