Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

INFOSEC2 > M3M4 > Flashcards

M3M4 Flashcards

(61 cards)

Start Studying
1
Q

Why would a network administrator choose Linux as an operating system in the Security Operations Center (SOC)?

  • It is easier to use than other operating systems.
  • More network applications are created for this environment.
  • It is more secure than other server operating systems.
  • The administrator has more control over the operating system.
A

The administrator has more control over the operating system.

Explanation: There are several reasons why Linux is a good choice for the SOC.
Linux is open source.
The command line interface is a very powerful environment.
The user has more control over the operating system.
Linux allows for better network communication control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which two methods can be used to harden a computing device? (Choose two.)
- Allow default services to remain enabled.
- Allow USB auto-detection.
- Enforce the password history mechanism.
- Update patches on a strict annual basis irrespective of release date.
- Ensure physical security.

A
  • Enforce the password history mechanism.
  • Ensure physical security.

Explanation: The basic best practices for device hardening are as follows:
Ensure physical security.
Minimize installed packages.
Disable unused services.
Use SSH and disable the root account login over SSH.
Keep the system updated.
Disable USB auto-detection.
Enforce strong passwords.
Force periodic password changes.
Keep users from reusing old passwords.
Review logs regularly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which Linux command can be used to display the name of the current working directory?

  • sudo
  • ps
  • pwd
  • chmod
A

pwd

Explanation: One of the most important commands in Linux is the pwd command, which stands for print working directory. It shows users the physical path for the directory they are working in.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Consider the result of the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file?

ls –l analyst.txt
-rwxrw-r– sales staff 1028 May 28 15:50 analyst.txt

  • write only
  • read, write
  • read only
  • read, write, execute
A

read, write, execute

Explanation: The file permissions are always displayed in the User Group and Other order. In the example displayed, the file has the following permissions:
The dash ( – ) means that this is a file. For directories, the first dash would replaced with a “d”.
The first set of characters is for user permission (rwx).
The user, sales, who owns the file can read, write and execute the file.
The second set of characters is for group permissions (rw-). The group, staff, who owns the file can read and write to the file.
The third set of characters is for any other user or group permissions (r–). Any other user or group on the computer can only read the file.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A Linux system boots into the GUI by default, so which application can a network administrator use in order to access the CLI environment?

  • system viewer
  • file viewer
  • package management tool
  • terminal emulator
A

terminal emulator

Explanation: A terminal emulator is an application program a user of Linux can use in order to access the CLI environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the well-known port address number used by DNS to serve requests?

  • 25
  • 53
  • 110
  • 60
A

port 53

Explanation: Port numbers are used in TCP and UDP communications to differentiate between the various services running on a device. The well-known port number used by DNS is port 53.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which user can override file permissions on a Linux computer?

  • any user that has ‘group’ permission to the file
  • only the creator of the file
  • any user that has ‘other’ permission to the file
  • root user
A

root user

Explanation: A user has as much rights to a file as the file permissions allow. The only user that can override file permission on a Linux computer is the root user. Because the root user has the power to override file permissions, the root user can write to any file.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Match the commonly used ports on a Linux server with the corresponding service.
Port: 53

  • SMTP
  • DNS
  • HTTPS
  • SSH
  • Telnet
A

DNS: 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Match the commonly used ports on a Linux server with the corresponding service.
Port: 23
- SMTP
- DNS
- HTTPS
- SSH
- Telnet

A

TELNET: 23

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Match the commonly used ports on a Linux server with the corresponding service.
Port: 25
- SMTP
- DNS
- HTTPS
- SSH
- Telnet

A

SMTP: 25

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Match the commonly used ports on a Linux server with the corresponding service.
Port: 443
- SMTP
- DNS
- HTTPS
- SSH
- Telnet

A

HTTPS: 443

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Match the commonly used ports on a Linux server with the corresponding service.
Port: 22
- SMTP
- DNS
- HTTPS
- SSH
- Telnet

A

SSH: 22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

used by RedHat and CentOS computers and tracks authentication-related events
- /var/log/messages
- /var/log/auth.log
- /var/log/secure
- /var/log/dmesg

A

/var/log/secure

used by RedHat and CentOS computers and tracks authentication-related events: /var/log/secure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

contains generic computer activity logs, and is used to store informational and noncritical system messages
- /var/log/messages
- /var/log/auth.log
- /var/log/secure
- /var/log/dmesg

A

/var/log/messages

used by RedHat and CentOS computers and tracks authentication-related events: /var/log/secure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

stores information related to hardware devices and their drivers
- /var/log/messages
- /var/log/auth.log
- /var/log/secure
- /var/log/dmesg

A

/var/log/dmesg

stores information related to hardware devices and their drivers: /var/log/dmesg

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

used by Debian and Ubuntu computers and stores all authentication-related events
- /var/log/messages
- /var/log/auth.log
- /var/log/secure
- /var/log/dmesg

A

/var/log/auth.log

used by Debian and Ubuntu computers and stores all authentication-related events: /var/log/auth.log

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which type of tool allows administrators to observe and understand every detail of a network transaction?
- log manager
- malware analysis tool
- ticketing system
- packet capture software

A

packet capture software

Explanation: Network packet capture software is an important tool because it makes it possible to observe and understand the details of a network transaction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why is Kali Linux a popular choice in testing the network security of an organization?
- It is a network scanning tool that prioritizes security risks.
- It is an open source Linux security distribution containing many penetration tools.
- It can be used to test weaknesses by using only malicious software.
- It can be used to intercept and log network traffic.

A

It is an open source Linux security distribution containing many penetration tools.

Explanation: Kali is an open source Linux security distribution that is commonly used by IT professionals to test the security of networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Match the octal value to the file permission description in Linux.
Write only
- 000
- 001
- 010
- 101
- 110

A

write only ~~> 010

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Match the octal value to the file permission description in Linux.
Read and execute
- 000
- 001
- 010
- 101
- 110

A

read and execute ~~> 101

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Match the octal value to the file permission description in Linux.
Read and write
- 000
- 001
- 010
- 101
- 110

A

read and write ~~> 110

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Match the octal value to the file permission description in Linux.
Execute only
- 000
- 001
- 010
- 101
- 110

A

execute only ~~> 001

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Match the octal value to the file permission description in Linux.
No access
- 000
- 001
- 010
- 101
- 110

A

no access ~~> 000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Displays the name of the current working directory:
- chmod
- ps
- pwd
- sudo

A

Displays the name of the current working directory: pwd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
runs a command as another user: - chmod - ps - pwd - sudo
runs a command as another user: sudo
26
modifies file permissions: - chmod - ps - pwd - sudo
modifies file permissions: chmod
27
lists the processes that are currently running: - chmod - ps - pwd - sudo
lists the processes that are currently running: ps
28
What are two advantages of the NTFS file system compared with FAT32? (Choose two.) - NTFS is easier to configure. - NTFS supports larger files. - NTFS allows faster formatting of drives. - NTFS allows the automatic detection of bad sectors. - NTFS allows faster access to external peripherals such as a USB drive. - NTFS provides more security features.
NTFS supports larger files. NTFS provides more security features. Explanation: The file system has no control over the speed of access or formatting of drives, and the ease of configuration is not file system-dependent.
29
A PC user issues the netstat command without any options. What is displayed as the result of this command? - a historical list of successful pings that have been sent - a list of all established active TCP connections - a network connection and usage report - a local routing table
a list of all established active TCP connections Explanation: When used by itself (without any options), the netstat command will display all the active TCP connections that are available.
30
Which two commands could be used to check if DNS name resolution is working properly on a Windows PC? (Choose two.) - nslookup cisco.com - net cisco.com - ipconfig /flushdns - nbtstat cisco.com - ping cisco.com
nslookup cisco.com ping cisco.com Explanation: The ping command tests the connection between two hosts. When ping uses a host domain name to test the connection, the resolver on the PC will first perform the name resolution to query the DNS server for the IP address of the host. If the ping command is unable to resolve the domain name to an IP address, an error will result. Nslookup is a tool for testing and troubleshooting DNS servers.
31
What is the purpose of using the net accounts command in Windows? - to display information about shared network resources - to show a list of computers and network devices on the network - to start a network service - to review the settings of password and logon requirements for users
to review the settings of password and logon requirements for users Explanation: These are some common net commands: net accounts – sets password and logon requirements for users net start – starts a network service or lists running network services net use – connects, disconnects, and displays information about shared network resources net view – shows a list of computers and network devices on the network When used without options, the net accounts command displays the current settings for password, logon limitations, and domain information.
32
Match the Windows 10 boot sequence after the boot manager (bootmgr.exe) loads. Step 1, Step 2, Step 3, Step, 4, and Step 5: - The Windows boot loader Winload.exe loads. - Ntoskrnl.exe and hal.dll are loaded. - Winload.exe reads the Registry, chooses a hardware profile, and loads the device drivers. - Ntoskrnl.exe takes over the process. - Winlogon.exe is loaded and executes the logon process.
Explanation: Boot Sequence for Windows: – Power on Self Test (POST) – POST for each adapter card that has a BIOS – BIOS reads the MBR – MBR takes over control of the boot process and starts BOOTMGR – BOOTMGR reads the Boot Configuration Data file to know which OS to load and where to find the OS on the boot partition – BOOTMGR invokes WINLOAD.EXE in order to load the NTOSKRNL.EXE file and HAL.DLL – BOOTMGR reads the registry files and loads device drivers – NTOSKRNL.EXE starts the WINLOGON.EXE program and displays the Windows login screen
33
A technician has installed a third party utility that is used to manage a Windows 7 computer. However, the utility does not automatically start whenever the computer is started. What can the technician do to resolve this problem? - Set the application registry key value to one. - Use the Add or Remove Programs utility to set program access and defaults. - Change the startup type for the utility to Automatic in Services . - Uninstall the program and then choose Add New Programs in the Add or Remove Programs utility to install the application.
Change the startup type for the utility to Automatic in Services Explanation: The Services console in Windows OS allows for the management of all the services on the local and remote computers. The setting of Automatic in the Services console enables the chosen service to start when the computer is started.
34
Which statement describes the function of the Server Message Block (SMB) protocol? - It is used to stream media contents. - It is used to manage remote PCs. - It is used to compress files stored on a disk. - It is used to share network resources.
It is used to share network resources. Explanation: The Server Message Block (SMB) protocol is primarily used by Microsoft to share network resources.
35
A user creates a file with .ps1 extension in Windows. What type of file is it? - PowerShell function - PowerShell cmdlet - PowerShell documentation - PowerShell script
PowerShell script Explanation: The types of commands that PowerShell can execute include the following: cmdlets – perform an action and return an output or object to the next command that will be executed PowerShell scripts – files with a .ps1 extension that contain PowerShell commands that are executed PowerShell functions – pieces of code that can be referenced in a script
36
renames a file - dir - mkdir - cd - ren
renames a file ~~> ren
37
creates a new directory - dir - mkdir - cd - ren
creates a new directory ~~> mkdir
38
changes the current directory - dir - mkdir - cd - ren
changes the current directory ~~> cd
39
lists files in a directory - dir - mkdir - cd - ren
lists files in a directory ~~> dir
40
A user logs in to Windows with a regular user account and attempts to use an application that requires administrative privileges. What can the user do to successfully use the application? - Right-click the application and choose Run as Privileged. - Right-click the application and choose Run as Superuser. - Right-click the application and choose Run as Administrator. - Right-click the application and choose Run as root.
Right-click the application and choose Run as Administrator. Explanation: As a security best practice, it is advisable not to log on to Windows using the Administrator account or an account with administrative privileges. When it is necessary to run or install software that requires the privileges of the Administrator, the user can right-click the software in the Windows File Explorer and choose Run as Administrator .
41
An IT technician wants to create a rule on two Windows 10 computers to prevent an installed application from accessing the public Internet. Which tool would the technician use to accomplish this task? - Local Security Policy - Computer Management - Windows Defender Firewall with Advanced Security - DMZ
Windows Defender Firewall with Advanced Security Explanation: Windows Firewall with Advanced Security or the Windows 10 Windows Defender Firewall with Advanced Security is used to create inbound and outbound rules, connection security rules such as security traffic between two computers, and monitoring any active connection security rules.
42
What technology was created to replace the BIOS program on modern personal computer motherboards? - UEFI - MBR - CMOS - RAM
UEFI Explanation: As of 2015, most personal computer motherboards are shipped with UEFI as the replacement for the BIOS program.
43
a program that interprets and executes user commands - CLI - shell - daemon
shell : a program that interprets and executes user commands
44
a background process that runs without the need for user interaction - CLI - shell - daemon
daemon : a background process that runs without the need for user interaction
45
a text based interface that accepts user commands - CLI - shell - daemon
CLI : a text based interface that accepts user commands
46
What is the outcome when a Linux administrator enters the man man command? - The man man command configures the network interface with a manual address - The man man command opens the most recent log file - The man man command provides a list of commands available at the current prompt - The man man command provides documentation about the man command
The man man command provides documentation about the man command Explanation: The man command is short for manual and is used to obtain documentation about a Linux command. The command man man would provide documentation about how to use the manual.
47
a running background process that does not need user interaction - daemon - hardening - logging - symlink
a running background process that does not need user interaction ~~> daemon
48
protecting remote access - daemon - hardening - logging - symlink
protecting remote access ~~> hardening
49
a type of file that is a reference to another file or directory - daemon - hardening - logging - symlink
a type of file that is a reference to another file or directory ~~> symlink
50
What are two benefits of using an ext4 partition instead of ext3? (Choose two.) - an increase in the number of supported devices - improved performance - compatibility with NTFS - increase in the size of supported files - decreased load time - compatibility with CDFS
improved performance increase in the size of supported files Explanation: Based on the ex3 file system, an ext4 partition includes extensions that improve performance and an increase in the of supported files. An ext4 partition also supports journaling, a file system feature that minimizes the risk of file system corruption if power is suddenly lost to the system.
51
Consider the result of the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file? ls -l analyst.txt -rwxrw-r-- sales staff 1028 May 28 15:50 analyst.txt - read, write, execute - write only - read only - read, write
read, write, execute Explanation: The file permissions are always displayed in the User Group and Other order. In the example displayed, the file has the following permissions: The dash ( – ) means that this is a file. For directories, the first dash would replaced with a “d”. The first set of characters is for user permission (rwx). The user, sales, who owns the file can read, write and execute the file. The second set of characters is for group permissions (rw-). The group, staff, who owns the file can read and write to the file. The third set of characters is for any other user or group permissions (r–). Any other user or group on the computer can only read the file.
52
What is the purpose of entering the netsh command on a Windows PC? - to configure networking parameters for the PC - to change the computer name for the PC - to create user accounts - to test the hardware devices on the PC
to configure networking parameters for the PC Explanation: The netsh.exe tool can be used to configure networking parameters for the PC from a command prompt.
53
Which type of Windows PowerShell command performs an action and returns an output or object to the next command that will be executed? - cmdlets - functions - routines - scripts
cmdlets Explanation: The types of commands that PowerShell can execute include the following: cmdlets – perform an action and return an output or object to the next command that will be executed PowerShell scripts – files with a .ps1 extension that contain PowerShell commands that are executed PowerShell functions – pieces of code that can be referenced in a script
54
A user creates a file with .ps1 extension in Windows. What type of file is it? - PowerShell documentation - PowerShell cmdlet - PowerShell script - PowerShell function
PowerShell script Explanation: The types of commands that PowerShell can execute include the following: cmdlets – perform an action and return an output or object to the next command that will be executed PowerShell scripts – files with a .ps1 extension that contain PowerShell commands that are executed PowerShell functions – pieces of code that can be referenced in a script
55
Match the Windows system tool with the description. Registry : - provides virus and spyware protection - a hierarchical database of all system and user information - selectively denies traffic on specified interfaces - a CLI environment used to run scripts and automate tasks - maintains system logs - provides information on system resources and processes
Registry : a hierarchical database of all system and user information
56
Match the Windows system tool with the description. Windows Firewall : - provides virus and spyware protection - a hierarchical database of all system and user information - selectively denies traffic on specified interfaces - a CLI environment used to run scripts and automate tasks - maintains system logs - provides information on system resources and processes
Windows Firewall : selectively denies traffic on specified interfaces
57
Match the Windows system tool with the description. PowerShell : - provides virus and spyware protection - a hierarchical database of all system and user information - selectively denies traffic on specified interfaces - a CLI environment used to run scripts and automate tasks - maintains system logs - provides information on system resources and processes
PowerShell : a CLI environment used to run scripts and automate tasks
58
Match the Windows system tool with the description. Event Viewer : - provides virus and spyware protection - a hierarchical database of all system and user information - selectively denies traffic on specified interfaces - a CLI environment used to run scripts and automate tasks - maintains system logs - provides information on system resources and processes
Event Viewer : maintains system logs
59
In the Linux shell, which character is used between two commands to instruct the shell to combine and execute these two commands in sequence? - $ - # - % - |
| Explanation: In the Linux shell, several commands can be combined to perform a complex task. This technique is known as piping. The piping process is indicated by inserting the character “|” between two consecutive commands.
60
Why is Linux considered to be better protected against malware than other operating systems? - customizable penetration and protection tools - fewer deployments - file system structure, file permissions, and user account restrictions - integrated firewall
file system structure, file permissions, and user account restrictions Explanation: The Linux operating design including how the file system is structured, standard file permissions, and user account restrictions make Linux a better protected operating system. However, Linux still has vulnerabilities and can have malware installed that affects the operating system.
61
Which Windows tool can be used by a cybersecurity administrator to secure stand-alone computers that are not part of an active directory domain? - PowerShell - Windows Defender - Windows Firewall - Local Security Policy
Local Security Policy Explanation: Windows systems that are not part of an Active Directory Domain can use the Windows Local Security Policy to enforce security settings on each stand-alone system.

INFOSEC2 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions