2

Question 1

You are conducting a forensic investigation. The attack has been stopped. What do you do FIRST

Answer 1

Document what’s on screen

Question 2

Which of the following tools would you use to validate the bandwidth on your network and ID when the bandwidth is significantly below what it should be

Answer 2

Throughput tester

Question 3

You want to implement an access control list where only the users you specifically authorize have access to the resource. Anyone not on the list should be prevented from having access. Which of the following methods of access control will the access list use?

Answer 3

Explicit allow, Implicit Deny

Question 4

You discover info on a computer HDD that might indicate evidence of illegal activity. You want to perform FORENSICS on thie disk to see WHAT INFO IT CONTAINS. What do FIRST

Answer 4

Make a bit level copy of the disk

Question 5

Security Layer: Fences, Door Locks, Mantraps, Turnstiles, Device Locks, Server Cages

Answer 5

Physical

Question 6

Security Layer: Individual Workstation, Laptop, Mobile Device

Answer 6

Host

Question 7

Security Layer: Authentication Authorization, User MGMT, Group Policies

Answer 7

Application

Question 8

Sec Layer: Cameras, Motion Detectors, Environmental Controls

Answer 8

Physical

Question 9

Sec Layer: VLAN, Penetration Testing, Virtualization

Answer 9

Network

Question 10

Found rogue wireless access point on network. Which should you do FIRST to PROTECT NETWORK while PRESERVING EVIDENCE

Answer 10

Disconnect the access point from the network

Question 11

Best defense against script kiddies

Answer 11

Keep systems up to date and use standard security practices

Question 12

Attack Strat: Stealing Info

Answer 12

Exploitation

Question 13

Attack Strat: Prep a computer to perform additional attacks in the attack

Answer 13

Staging

Question 14

Attack Strat: Crashing systems

Answer 14

Exploitation

Question 15

Attack Strat: Gathering hardware info

Answer 15

Recon

Question 16

Attack Strat: Penetrating sys defenses to gain unauth access

Answer 16

Breaching

Question 17

Attack Strat: Config additional rights to do more than breach the system

Answer 17

Escalate Privileges

Question 18

Which algorithm combines a random value with plain text to produce cipher text

Answer 18

one time pad

Question 19

What is Steganography

Answer 19

cryptography method that uses digital pictures, video clips, or audio clips to hide a message

Question 20

Which type of cipher changes the position of the characters in a plain text message

Answer 20

transposition

Question 21

ur running a packet sniffer to ID the types of traffic on network. you expect to see all traffic on net, but pack sniffer only seems to capture frames that are addressed to the network interface on your workstation. what do you config to see all

Answer 21

Configure the network interface to use PROMISCUOUS MODE

Question 22

After an intrusion has occurred and the intruder has been removed from the system which of the following is the best next step or action to take

Answer 22

back up all logs and audits regarding the incident

Question 23

what is a protocol analyzer used for

Answer 23

a passive device that is used to copy frames and allow you to view frame contents

does not allow you to capture modify and retransmit frames

Question 24

define hacker

Answer 24

general term used to describe any individual who uses their technical knowledge to gain unauthorized access to an organization

Question 25

greatest threat to network security

Answer 25

employees

Question 26

example of privilege escalation

Answer 26

creeping priveleges [changing jobs but keeping priv]

Question 27

principle is implemented in mandatory acccess control model to determine object access by classification level

Answer 27

need to know

Question 28

reduce the risk of a threat agent being able to exploit a vulnerability

Answer 28

countermeasure

Question 29

what would you use a chain of custody for

Answer 29

listing people coming in contact with evidence