CompTIA Cybersecurity Analyst (CySA+) - Module 1: Threat Management Questions And Answers With Complete Solution

CompTIA Cybersecurity Analyst (CySA+) - Module 1: Threat Management Which of the following is an alternate name for topology Discovery? Fingerprinting Footprinting Pivotprinting Sniffing - Footprinting What process allows an analyst to discover the operating system and version of a system? Service Discovery Topology Discovery Log Review OS Fingerprinting - OS Fingerprinting In what order is an ACL processed? From top to bottom From bottom to top Most specific entry first Least specific entry first - From top to bottom What is the unwritten rule at the bottom of a firewall's ACL? Implicit Allow Implicit Deny Explicit Deny Explicit Allow - Implicit Deny Attackers may potentially collect company emails by searching Google. True False - True Which process would an attacker use to determine who in a company is most likely to be tricked into giving up company information? Social Engineering Phishing Social Media Profiling Email Harvesting - Social Media Profiling What type of Phishing is sent over a text message specifically? Vishing Spear Phishing SMiShing Whaling - SMiShing Internal DNS servers need to be protected from an attacker to prevent the leakage of email records within a company. True False - False Due to the amount of a network that is physically wired it is more difficult to prevent access to a physical network than a wireless one. True False - False Which of the following wireless protocols can be used to best supply security for a wireless network? WEP TKIP WPA2 WPA - WPA2 A virtual network is more secure network for which of the following reasons? They are easier to patch They can't spread viruses Virtual machines can't compromise their host They're easier to isolate - They're easier to isolate In which way can an IDS protect a network? (Choose all that apply) Reactively Proactively Actively Passively - Reactively & Passively Which of the following methods can be used to delay a scan to avoid detection? Sparse scanning Traceroute scan half-open scan Randomized scan - Sparse scanning Which tool can be used to test many different port states on a Linux or Windows device? Firewall Packet Analyze Netstat Syslog - Netstat Of the IDS/ IPS systems which will have the best ability to prevent an attack on a network scale? HIDS HIPS NIDS NIPS - NIPS