Review Questions SYS701 - 2

Which of the following measures is not commonly used to assess threat intelligence?

Which one of the following motivations is most commonly attributed to hacktivists?

Kolin is a penetration tester who works for a cybersecurity company. His firm was hired to conduct a penetration test against a health-care system, and Kolin is working to gain access to the systems belonging to a hospital in that system. What term best describes Kolin's work?

Which one of the following attackers is most likely to be associated with an APT?

Which organization did the U.S. government help create to share knowledge between organizations in specific verticals?

Which of the following threat actors typically has the greatest access to resources?

Of the threat vectors shown here, which one is most commonly exploited by attackers who are at a distant location?

Which one of the following is the best example of a hacktivist group?

What type of assessment is particularly useful for identifying insider threats?

Cindy is concerned that her organization may be targeted by a supply chain attack and is conducting a review of all of her vendor and supplier partners. Which one of the following organizations is least likely to be the conduit for a supply chain attack?

Greg believes that an attacker may have installed malicious firmware in a network device before it was provided to his organization by the supplier. What type of threat vector best describes this attack?

Ken is conducting threat research on Transport Layer Security (TLS) and would like to consult the authoritative reference for the protocol's technical specification. What resource would best meet his needs?

Wendy is scanning cloud-based repositories for sensitive information. Which one of the following should concern her most, if discovered in a public repository?

Which one of the following threat research tools is used to visually display information about the location of threat actors?

Vince recently received the hash values of malicious software that several other firms in his industry found installed on their systems after a compromise. What term best describes this information?

Ursula recently discovered that a group of developers are sharing information over a messaging tool provided by a cloud vendor but not sanctioned by her organization. What term best describes this use of technology?

Tom's organization recently learned that the vendor is discontinuing support for their customer relationship management (CRM) system. What should concern Tom the most from a security perspective?

Which one of the following information sources would not be considered an OSINT source?

Edward Snowden was a government contractor who disclosed sensitive government documents to journalists to uncover what he believed were unethical activities. Which of the following terms best describe Snowden's activities? (Choose two.)

Renee is a cybersecurity hobbyist. She receives an email about a new web-based grading system being used by her son's school and she visits the site. She notices that the URL for the site looks like this:

www.myschool.edu/grades.php&studentID=1023425

She realizes that 1023425 is her son's student ID number and she then attempts to access the following similar URLs:

www.myschool.edu/grades.php&studentID=1023423

www.myschool.edu/grades.php&studentID=1023424

www.myschool.edu/grades.php&studentID=1023426

www.myschool.edu/grades.php&studentID=1023427

When she does so, she accesses the records of other students. She closes the records and immediately informs the school principal of the vulnerability. What term best describes Renee's work?

Threat Intelligence Assessment

Motivation of Hacktivists

Authorized Attacker

APT Attackers

ISACs

Resource Access by Threat Actors

Commonly Exploited Threat Vector

Example of Hacktivist Group

Identifying Insider Threats

Supply Chain Attack Conduit

Supply Chain Threat Vector

Resource for TLS Research

Sensitive Info Concern

Threat Research Tool

Malicious Software Hash Values

Use of Unauthorized Technology

Concern Over CRM Support

Not an OSINT Source

Edward Snowden's Activities

Renee's Hacking Work