CyberOps Modules 24-25

1. Which ICMP message type should be stopped inbound?

• • source quench

• • echo-reply

• echo

• • unreachable

2. How can IMAP be a security threat to a company?

• • Someone inadvertently clicks on a hidden iFrame.

• • Encrypted data is decrypted.

• An email can be used to bring malware to a host.

• • It can be used to encode stolen data and send to a threat actor.

3. Which two technologies are primarily used on peer-to-peer networks? (Choose two.)

• 
  

• Bitcoin

• BitTorrent

• • Wireshark

• • Darknet

• • Snort

4. Which protocol is exploited by cybercriminals who create malicious iFrames?

• HTTP

• • ARP

• • DHCP

• • DNS

5. Which method is used by some malware to transfer files from infected hosts to a threat actor host?

• • UDP infiltration

• ICMP tunneling

• • HTTPS traffic encryption

• • iFrame injection

6. Why does HTTPS technology add complexity to network security monitoring?

• • HTTPS dynamically changes the port number on the web server.

• • HTTPS uses tunneling technology for confidentiality.

• • HTTPS hides the true source IP address using NAT/PAT.

• HTTPS conceals data traffic through end-to-end encryption.

7. Which approach is intended to prevent exploits that target syslog?

• • Use a Linux-based server.

• Use syslog-ng.

• • Create an ACL that permits only TCP traffic to the syslog server.

• • Use a VPN between a syslog client and the syslog server.

8. Which type of attack is carried out by threat actors against a network to determine which IP addresses, protocols, and ports are allowed by ACLs?

• • phishing

• • denial of service

• reconnaissance

• • social engineering

9. Which two application layer protocols manage the exchange of messages between a client with a web browser and a remote web server? (Choose two.)

• HTTP

• HTTPS

• • DNS

• • DHCP

• • HTML

10. What is Tor?

• • a rule created in order to match a signature of a known exploit

• a software platform and network of P2P hosts that function as Internet routers

• • a way to share processors between network devices across the Internet

• • a type of Instant Messaging (IM) software used on the darknet