🌍 All Study Guides 📊 Dashboard 📰 Blog 💡 About

IBM Cybersecurity Analyst Professional Certificate • STUDY MODE

PRACTICE QUIZ

QUESTION 1 OF 70

What are the four (4) main types of actors identified in the video A brief overview of types of actors and their motives? Partially correct! Hactivists may be motivated by money, but more often by political concerns of some sort. Partially correct! Government or "nation-state" actors are becoming increasingly active and are an increasing threat. Partially correct! Hackers definately are prominent actors and are usually motivated by money. Partially correct! Internal actors do cause a lot of damage. They have a head start when it comes to knowledge and access.

HactivistsCorrect Answer

GovernmentsCorrect Answer

Black Hats

Security Analysts

White Hats

HackersCorrect Answer

InternalCorrect Answer

QUESTION 2 OF 70

Which of these common motivations is often attributed to a hactivist? Correct! The hactivism movement is often poitically motivated.

Money

Just playing around

Hire me!

Political action and movementsCorrect Answer

QUESTION 3 OF 70

In the video Hacking organizations, which three (3) governments were called out as being active hackers? Partially correct! China is very active. Partially correct! Yes, Israel is active among governments with hacking organizations. Partially correct! The NSA is known to be active.

Venezuela

ChinaCorrect Answer

IsraelCorrect Answer

United StatesCorrect Answer

Canada

QUESTION 4 OF 70

Which four (4) of the following are known hacking organizations?

Syrian Electronic ArmyCorrect Answer

Fancy BearsCorrect Answer

Guardians of PeaceCorrect Answer

AnonymousCorrect Answer

The Ponemon Institute

QUESTION 5 OF 70

Which of these hacks resulted in over 100 million credit card numbers being stolen? Correct! Over 100 million credit card numbers were stolen. AN ARCHITECT'S PERSPECTIVE ON ATTACK CLASSIFICATIONS

2011 Sony Playstation hack

2013 Singapore Cyberattacks

2014 Ebay hack

2015 Target Stores hackCorrect Answer

2016 US Election hack

QUESTION 6 OF 70

Which of the following statements is True?

Passive attacks are easy to detect because the original message wrapper must be modified by the attacker before it is forwarded on to the intended recipient.

Passive attacks are hard to detect because the original message is delivered unchanged and can pass an integrity check.Correct Answer

Passive attacks are hard to detect because the original message is never delivered so the receiving does not know they missed anything.

Passive attacks are easy to detect because of the latency created by the interception and second forwarding.

QUESTION 7 OF 70

The purpose of security services includes which three (3) of the following?

Often replicate functions found in physical documentsCorrect Answer

Includes any component of your security infrastructure that has been outsourced to a third-party

Enhance security of data processing systems and information transfer.Correct Answer

Are intended to counter security attacks.Correct Answer

QUESTION 8 OF 70

Which statement best describes access control?

Protection against denial by one of the parties in communication

Prevention of unauthorized use of a resourceCorrect Answer

Assurance that the communicating entity is the one claimed

Protection against the unauthorized disclosure of data

QUESTION 9 OF 70

The International Telecommunication Union (ITU) X.800 standard addresses which three (3) of the following topics? Partially correct! I addresses protecting data from unauthorized access. Partially correct! It addresses the protection of data from unauthorized disclosure. Partially correct! Both peer-entity and data origin authentication.

Access ControlCorrect Answer

Data transmission speeds

Data ConfidentialityCorrect Answer

Transmission cost sharing between member countries

AuthenticationCorrect Answer

QUESTION 10 OF 70

Protocol suppression, ID and authentication are examples of which? Correct! These are the technical implementation of the Security Policy

Security PolicyCorrect Answer

Security Mechanism

Business Policy

Security Architecture

QUESTION 11 OF 70

The motivation for more security in open systems is driven by which three (3) of the following factors? Partially correct! The spread of OSI recommendations brings with it the need for enhanced security. Partially correct! Think GDPR. Partially correct! Especially those that are connected to the Internet.

New requirements from the WTO, World Trade Organization

The desire by a number of organizations to use OSI recommendations.Correct Answer

The appearence of data protection legislation in several countries.Correct Answer

Society)s increasing dependance on computers.Correct Answer

QUESTION 12 OF 70

True or False: The accidental disclosure of confidential data by an employee is considered a legitimate organizational threat. Correct! Not all threats are intentional

TrueCorrect Answer

False

QUESTION 13 OF 70

True or False: The accidental disclosure of confidential information by an employee is considered an attack. Correct. An attack has to be an intentional attempt to violate security.

True

FalseCorrect Answer

QUESTION 14 OF 70

A replay attack and a denial of service attack are examples of which? Correct! These are both attacks against the security architecture itself.

Security architecture attackCorrect Answer

Origin attack

Passive attack

Masquerade attack

QUESTION 15 OF 70

The International Telecommunication Union is an organization that is described by which of the following statements? MALWARE AND AN INTRODUCTION TO THREAT PROTECTION

The ITU is an organization charted and staffed by the United Nations to maintain international standards, such as X.800, for telecommunication.Correct Answer

The ITU is an industry organization founded by the largest telecommunication companies in the world and focused on lobbying governments on their behalf.

The ITU is a partnership of the national telephone companies of most European countries intended to help compete against the largest American telecomms.

The ITU is a workers union focused on ensuring the welfare of telecommunication workers.

QUESTION 16 OF 70

True or False: An application that runs on your computer without your authorization but does no damage to the system is not considered malware. Correct! Adware and Spyware often do not damage the host but are definitely considered Malware.

True

FalseCorrect Answer

QUESTION 17 OF 70

How would you classify a piece of malicious code designed to cause damage and spreads from one computer to another by attaching itself to files but requires human actions in order to replicate? Correct! A virus requires action on the part of the user in order to replicate and spread.

VirusCorrect Answer

Worms

Trojan Horses

Spyware

Adware

Ransomware

QUESTION 18 OF 70

How would you classify a piece of malicious code designed collect data about a computer and its users and then report that back to a malicious actor? Correct! These are designed to spy on the host system and collect data about its users.

Virus

Worms

SpywareCorrect Answer

Adware

QUESTION 19 OF 70

A large scale Denial of Service attack usually relies upon which of the following? Correct! Many servers are required to implement an effective DoS attack - far more than could be managed manually.

A botnetCorrect Answer

A keylogger

Logic Bombs

Trojan Horses

QUESTION 20 OF 70

Antivirus software can be classified as which form of threat control? Correct! Antivirus software is a technology that can be deployed to help mitigate cyber threats. ADDITIONAL ATTACK EXAMPLES TODAY

Technical controlsCorrect Answer

Administrative controls

Active controls

Passive controls

QUESTION 21 OF 70

Which of the following measures can be used to counter a mapping attack? Correct! All 3 of these options can and should be used.

Record traffic entering the network

Look for suspicious activity like IP addresses or ports being scanned sequentially.

Use a host scanner and keep an inventory of hosts on your network.

All of the above.Correct Answer

QUESTION 22 OF 70

In order for a network card (NIC) to engage in packet sniffing, it must be running in which mode? Correct, the NIC must be running in promiscuous mode.

PromiscuousCorrect Answer

Sniffer

Inspection

Open

QUESTION 23 OF 70

Which countermeasure can be helpful in combating an IP Spoofing attack? Correct! This works but only if all routers use it.

Ingress filteringCorrect Answer

Enable IP Packet Authentication filtering

Keep your certificates up-to-date

Enable the IP Spoofing feature available in most commercial antivirus software.

All of the above.

QUESTION 24 OF 70

Which two (2) measures can be used to counter a Denial of Service (DOS) attack? Partially correct! The downside here is that the source is most likely innocent but compromised machines. Partially correct! The downside is that you will be filtering out some legitimate packets as well.

Enable packet filtering on your firewall.

Use traceback to identify the source of the flooded packets.Correct Answer

Implement a filter to remove flooded packets before they reach the host.Correct Answer

Enable the DOS Filtering option now available on most routers and switches.

QUESTION 25 OF 70

Which countermeasure should be used agains a host insertion attack? Correct! All of these steps are necessary. ATTACKS AND CYBER RESOURCES

Maintain an accurate inventory of of computer hosts by MAC address.

Use a host scanning tool to match a list of discovered hosts against known hosts.

Investigate newly discovered hosts.

All of the above.Correct Answer

QUESTION 26 OF 70

Which is not one of the phases of the intrusion kill chain? Correct! Activation is not part if the intrusion kill chain

ActivationCorrect Answer

Command and Control

Installation

Delivery

QUESTION 27 OF 70

Which social engineering attack involves a person instead of a system such as an email server? Correct! a vishing attack often is conducted over the phone.

Phishing

Spectra

Cyberwarfare

VishingCorrect Answer

QUESTION 28 OF 70

Which of the following is an example of a social engineering attack? Correct! Talking someone into doing something they should not do is social engineering.

Setting up a web site offering free games, but infecting the downloads with malware.

Calling an employee and telling him you are from IT support and must observe him logging into his corporate account.Correct Answer

Logging in to the Army)s missle command computer and launching a nuclear weapon.

Sending someone an email with a Trojan Horse attachment.

QUESTION 29 OF 70

True or False: While many countries are preparing their military for a future cyberwar, there have been no "cyber battles" to-date. Correct! There have been hundreds attacks that can be considered acts of cyberwarfare conducted by many countries, includeing the United States, China, Israel, Russia, Iran, etc. A DAY IN THE LIFE OF A SOC ANALYST

True

FalseCorrect Answer

QUESTION 30 OF 70

Which tool did Javier say was crucial to his work as a SOC analyst? Correct! Tools like QRadar SIEM are crucial to Javier since he can use it to perform advanced corrolations and threat intelligence integration. A BRIEF OVERVIEW OF TYPES OF ACTORS AND THEIR MOTIVES

SIEM (Security Information and Event Management)Correct Answer

Packet Sniffers

Firewalls

Intrusion detection software

QUESTION 31 OF 70

Which hacker organization hacked into the Democratic National Convention and released Hillary Clinton's emails?

Fancy BearsCorrect Answer

Anonymous

Syrian Electronic Army

Guardians of the Peace

All of the above

QUESTION 32 OF 70

What challenges are expected in the future?

Enhanced espionage from more countries

Far more advanced malware

New consumer technology to exploit

All of the aboveCorrect Answer

QUESTION 33 OF 70

Why are cyber attacks using SWIFT so dangerous?

SWIFT is the protocol used by all banks to transfer moneyCorrect Answer

SWIFT is the flight plan and routing system used by all cooperating nations for international commercial flights

SWIFT is the protocol used to transmit all diplomatic telegrams between governments around the world

SWIFT is the protocol used by all US healthcare providers to encrypt medical records

QUESTION 34 OF 70

Which statement best describes Authentication?

Assurance that the communicating entity is the one claimedCorrect Answer

Prevention of unauthorized use of a resource

Assurance that a resource can be accessed and used

Protection against denial by one of the parties in communication

QUESTION 35 OF 70

Trusted functionality, security labels, event detection, security audit trails and security recovery are all examples of which type of security mechanism?

Active security mechanism

External security mechanism

Passive security mechanismCorrect Answer

Contingent security mechanism

QUESTION 36 OF 70

If an organization responds to an intentional threat, that threat is now classified as what?

An attackCorrect Answer

An active threat

An open case

A malicious threat

QUESTION 37 OF 70

An attack that is developed particularly for a specific customer and occurs over a long period of time is a form of what type of attack?

Denial of Service (DOS)

Advanced Persistent ThreatCorrect Answer

Water Hole

Spectra

QUESTION 38 OF 70

A political motivation is often attributed to which type of actor?

Security Analysts

Internal

Hackers

HactivistCorrect Answer

QUESTION 39 OF 70

The video Hacking organizations called out several countries with active government sponsored hacking operations in effect. Which one of these was among those named?

Canada

Egypt

IsraelCorrect Answer

South Africa

QUESTION 40 OF 70

Which of these is not a known hacking organization?

The Ponemon InstituteCorrect Answer

Fancy Bears

Syrian Electronic Army

Anonymous

Guardians of the Peace

QUESTION 41 OF 70

Which type of actor hacked the 2016 US Presidential Elections?

GovernmentCorrect Answer

Internal

Hactivists

Hackers

QUESTION 42 OF 70

True or False: Passive attacks are easy to detect because the original messages are usually altered or undelivered.

FalseCorrect Answer

True

QUESTION 43 OF 70

True or False: Authentication, Access Control and Data Confidentiality are all addressed by the ITU X.800 standard.

TrueCorrect Answer

False

QUESTION 44 OF 70

True or False: Only acts performed with intention to do harm can be classified as Organizational Threats

FalseCorrect Answer

True

QUESTION 45 OF 70

How would you classify a piece of malicious code designed to cause damage, can self-replicate and spreads from one computer to another by attaching itself to files?

Virus

WormCorrect Answer

Spyware

Trojan Horse

Adware

Ransomware

QUESTION 46 OF 70

Botnets can be used to orchestrate which form of attack?

Distribution of Spam

DDoS attacks

Phishing attacks

Distribution of Spyware

As a Malware launchpad

All of the aboveCorrect Answer

QUESTION 47 OF 70

Policies and training can be classified as which form of threat control?

Technical controls

Administrative controlsCorrect Answer

Passive controls

Active controls

QUESTION 48 OF 70

Which type of attack can be addressed using a switched Ethernet gateway and software on every host on your network that makes sure their NICs is not running in promiscuous mode.

Packet SniffingCorrect Answer

Host Insertion

Trojan Horse

Ransomware

All of the above

QUESTION 49 OF 70

A flood of maliciously generated packets swamp a receiver’s network interface preventing it from responding to legitimate traffic. This is characteristic of which form of attack?

A Denial of Service (DOS) attackCorrect Answer

A Trojan Horse

A Masquerade attack

A Ransomware attack

QUESTION 50 OF 70

A person calls you at work and tells you he is a lawyer for your company and that you need to send him specific confidential company documents right away, or else! Assuming the caller is not really a lawyer for your company but a bad actor, what kind of attack is this?

A Social Engineering attackCorrect Answer

A Trojan Horse

A Denial of Service attack

A Worm attack

QUESTION 51 OF 70

Which type of actor was not one of the four types of actors mentioned in the video A brief overview of types of actors and their motives?

Hactivists

Governments

Hackers

Internal

Black HatsCorrect Answer

QUESTION 52 OF 70

Cryptography, digital signatures, access controls and routing controls considered which?

Business Policy

Security Policy

Specific security mechanismsCorrect Answer

Pervasive security mechanisms

QUESTION 53 OF 70

Traffic flow analysis is classified as which?

An active attack

A passive attackCorrect Answer

An origin attack

A masquerade attack

QUESTION 54 OF 70

True or False: An individual hacks into a military computer and uses it to launch an attack on a target he personally dislikes. This is considered an act of cyberwarfare.

FalseCorrect Answer

True

QUESTION 55 OF 70

What are the four (4) main types of actors identified in the video A brief overview of types of actors and their motives?

HactivistsCorrect Answer

GovernmentsCorrect Answer

Black Hats

Security Analysts

White Hats

Hackers InternalCorrect Answer

QUESTION 56 OF 70

Which of these common motivations is often attributed to a hacktivist?

Money

Just playing around

Hire me!

Political action and movementsCorrect Answer

QUESTION 57 OF 70

In the video Hacking organizations, which three (3) governments were called out as being active hackers?

Venezuela

ChinaCorrect Answer

IsraelCorrect Answer

United StatesCorrect Answer

Canada

QUESTION 58 OF 70

Which of these hacks resulted in over 100 million credit card numbers being stolen?

2011 Sony Playstation hack

2013 Singapore Cyberattacks

2014 Ebay hack

2015 Target Stores hackCorrect Answer

2016 US Election hack

QUESTION 59 OF 70

The International Telecommunication Union (ITU) X.800 standard addresses which three (3) of the following topics?

Access ControlCorrect Answer

Data transmission speeds

Data ConfidentialityCorrect Answer

Transmission cost sharing between member countries

AuthenticationCorrect Answer

QUESTION 60 OF 70

Protocol suppression, ID and authentication are examples of which?

Security PolicyCorrect Answer

Security Mechanism

Business Policy

Security Architecture

QUESTION 61 OF 70

The motivation for more security in open systems is driven by which three (3) of the following factors?

New requirements from the WTO, World Trade Organization

The desire by a number of organizations to use OSI recommendations.Correct Answer

The appearence of data protection legislation in several countries.Correct Answer

Society’s increasing dependance on computers.Correct Answer

QUESTION 62 OF 70

True or False: The accidental disclosure of confidential data by an employee is considered a legitimate organizational threat.

TrueCorrect Answer

False

QUESTION 63 OF 70

True or False: The accidental disclosure of confidential information by an employee is considered an attack.

True

FalseCorrect Answer

QUESTION 64 OF 70

A replay attack and a denial of service attack are examples of which?

Security architecture attackCorrect Answer

Origin attack

Passive attack

Masquerade attack

QUESTION 65 OF 70

The International Telecommunication Union is an organization that is described by which of the following statements?

The ITU is an organization charted and staffed by the United Nations to maintain international standards, such as X.800, for telecommunication.Correct Answer

The ITU is an industry organization founded by the largest telecommunication companies in the world and focused on lobbying governments on their behalf.

The ITU is a partnership of the national telephone companies of most European countries intended to help compete against the largest American telecom.

The ITU is a workers union focused on ensuring the welfare of telecommunication workers.

QUESTION 66 OF 70

True or False: An application that runs on your computer without your authorization but does no damage to the system is not considered malware.

True

FalseCorrect Answer

QUESTION 67 OF 70

How would you classify a piece of malicious code designed to cause damage and spreads from one computer to another by attaching itself to files but requires human actions in order to replicate?

VirusCorrect Answer

Worms

Trojan Horses

Spyware

Adware

Ransomware

QUESTION 68 OF 70

How would you classify a piece of malicious code designed collect data about a computer and its users and then report that back to a malicious actor?

Virus

Worms

SpywareCorrect Answer

Adware

QUESTION 69 OF 70

A large scale Denial of Service attack usually relies upon which of the following?

A botnetCorrect Answer

A keylogger

Logic  Bombs

Trojan Horses

QUESTION 70 OF 70

Antivirus software can be classified as which form of threat control?

Technical controlsCorrect Answer

Administrative controls

Active controls

Passive controls

Ready to test your recall?

What are the four (4) main types of actors identified in the video A brief overview of types of actors and their motives? Partially correct! Hactivists may be motivated by money, but more often by political concerns of some sort. Partially correct! Government or "nation-state" actors are becoming increasingly active and are an increasing threat. Partially correct! Hackers definately are prominent actors and are usually motivated by money. Partially correct! Internal actors do cause a lot of damage. They have a head start when it comes to knowledge and access.

💡Select all 4 correct answers before submitting (0 of 4 selected).

Hactivists

Governments

Black Hats

Security Analysts

White Hats

Hackers

Internal

How confident are you in this answer?