A large corporation decided to start a large factory to build hardware for computers. They announced it on their website. A week later, the company's website is defaced with messages condemning the whole project and demanding the project be stopped. No sensitive data was stolen, but the attack gain wide attention on social media.
Which type of threat actor is most likely responsible for this attack?

Alvin was tired of having just one computer at work to do all his work. So he brought in a switch, connected the switch to the wall jack. He then connected his work desktop to the switch and a personal laptop to the switch. He is using his laptop to listen to music and YouTube while completing work on his work desktop.
What type of threat is this an example of?

You are monitoring the network for suspicious activity. You receive an alert that several employees have been sent an email containing pictures of cats. When you download one of the images in an isolated environment, you discover that hidden malware is embedded within the image file. What technique did the attacker use?

From the picture provided, what is the biggest issue that you need to fix in order to harden this WAP?

You are installing a new WAP in your home. You enable WPA 3, changed the SSID, enabled a guest network to segment guests. After confirming all these best security practices, you can't help but feel like you forgot 1 more important thing? What did you forget to change?

Telnet Secure installed a software update from a trusted vendor. Soon after, several systems begin showing unusual outbound network connections to an unknown IP. Upon investigation, you discover that the vendor's software update had been modified by an attacker before distribution. What type of attack does this scenario describe?

True or False: Best hardening practices include enforcing MFA, monitoring for misconfigurations, implementing PoLP, and applying latest security patches.

A network administrator is preparing to deploy a new Wi-Fi network in an office building. Before placing the access points, the admin walks through the building measuring signal strength, identifying interference, and checking for areas that may have weak coverage.

Which of the following is the BEST description of this activity?

Alvin was called in on his only day off this year because Geff in accounting picked up a USB from the parking lot and plugged it into his computer. Before Alvin gets to the office, he has someone disconnect the PC from the network and asked for the USB to be secured until he gets there. What is one technique Alvin can do to check what is inside the USB safely.

Ash wants to send a secure message to Misty. To do this, Ash encrypts the message using A, and Misty decrypts the message using B. Select the correct answer for each letter.

Telnet Secure is increasing security. They are implementing a software that will take all stored credit card numbers and replace them with randomly generated strings that have no meaningful value outside of the company systems. What technique is being used?

Which of the following are hashing algorithms?

A technique that applies multiple iterations of a hashing function to a password to make it harder for attackers to crack is called _____?

A distributed ledger that records transactions in blocks that are cryptographically linked describes which of the following?

A company uses digital certificates for authentication. When the internet goes down, users can no longer verify certificates because the system can’t reach the OCSP server.

What could allow certificate validation to continue during the outage?

On an ACL, there is a rule that is always there but never shown. What is that rule called?

Your company wants to prevent attackers from sending emails that appear to come from its domain. Which DNS record helps mail servers verify the authorized sending mail servers?

The company wants to use _______ to detect and block malicious attachments and phishing links before messages reach user inboxes. This is a technical control. What is the company using?

Alvin is reviewing user accounts and finds that the company has 457 active employees but over 600 active user accounts. Which process was not properly followed?

You use your university campus credentials to log into a third-party educational platform instead of creating new accounts. What does this concept describe?

A system reports its hardware and software configuration to a trusted authority to verify that it has not been tampered with. What is this process called?

Alex creates a confidential file on his computer and grants Alvin permission to read it. Alvin cannot change the access settings; only Alex decides who can access his file.

A company has a single on-premises data center that hosts all their email servers, file storage, and internal applications. Employees from all offices must connect to this data center to access any company resources. Recently, the company experienced a power outage at the data center, which caused all employees to lose access to email, shared files, and business applications for several hours.

Which architecture does this company use, and what is a major risk of this setup?

True or False: Embedded systems often operate in real-time, meaning they must respond immediately to input or environmental changes.

What is the purpose of platform diversity in an enterprise network?

Alvin, Michael and Alex were invited to meeting where the company are discussing the steps to respond to a ransomware attack. They are not activating any systems and someone brought pizza with pineapples. Which type of exercise is being held?

The data center firewall experience a critical hardware failure and stops all traffic until it is repaired. What type of fail-safe behavior is this?

An organization wants to analyze user traffic patterns to detect anomalies without affecting network performance. They install a device that captures packets and forwards them to a monitoring system. Which type of monitoring is this?

A company wants to securely connect two branch offices over the internet using a VPN. Which tunneling protocol is BEST suited for encrypting all IP traffic between the offices?

An organization implements VLANs to separate the accounting, HR, and sales departments. Additionally, the company hosts its public web server in a DMZ protected by two firewalls. Which of the following best describes this design principle?

An organization is retiring old laptops that were used by former employees. The IT team ensures that all drives are wiped, credentials removed, and assets updated in the inventory before sending the devices to a certified recycling center. Which process is this an example of?

An administrator wants to secure a web application server. She disables unused services, applies the latest patches, enforces strong passwords, and installs a host-based firewall. Which of the following BEST describes this process?

What web-based vulnerability is executed by injecting malicious scripts into web pages? Often used to hijack sessions.

Alvin misses flappy bird and all the good times he had with the game. The app store removed flappy bird from its listing. Alvin decides to download flappy bird from a third party. What is Alvin doing?