Chapter 22.4 Quiz

Which of the following is NOT a component of the attack surface described by the SANS Institute?

• Network Attack Surface

• Software Attack Surface

• Human Attack Surface

• Physical Attack Surface

What is the Network Attack Surface?

• Exploitation of vulnerabilities in user behavior

• Exploitation of vulnerabilities in networks

• Exploitation of vulnerabilities in software applications

• Exploitation of vulnerabilities in physical devices

What is the Human Attack Surface?

• Exploitation of vulnerabilities in user behavior

• Exploitation of vulnerabilities in networks

• Exploitation of vulnerabilities in software applications

• Exploitation of vulnerabilities in physical devices

What is block listing?

• Allowing all applications to run

• Creating lists of prohibited applications

• Ignoring security threats

• Increasing the attack surface

How are allow lists created?

• Randomly by users

• In accordance with a security baseline

• By ignoring security threats

• By increasing the attack surface

What can violate the established security baseline?

• Allow listed software

• Non-allow listed software

• Block listed software

• All software

What is the purpose of the Firepower security management system?

• To execute malware

• To access the Cisco Talos security intelligence service

• To create malware

• To disable security devices

What is sandboxing used for in cybersecurity?

• To create malware

• To execute files in a safe environment

• To distribute malware

• To disable security systems

What type of malware changes frequently and appears regularly?

• Static malware

• Polymorphic malware

• Simple malware

• Non-changing malware

Which system can track the trajectory of a file through the network?

• Cisco AMP

• Cisco Talos

• Cuckoo Sandbox

• ANY.RUN