Week 20 Quizzz

Gurvinder has been asked to assist a company that recently fired one of their developers. After the developer was terminated, the critical application that they had written for the organization stopped working and now displays a message reading, "You shouldn't have fired me!" If the developer's access was terminated and the organization does not believe that they would have had access to any systems or code after they left the organization, what type of malware should Gurvinder look for?

• • A RAT

• A PUP

• A logic bomb

• A keylogger

Naomi believes that an attacker has compromised a Windows workstation using a fileless malware package. What Windows scripting tool was most likely used to download and execute the malware?

• VBScript
• Bash

• Python

• PowerShell

Scott notices that one of the systems on his network contacted a number of systems via encrypted web traffic, downloaded a handful of files, and then uploaded a large amount of data to a remote system. What type of infection should he look for?

• A keylogger

• A backdoor

• A bot

• A logic bomb

One of your systems has been infiltrated and a malicious actor has direct access. Which option would be the best to follow initially?

• A. Segmentation

• B. Isolation

• C. Disconnection

• D. Quarantine

In a company users are now allowed to user mobile devices on the company network. A screen appears when users are connected to the company Wi-Fi, defining terms of use, and users have to click to acknowledge the agreement. The user is only allowed to connect to the network If he agrees to the terms by clicking Yes. This is an example of what?

• A. User acceptance

• B. Acceptable use policy

• C. Authentication

• D. End user license agreement

What works as a neutral zone, separating public-facing servers from sensitive internal network resources?

• A. Demilitarized Zone

• B. Screen Subnet

• C. Firewall Rule

• D. HoneyPot

Which of the following is not related to time-based restrictions? (opt any two)

• A. Network/Logical Location

• B. Logon Hours

• C. Temporary Permissions

• D. Logon Duration

a friend of yours on a social network sends you a direct message telling you about a scheme offering a $100 gift card if you are one of the first 25 to respond to a survey. Upon clicking the link, you realize a malware has infected your machine. Identify the two attack principles you think have contributed to the effectiveness of this attack? (opt any two)

• A. Authority

• B. Trust

• C. Scarcity

• D. Intimidation

When referencing the CIA Triad which component is related to data that is stored and transferred as intended and any modification is authorized?

• A. Availability

• B. Non-repudiation

• C. Confidentiality

• D. Integrity

Data types are extremely important when categorizing data and establishing a security plan. Which data type would be related to data that must follow specific legal requirements for storage and handling?

• A. Intellectual Property

• B. Legal Data

• C. Trade Secrets

• D. Regulated Data