Question 1

An administrator needs to view packets and decode and analyze their contents.What type of application should the administrator use?

Accepted Answer

A)  application analyzer
B)  protocol analyzer
C)  threat profiler
D)  system analyzerE) C) and D)
F) A) and B)

Question 2

Which security procedure is being demonstrated if an administrator is using Wireshark to watch for specific inbound and outbound traffic?

Accepted Answer

A)  application search
B)  application control
C)  firewall monitoring
D)  virus controlE) B) and D)
F) A) and D)

Question 3

The second step in a vulnerability assessment is to determine the assets that need to be protected.

Accepted Answer

A) True 
 B)False

Question 4

What is the name of the process that basically takes a snapshot of the current security of an organization?

Accepted Answer

A)  threat analysis
B)  vulnerability appraisal
C)  risk assessment
D)  threat assessmentE) C) and D)
F) A) and D)

Question 5

Which of the following groups categorize the risks associated with the use of private data? (Choose all that apply. )

Accepted Answer

A)  Statistical inferences.
B)  Associations with groups.
C)  Private and consumer data
D)  Individual inconveniences and identity theft.E) All of the above
F) None of the above

Question 6

List at least four things that a vulnerability scanner can do.

Accepted Answer

A vulnerability scanner can do the follo...

Question 7

Which of the following is the goal of a vulnerability scan? (Choose all that apply. )

Accepted Answer

A)  identify vulnerabilities
B)  identify common misconfigurations
C)  identify threat actors
D)  identify a lack of security controlsE) A) and B)
F) A) and C)

Question 8

Which is the term for a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic,yet they are imitations of real data files?

Accepted Answer

A)  port scanner
B)  honeynet
C)  honeypot
D)  honeycombE) A) and D)
F) B) and D)

Question 9

If a penetration tester has gained access to a network and then tries to move around inside the network to other resources,what procedure is the tester performing?

Accepted Answer

A)  pivot
B)  spinning
C)  persistence
D)  secondary exploitationE) None of the above
F) C) and D)

Question 10

Which item below is the standard security checklist against which systems are evaluated for a security posture?

Accepted Answer

A)  profile
B)  threat
C)  control
D)  baselineE) A) and D)
F) None of the above

Question 11

What process addresses how long data must be kept and how it is to be secured?

Accepted Answer

A)  legal retention
B)  data retention
C)  legal and compliance
D)  data methodologyE) A) and B)
F) A) and C)

Question 12

What process does a penetration tester rely on to access an ever higher level of resources?

Accepted Answer

A)  pivot
B)  spinning
C)  persistence
D)  continuous exploitationE) C) and D)
F) None of the above C

Question 13

Describe a penetration testing report.

Accepted Answer

The end product of a penetration test is...

Question 14

List and describe the three categories that TCP/IP divides port numbers into.

Accepted Answer

Well-known port numbers (0-1023).Reserve...

Question 15

Explain the concepts of personal data theft and identity theft.

Accepted Answer

Personal data theft involves user person...

Question 16

In white box and gray box testing,the first task of the tester is to perform preliminary information gathering on their own from outside the organization,sometimes called open source intelligence (OSINT).

Accepted Answer

A) True 
 B)False  False

Question 17

Discuss one type of asset that an organization might have.

Accepted Answer

An organization has many different types...

Question 18

What term is defined as the state or condition of being free from public attention to the degree that you determine?

Accepted Answer

A)  freedom
B)  secure
C)  privacy
D)  contentmentE) B) and C)
F) None of the above

Question 19

What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?

Accepted Answer

A)  active
B)  passive
C)  invasive
D)  evasiveE) A) and C)
F) All of the above B

Question 20

During a vulnerability assessment,what type of software can be used to search a system for port vulnerabilities?

Accepted Answer

A)  threat scanner
B)  vulnerability profiler
C)  port scanner
D)  application profilerE) A) and B)
F) B) and C)

Exam 13: Vulnerability Assessment and Data Security

An administrator needs to view packets and decode and analyze their contents.What type of application should the administrator use?

Correct AnswerverifiedShow Answer

Which security procedure is being demonstrated if an administrator is using Wireshark to watch for specific inbound and outbound traffic?

Correct AnswerverifiedShow Answer

The second step in a vulnerability assessment is to determine the assets that need to be protected.

Correct AnswerverifiedShow Answer

What is the name of the process that basically takes a snapshot of the current security of an organization?

Correct AnswerverifiedShow Answer

Which of the following groups categorize the risks associated with the use of private data? (Choose all that apply. )

Correct AnswerverifiedShow Answer

List at least four things that a vulnerability scanner can do.

Correct AnswerverifiedA vulnerability scanner can do the follo...View AnswerShow Answer

Which of the following is the goal of a vulnerability scan? (Choose all that apply. )

Correct AnswerverifiedShow Answer

Which is the term for a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic,yet they are imitations of real data files?

Correct AnswerverifiedShow Answer

If a penetration tester has gained access to a network and then tries to move around inside the network to other resources,what procedure is the tester performing?

Correct AnswerverifiedShow Answer

Which item below is the standard security checklist against which systems are evaluated for a security posture?

Correct AnswerverifiedShow Answer

What process addresses how long data must be kept and how it is to be secured?

Correct AnswerverifiedShow Answer

What process does a penetration tester rely on to access an ever higher level of resources?

Correct AnswerverifiedC

Describe a penetration testing report.

Correct AnswerverifiedThe end product of a penetration test is...View AnswerShow Answer

List and describe the three categories that TCP/IP divides port numbers into.

Correct AnswerverifiedWell-known port numbers (0-1023).Reserve...View AnswerShow Answer

Explain the concepts of personal data theft and identity theft.

Correct AnswerverifiedPersonal data theft involves user person...View AnswerShow Answer

In white box and gray box testing,the first task of the tester is to perform preliminary information gathering on their own from outside the organization,sometimes called open source intelligence (OSINT).

Correct AnswerverifiedFalse

Discuss one type of asset that an organization might have.

Correct AnswerverifiedAn organization has many different types...View AnswerShow Answer

What term is defined as the state or condition of being free from public attention to the degree that you determine?

Correct AnswerverifiedShow Answer

What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?

Correct AnswerverifiedB

During a vulnerability assessment,what type of software can be used to search a system for port vulnerabilities?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A vulnerability scanner can do the follo...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified
The end product of a penetration test is...
View Answer

Correct Answer
verified
Well-known port numbers (0-1023).Reserve...
View Answer

Correct Answer
verified
Personal data theft involves user person...
View Answer

Correct Answer
verified
False

Correct Answer
verified
An organization has many different types...
View Answer

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified