GIAC Information Security Fundamentals (GISF) Practice Test

These questions are part of the practice quiz. Start practicing

• What port number is associated with HTTPS?
• According to Moore's Law, how often does processing speed double?
• In a Linux system, what is the account referred to as User #0?
• In risk management, what does risk acceptance imply?
• What is meant by authorization in information security?
• What type of firewall filters traffic based on the state of existing connections?
• What is the historical significance of Triple DES?
• What does a Request for Comment (RFC) document provide regarding a protocol?
• What is the goal of domain hijacking?
• What distinguishes a persistent cookie?
• In a business email compromise (BEC) attack, the threat actor impersonates which entity to gain financial advantage?
• What does a digital certificate primarily certify?
• How many digits does the base 10 number system consist of?
• Why is it important to respond effectively to security incidents?
• Why is it important to regularly schedule backups?
• What role does a client play in a network?
• What percentage of the Internet is considered the deep web?
• What is an IP address?
• In which scenario would a full system image backup be most beneficial?
• What is a VPN primarily used for?
• What is the primary purpose of RAM in a computer system?
• What does the acronym PDR stand for in the context of security management?
• What is identified during the threat identification step?
• In the context of cryptography, what is an important consideration aside from confidentiality?
• What is the significance of using a random "salt" in a key derivation function?
• Which protocol is primarily responsible for routing packets across interconnected networks?
• What is the primary purpose of antivirus software?
• Can Bluetooth signals be intercepted beyond their typical operational range?
• Which of the following are typical file permissions in a computing system?
• Which of the following roles primarily utilizes the data within an organization?
• What does ECDH stand for in cryptography?
• What does Shadow IT refer to?
• Which standard is commonly referred to as Wi-Fi 5?
• What does accountability in a security context refer to?
• What do offensive countermeasures aim to accomplish?
• Can MAC addresses be encrypted to enhance security?
• What is the term for an infection vector that uses attractive USB drives left in public areas?
• A megabyte is equivalent to how many kilobytes?
• In symmetric encryption, what type of key is used?
• Which measure is most directly related to reducing vulnerability?
• What does a packet filter firewall analyze to determine access permissions?
• Which of the following is the correct abbreviation for a byte?
• What does reducing risks associated with high Wi-Fi signal range imply for a network?
• What is a machine-in-the-middle attack?
• What does an Access Control Entry (ACE) contain in a Windows environment?
• What is the purpose of a Cloud Controls Matrix (CCM)?
• What does a routing table contain?
• What does the concept of risk avoidance entail?
• Which of the following is NOT a property of signcryption?
• Which type of hacking method is exemplified by spear phishing?
• What is the aim of preventive measures in security?
• What type of attack uses social engineering to manipulate a DNS registrar?
• Which wireless setup method is considered rare?
• When discussing data representation, what does 'octet' refer to?
• What is the purpose of cognitive password authentication?
• What encryption method is used by WPA2?
• What is the role of a personal firewall?
• Which of the following is NOT one of the five phases of an attack?
• What does using symmetric key encryption primarily ensure?
• How does heuristics detection identify potential threats?
• Does the Internet Protocol (IP) guarantee delivery of packets?
• What is the primary purpose of patch management in an organization?
• What is the second phase of an attack where vulnerable assets are identified?
• Which of the following is an example of a wide area network?
• What is the purpose of the Address Resolution Protocol (ARP)?
• What is the primary characteristic of the AES (Advanced Encryption Standard)?
• What is a key characteristic of ciphertext-only attacks?
• What is the main function of a sinkhole in network security?
• What is the network port number commonly used for FTP?
• What is a running key in the context of encryption?
• Which term describes the transformation of plaintext to ciphertext?
• Which type of backup only copies data items that have changed since the last backup?
• Which of the following statements best captures the essence of risk ignorance?
• What is the primary function of Bluetooth technology?
• What is a primary characteristic of discretionary access controls (DAC)?
• How does a Graphical User Interface (GUI) function?
• What is the primary purpose of content filtering in a network?
• Which attack method uses known plaintext to determine the key of ciphertext?
• What is the key length of the AES-128 encryption standard?
• What could be a main characteristic of an external insider?
• What does a Group ID represent in a computing environment?
• What does escrow in the context of information security refer to?
• Which of the following describes a BlueSniper rifle?
• Which protocol is known for achieving higher transmission speeds at the cost of reliability?
• In the context of access controls, what does ACE stand for?
• What is one characteristic of a well-configured personal firewall?
• What does SSID stand for in the context of wireless networking?
• Why might an organization want to reduce the power level on a Wi-Fi transmitter?
• What does a 'bit' represent in computing?
• What is a worm in the context of information security?
• Which of the following accurately describes a characteristic of AES-128?
• Which of the following best defines a block cipher?
• What does a 500 Series server return code indicate?
• What defines a data spill in information security?
• Why is authentication essential in information security?
• What is a brute force attack?
• What does WEP stand for in the context of Wi-Fi security?
• What type of protocol is Transmission Control Protocol (TCP)?
• What type of devices would typically be connected in a Local Area Network (LAN)?
• What is the purpose of the covering tracks phase in an attack?
• Which of the following is NOT a characteristic of the zero trust security model?
• What is a key benefit of using multifactor authentication?
• What is the combined value of all place values in a full byte?
• What is the primary goal of the gaining access phase in an attack?
• Which operating system is case-sensitive and uses / as a path separator?
• What does lateral movement refer to in cybersecurity?
• What does the second hexadecimal digit represent when calculating hexadecimal values?
• Which of the following actions would most likely enable an attacker to gain higher privileges?
• Which component is essential for interpreting and executing program instructions on a computer?
• What is the primary function of a firewall?
• What is the definition of a group in the context of user accounts?
• What is often a sign of a broken hashing algorithm?
• Which programming language is commonly used to create interactive effects within web browsers?
• What is pretexting in the context of social engineering?
• What does 'high-order' or 'most-significant' refer to in binary numbers?
• What does a 200 Series server return code indicate?
• In a substitution cipher, what method is used to replace units of a message?
• During which process is a user granted specific access rights to resources?
• What does the term 'cross-platform' refer to in programming?
• What does the 'C' in the CIA Triad stand for?
• What does decryption accomplish?
• What is the primary function of encryption?
• What does OS hardening typically involve?
• What approach do professional pen-testers take?
• What does TKIP stand for?
• What does role-based access control (RBAC) primarily focus on?
• Which of the following is NOT a method of handling risk?
• Who is considered the subject in an access control context?
• Which type of security solution monitors the environment and takes automatic action against unauthorized access attempts?
• What is the result when adding the high-order and low-order nibbles together?
• What defines an enclave in network security?
• What does 'Availability' imply in information security?
• What does application allowlisting do?
• What is the role of awareness training in administrative countermeasures?
• What is the primary vulnerability of monoalphabetic ciphers?
• What defines multifactor authentication?
• What is the purpose of patching an operating system?
• Which categories are used for antivirus detection?
• In the context of information security, what is the significance of the reconnaissance phase?
• Which type of cryptographic key is generally easier to manage?
• What command is used in Linux to change file or directory permissions?
• What does risk avoidance involve?
• In network security, what does false negative entail?
• What is the main purpose of using a one-way hash in communications?
• Which feature of WPA2 helps ensure that each packet is unique?
• Which access control model allows the owner of an object to delegate permissions to other users?
• Which term describes the legal standard assessing how protective an organization is toward its assets?
• What does non-repudiation refer to in the context of information security?
• Which of the following best describes a symmetric key?
• Which backup type is most recommended for situations where reliability is essential and time for recovery is critical?
• What does the acronym "DaaS" stand for in cloud computing?
• What does the prefix "0d" represent in numbering systems?
• How is a byte calculated when working with multiple bytes?
• What method of phishing attack uses text messages (SMS) to deceive victims?
• Which operating system is not case-sensitive and uses \ as a path separator?
• Which protocol is used to communicate error messages related to IP?
• When should you ideally perform a differential backup?
• Which of the following best describes token authentication?
• In information security, what does the term 'access control' generally relate to?
• What is exploit software primarily used for?
• Which elements are critical for a good information system?
• What type of account provides high-level permissions for configurations and data access?
• What is the primary role of firewall rules?
• What is direct social engineering?
• What does DMZ stand for in a network context?
• What is the purpose of security policies in an organization?
• What is the main advantage of using hybrid cryptography?
• Which aspect of cloud computing distinguishes it from traditional computing?
• Which of the following statements is true regarding a false positive?
• What is a Pseudo-random number generator (PRNG) used for in computers?
• What is the goal of implementing safeguards in security measures?
• What is the primary function of a sniffer?
• What protocol uses port 443 for secure communications?
• What is the primary meaning of privilege in information security?
• What is the main characteristic of a cryptographic key?
• Which attack type involves DNS server manipulation to provide false information?
• What is the purpose of authentication in information security?
• What does Dynamic Host Configuration Protocol (DHCP) primarily do?
• Which attack strategy is most effective when the attacker has both plaintext and ciphertext for analysis?
• What is a logic bomb?
• What is normally considered when identifying countermeasures?
• What are the three predefined Linux file permissions?
• In cybersecurity, which action describes pivoting?
• What principle ensures that users have the minimum necessary access to perform their tasks?
• In a scenario with multiple permission sets in place, which type of permission takes effect?
• Why is the order of rules important in a packet filter firewall?
• What type of cryptographic technique transposes the order of letters or words to obscure meaning?
• What does a TCP/IP protocol primarily facilitate?
• How should vulnerabilities be addressed to improve security?
• What is the main feature of the ICMP in the context of IP?
• What term describes the assurance that data is correct and maintained by authorized personnel?
• What does spyware do?
• What is the definition of a user in the context of a computer system?
• Which cryptographic process would involve reorganizing the input data into a format suitable for security?
• What is the meaning of RST in networking?
• Which of the following best describes the concept of confidentiality in security?
• What does a biometric system compare during authentication?
• What is the concept of island hopping in the context of cybersecurity?
• What does spoofing mean in the context of cybersecurity?
• Which feature best describes asymmetric encryption?
• Which three items are required for configuring IPv4?
• What is the range of possible byte values in computing?
• Why is it important to implement both signature and heuristics detection in antivirus software?
• What type of information does the File Transfer Protocol (FTP) transmit?
• What does a vulnerability scanner typically do?
• What does the process of verification in authentication involve?
• Which of the following describes fuzzing most accurately?
• In networking, what is the consequence of a packet arriving out of order at its destination?
• Which Wi-Fi security protocols are currently considered secure?
• What is the main function of non-repudiation in communications?
• What is a common characteristic of exploit software?
• What does the Ping command do in network troubleshooting?
• Which type of attack would suggest that a hash function is compromised?
• Which type of cipher is characterized by encrypting letters with another letter in a one-to-one relationship?
• What can potentially be a drawback of proxy firewalls?
• Which service model allows customers to manage their own production applications while the provider manages hardware and core system applications?
• Which Wi-Fi standard offers the highest throughput currently available?
• What does wardriving involve?
• How does a differential backup compare to an incremental backup?
• Which of the following is indicated by a 400 Series server return code?
• What is the term "WarXing" used to describe?
• What is an Intrusion Detection System (IDS) primarily used for?
• What is a differential backup?
• In Windows, what is the purpose of NTFS?
• Why is MD5 considered antiquated?
• What is the essence of cloud computing?
• What is the initial input for a key derivation function (KDF)?
• What is the primary function of a rootkit?
• What does the notation 0x signify in numeric representation?
• What defines the hexadecimal number system?
• What principle aims to prevent users from accessing more information than necessary?
• What does hybrid cryptography combine?
• What is the main benefit of Wi-Fi Protected Setup (WPS)?
• What does SHA stand for in cryptography?
• What is a malicious add-on?
• What characterizes a Trojan horse in cybersecurity?
• What is the purpose of likelihood and impact estimates in the risk management process?
• What should a properly functioning IDS alert you about?
• Which term best describes actions taken to lessen the impact of a vulnerability?
• How are incremental backups characterized?
• What is the purpose of Elliptic Curve Cryptography (ECC)?
• Which of the following is true about Linux file systems?
• What does virtualization create on a single computing device?
• Which activity involves informing individuals of the rules they must follow in an organization?
• What is the ultimate goal of creating backups in information security?
• Which of the following is classified as a technical countermeasure?
• What does permission refer to in an IT security context?
• What constitutes a rogue access point?
• What does risk transference refer to in a security context?
• What function does IPSec serve in a security protocol?
• What feature does signature detection in antivirus software rely on?
• What is juice jacking?
• What is the function of a non-persistent cookie?
• What file system does Windows use for managing access control?
• What is active content primarily used for on a computer?
• Which step follows the asset valuation in the risk management process?
• Which hash algorithm is commonly used in government applications but is being phased out?
• How many bytes are contained within an IP address?
• What is the encryption used by WPA3?
• Which process step is concerned with finding gaps in current security measures?
• What is a risk associated with using password lockout on internet-facing accounts?
• What is the equivalent of a gigabyte in megabytes?
• What port number is used by the Post Office Protocol version 3 (POP3) for retrieving email?
• What essential tactic is at the core of social engineering attacks?
• What are the place values used in a nibble?
• What is cryptojacking?
• What is the main objective of confirmed backup recovery?
• What is the process of modifying an Apple mobile device to remove software restrictions known as?
• What is the significance of classifying alerts as true positive, false positive, true negative, and false negative?
• What protocol does Diffie-Hellman use for key exchange?
• What do firewall rules typically determine?
• Which type of firewall is known for blocking network access from external networks while potentially causing latency issues?
• What is an important function of a user ID in an operating system?
• What does the presence of a malicious add-on usually indicate?
• What does compartmentalization in network security refer to?
• What is a primary risk associated with the dark web?
• Which of the following protocols would likely be used for email transmission?
• Which of the following describes authentication?
• What does the term "pivot to admin" relate to?
• What is a benefit of using an all-in-one security appliance?
• Which of the following defines a countermeasure?
• What characterizes a Wide Area Network (WAN)?
• What does the term 'ciphertext' imply about the integrity of communication?
• What does the term "proprietary algorithm" commonly imply in cryptography?
• What is the digit range in the binary number system?
• Who in an organization has primary responsibility and knowledge of data management?
• What is a false positive in the context of an IDS?
• What is the primary concern of a threat to information security?
• What does an algorithm represent in cryptography?
• What is the role of a default gateway in a network?
• What is the value of a terabyte in megabytes?
• What are the place values of bits in a byte?
• What is a Command Line Interface (CLI)?
• What is a potential target for attackers when using application allowlisting?
• What is a key component of asset valuation?
• Which operation is fundamental to modern encryption schemes and compares two binary bits?
• What is a drive-by download?
• What can be a consequence of using a rogue access point?
• Which attack can involve sending unsolicited ARP requests or replies?
• What does penetration testing involve?
• What is a primary risk management tool for cloud consumers?
• Which protocol is considered interim before more secure protocols were adopted?
• What does Desktop as a Service (DaaS) enable users to do?
• What does a one-way hash function provide in terms of data integrity?
• What happens if the full backup is lost and only the differential backups are available?
• Which of the following statements is true regarding stateful inspection firewalls?
• What does the concept of accountability help prevent in information security?
• Who is responsible for using the data and ensuring its proper management?
• What is the maximum throughput for Wi-Fi 6/6E (802.11ax)?
• What is primarily involved in asset identification?
• Which tool is commonly used to identify vulnerabilities in systems?
• What is the final phase in the attack lifecycle where attackers hide their tracks?
• What is the primary objective of gap analysis?
• What is a session key?
• What is the definition of a user account in a computing context?
• What does the term "impact" refer to in the context of risk assessment?
• What is the purpose of the 'chmod' command in Linux?
• Which type of firewall is the most common in use today?
• A type of substitution cipher that employs multiple alphabets to enhance security is known as what?
• What is privilege escalation?
• How does a web cookie contribute to HTTP traffic?
• What does cryptanalysis involve?
• What is a malware development kit/factory?
• What are the three types of token authentication?
• What is typically the action denied to a non-privileged user account?
• Which of the following is an example of spoofing?
• What defines a Local Area Network (LAN)?
• What does ciphertext refer to?
• Which account type typically has restricted access to only its own files?
• Which phishing attack method is characterized by the use of SMS text messages?
• What is the primary purpose of a digital signature?
• Which bit is referred to as 'low-order' or 'least-significant'?
• What is the main purpose of a hashing function?
• What type of backup would allow quicker restoration of everyday files while maintaining full system recovery options?
• What is a backup?
• What is a unique characteristic of MAC addresses?
• What does the key exchange process involve?
• What is the first step in the risk management process?
• What does the term 'network' refer to in a computing context?
• Which aspect of the CIA Triad ensures that information is only accessible to those authorized?
• How many bits are there in a byte?
• When might cognitive password systems be used?
• In networking terms, what does ACK represent?
• What distinguishes a stream cipher from a block cipher?
• What is SSH (Secure Shell) primarily used for?
• What is the main purpose of minimum password aging?
• What does Software as a Service (SaaS) provide to its users?
• Which type of cryptography requires the same key for both encryption and decryption?
• Why is security training essential for employees?
• What type of phishing uses a deep fake voice impersonation?
• Which of the following approaches may be taken when some risks cannot be completely avoided or mitigated?
• What is cryptocurrency?
• In the binary system, which of the following represents the highest digit?
• What is a potential drawback of using only differential backups?
• What is Command and Control (C2) in cybersecurity?
• What does HTML5 primarily incorporate to enhance interactivity?
• What type of inspection allows a firewall to check only headers, making it faster but potentially less thorough?
• What is the definition of a 'nibble' in data representation?
• What is the method for calculating the value of bytes?
• Which user account type can access shared resources but with limited permissions?
• Which of the following accurately describes cache poisoning?
• What is "work factor" in the context of cryptography?
• What does active defense refer to?
• What kind of content does the surface web consist of?
• How many gigabytes are in a terabyte?
• What is the primary purpose of an access control list (ACL)?
• Which device commonly uses DHCP to obtain an IP address?
• What defines an accidental insider?
• What main purpose do access controls serve in information security?
• What is plaintext in the context of cryptography?
• Which attack targets a specific group of individuals who visit the same website?
• Which of the following methods is NOT typically a part of wireless device setup?
• Which of the following represents a bit?
• What does SYN stand for in networking?
• What type of protocol is IP categorized as?
• What is the zero trust security model based on?
• What is the root directory in a computer's directory hierarchy?
• What type of key exchange methods can HTTPS utilize?
• What is the value range for a nibble in computing?
• What occurs during an exclusive lookup?
• What occurs when a hashing algorithm generates the same hash for different inputs?
• What does a physical countermeasure primarily involve?
• What does OS hardening aim to achieve?
• What technique involves gaining compromising information by observing someone from a close distance?
• What is a network port?
• What is the role of an operating system (OS) on a computer?
• What is the characteristic of a stateful inspection firewall regarding deep and shallow inspection?
• What is the term for unauthorized entry by following someone through a secure door?
• How many bytes are there in a megabyte?
• Which of the following is a characteristic of JavaScript?
• What does accountability in an information system offer?
• What is an all-in-one security appliance also known as?
• Which of the following is a key feature of heuristics detection methods in antivirus software?
• DES stands for what in the context of cryptography?
• Which of the following is a detailed explanation of how to implement a security policy?
• Which statement best describes elliptic curve cryptography (ECC)?
• What type of user interface allows interaction through text and visual images like icons?
• Which of the following components is part of a digital certificate?
• Which cryptographic method is faster?
• What kind of data would be lost if only differential backups are used without regular full backups?
• What type of phishing attack specifically targets wealthy or powerful individuals?
• What is a characteristic of Infrastructure as a Service (IaaS)?
• What is the goal of risk mitigation in the context of asset protection?
• What does a denial-of-service (DoS) attack aim to achieve?
• What is a common term for a wireless access point?
• When a port scanner sends a SYN to a server, what are two possible responses that can be received?
• What does the prudent person rule require of an organization?
• What is Triple DES primarily known for?
• What is meant by implicit denial in access control?
• What type of storage does RAM provide in a computer system?
• What is a primary function of a web application firewall (WAF)?
• What does the hexadecimal symbol 'A' represent in decimal?
• What does vulnerability analysis primarily assess?
• What does the prefix "0b" indicate in number systems?
• How does a buffer overflow attack typically operate?
• What does WPA2 use for encryption?
• Which role has the legal responsibility to protect an organization's assets?
• In terms of network management, what is a primary benefit of segmentation?
• When securing a wireless network, why is it advisable to assume effectively infinite distance?
• What role does accountability play in securing information systems?
• What does ECDH combine with to facilitate encryption?
• What is the goal of threat hunting?
• In what way do persistent cookies differ from non-persistent cookies?
• Maintaining access is which number phase in the attack lifecycle?
• What does a MAC address do?
• What is a kernel in the context of an operating system?
• What phase of an attack involves identifying assets that could be targeted for exploitation?
• What is the primary purpose of a directory in an operating system?
• What is the primary characteristic of the dark web?
• Which service model allows a user to fully manage their applications on a cloud infrastructure?
• Which phase of an attack involves installing tools to ensure undetected access?
• What does the Consensus Assessment Initiative Questionnaire (CAIQ) allow cloud customers to do?
• What is the function of a server in a network environment?
• What function does the robots.txt file serve on a web server?
• What characterizes a disgruntled insider threat?
• What does maximum password aging require?
• What key advantage does using both differential and full backups provide?
• What function does gateway antivirus serve in a network?
• What is the primary function of a network protocol?
• What are two common methods for setting up Wi-Fi devices?
• What does a key derivation function (KDF) produce?
• What distinguishes indirect social engineering from direct social engineering?
• In asymmetric encryption, what type of key is typically used?
• Which of the following services is considered a delivery model for the cloud focused primarily on software deployment?
• What does Port Address Translation (PAT) allow multiple devices to do?
• What does the operating system manage on behalf of the user?
• During an attack, what does lateral movement accomplish?
• What is the term for following someone through a secure door without authorization?
• What does it mean for a web page to be "defaced" in a drive-by download attack?
• What is the primary purpose of WEP?
• What is an example of an administrative countermeasure?
• What is the primary role of Public Key Infrastructure (PKI)?
• Which of the following phases precedes Gaining access in an attack?
• What is a web cookie?
• What role does a data custodian play in implementing security measures?
• What typically defines the length of ciphertext in a running key encryption method?
• Which of the following best describes the goal of a botnet?
• Which step in the risk management process determines how important the assets are?
• What is a one-time passphrase used for?
• What is the hexadecimal equivalent of the binary value 1010?
• What type of account usually has administrative privileges on a device or network?
• What is a full system image backup?
• Which term describes a condition that allows a threat to potentially exploit a system?
• What does the term "symmetric" refer to in symmetric cryptography?
• Which statement best describes the cumulative effect of a differential backup?
• What is the purpose of private browsing in modern browsers?
• What is the main goal of segmentation within a network?
• Which permission allows a user to modify file content?
• What authentication system does Enterprise Level Authentication (ELA) rely on?
• What is an example of a potential risk when using public charging stations?
• In what manner does spyware typically operate?
• What technique involves injecting randomized data into software for testing purposes?
• In what way does indirect social engineering differ from other forms?
• Which tool is commonly used as a network utility for scanning?
• Which one of the following best describes asymmetric cryptography?
• What does deep inspection in a firewall involve?
• What is the key factor that a senior manager decides regarding organizational risk?
• In role-based access control (RBAC), what determines a user’s access permissions?
• What is involved in the response phase of incident management?
• What is a domain attack?
• How does a vulnerability scanner enhance port scanning?
• What is the underlying technology that ensures the security of cryptocurrencies?
• What type of encryption does Bluetooth's secure simple pairing use?
• What is the role of a security procedure?
• What is commonly referred to as an "evil twin" access point?
• What capability does an intrusion prevention system (IPS) provide?
• What type of backup includes all data?
• Which aspect is critical to the function of hardware that is part of the security control hierarchy?
• Is Bluetooth susceptible to warXing attacks?
• What does cryptography primarily focus on?
• Frequency analysis is primarily used against which type of cryptographic method?
• ASCII is a system used for encoding what type of values?
• Which of the following describes a feature of a worm?
• Which of the following is the purpose of an encryption key?
• What port number does HTTP typically use?
• What is the purpose of ransomware?
• What is the primary function of the Internet Control Message Protocol (ICMP)?
• What does the term "malware" refer to overall?
• What does biometrics authentication rely on?
• What action is typically taken by browsers when private browsing is enabled?
• What security measures are utilized in Bluetooth's secure simple pairing?
• What is the purpose of Network Address Translation (NAT)?
• Which of the following is an example of something-we-know authentication?
• What is the primary goal of secure coding?
• In hybrid cryptography, what role does the asymmetric key play?
• Which of the following best describes the function of a DMZ in network architecture?
• Which class of Bluetooth is most commonly used?
• What is a distributed denial-of-service (DDoS) attack?
• What is signcryption?
• How does an external insider gain access to a system?
• What does a weak key attack exploit?
• What is defined as anything that can potentially cause harm to assets or people?
• Which of the following accurately describes a hard drive?
• Which algorithm is used for encryption, digital signatures, and secure key exchange?
• In Linux, what term is used for what Windows calls a folder?
• Which type of device typically uses dynamic IP addresses?
• Which of the following is an example of something you have in terms of authentication?
• How much does the keyspace increase with the addition of a bit?
• What is the main feature of User Datagram Protocol (UDP) compared to TCP?
• What does keyspace refer to?
• What does a 300 Series server return code signify?
• What is a digital envelope in the context of hybrid cryptography?
• What is the ideal frequency to perform full backups?
• Which type of phishing is conducted through telephone calls or VoIP systems?
• What are access controls used for?
• What is the primary purpose of implementing detection and reaction capabilities in risk management?
• In which phase of the risk management process is the financial impact of a threat assessed?
• What is the function of a key encryption key (KEK)?
• What is meant by sideloading in mobile applications?
• What type of programming environment uses Java Virtual Machines?
• What kind of addresses does NAT translate?
• What is the total number of bits in a kilobyte?
• What does the security control hierarchy illustrate?
• What role does the chief information security officer (CISO) typically play in an organization?
• What is typically the role of a default gateway in a network?
• What is steganography primarily used for?
• What is an essential characteristic of effective gap analysis?
• What action is commonly taken during maintaining access?
• What is the function of a cryptographic algorithm in relation to keys?
• What is the main purpose of a rootkit in an attack scenario?
• In a binary system, how is the value of a byte determined?
• What is a virus in the context of computer security?
• What is a preimage attack?
• What is NOT a purpose of the gaining access phase?
• What is the main function of a data custodian?
• What type of attack involves an attacker associating their MAC address with someone else's IP address to intercept traffic?
• What does a true positive indicate in the context of an IDS?
• Which encryption protocol replaced WEP?
• What is the purpose of a security protocol?
• What is the purpose of a Pre-shared Key (PSK) in wireless networking?
• To compute the value of nibbles, what is added after calculating the high-order nibble?
• What type of network security device is a web application firewall designed to protect against?
• What does "likelihood" refer to in the context of risk assessment?
• What is a true negative in relation to an IDS/IPS?
• Which of the following describes a device that requests services from a server?
• What is a birthday attack?
• Which protocol is primarily responsible for sending emails?
• What is the standard port number for Simple Mail Transfer Protocol (SMTP) used to send email?
• What is the primary function of a port scanner?
• What is the function of the CPU in a computer system?
• What does the term "detect" refer to in a security context?
• Which term describes the number used by a computer to recognize a user account?
• How are offensive countermeasures related to active defense?
• What is a characteristic of social engineering attacks?
• What is a key in the context of cryptography?
• What defines spear phishing?
• What is one of the primary concerns regarding the use of attractive USB drives left in public areas?
• What process does blockchain use to maintain security?
• What does a packet represent in a network?
• What is the value of a kilobyte in bytes?
• Which response from a server indicates an open port?
• Which type of phone can bypass perimeter controls such as firewalls or content filters?
• Which term describes a network of compromised devices that can be controlled by an attacker?