MODULE 1: Intro to Ethical Hacking

Question 1

What is the assurance that information is accessible only to those authorized to have access?

Answer 1

Confidentiality

Question 2

What is the trustworthiness of data or resources in terms of preventing improper and unauthorized changes?

Answer 2

Integrity

Question 3

What is assurance that the systems responsible for delivering, storing, and processing information are accessible when required by the authorized users?

Answer 3

Availability

Question 4

What refers to the characteristic of a communication, document, or any data that ensures the quality of being genuine?

Answer 4

Authenticity

Question 5

What is the guarantee that the sender of a message cannot later deny having sent the message and that the recipient cannot deny having received the message?

Answer 5

Non-Repudiation

Question 6

What term refers to the use of information and communication technologies (ICT) to take competitive advantages over an opponent?

Answer 6

Information Warfare or InfoWar

Question 7

What type of information warfare refers to all strategies and actions to defend against attacks on information and communication technologies assets?

Answer 7

Defensive Information Warfare

Question 8

What type of information warfare involves attacks against information and communication technologies assets of an opponent?

Answer 8

offensive information warfare

Question 9

What classification of attack does not tamper with data and involves intercepting and monitoring network traffic and data flow on the target network? (Ex: sniffing, eavesdropping)

Answer 9

Passive Attacks

Question 10

What classification of attack tampers with data in transit or disrupts communication or services between systems in order to bypass or break into secured systems? (Ex: DoS, MiTM, session hijacking, and SQL Injection)

Answer 10

Active Attacks

Question 11

What classification of attack is performed when the attacker is in close physical proximity with the target system or network in order to gather, modify, or disrupt access to information? (Ex: social engineering such as eavesdropping, shoulder surfing, and dumpster diving)

Answer 11

Close-In Attacks

Question 12

What classification of attack involves using privileged access to violate rules or intentionally cause a threat to the organization’s information or information systems? (Ex: theft of physical devices, planting keyloggers, backdoors, and malware)

Answer 12

Insider Attacks

Question 13

What classification of attack occurs when attackers tamper with hardware or software prior to installation such as at its source or while in transit between source and destination?

Answer 13

Distribution Attack

Question 14

What methodology is a component of intelligence driven defense for the identification and prevention of malicious intrusion activities by understanding the adversary’s tactics, techniques, and procedures beforehand?

Answer 14

The Cyber Kill Chain Methodology

Question 15

Which step of the Cyber Kill Chain Methodology involves gathering data on the target to probe for weak points?

Answer 15

Reconnaissance

Question 16

Which step of the Cyber Kill Chain Methodology involves creating a deliverable malicious payload using an exploit and a backdoor?

Answer 16

Weaponization

Question 17

Which step of the Cyber Kill Chain Methodology involves sending a weaponized bundle to the victim using email, USB, ect.?

Answer 17

Delivery

Question 18

Which step of the Cyber Kill Chain Methodology involves exploiting a vulnerability by executing code on the victim’s system?

Answer 18

Exploitation

Question 19

Which step of the Cyber Kill Chain Methodology involves installing malware on the target system?

Answer 19

Installation

Question 20

Which step of the Cyber Kill Chain Methodology involves creating a command and control channel to communicate and pass data back and forth?

Answer 20

Command and Control

Question 21

Which step of the Cyber Kill Chain Methodology involves performing actions to achieve intended objectives/goals?

Answer 21

Actions on Objective

Question 22

What are the guidelines that describe the way an attacker performs the attack from beginning to the end?
This includes initial exploitation, privilege escalation, and lateral movement.

Answer 22

Tactics

Question 23

What are the technical methods used by an attacker to achieve intermediate results during the attack classified as?
This includes initial exploitation, setting up and maintaining command and control channels, accessing the target infrastructure, covering the tracks of data exfiltration, ect.?

Answer 23

Techniques

Question 24

What is the term that describes the organizational approaches that threat actors follow to launch an attack?

Answer 24

Procedures

Question 25

What term describes the identification of the common methods or techniques followed by an adversary to launch attacks or penetrate an organization's network?

Answer 25

Adversary Behavioral identification

Question 26

Which Adversary Behavior points to and adversary already being inside of a target network? Indicators include the enumeration of systems, hosts, and processes and the execution of various commands to extract information such as local user context, system config, hostname, IP, active remote systems, and processes running.

Answer 26

Internal Reconnaissance

Question 27

Which Adversary Behavior can be identified by checking windows event logs or PowerShell transcript logs? Used by an adversary for automating data exfiltration and launching further attacks.

Answer 27

Use of PowerShell

Question 28

Which Adversary Behavior includes the creation and configuration of multiple domains pointing to the same host allowing an adversary to switch quickly between domains to avoid detection?

Answer 28

Unspecified Proxy Activities

Question 29

Which Adversary Behavior includes interacting with the target system, browsing files, reading file contents, modifying file content, creating new accounts, connecting to the remote system, and downloading and installing malicious code?

Answer 29

Use of Command Line Interface

Question 30

Which Adversary Behavior includes modifying the contents of the HTTP user-agent field in order to communicate with the compromised system and execute attacks?

Answer 30

HTTP User Agent

Question 31

Which Adversary Behavior includes using servers to communicate remotely with compromised systems through an encrypted session in order to steal data, delete data, and launch further attacks?

Answer 31

Command and Control (C2) Server

Question 32

Which Adversary Behavior includes obfuscating malicious traffic in legitimate traffic carried by common protocols used in the network? Allows an adversary to communicate with the C2 server, bypass security controls, and perform data exfiltration.

Answer 32

DNS Tunneling

Question 33

Which Adversary Behavior includes manipulating a web server by creating a shell within a website to gain remote access to the server and perform various tasks such as data exfiltration, file transfers, and file uploads?

Answer 33

Use of Web Shell

Question 34

Which Adversary Behavior is described as collecting or destroying sensitive data?

Answer 34

Data Staging

Question 35

What is the term for clues, artifacts, and pieces of forensic data found on the network or OS of an organization that indicates potential intrusion or malicious activity?

Answer 35

Indicators of Compromise

Question 36

Which indicator of compromise category includes malicious data sent to a target organization or individual?

Answer 36

Email Indicator

Question 37

Which indicator of compromise category indicates use of a command and control (c2) server, malware delivery, adversary identification of target operating systems, ect.?

Answer 37

Network Indicator

Question 38

Which indicator of compromise category is found by performing an analysis of the infected system within the organizational network?

Answer 38

Host-Based Indicator

Question 39

Which indicator of compromise identifies specific behavior related to malicious activities?

Answer 39

Behavioral indicators

Question 40

What broad term refers to exploiting system vulnerabilities and compromising security controls to gain unauthorized or inappropriate access to a system’s resources?

Answer 40

Hacking

Question 41

What class of hacker uses their computing skills for illegal or malicious purposes (criminal activities)?

Answer 41

Black Hats

Question 42

What class of hacker uses their hacking skills for defensive purposes? Also known as Ethical Hackers/Penetration Testers.

Answer 42

White Hats

Question 43

What class of hacker works both offensively and defensively at various times? Sometimes good, sometimes bad.

Answer 43

Gray Hat

Question 44

What class of hacker hacks the government or corporations in order to increase awareness of their social or political agendas?

Answer 44

Hacktivist

Question 45

What class of hacker aims to bring down critical infrastructure for a “cause” and are not worried about facing jail terms or any other kind of punishment?

Answer 45

Suicide Hackers

Question 46

What class of hackers are unskilled and compromise systems by running scripts, tools, and software developed by real hackers?

Answer 46

Script Kiddies

Question 47

What class of hacker is motivated by religious or political beliefs and have a goal to create fear by large scale disruption of computer networks?

Answer 47

Cyber Terrorists

Question 48

What class of hacker is employed by the government to penetrate, gain top-secret information from, and damage the information systems of other governments?

Answer 48

State-Sponsored Hackers

Question 49

What are the 5 hacking phases in order from start to finish?

Answer 49

1. Reconnaissance 2. Scanning / Enumeration 3. Gaining Access 4. Maintaining Access 5. Clearing tracks

Question 50

Which phase of the 5 hacking phases refers to the preparatory phase where an attacker seeks to gather information about a target prior to launching an attack?

Answer 50

Reconnaissance

Question 51

Which reconnaissance type involves acquiring information without directly interacting with the target?

Answer 51

Passive Reconnaissance

Question 52

Which reconnaissance type involves interacting with the target directly by any means?

Answer 52

Active Reconnaissance

Question 53

Which phase of the 5 hacking phases involves scanning the network for specific information on the basis of information gathered during the reconnaissance phase? Includes the use of dialers, port scanners, network mappers, ping tools, and vulnerability scanners in order to extract information such as live machines, open/closed ports, OS details, device type, system uptime, ect.

Answer 53

Scanning

Question 54

Which phase of the 5 hacking phases includes obtaining access to the operating system or applications? During this phase an attacker can escalate privileges if need be. (Ex: password cracking, buffer overflows, denial of service, and session hijacking)

Answer 54

Gaining Access

Question 55

Which phase of the 5 hacking phases refers to when an attacker tries to retain their ownership of the system? During this phase an attacker may prevent the system from being pwnd by other hackers by securing their access with backdoors, rootkits, or trojans.

Answer 55

Maintaining Access

Question 56

Which phase of the 5 hacking phases involves the hacker attempting to hide their malicious acts?

Answer 56

Clearing Tracks

Question 57

What is the term used for hacking in order to identify vulnerabilities, verify the existence of exploitable vulnerabilities, and perform security assessments of organizations with the permission of concerned authorities?

Answer 57

Ethical Hacking

Question 58

What type of hackers are employed either through contracts or direct employment and must abide by a contract that specifies the scope/what is off limits? They must also sign an NDA and are only allowed to reveal vulnerabilities to the employer.

Answer 58

Ethical Hackers

Question 59

What is the greatest asset of an organization?

Answer 59

Information

Question 60

What term refers to the assurance that the integrity, availability, confidentiality, and authenticity of information is protected during usage, processing, storage, and transmission of information?

Answer 60

Information Assurance (IA)

Question 61

What concept is a security strategy in which several protection layers are placed throughout an information system in order to prevent direct attacks?

Answer 61

Defense In Depth

Question 62

What term refers to the degree of uncertainty or expectation that an adverse event may cause damage to the system?

Answer 62

Risk

Question 63

What is used to scale risk by considering the probability, likelihood, and consequence or impact of the risk?

Answer 63

A Risk Matrix

Question 64

What is the process of reducing and maintaining risk at an acceptable level by means of a well-defined and actively employed security program?

Answer 64

Risk Management

Question 65

Which risk management phase identifies the sources, causes, consequences, and other details of the internal and external risks affecting the security of an organization?

Answer 65

Risk identification

Question 66

Which risk management phase assesses the organization's risk and provides an estimate of the likelihood and impact of the risk?

Answer 66

Risk Assessment

Question 67

Which risk management phase selects and implements appropriate controls for the identified risks?

Answer 67

Risk Treatment

Question 68

Which risk management phase ensures appropriate controls are implemented to handle known risks and calculates the chances of a new risk occurring?

Answer 68

Risk Tracking

Question 69

Which risk management phase evaluates the performance of the implemented risk management strategies?

Answer 69

Risk review

Question 70

What is defined as the collection and analysis of information about threats while drawing patterns that allow you to respond effectively to cyber threats? This helps the organization identify and mitigate various business risks.

Answer 70

Cyber Threat Intelligence

Question 71

What type of threat intelligence is consumed by high level executives and management and is basically high level information on changing risks?

Answer 71

Strategic

Question 72

What type of threat intelligence provides information on attacker's TTPs and is consumed by IT service managers, SOC managers, and administrators?

Answer 72

Tactical

Question 73

What type of threat intelligence provides information on a specific incoming attack and is consumed by security managers and network defenders?

Answer 73

Operational

Question 74

What type of threat intelligence provides information on specific indicators of compromise and is consumed by SOC staff and Incidence Recovery teams?

Answer 74

Technical

Question 75

What is a risk assessment approach for analyzing the security of an application by capturing, organizing, and analyzing all of the information that affects the security of an application?

Answer 75

Threat Modeling

Question 76

What Threat Modeling Step helps to determine how much effort needs to be put towards subsequent steps?

Answer 76

1. Identify Security Objectives

Question 77

What Threat Modeling Step identifies the components, data flows, and trust boundaries?

Answer 77

2. Application Overview

Question 78

What Threat Modeling Step helps to find more relevant and more detailed threats?

Answer 78

3. Decompose the Application

Question 79

What Threat Modeling Step helps identify threats relevant to the control scenario and context using the information obtained in steps 2 and 3?

Answer 79

4. Identify Threats

Question 80

What Threat Modeling Step identifies weaknesses related to the threats found using vulnerability categories?

Answer 80

5. identify Vulnerabilities

Question 81

What is a set of predefined processes to identify, analyze, prioritize, and resolve security incidents in order to restore normal service operations asap?

Answer 81

Incident Management

Question 82

Placeholder for incident handling and response

Answer 82

no answer

Question 83

What two assets are now vastly used across various industries due to the increase in computing power, data collection, and storage capabilities? These assets are unsupervised self-learning systems that are used to define what a normal network looks like and then backtrack and report any deviations or anomalies in real time.

Answer 83

Machine Learning and Artificial intelligence

Question 84

What machine learning classification makes use of algorithms that input a set of labeled training data with the aim of learning the differences between labels?

Answer 84

Supervised Learning

Question 85

What machine learning classification makes use of algorithms that input unlabeled training data with the aim of deducing categories by itself?

Answer 85

Unsupervised learning

Question 86

What is a proprietary information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards?

Answer 86

PCI-DSS

Question 87

What law specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system within an organization?

Answer 87

ISO/IEC 27001:2013

Question 88

What law provides federal protections for personal health information?

Answer 88

HIPAA

Question 89

What Act is designed to protect investors and the public by increasing the accuracy and reliability of corporate disclosures?

Answer 89

Sarbanes Oxley Act (SOX)

Question 90

What law is a US copyright law that defines legal prohibitions against circumvention of technological protection measures employed by copyright owners to protect their works?

Answer 90

The Digital Millennium Copyright Act (DMCA)

Question 91

What Act provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets?

Answer 91

Federal Information Security Management Act (FISMA)

Question 92

What regulation was put into effect in 2018 and is the most stringent privacy and security laws globally that is able to levy fines in the tens of millions of euros against violators?

Answer 92

General Data Protection Regulation (GDPR)

Question 93

What Act sets out the framework for data protection laws in the UK?

Answer 93

Data Protection Act 2018 (DPA 2018)