Reference no: EM133309624
QuestionS
1. Identify the Software Development Life Cycle (SDLC) step where developers perform "black box" or "grey box" analysis to test for vulnerabilities in the published application, as well as in its publication environment.
A. Testing
B. Implementation
C. Planning
D. Maintenance
2. A hacker who is attempting a whale phishing attack would want to gain what type of company information?
A. Market share
B. Employee salaries
C. File server name
D. Patents
3. In terms of systems vulnerability scanning, which example fits that of a false negative?
A. Exposed threats without being aware of them
B. An alert that matches CVE
C. Overwhelm analysis and response resources
D. Make use of common identifiers
4. Incoming requests from IP address ranges that are reserved for internal, private, loopback, and multicast use are obviously spoofed. What are these packets known as?
A. Bolons
B. Martian packets
C. Bolians
D. Bolo
5. A security engineer reviews event logs and discovers a malicious command and control implementation on a server that involves port forwarding. Jumping into action, the engineer promptly removes which threat type?
A. Advanced Persistent Threat
B. Data exfiltration
C. Hacktivist
D. Zero-day
6. An expert on malicious software has isolated a new virus inside a VM to monitor and study its behavior. The malware expert is able to monitor for changes to processes and services, monitor network sockets for attempted connections, and monitor all system calls and API calls made by programs. The malware expert is able to take periodic snapshots of the environment, record file creation/deletion during the malware's execution, and even dump the virtual machine's memory at key points during execution. Analyze the technique being used to allow the expert to study the malware.
A. Grayhat
B. Whitelisting
C. Sandboxing
D. Sinkholing
7. HTTP is a stateless protocol, meaning that the server preserves no information about the client. As most web applications depend on retaining information about clients, various mechanisms have been used to preserve this sort of stateful information. Name one method of storing these states.
A. Smishing
B. Sandboxing
C. Cookies
D. Vishing