Risk Management

Which of the following terms identifies the weakness of a system that could lead to compromised information or unauthorized access?

• Vulnerability

• Hacking

• Exploit

• Data breach

Rob has enrolled himself as a network security trainee in JV Internet Securities. Which of the following terms should he know to understand the advantage taken of a software vulnerability that hasn't yet or only very recently become public?

• Vulnerability

• Zero-day exploit

• Exploit

• Data breach

Which of the following testing tools combines known scanning and exploit techniques to explore potentially new attack routes?

• Nmap

• Nessus

• Metasploit

• Honeypot

Which of the following is a type of DoS (denial-of-service) attack that is bounced off uninfected computers before being directed at the target?

• PDoS attack

• Amplified DRDoS attack

• DRDoS attack

• DDoS attack

Certain checks and balances must also be maintained and defined in the policy measures in detail. Which of the following security policies should be used in this scenario?

• An NDA (non-disclosure agreement)

• An anti-malware policy

• A PUA (privileged user agreement)

• An AUP (acceptable use policy)

Kickstart Securities provides network analysis and safety measurement services to various clients. Recently, one of its clients has requested a technician to run a cross-check on the network system to ensure that there are no vulnerabilities that are exposed. You have been sent in to assess the situation and fix the errors if there are any. Which of the following will you use in such a scenario to track the vulnerabilities across systems?

• Quid pro quo

• Phishing

• Zero-day exploit

• CVE

Zeneth Computers is a software development company. It has received a random email claiming that there will be an attempt to hack and extract sensitive financial data of the company before the year end. The company has contacted you, a network analyst, to verify if such claims are indeed true. You have decided to set up a trap for the hackers by putting up a system containing false financial data. Which of the following will you use in this scenario?

• Nmap

• Nessus

• Metasploit

• Honeypot

In which of the following phases of the social engineering attack cycle will an attacker require the most time investment?

• Building trust

• Research

• Exploit

• Exit

Bryden is a network analyst who has been recruited into Big Bay Burger's security management. Which of the following terminologies must he use to explain to the company's employees about the possibility of someone using a deception in following them into a restricted area?

• Phishing

• Baiting

• Piggybacking

• Tailgaiting

Which of these DoS (denial-of-service) attacks damages a device's firmware beyond repair?

• DDoS

• DRDoS

• Amplified DRDoS

• PDoS