Question 1

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Accepted Answer

A)  SpyEye 
B)  WannaCry 
C)  Sapphire 
D)  Slammer 
A)  SpyEye 
B)  WannaCry 
C)  Sapphire 
D)  Slammer B

Question 2

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Accepted Answer

A)  Ransomware 
B)  Screen scraper 
C)  Zero-day exploit 
D)  Bot 
A)  Ransomware 
B)  Screen scraper 
C)  Zero-day exploit 
D)  Bot D

Question 3

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Accepted Answer

A)  Zeus 
B)  SpyEye 
C)  Slammer 
D)  Nyetya 
A)  Zeus 
B)  SpyEye 
C)  Slammer 
D)  Nyetya C

Question 4

Which of the following is an example of a malware prevention control?

Accepted Answer

A)  Real-time firewall detection of suspicious file downloads 
B)  Review and analysis of log files 
C)  User awareness to recognize and report suspicious activity 
D)  Not allowing users to have administrative rights to their workstations 
A)  Real-time firewall detection of suspicious file downloads 
B)  Review and analysis of log files 
C)  User awareness to recognize and report suspicious activity 
D)  Not allowing users to have administrative rights to their workstations

Question 5

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Accepted Answer

A)  Hyperlink 
B)  Log 
C)  Relay 
D)  Metadata 
A)  Hyperlink 
B)  Log 
C)  Relay 
D)  Metadata

Question 6

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Accepted Answer

A)  Change control 
B)  NIST framework 
C)  Standard operating procedure 
D)  Patch management 
A)  Change control 
B)  NIST framework 
C)  Standard operating procedure 
D)  Patch management

Question 7

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Accepted Answer

A)  Trend analysis 
B)  Signature analysis 
C)  Correlation analysis 
D)  Sequencing analysis 
A)  Trend analysis 
B)  Signature analysis 
C)  Correlation analysis 
D)  Sequencing analysis

Question 8

Which of the following best describes the log analysis technique called trend analysis?

Accepted Answer

A)  Compares log data to known bad activity 
B)  Compares log data to known good activity 
C)  Identifies activity over time that in isolation might appear normal 
D)  Ties individual entries together based on related information 
A)  Compares log data to known bad activity 
B)  Compares log data to known good activity 
C)  Identifies activity over time that in isolation might appear normal 
D)  Ties individual entries together based on related information

Question 9

Which common standard operating procedure (SOP) format should be used for long procedures requiring many decisions?

Accepted Answer

A)  Hierarchical 
B)  Simple step 
C)  Graphical 
D)  Flowchart 
A)  Hierarchical 
B)  Simple step 
C)  Graphical 
D)  Flowchart

Question 10

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Accepted Answer

A)  Ransomware 
B)  Screen scraper 
C)  Bot 
D)  Zero-day exploit 
A)  Ransomware 
B)  Screen scraper 
C)  Bot 
D)  Zero-day exploit

Question 11

Which of the following statements about antivirus software is not true?

Accepted Answer

A)  Antivirus software is 100 percent effective against malware intrusions. 
B)  Antivirus software uses signature-based recognition and behavior-based recognition to detect malware. 
C)  Antivirus software can detect various types of malware. 
D)  Antivirus software can detect, contain, or eliminate malware. 
A)  Antivirus software is 100 percent effective against malware intrusions. 
B)  Antivirus software uses signature-based recognition and behavior-based recognition to detect malware. 
C)  Antivirus software can detect various types of malware. 
D)  Antivirus software can detect, contain, or eliminate malware.

Question 12

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Accepted Answer

A)  EternalBlue 
B)  SpyEye 
C)  Slammer 
D)  Zeus 
A)  EternalBlue 
B)  SpyEye 
C)  Slammer 
D)  Zeus

Question 13

Which of the following statements about data backup is not true?

Accepted Answer

A)  Backups can be stored in the cloud. 
B)  Backups can be conducted once a week. 
C)  Backups do not have to be restored as long as they are stored in the cloud. 
D)  Backups can be stored to a tape. 
A)  Backups can be stored in the cloud. 
B)  Backups can be conducted once a week. 
C)  Backups do not have to be restored as long as they are stored in the cloud. 
D)  Backups can be stored to a tape.

Question 14

Which of the following best describes the difference between a virus and a worm?

Accepted Answer

A)  A virus is malicious software that requires a host file to spread itself, whereas a worm is malicious software that does not require a host file to spread itself. 
B)  A worm is malicious software that requires a host file to spread itself, whereas a virus is malicious software that does not require a host file to spread itself. 
C)  A virus is malicious software that attaches itself to executable files, whereas a worm is malicious software that attaches itself to an image file. 
D)  There is no difference between a virus and a worm. 
A)  A virus is malicious software that requires a host file to spread itself, whereas a worm is malicious software that does not require a host file to spread itself. 
B)  A worm is malicious software that requires a host file to spread itself, whereas a virus is malicious software that does not require a host file to spread itself. 
C)  A virus is malicious software that attaches itself to executable files, whereas a worm is malicious software that attaches itself to an image file. 
D)  There is no difference between a virus and a worm.

Question 15

Which of the following statements best describes a Trojan?

Accepted Answer

A)  Malicious software that hides into the lower levels of the operating system and opens a backdoor 
B)  Malicious software that records every key stroke and mouse movement 
C)  Malicious software that disguises itself as a legitimate program 
D)  Malicious software that takes the computer data hostage to extort money 
A)  Malicious software that hides into the lower levels of the operating system and opens a backdoor 
B)  Malicious software that records every key stroke and mouse movement 
C)  Malicious software that disguises itself as a legitimate program 
D)  Malicious software that takes the computer data hostage to extort money

Question 16

Which of the following statements best describes data replication?

Accepted Answer

A)  The process of copying data to another drive weekly 
B)  The process of copying data to a second location that is available for immediate use 
C)  The process of copying and storing data that could be restored to its original location 
D)  The process of copying data to the cloud 
A)  The process of copying data to another drive weekly 
B)  The process of copying data to a second location that is available for immediate use 
C)  The process of copying and storing data that could be restored to its original location 
D)  The process of copying data to the cloud

Question 17

Which of the following statements about Trojans is true?

Accepted Answer

A)  Trojans reproduce by infecting other files. 
B)  Trojans need user interaction to spread. 
C)  Trojans self-replicate. 
D)  Trojans are legitimate programs that enhance user experience. 
A)  Trojans reproduce by infecting other files. 
B)  Trojans need user interaction to spread. 
C)  Trojans self-replicate. 
D)  Trojans are legitimate programs that enhance user experience.

Question 18

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Accepted Answer

A)  Sequencing 
B)  Due care 
C)  Trend analysis 
D)  Due diligence 
A)  Sequencing 
B)  Due care 
C)  Trend analysis 
D)  Due diligence

Question 19

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Accepted Answer

A)  HIPAA 
B)  GLBA 
C)  PCI DSS 
D)  FISMA 
A)  HIPAA 
B)  GLBA 
C)  PCI DSS 
D)  FISMA

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Which of the following is an example of a malware prevention control?

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Which of the following best describes the log analysis technique called trend analysis?

Which common standard operating procedure (SOP) format should be used for long procedures requiring many decisions?

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Which of the following statements about antivirus software is not true?

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Which of the following statements about data backup is not true?

Which of the following best describes the difference between a virus and a worm?

Which of the following statements best describes a Trojan?

Which of the following statements best describes data replication?

Which of the following statements about Trojans is true?

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 8: Communications and Operations Security

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Which of the following is an example of a malware prevention control?

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Which of the following best describes the log analysis technique called trend analysis?

Which common standard operating procedure (SOP) format should be used for long procedures requiring many decisions?

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Which of the following statements about antivirus software is not true?

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Which of the following statements about data backup is not true?

Which of the following best describes the difference between a virus and a worm?

Which of the following statements best describes a Trojan?

Which of the following statements best describes data replication?

Which of the following statements about Trojans is true?

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters