Cisco 1

What does the term vulnerability mean?

• a potential threat that a hacker creates

• a weakness that makes a target susceptible to an attack

• a method of attack to exploit a target

• 
  a known target or victim machine

• a computer that contains sensitive information

The employees in a company receive an email stating that the account password will expire immediately and requires a password reset within 5 minutes. Which statement would classify this email?

• It is a piggy-back attack.

• 
  It is a hoax.

• It is an impersonation attack.

• 
  It is a DDoS attack.

What three best practices can help defend against social engineering attacks? (Choose three.)

• Do not provide password resets in a chat window.

• Deploy well-designed firewall appliances.

• Enable a policy that states that the IT department should supply information over the phone only to managers.

• Educate employees regarding policies.

• 
  Resist the urge to click on enticing web links.

A cyber criminal sends a series of maliciously formatted packets to the database server. The server cannot parse the packets and the event causes the server to crash. What is the type of attack the cyber criminal launches?

• 
  SQL injection

• DoS

• packet Injection

• man-in-the-middle

A security service company is conducting an audit in several risk areas within a major corporate client. What attack or data loss vector term would be used to describe providing access to corporate data by gaining access to stolen or weak passwords?

• improper access control

• hard copy

• an internal threat

• 
  unencrypted devices

A social media site is describing a security breach in a sensitive branch of a national bank. In the post, it refers to a vulnerability. What statement describes that term?

• A weakness in a system or its design that could be exploited by a threat.

• 
  The actions that are taken to protect assets by mitigating a threat or reducing risk.

• The potential damage to the organization that is caused by the threat.

• The likelihood that a particular threat will exploit a vulnerability of an asset and result in an undesirable consequence.

What is the first line of defense to protect a device from improper access control?

• passwords

• 
  end user license agreement (EULA)

• shredding

• encryption

A social media site is describing a security breach in a sensitive branch of a national bank. In the post, it refers to a vulnerability. What statement describes that term?

• The actions that are taken to protect assets by mitigating a threat or reducing risk.

• The potential damage to the organization that is caused by the threat.

• A weakness in a system or its design that could be exploited by a threat.

• The likelihood that a particular threat will exploit a vulnerability of an asset and result in an undesirable consequence.

Which type of network attack involves randomly opening many Telnet requests to a router and results in a valid network administrator not being able to access the device?

• 
  SYN flooding

• 
  man-in-the-middle

• DNS poisoning

• 
  spoofing

What kind of ICMP message can be used by threat actors to create a man-in-the-middle attack?

• 
  ICMP redirects

• 
  ICMP echo request

• 
  ICMP unreachable

• ICMP mask reply