Question 1

Which security technology allows only a set of pre-approved applications to run on a system?

Options :

A : application-level blacklisting

B : host-based IPS

C : application-level whitelisting

D : antivirus

Answer: C

Question 2

Which tool provides a full packet capture from network traffic?

Options :

A : Nagios

B : CAINE

C : Hydra

D : Wireshark

Answer: D

Question 3

What is the purpose of a ransomware attack?

Options :

A : to escalate privileges

B : to make files inaccessible by encrypting the data

C : to send keystrokes to a threat actor

D : to decrypt encrypted data and disks

Answer: B

Question 4

How does an attack surface differ from an attack vector?

Options :

A : An attack vector recognizes the potential outcomes of an attack, and the attack surface is choosing a method of an attack.

B : An attack surface identifies vulnerable parts for an attack, and an attack vector specifies which attacks are feasible to those parts.

C : An attack surface mitigates external vulnerabilities, and an attack vector identifies mitigation techniques and possible workarounds.

D : An attack vector matches components that can be exploited, and an attack surface classifies the potential path for exploitation

Answer: C

Question 5

What does an attacker use to determine which network ports are listening on a potential target device?

Options :

A : man-in-the-middle

B : port scanning

C : SQL injection

D : ping sweep

Answer: B