Question 1

Which of the following is not a network symptom of an attack?

Accepted Answer

A)  Stealth transmissions 
B)  Memory overflows 
C)  Scan sweeps 
D)  Unauthorized network devices 
A)  Stealth transmissions 
B)  Memory overflows 
C)  Scan sweeps 
D)  Unauthorized network devices B

Question 2

Name a tool that can be used to determine if a cyber incident is taxing a processor's resources.

Accepted Answer

A resource monitor, Microsoft Windows Resource Monitor, or the Sysinternals Process Explorer

Question 3

What is the term for thousands of bot computers that are gathered into a logical computer network?

Accepted Answer

A)  Botstorm 
B)  Botnique 
C)  Bot herd 
D)  Botnet 
A)  Botstorm 
B)  Botnique 
C)  Bot herd 
D)  Botnet D

Question 4

What is a sudden, unusual surge in network bandwidth use called?

Accepted Answer

A)  Spike 
B)  Bolus 
C)  Peak 
D)  Apogee 
A)  Spike 
B)  Bolus 
C)  Peak 
D)  Apogee

Question 5

What is the act of changing operating system settings or exploiting a software vulnerability to access resources that users normally would be restricted from accessing?

Accepted Answer

Privilege

Question 6

_______________ occurs when infected devices attempt to contact a threat actor's external command and control (C&C) server.

Accepted Answer

The answer of _______________ occurs when infected devices attempt to...

Question 7

Attackers have no reliable way to take advantage of a processor with multiple cores.

Accepted Answer

A) True 
 B)False

Question 8

What is a named pipe?

Accepted Answer

A logical connection (like a T

Question 9

What kind of attack occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer?

Accepted Answer

A)  Source overflow 
B)  Integer overflow 
C)  Buffer overflow 
D)  Address overflow 
A)  Source overflow 
B)  Integer overflow 
C)  Buffer overflow 
D)  Address overflow

Question 10

In the context of cybersecurity, DLP is an abbreviation for which of the following?

Accepted Answer

A)  data log propagation 
B)  data loss prevention 
C)  digital loss prevention 
D)  digital limit processing 
A)  data log propagation 
B)  data loss prevention 
C)  digital loss prevention 
D)  digital limit processing

Which of the following is not a network symptom of an attack?

Name a tool that can be used to determine if a cyber incident is taxing a processor's resources.

What is the term for thousands of bot computers that are gathered into a logical computer network?

What is a sudden, unusual surge in network bandwidth use called?

What is the act of changing operating system settings or exploiting a software vulnerability to access resources that users normally would be restricted from accessing?

_______________ occurs when infected devices attempt to contact a threat actor's external command and control (C&C) server.

Attackers have no reliable way to take advantage of a processor with multiple cores.

What is a named pipe?

What kind of attack occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer?

In the context of cybersecurity, DLP is an abbreviation for which of the following?

Applying Environmental Reconnaissance

Analyzing Network Reconnaissance

Strengthening the Network

Exploring Penetration Testing

Scanning for Vulnerabilities

Analyzing Vulnerability Scans and Identifying Common Vulnerabilities

Reacting to a Cyber Incident: Impact and Forensics

Reacting to a Cyber Incident: Communication and Incident Recovery

Security Structures and Identity and Access Management

Defense in Depth, Software Development, and Data Analytics

Filters

Exam 9: Reacting to a Cyber Incident: Analyzing Common Symptoms

Which of the following is not a network symptom of an attack?

Name a tool that can be used to determine if a cyber incident is taxing a processor's resources.

What is the term for thousands of bot computers that are gathered into a logical computer network?

What is a sudden, unusual surge in network bandwidth use called?

What is the act of changing operating system settings or exploiting a software vulnerability to access resources that users normally would be restricted from accessing?

_______________ occurs when infected devices attempt to contact a threat actor's external command and control (C&C) server.

Attackers have no reliable way to take advantage of a processor with multiple cores.

What is a named pipe?

What kind of attack occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer?

In the context of cybersecurity, DLP is an abbreviation for which of the following?

Applying Environmental Reconnaissance

Analyzing Network Reconnaissance

Strengthening the Network

Exploring Penetration Testing

Scanning for Vulnerabilities

Analyzing Vulnerability Scans and Identifying Common Vulnerabilities

Reacting to a Cyber Incident: Impact and Forensics

Reacting to a Cyber Incident: Communication and Incident Recovery

Security Structures and Identity and Access Management

Defense in Depth, Software Development, and Data Analytics

Filters