M4 ICCE

What is the correct definition of risk management?

• The process of transferring risks that cannot be eliminated or mitigated

• The process of identifying and assessing risk to determine the severity of threats

• The process of accepting risks that cannot be eliminated, mitigated or transferred

• The process of identifying and assessing risk to reduce the impact of threats and vulnerabilities

Which of the following tools can be used to provide a list of open ports on network devices?

• Ping

• Tracert

• Nmap

• hois

Which of the following tools can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

• NetFlow

• IEM

• Nmap

• Snort

Today, there are single security appliances that will solve all the network security needs of an organization.’

Is this statement true or false?

• True

• False

What name is given to a device that controls or filters traffic going in or out of the network?

• Router

• VPN

• Firewall

• IPS

What tool can identify malicious traffic by comparing packet contents to known attack signatures?

• IDS

• Zenmap

• Nmap

• NetFlow

What protocol is used to collect information about traffic traversing a network?

• HTTPS

• NetFlow

• Telnet

• NAT

Behavior-based analysis involves using baseline information to detect what?

• Risk

• Anomalies

• Backdoors

• Vulnerabilities

What is the last stage of a pen test?

• Scanning

• Analysis and reporting

• Gathering target information

• Maintaining access

. ‘With careful planning and consideration, some risks can be completely eliminated.’

Is this statement true or false?

• True

• False