comprehensive Cyber Ops Certification Q&A Exam Bundle

System Utilities Small independent programs that are usually narrow in scope that provides single capabilities or a single area of functionality Directory A Type of file that exists to provide order and organization to the file structure option In Unix syntax this command will modify the behav...

Hackers have gained access to account information and can now login into a system with the same rights as authorized users. What type of attack is this? Password based In what type of attack can threat actors change the data in packets without the knowledge of the sender or receiver? Data modific...

What is a purpose of implementing VLANs on a network? They can separate user traffic Which method is used to make data unreadable to unauthorized users? Encrypt the data A network administrator is configuring an AAA server to manage RADIUS authentication. Which two features are included in RAD...

Which of the following metric categories may be used as part of the CVSS calculations? (Choose three) A. Environmental B. Temporal C. Base D. Basic E. Ephemeral F. Tempura ABC Match the metrics with their attributes. 1. Availability Impact of High 2. Integrity Impact of High 3. Confi...

Which personnel in a SOC are assigned the task of hunting for potential threats and implementing threat detection tools? Tier 3 SME What is a benefit to an organization of using SOAR as part of the SIEM system? SOAR automates incident investigation and responds to workflows based on playbooks. ...

Which of the following was NOT one of the elements the lesson stated that Information Superiority is built on? All of the above are elements that Information Superiority is built on. Information Superiority is the operational advantage derived from the ability to collect, process, and disseminate...

Which of the following ensures that only authorized users can modify the state of a resource? a. Integrity b. Availability c. Confidentiality d. Non-repudiation A. Integrity is the element of the CIA triad that ensures that only authorized users can modify the state of a resource. Access control...

SNMP tools used to ask and receive network operation info SIEM functions: Forensic analysis - search logs and event records from sources throughout the organization Correlation - Examines logs and events from different systems or applications, speeding detection of and reaction to security threa...

Computer Network Exploitation (CNE) Enabling operations and intelligence collection capabilities that use computer networks to gather data from a target/adversary's information systems or networks. Distinguished from CNA because it is about intelligence collection and gathering data Examples...

The four categories of offensive information operations objectives are: deny, exploit, corrupt, and destroy A vulnerability in a computer system or network that's unknown to the outside world is known as a zero-day vulnerability - True or False True What's the term given for a formally reco...

Wiper Definition/Description: Wiper was a 2012 cyber operation named after the wiper malware that targeted Iran's oil and natural gas sector and was attributed (by some, given similarities to Stuxnet) to the US and potentially even Israel, despite an inability by private cybersecurity firms to disc...

DHCP for same Subnet dhcp disc, dhcp off, dhcp req, dhcp ack DHCP relay agent A service that captures a BOOTP broadcast and forwards it through the router as a unicast transmission to a DHCP server on a remote subnet. Resolvers A DNS client that requests information from DNS name servers. D...

2.1 Compare attack surface and vulnerability attack surface the area of an application that is available to users. both those users who have been authenticated and those who have not (where data moves in and out of a system) -all attack vectors 2.2 Identify the types of data provided by these...

Define information security Protection of data and information systems -preservation of integrity, confidentiality, and availability Define the concept of risk in terms of threats and vulnerabilities -risk: when a threat might be used to exploit a vulnerability -threat: a potential attacker or...