IBM Cybersecurity Analyst Professional Certificate • STUDY MODE
PRACTICE QUIZ
QUESTION 1 OF 37
Firewalls contribute to the security of your network in which three (3) ways?
Partially correct! Firewalls can filter out packets in SYN flooding attacks.
Partially correct! Firewalls can allow only authenticated users to pass through.
Partially correct! Firewalls can prevent external connections to internal data.
A
Prevent an internal user from downloading data she is not authorized to access.
B
Prevent Denial of Service (DOS) attacks.Correct Answer
C
Allow only authorized access to inside the network.Correct Answer
D
Prevent unauthorized modifications to internal data from an outside actor.Correct Answer
QUESTION 2 OF 37
Which packets are selected for inspection by a packet filtering firewall?
Correct! Every packet is inspected.
A
Every packet entering or leaving a network.Correct Answer
B
The first packet in any transmission, whether entering or leaving.
C
The first packet of every transmission but only subsequent packets when “high risk” protocols are used.
D
Every packet entering the network but no packets leaving the network.
QUESTION 3 OF 37
True or False: Application Gateways are an effective way to control which individuals can establish telnet connections through the gateway.
Correct! Application gateways are good at managing access by protocol.
A
False
B
TrueCorrect Answer
QUESTION 4 OF 37
Why are XML gateways used?
Correct! Conventional firewalls to do not inspect XML packets for dangerous things like executable code.
A
XML traffic passes through conventional firewalls without inspection.Correct Answer
B
XML packet headers are different from that of other protocols and often “confuse” conventional firewalls.
C
XML traffic cannot pass through a conventional firewall.
D
Conventional firewalls attempt to execute XML code as instructions to the firewall.
QUESTION 5 OF 37
Which three (3) things are True about Stateless firewalls?
Partially correct! This is another name for a stateless firewall.
Partially correct! They filter on IP and port only.
Partially correct! They have less work to do.
ANTIVIRUS/ANTIMALWARE
A
They are also known as packet-filtering firewalls.Correct Answer
B
They maintain tables that allow them to compare current packets with previous packets.
C
They filter packets based upon Layer 3 and 4 information only (IP address and Port number)Correct Answer
D
They are faster than Stateful firewalls.Correct Answer
QUESTION 6 OF 37
True or False: Most Antivirus/Antimalware software works by comparing each file encountered on your system against a compressed (zipped) version of known malware maintained by the vendor on the local host.
Correct! Comparing hashes of files is how most detect malicious files on your system.
INTRODUCTION TO CRYPTOGRAPHY
A
FalseCorrect Answer
B
True
QUESTION 7 OF 37
How many unique encryption keys are required for 2 people to exchange a series of messages using asymmetric public key cryptogrophy?
Correct! The sender and reciever both need a public key and a private key.
A
2
B
no keys are required
C
1
D
4Correct Answer
QUESTION 8 OF 37
What is Cryptographic Strength?
Correct! All of these are critical.
A
Relies on math, not secrecy
B
Ciphers that have stood the test of time are public algorithms.
C
Exclusive Or (XOR) is the “secret sauce” behind modern encryption.
D
All of the above.Correct Answer
QUESTION 9 OF 37
What is the primary difference between Symmetric and Asymmetric encryption?
Correct! That is what is symmetric about the process.
A
The same key is used to both encrypt and decrypt the message.Correct Answer
B
Symmetric encryption is inherently less secure than Asymmetric encryption.
C
Symmetric encryption is inherently more secure than Asymmetric encryption.
D
Asymmetric uses only single-use keys so a subscription to a key vendor is required to obtain new keys.
QUESTION 10 OF 37
Which type of cryptographic attack is characterized by an attack based upon trial and error where many millions of keys may be attempted in order to break the encrypted message?
Correct! Modern computers can make billions of attempts per second, but good encryption could still make the process last billions of years.
A
Brute forceCorrect Answer
B
Rainbow tables
C
Social Engineering
D
Known Plaintext
E
Known Ciphertext
F
All of the above.
QUESTION 11 OF 37
What is the correct sequence of steps required for Alice to send a message to Bob using asymmetric encryption?
Correct! Alice gets Bob’s public key and uses it to encrypt the message that only Bob’s secret privat
FIRST LOOK AT PENETRATION TESTING AND DIGITAL FORENSICS
A
Alice and Bob exchange their private keys to confirm each other’s identity and then Alice uses her public key to encrypt the message that Bob can decrypt using his public key.
B
Alice and Bob exchange their public keys to confirm each other’s identity and then Alice uses her private key to encrypt the message that Bob can decrypt using his private key.
C
Alice uses her private key to encrypt her message and then sends it to Bob. Bob requests Alice’s public key and uses it to decrypt the message.
D
Alice requests Bob’s public key and uses it to encrypt her message. Alice then sends the encrypted message to Bob who decrypts it using his private key.Correct Answer
QUESTION 12 OF 37
A skilled penetration tester wants to show her employer how smart she is in hopes of getting a promotion. Without obtaining permission, she hacks into the company’s new online store to see if there are any weaknesses that can be hardened before the system goes live. She does not do any damage and writes a useful report which she sends over her boss’s head to the CISO. What color hat was she wearing?
Correct! Her motivations were good, for the most part, but it is dangerous, a violation of the law and likely her company’s computer security policies to access a system without permission. She may get promoted or she may get fired.
A
A White Hat
B
A Gray HatCorrect Answer
C
A Black Hat
D
A Pink Hat
E
A Rainbow Hat
QUESTION 13 OF 37
Which three (3) are resources that are available to help guide penetration testing efforts by cybersecurity specialists?
Partially correct! As its name implies, this is a great resource.
Partially correct! NIST is a great resource for pentesting and other cybersecurity issues.
Partially correct! ISSAF is a great resource.
A
Open Source Security Testing Methodology Manual (OSSTMM).Correct Answer
B
NIST SP 800-42 Guidelines on Network Security Testing.Correct Answer
C
Information Systems Security Assessment Framework (ISSAF)Correct Answer
D
General Data Protection Regulation (GDPR)
QUESTION 14 OF 37
According to the Vulnerability Assessment Methodology, Potential Impacts are determined by which 2 factors?
Correct! Weigh potential exposure and the sensitivity of an event to determine its potential impact.
A
Identify Indicators and Exposure
B
Sensitivity and Adaptive Capacity
C
Exposure and SensitivityCorrect Answer
D
Potential Impacts and Adaptive Capacity
QUESTION 15 OF 37
In digital forensics, the term Chain of Custody refers to what?
Correct! This is a chain where each link represents the state of the evidence at any point in time.
KEY SECURITY TOOLS
A
This is a physical chain that is place around a crime scene to protect the evidence from being disturbed.
B
The record that documents the sequence of custody, control, transfer, analysis, and disposition of physical or electronic evidence.Correct Answer
C
This is a digital “chain” that isolated digital evidence from being disturbed until it can be analyzed by the police or other authorities.
D
This chain of custody is simply a written record of who possessed the evidence as it moves from collection to analysis to presentation in a court of law.
QUESTION 16 OF 37
What is the primary function of a firewall?
A
Uses malware definitions.
B
Filter traffic between networks.Correct Answer
C
Secures communication that may be understood by the intended recipient only.
D
Scans the system and search for matches against the malware definitions.
QUESTION 17 OF 37
How many unique encryption keys are required for 2 people to exchange a series of messages using symmetric key cryptography?
A
1Correct Answer
B
2
C
4
D
no keys are required
QUESTION 18 OF 37
Which type of data does a packet-filtering firewall inspect when it decides whether to forward or drop a packet?
A
Source and destination IP addresses.
B
TCP/UDP source and destination port numbers.
C
ICMP message type.
D
TCP SYN and ACK bits.
E
All of the above.Correct Answer
QUESTION 19 OF 37
Which type of firewall inspects XML packet payloads for things like executable code, a target IP address that make sense, and a known source IP address?
A
An XML Gateway.Correct Answer
B
An application-level firewall.
C
A packet-filtering firewall.
D
All of the above.
QUESTION 20 OF 37
Which statement about Stateful firewalls is True?
A
They have state tables that allow them to compare current packets with previous packets.Correct Answer
B
They are less secure in general than Stateless firewalls.
C
They are faster than Stateless firewalls.
D
All of the above.
QUESTION 21 OF 37
True or False: Most Antivirus/Antimalware software works by comparing a hash of every file encountered on your system against a table of hashs of known virus and malware previously made by the antivirus/antimalware vendor.
A
TrueCorrect Answer
B
False
QUESTION 22 OF 37
Which type of cryptographic attack is characterized by comparing a captured hashed password against a table of many millions of previously hashed words or strings?
A
Social Engineering
B
Known Ciphertext
C
Rainbow tablesCorrect Answer
D
Brute force
QUESTION 23 OF 37
Firewalls contribute to the security of your network in which three (3) ways?
A
Prevent an internal user from downloading data she is not authorized to access.
B
Prevent Denial of Service (DOS) attacks.Correct Answer
C
Allow only authorized access to inside the network.Correct Answer
D
Prevent unauthorized modifications to internal data from an outside actor.Correct Answer
QUESTION 24 OF 37
Which packets are selected for inspection by a packet filtering firewall?
A
Every packet entering or leaving a network.Correct Answer
B
The first packet in any transmission, whether entering or leaving.
C
The first packet of every transmission but only subsequent packets when “high risk” protocols are used.
D
Every packet entering the network but no packets leaving the network.
QUESTION 25 OF 37
True or False: Application Gateways are an effective way to control which individuals can establish telnet connections through the gateway.
A
False
B
TrueCorrect Answer
QUESTION 26 OF 37
Why are XML gateways used?
A
XML traffic passes through conventional firewalls without inspection.Correct Answer
B
XML packet headers are different from that of other protocols and often “confuse” conventional firewalls.
C
XML traffic cannot pass through a conventional firewall.
D
Conventional firewalls attempt to execute XML code as instructions to the firewall.
QUESTION 27 OF 37
Which three (3) things are True about Stateless firewalls?
A
They are also known as packet-filtering firewalls.Correct Answer
B
They maintain tables that allow them to compare current packets with previous packets.
C
They filter packets based upon Layer 3 and 4 information only (IP address and Port number)Correct Answer
D
They are faster than Stateful firewalls.Correct Answer
QUESTION 28 OF 37
True or False: Most Antivirus/Antimalware software works by comparing each file encountered on your system against a compressed (zipped) version of known malware maintained by the vendor on the local host.
A
FalseCorrect Answer
B
True
QUESTION 29 OF 37
How many unique encryption keys are required for 2 people to exchange a series of messages using asymmetric public key cryptogrophy?
A
2
B
no keys are required
C
1
D
4Correct Answer
QUESTION 30 OF 37
What is Cryptographic Strength?
A
Relies on math, not secrecy
B
Ciphers that have stood the test of time are public algorithms.
C
Exclusive Or (XOR) is the “secret sauce” behind modern encryption.
D
All of the above.Correct Answer
QUESTION 31 OF 37
What is the primary difference between Symmetric and Asymmetric encryption?
A
The same key is used to both encrypt and decrypt the message.Correct Answer
B
Symmetric encryption is inherently less secure than Asymmetric encryption.
C
Symmetric encryption is inherently more secure than Asymmetric encryption.
D
Asymmetric uses only single-use keys so a subscription to a key vendor is required to obtain new keys.
QUESTION 32 OF 37
Which type of cryptographic attack is characterized by an attack based upon trial and error where many millions of keys may be attempted in order to break the encrypted message?
A
Brute forceCorrect Answer
B
Rainbow tables
C
Social Engineering
D
Known Plaintext
E
Known Ciphertext
F
All of the above.
QUESTION 33 OF 37
What is the correct sequence of steps required for Alice to send a message to Bob using asymmetric encryption?
A
Alice and Bob exchange their private keys to confirm each other’s identity and then Alice uses her public key to encrypt the message that Bob can decrypt using his public key.
B
Alice and Bob exchange their public keys to confirm each other’s identity and then Alice uses her private key to encrypt the message that Bob can decrypt using his private key.
C
Alice uses her private key to encrypt her message and then sends it to Bob. Bob requests Alice’s public key and uses it to decrypt the message.
D
Alice requests Bob’s public key and uses it to encrypt her message. Alice then sends the encrypted message to Bob who decrypts it using his private key.Correct Answer
QUESTION 34 OF 37
A skilled penetration tester wants to show her employer how smart she is in hopes of getting a promotion. Without obtaining permission, she hacks into the company’s new online store to see if there are any weaknesses that can be hardened before the system goes live. She does not do any damage and writes a useful report which she sends over her boss’s head to the CISO. What color hat was she wearing?
A
A White Hat
B
A Gray HatCorrect Answer
C
A Black Hat
D
A Pink Hat
E
A Rainbow Hat
QUESTION 35 OF 37
Which three (3) are resources that are available to help guide penetration testing efforts by cybersecurity specialists?
A
Open Source Security Testing Methodology Manual (OSSTMM).Correct Answer
B
NIST SP 800-42 Guidelines on Network Security Testing.Correct Answer
C
Information Systems Security Assessment Framework (ISSAF)Correct Answer
D
General Data Protection Regulation (GDPR)
QUESTION 36 OF 37
According to the Vulnerability Assessment Methodology, Potential Impacts are determined by which 2 factors?
A
Identify Indicators and Exposure
B
Sensitivity and Adaptive Capacity
C
Exposure and SensitivityCorrect Answer
D
Potential Impacts and Adaptive Capacity
QUESTION 37 OF 37
In digital forensics, the term Chain of Custody refers to what?
A
This is a physical chain that is place around a crime scene to protect the evidence from being disturbed.
B
The record that documents the sequence of custody, control, transfer, analysis, and disposition of physical or electronic evidence.Correct Answer
C
This is a digital “chain” that isolated digital evidence from being disturbed until it can be analyzed by the police or other authorities.
D
This chain of custody is simply a written record of who possessed the evidence as it moves from collection to analysis to presentation in a court of law.
Ready to test your recall?
Firewalls contribute to the security of your network in which three (3) ways?
Partially correct! Firewalls can filter out packets in SYN flooding attacks.
Partially correct! Firewalls can allow only authenticated users to pass through.
Partially correct! Firewalls can prevent external connections to internal data.
💡Select all 3 correct answers before submitting (0 of 3 selected).
A
Prevent an internal user from downloading data she is not authorized to access.
B
Prevent Denial of Service (DOS) attacks.
C
Allow only authorized access to inside the network.
D
Prevent unauthorized modifications to internal data from an outside actor.