Question 1

Backdoor

Options :

A : A means of regaining access to a compromised system by installing software or configuring existing software to enable remote access under attacker defined conditions

B : A large automated and distributed network previously compromised computers that can be simultaneously controlled to launch large-scale attacks such as denial of service

C : When a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold

D : Something of either tangible or intangible value that is worth protecting, including people, information, infrastructure, finances and reputation

Answer: A

Question 2

A weakness in the design, implementation, operation or internal control of a process that could expose the system to adverse threats from threat events

Options :

A : Vulnerability

B : Confidentiality

C : Authorization

D : Change Management

Answer: A

Question 3

The combination of the probability of an event and its consequences, mitigated through the use of controls or safeguards

Options :

A : Rootkit

B : Inherent Risk

C : Risk

D : Asset

Answer: C

Question 4

An attack where social engineering techniques are used to masquerade as a trusted party to obtain important information such as passwords from the victim.

Options :

A : Denial of service attack

B : Spear Phishing

C : Advanced Persistent Threats (APTs)

D : Man in the middle attack

Answer: B

Question 5

Select all that apply. Which of the following are considered functional areas of network management as defined by ISO?

Options :

A : Accounting management

B : Fault management

C : Firewall management

D : Performance management

E : Security management

Answer: A,B,D