Question 1

A port scanner can be used to search a system for port vulnerabilities. The RADMIN port scanner is an example of this type of software.

Accepted Answer

A) True 
 B)False  True

Question 2

A(n) ____________________ box test is one in which some limited information has been provided to the tester.

Accepted Answer

gray

Question 3

Describe the purpose of a honeypot.

Accepted Answer

A honeypot can also direct an attacker's attention away from legitimate servers. A honeypot encourages attackers to spend their time and energy on the decoy server while distracting their attention from the data on the real server.

Question 4

Match the following terms to the appropriate definitions.
-​In software development, the process of defining a collection of hardware and software components along with their interfaces in order to create the framework for software development.

Accepted Answer

A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector 
A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector

Question 5

An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?

Accepted Answer

A) application analyzer 
B) protocol analyzer 
C) threat profiler 
D) system analyzer 
A) application analyzer 
B) protocol analyzer 
C) threat profiler 
D) system analyzer

Question 6

List four things that a vulnerability scanner can do.

Accepted Answer

Alert when new systems are added to the

Question 7

​What term below describes a prearranged purchase or sale agreement between a government agency and a business?

Accepted Answer

A) ​Service Level Agreement (SL
A)  
B) ​Memorandum of Understanding (MOU) 
C) ​Blanket Purchase Agreement (BP
A)  
D) ​Interconnection Security Agreement (IS
A)  
A) ​Service Level Agreement (SL
A)  
B) ​Memorandum of Understanding (MOU) 
C) ​Blanket Purchase Agreement (BP
A)  
D) ​Interconnection Security Agreement (IS
A)

Question 8

A healthy security posture results from a sound and workable strategy toward managing risks.

Accepted Answer

A) True 
 B)False

Question 9

When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.

Accepted Answer

The answer of When using a black box test, many...

Question 10

If TCP port 20 is open, then an attacker can assume that FTP is being used.

Accepted Answer

A) True 
 B)False

Question 11

Discuss one type of asset that an organization might have.

Accepted Answer

An organization has many different types

Question 12

Match the following terms to the appropriate definitions.
-In software development, presenting the code to multiple reviewers in order to reach agreement about its security.​

Accepted Answer

A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector 
A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector

Question 13

List and describe the three categories that TCP/IP divides port numbers into.

Accepted Answer

Well-known port numbers (0-1023). Reserv

Question 14

Match the following terms to the appropriate definitions.
-​A computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files, to trick attackers into revealing their attack techniques.

Accepted Answer

A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector 
A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector

Question 15

What is the end result of a penetration test?

Accepted Answer

A) penetration test profile 
B) penetration test report 
C) penetration test system 
D) penetration test view 
A) penetration test profile 
B) penetration test report 
C) penetration test system 
D) penetration test view

Question 16

Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.

Accepted Answer

The answer of Most vulnerability scanners maintain a(n) ____________________ that...

Question 17

Match the following terms to the appropriate definitions.
-A comparison of the present state of a system to its baseline.​

Accepted Answer

A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector 
A) asset 
B) cyberterrorism 
C) hactivist 
D) exploit kit 
E) computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector

Question 18

The first step in a vulnerability assessment is to determine the assets that need to be protected.

Accepted Answer

A) True 
 B)False

Question 19

What is the name of the process that takes a snapshot of the current security of an organization?

Accepted Answer

A) threat analysis 
B) vulnerability appraisal 
C) risk assessment 
D) threat assessment 
A) threat analysis 
B) vulnerability appraisal 
C) risk assessment 
D) threat assessment

Question 20

Discuss the purpose of OVAL.

Accepted Answer

OVAL is designed to promote open and pub

A port scanner can be used to search a system for port vulnerabilities. The RADMIN port scanner is an example of this type of software.

A(n) ____________________ box test is one in which some limited information has been provided to the tester.

Describe the purpose of a honeypot.

Match the following terms to the appropriate definitions. -In software development, the process of defining a collection of hardware and software components along with their interfaces in order to create the framework for software development.

An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?

List four things that a vulnerability scanner can do.

What term below describes a prearranged purchase or sale agreement between a government agency and a business?

A healthy security posture results from a sound and workable strategy toward managing risks.

When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.

If TCP port 20 is open, then an attacker can assume that FTP is being used.

Discuss one type of asset that an organization might have.

Match the following terms to the appropriate definitions. -In software development, presenting the code to multiple reviewers in order to reach agreement about its security.

List and describe the three categories that TCP/IP divides port numbers into.

Match the following terms to the appropriate definitions. -A computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files, to trick attackers into revealing their attack techniques.

What is the end result of a penetration test?

Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.

Match the following terms to the appropriate definitions. -A comparison of the present state of a system to its baseline.

The first step in a vulnerability assessment is to determine the assets that need to be protected.

What is the name of the process that takes a snapshot of the current security of an organization?

Discuss the purpose of OVAL.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Access Control Fundamentals

Authentication and Account Management

Business Continuity

Risk Mitigation

Filters

Exam 15: Vulnerability Assessment and Third Party Integration

A port scanner can be used to search a system for port vulnerabilities. The RADMIN port scanner is an example of this type of software.

A(n) ____________________ box test is one in which some limited information has been provided to the tester.

Describe the purpose of a honeypot.

Match the following terms to the appropriate definitions. -​In software development, the process of defining a collection of hardware and software components along with their interfaces in order to create the framework for software development.

An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?

List four things that a vulnerability scanner can do.

​What term below describes a prearranged purchase or sale agreement between a government agency and a business?

A healthy security posture results from a sound and workable strategy toward managing risks.

When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.

If TCP port 20 is open, then an attacker can assume that FTP is being used.

Discuss one type of asset that an organization might have.

Match the following terms to the appropriate definitions. -In software development, presenting the code to multiple reviewers in order to reach agreement about its security.​

List and describe the three categories that TCP/IP divides port numbers into.

Match the following terms to the appropriate definitions. -​A computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files, to trick attackers into revealing their attack techniques.

What is the end result of a penetration test?

Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.

Match the following terms to the appropriate definitions. -A comparison of the present state of a system to its baseline.​

The first step in a vulnerability assessment is to determine the assets that need to be protected.

What is the name of the process that takes a snapshot of the current security of an organization?

Discuss the purpose of OVAL.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Access Control Fundamentals

Authentication and Account Management

Business Continuity

Risk Mitigation

Filters

Match the following terms to the appropriate definitions. -In software development, the process of defining a collection of hardware and software components along with their interfaces in order to create the framework for software development.

What term below describes a prearranged purchase or sale agreement between a government agency and a business?

Match the following terms to the appropriate definitions. -In software development, presenting the code to multiple reviewers in order to reach agreement about its security.

Match the following terms to the appropriate definitions. -A computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files, to trick attackers into revealing their attack techniques.

Match the following terms to the appropriate definitions. -A comparison of the present state of a system to its baseline.