Reference no: EM132972480

Assessment Task: Knowledge Workbook

Test concepts and procedures for cyber security

Question 1: Identify 2 current cyber threats, which can include trojan, virus or a worm, with a paragraph description of each.

Question 2: Describe the following types of attacks:
- Denial of Service
- Distributed Denial of Service
Your response must include legal implications and mitigation strategies for each attack.

Question 3: Identify 1 method of DNS attack & mitigation strategies used to defend against this type of attack.

Question 4: Describe what is meant by term, ‘Zero day' Vulnerability. Give one (1) example of a ‘Zero-day Exploit'.

Question 5: Define the term ‘CVE'. In your response, give 1 example of a CVE and include the URL from the source.

Question 6: Identify two (2) WLAN hardware vulnerabilities and give a brief description of each issue.

Question 7: Identify 2 WLAN software vulnerabilities and provide a brief description of each issue.

Question 8: Investigate the OWASP Top !0 Vulnerabilities. Choose 1 Vulnerability and discuss its features.

Question 9: Identify two (2) application layer security vulnerabilities and provide the basic characteristics of each security vulnerability.
Each vulnerability should be at least (1) paragraph.

Question 10: Referring to Question 9 security vulnerabilities, identify a policy or mitigation technique that is used to enhance the security of the application.

Question 11: Describe both DoS & DDoS Attack methodologies. Use a case example in your response.

Question 12: Describe the fundamental phases of the Penetration Testing Execution Standard.

Question 13: Explain any legal implications that may arise from exceeding the scope of an agreed penetration test.

Question 14: The following image is of a scan taken on a Windows 10 workstation. Identify the toolsets available from the image. You may use FortiClient to assist with your research.

Attachment:- Test concepts and procedures for cyber security.rar