Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security analyst is reviewing network logs and notices that a workstation on the internal network sends a small HTTPS request to an external IP address every 60 seconds, at approximately the same time each interval. The workstation has no legitimate application that should communicate with that IP. Which behavior does this pattern most likely indicate?

   • ASession hijacking
   • BDNS poisoning
   • CARP poisoning
   • DBeaconing to a command-and-control server
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the role of a command-and-control (C&C) controller?

   • ATo monitor network traffic for security threats
   • BTo encrypt all network traffic on a corporate network
   • CTo provide secure remote access for administrators
   • DTo manage and issue commands to compromised systems
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which mitigation strategy is commonly used against DDoS attacks?

   • ARate limiting and traffic filtering
   • BDisabling all network firewalls
   • CAllowing unlimited connections to the server
   • DUsing weak encryption on all services
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is credential sniffing?

   • ARedirecting users to a fake login page
   • BGuessing passwords by trying many combinations
   • CExtracting password hashes from a system's memory
   • DCapturing usernames and passwords from network traffic
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is TShark?

   • AA graphical packet analyzer
   • BThe command-line version of Wireshark
   • CA password cracking tool
   • DA vulnerability scanner
   Reveal Solution Discussion Select an answer first