CIT26 Practice Final Exam 70Q

Users report that a database file on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?

• • DoS attack

• • ransomware

• • man-in-the-middle attack

• Trojan horse

What two kinds of personal information can be sold on the dark web by cybercriminals? (Choose two.)

• • city of residence

• • Facebook photos

• • name of a pet

• • street address

• name of a bank

Involved in hunting for potential threats and implements threat detection tools

• Tier 1 Alert Analyst

• Tier 2 Incident Responder

• Tier 3 Subject Matter Expert

Involved in deep investigation of incidents

• Tier 1 Alert Analyst

• Tier 2 Incident Responder

• Tier 3 Subject Matter Expert

Monitors incoming alerts and verifies that a true incident has occurred

• Tier 1 Alert Analyst

• Tier 2 Incident Responder

• Tier 3 Subject Matter Expert

How does a security information and event management system (SIEM) in a SOC help the personnel fight against security threats?

• • by analyzing logging data in real time

• • by dynamically implementing firewall rules

• • by combining data from multiple technologies

• by integrating all security devices and appliances in an organization

Which statement describes the state of the administrator and guest accounts after a user installs Windows desktop version to a new computer?

• • By default, both the administrator and guest accounts are enabled.

• • By default, both the administrator and guest accounts are disabled.

• • By default, the administrator account is enabled but the guest account is disabled.

• By default, the guest account is enabled but the administrator account is disabled.

What is a purpose of entering the nslookup cisco.com command on a Windows PC?

• • to connect to the Cisco server

• • to test if the Cisco server is reachable

• • to check if the DNS service is running

• to discover the transmission time needed to reach the Cisco server

Which two actions can be taken when configuring Windows Firewall? (Choose two.)

• • Enable MAC address authentication.

• • Turn on port screening.

• • Manually open ports that are required for specific applications.

• • Allow a different software firewall to control access.

• Perform a rollback.

Based on the command output shown, which file permission or permissions have been assigned to the other user group for the data.txt file?

ls –l data.txt
-rwxrw-r-- sales staff 1028 May 28 15:50 data.txt

• • read, write, execute

• • read

• • read, write

• full access