Cyber Day 1 Quiz

Adam is conducting software testing by reviewing the source code of the application. What type is code testing is Adam conducting?

• Mutation testing

• Static code analysis

• Dynamic code analysis

• Fuzzing

What type of attack places an attacker in the position to eavesdrop on communication between a user and a web server?

• Man-in-the-middle

• Session hijacking

• Buffer overflow

• Meet-in-the-middle

Which one of the following objectives is not one of the 3 main objectives that information security professionals must achieve to protect their organisations against cybersecurity threats?

• Integrity

• Nonrepudiation

• Availability

• Confidentiality

Tom is a software developer who creates code for sale to the public. He would like to assure his users that the code they receive actually came from him. What technique can he use to best provide this assurance?

• Code signing

• Code endorsement

• Code encryption

• Code obfuscation

Ursula recently discovered that a group of developers are sharing information over a messaging tool provided by a cloud vendor but not sanctioned by her organisation. What term best describes this use of technology?

• Shadow IT

• System integration

• Vendor management

• Data exfiltration

Wendy is scanning cloud based repositories for sensitive information. Which one of the following should concern her most if discovered in a public repository

• Product manuals

• Secure code

• API keys

• Open source data

What type of malware connects to a command and control system allowing attackers to manage, control and update it remotely?

• Bot

• Drone

• Vampire

• Worm

Which of the following metrics describes the type of information disclosure that might occur if an attacker successfully exploits the vulnerability?

• Integrity

• Availability

• Scope

• Confidentiality

Which of the following is a malicious program that self-copies and self-replicates

• Spyware

• Bot

• Virus

• Rootkit

Renee is configuring her vulnerability management solution to perform credentialed scans of servers on her network. What type of account should she provide to the scanner?

• Domain administrator

• Local administrator

• Root

• Read-only