Domain 2.5 - Cybersecurity Mitigation Techniques Quiz

A user accidentally installs a Trojan disguised as a legitimate software application. What are the most appropriate mitigation strategies to prevent this type of attack?

• Patching and Segmentation

• Backups and Isolation

• Antivirus, EDR, and Application allow listing

• Disabling network access

A logic bomb is best described as:

• Malicious code triggered by an event

• Unwanted software that slows systems

• Steals user data

• Forcing entry (physical or digital)

Which of the following is a key mitigation for rootkits?

• File integrity monitoring and secure boot

• Removal of unnecessary software

• RFID shielding

• Access badges

Why is application allow listing considered a key control in cybersecurity?

• It ensures only approved applications can run

• It removes unnecessary software

• It records keystrokes

• It copies access card signals

Which of the following is an example of a physical attack that can be mitigated by locks, access badges, and MFA?

• Brute force

• RFID cloning

• Environmental

• Spyware

RFID cloning is considered a threat to which type of security?

• Physical access security

• Environmental security

• Software security

• Data integrity

Which of the following is a mitigation for credential replay attacks that involve reusing stolen credentials?

• MFA, Tokenization

• Rate limiting, WAF, Scrubbing

• Input validation, ASLR

• WPA3, 802.1X, RADIUS

A wireless network is vulnerable to evil twin and deauthentication attacks. Which set of mitigations should be applied?

• WPA3, 802.1X, RADIUS

• DNSSEC, DNS filtering

• Input validation, WAF

• IPS, Patching, Segmentation

Which mitigation technique is most effective against privilege escalation attacks?

• Least privilege, Patching

• Session tokens, Timestamps

• Secure cookies, Token validation

• Use strong hashing algorithms

A log shows: User-Agent:$(/bin/sh/ id). What is the best way to prevent this type of command injection?

• Input sanitization

• Use strong hashing algorithms

• Disable old protocols (SSL 3.0)

• Use session tokens