CIS27B Quiz 1 Review Game

Which of the following techniques allows the organization to identify security vulnerabilities to repair the weaknesses and protect its assets, improve security posture of the organization to gain trust from customers and investors?

• ethical hacking

• user training

• system patching

• access control

Attack tools are identified in which phase of the attack?

• clearing tracks and reporting

• planning and reconnaissance

• probing and targeting

• gaining and maintaining access

Which of the following technique is used to extract data from the website when an attacker is footprinting?

• web evaluation

• web funneling

• web scaling

• web scraping

Which of the following footprinting techniques entail collecting information without directly accessing the target using search engine, social media and dumpster diving?

• parameter footprinting

• hidden footprinting

• passive footprinting

• active footprinting

What type of footprinting techniques includes port scanner, ping sweeps, DNS queries?

• Service footprinting

• Dynamic footprinting

• Active footprinting

• Passive footprinting

What type of social media footprinting entails examining the user’s posted images and videos on the social media website?

• profile analysis

• content analysis

• behavior analysis

• sentiment analysis

Which of the following technique is used to assess network vulnerabilities, traffic flow and performance for troubleshooting and improving network availability?

• packet sniffing

• packet screening

• load balancing

• traffic filtering

What reconnaissance step is performed after the information has been collected to determine IP address range?

• Discover active services.

• Identify active systems

• View network logs.

• Probing open ports.

Which of the following steps is executed after network services are discovered on specific ports?

• mapping the network

• locating entry points

• elevating access privileges

• installing backdoor

Which of the following resources contains many vulnerabilities and associated exploits gathered from various sources, including disclosed vulnerabilities, research, and submissions from the security community?

• Vulnerability and Exposures (CVEs) Database

• Exploit Database

• Endpoints Database

• Security Support Database