Network Security and Incident Response

<p>Windows Security (C)</p> Signup and view all the answers

<p>Submit the URL to a threat intelligence portal for analysis (D)</p> Signup and view all the answers

<p>Restore a backup copy of the authentication database (A)</p> Signup and view all the answers

<p>Evaluating the severity of vulnerabilities (A)</p> Signup and view all the answers

<p>Patch Management Software (D)</p> Signup and view all the answers

<p>The ports are open on the system and are waiting for connections. (B)</p> Signup and view all the answers

<p>Containment, Eradication and Recovery (C)</p> Signup and view all the answers

<p>It creates and runs virtual machines. (D)</p> Signup and view all the answers

<p>Security policies and procedures. (A)</p> Signup and view all the answers

<p>An ACL. (D)</p> Signup and view all the answers

<p>192.168.18.189 (A), 172.18.100.78 (D)</p> Signup and view all the answers

<p>Hardware failure and software failure. (D)</p> Signup and view all the answers

<p>Reporting the cause and costs of the incident. (A)</p> Signup and view all the answers

<p>Scan affected workstations and remove malware (B)</p> Signup and view all the answers

<p>To display the file permission and ownership of the executable file (C)</p> Signup and view all the answers

<p>Proxy server (A)</p> Signup and view all the answers

<p>Vulnerability (D)</p> Signup and view all the answers

<p>Remove or block infected system from the network (B)</p> Signup and view all the answers

<p>Risk (C)</p> Signup and view all the answers

<p>Mitigation (D)</p> Signup and view all the answers

<p>DDoS (C)</p> Signup and view all the answers

<p>Accessing the server as a guest (A)</p> Signup and view all the answers

<p>WPA2 (B)</p> Signup and view all the answers

<p>Something you earn (C)</p> Signup and view all the answers

<p>Restoring a system after an event (A)</p> Signup and view all the answers

<p>Volcanic eruptions (A), Floods (B)</p> Signup and view all the answers

<p>Install a new device driver for the wireless printer (A)</p> Signup and view all the answers

<p>Performing an Nmap port scan on the LAN to determine types of connected devices and open ports (B)</p> Signup and view all the answers

<p>A breach of the cybersecurity code of ethics (A)</p> Signup and view all the answers

<p>HIPAA (C)</p> Signup and view all the answers

<p>Denial of service (D)</p> Signup and view all the answers

<p>Nslookup (B)</p> Signup and view all the answers

<p>Multifactor (A)</p> Signup and view all the answers

<p>Data integrity (D)</p> Signup and view all the answers

<p>GDPR (C)</p> Signup and view all the answers

<p>Log the alert and watch for a second occurrence (A)</p> Signup and view all the answers

<p>FISMA (A)</p> Signup and view all the answers

<p>Implement SSH access on the server. (A), Disable telnet access on the server. (B)</p> Signup and view all the answers

<p>Sending an email with a link to a fictitious web portal login page. (A)</p> Signup and view all the answers

<p>The impacts that an exploit of the vulnerability will have on the organization. (A)</p> Signup and view all the answers

<p>Threat actors can access the databases to learn how to vary their threats to avoid detection. (C), They lack comprehensive coverage of all vulnerabilities. (D)</p> Signup and view all the answers

<p>Events from programs running on the device. (D)</p> Signup and view all the answers

<p>Ignore historical data related to previous exploits. (A)</p> Signup and view all the answers

<p>Security logs (C)</p> Signup and view all the answers

<p>The likelihood of an adversary exploiting it. (A)</p> Signup and view all the answers

TCP ports are open and waiting for incoming connections.

Minimizing damage from an incident, repairing damage, and lessening impact.

Determine and document the reason(s) for an incident, associated costs, and steps to prevent it again.

Identify unusual activity, determine if it's malicious, and issue warnings.

Creates and manages virtual machines (VMs).

Tracking operating systems, updates, and patches on devices.

NAT (Network Address Translation) rules block spoofing attempts to the internal network. Use of NAT rule is recommended.

192.168.x.x and 172.16.x.x are private networks, not routable on the internet, to prevent issues.

Data stored on a hard drive or other storage medium.

Data being transmitted across a network, like when you send an email or browse the internet.

A protocol that encrypts data transferred over a network, ensuring secure communication.

Messages from a DNS server indicating potential problems that need attention.

A structured process for identifying, prioritizing, and mitigating vulnerabilities in systems and applications.

The location in Windows 10 where you can view the results of a security scan.

A service that analyzes suspicious URLs and other online threats for you.

Checking if the company's intranet website is correctly registered in the local DNS server.

Actions taken to address the problem of infected systems, such as cleaning and patching them to remove the worm and restore functionality.

Steps taken to prevent the spread of the worm further, often involving isolating infected systems from the network to limit exposure.

Protecting uninfected systems by applying patches or updates to address vulnerabilities exploited by the worm, preventing further infection.

Segmenting the network to restrict the worm's spread to already infected areas, protecting uninfected parts.

A Linux command used to display detailed information about files and directories, including permissions, ownership, and file size.

Anything of value that an organization wants to protect, including people, property, or data.

Anything that could potentially cause harm or damage to an asset, like a virus or a hacker.

The likelihood of a threat exploiting a vulnerability, leading to harm or loss of an asset.

An attack where an attacker sends more data than the system can handle, overflowing the buffer and potentially overwriting critical memory locations, leading to crashes or malicious code execution.

A cyberattack where multiple compromised devices (botnet) bombard a target server with traffic, overwhelming its resources and making it unavailable to legitimate users.

An attack where an attacker gains elevated access to a system, allowing them to perform actions they shouldn't be allowed to, such as accessing sensitive data or changing system settings.

An attack where an attacker tries to guess passwords or other credentials by repeatedly trying different combinations.

A wireless encryption standard that offers strong security using the Advanced Encryption Standard (AES) algorithm. It's considered a significant improvement over WEP and WPA.

A security mechanism that requires users to provide multiple forms of authentication (e.g., something you know, something you have, something you are) to verify their identity.

Using telnet to access a database server is insecure because data is transmitted unencrypted, making it vulnerable to eavesdropping and attacks.

An adversary attempting to gain credentials may use tactics like sending phishing emails with fake login pages to trick users into revealing their passwords.

Application logs record events related to software running on the device, including software errors, warnings, and information.

System logs contain information about operating system events like updates, installations, and critical system actions.

When assessing a vulnerability, consider the likelihood that an attacker could exploit it.

During a vulnerability assessment, consider the potential impact if the vulnerability were exploited.

Attackers can use publicly available vulnerability databases to learn how to exploit vulnerabilities and avoid detection.

SSH (Secure Shell) is a secure protocol for remote access and data transfer, using encryption to protect data during transmission.

The General Data Protection Regulation (GDPR) protects the personal information of individuals within the European Union. This includes data like names, addresses, and online activity.

The Health Insurance Portability and Accountability Act (HIPAA) safeguards the medical information of individuals in the United States. This includes health records, billing information, and patient diagnoses.

The Payment Card Industry Data Security Standard (PCI-DSS) aims to protect the credit card information of individuals by setting strict security requirements for organizations that handle credit card transactions. This includes data encryption and secure storage practices.

The Family Educational Rights and Privacy Act (FERPA) protects the educational records of students in the United States. This includes grades, attendance records, and disciplinary actions.

The Federal Information Security Management Act (FISMA) protects the personal information of individuals that is stored by federal agencies in the United States. This includes sensitive information like social security numbers and passport details.

The nslookup command is used to query a Domain Name System (DNS) server. It can be used to find the IP address associated with a domain name or to display the DNS server's configuration information.

A Denial of Service (DoS) attack attempts to overwhelm a system or network with excessive traffic, causing it to become unavailable to legitimate users. This can be a website, server, or any other online service.

Multifactor authentication (MFA) requires users to provide multiple forms of verification to gain access to a system or application. This might include a password, a one-time code sent to a phone, or a fingerprint scan.