IBM Cybersecurity Analyst Professional Certificate • STUDY MODE
PRACTICE QUIZ
QUESTION 1 OF 33
Which component of a vulnerability scanner would perform security checks according to its installed plug-ins?
A
Database
B
User Interface
C
Report Module
D
Engine ScannerCorrect Answer
QUESTION 2 OF 33
Which component of a vulnerability scanner stores vulnerability information and scan results?
A
Engine Scanner
B
Report Module
C
User Interface
D
DatabaseCorrect Answer
QUESTION 3 OF 33
How does a vulnerability scanner detect internal threats?
A
By scanning hostsCorrect Answer
B
By scanning internet facing hosts from the Internet
C
By scanning commonly access external hosts from within the network
D
By reviewing incident data retrieved from a SIEM system
QUESTION 4 OF 33
In which component of a Common Vulnerability Score (CVSS) would the attack vector be reflected?
A
Environmental Score
B
Temporal Score
C
Base-Exploitability SubscoreCorrect Answer
D
Base-Impact Subscore
QUESTION 5 OF 33
In which component of a Common Vulnerability Score (CVSS) would confidentiality be reflected?
A
Temporal Score
B
Base-Impact SubscoreCorrect Answer
C
Base-Exploitability Subscore
D
Environmental Score
QUESTION 6 OF 33
In which component of a Common Vulnerability Score (CVSS) would exploit code maturity be reflected?
A
Temporal ScoreCorrect Answer
B
Base-Exploitability Subscore
C
Base-Impact Subscore
D
Environmental Score
QUESTION 7 OF 33
In which component of a Common Vulnerability Score (CVSS) would security requirements subscore be reflected?
A
Base-Exploitability Subscore
B
Environmental ScoreCorrect Answer
C
Temporal Score
D
Base-Impact Subscore
QUESTION 8 OF 33
True or False. The US Dept of Defense has produced a number of Security Technical Implementation Guides to show the most secure ways to deploy common software packages such as operation systems, open source software, and network devices. These guides are available to the public and can be freely downloaded.
A
TrueCorrect Answer
B
False
QUESTION 9 OF 33
The Center for Internet Security (CIS) has implementation groups that rank from the least secure to the most secure. Which of these has the least stringent security requirements?
PORT SCANNING KNOWLEDGE CHECK
A
CIS Sub-Controls for small, commercial off-the-shelf or home office software environments.Correct Answer
B
CIS Sub-Controls focused on helping security teams manage sensitive client or company information.
C
CIS Sub-Controls that reduce the impact of zero-day and targeted attacks from sophisticated adversaries.
D
"a" and "b" only
E
"a" and "c" only
F
All of the above.
QUESTION 10 OF 33
Which three (3) of these is identified by a basic port scanner? (Select 3)
A
Active hosts using TCPCorrect Answer
B
The destination of packets flowing through an open port
C
Available services provided by the target systemCorrect Answer
D
A list of Open ports on a target systemCorrect Answer
QUESTION 11 OF 33
Port numbers 49151 through 65536 are known as what?
A
Virtual Ports
B
Well known ports
C
Dynamic and Private PortsCorrect Answer
D
Registered Ports
QUESTION 12 OF 33
What are the three (3) responses a port scanner might receive when it is scanning a system for open ports? (Select 3)
A
Filtered (or blocked)Correct Answer
B
Available
C
ClosedCorrect Answer
D
OpenCorrect Answer
QUESTION 13 OF 33
Which type of scan is commonly used to check if a working system is at the address indicated and that it is responding?
A
Stealth scan
B
TCP/Half Open Scan (aka a SYN scan)
C
UDP port scan
D
Ping (ICMP Echo Request)Correct Answer
E
TCP Connect
QUESTION 14 OF 33
Which type of scan sends an empty packet or packet with a different payload for each port scanned. A response is received only for closed ports?
NETWORK PROTOCOL ANALYZERS KNOWLEDGE CHECK
A
UDP port scanCorrect Answer
B
TCP/Half Open Scan (aka a SYN scan)
C
Stealth scan
D
Ping (ICMP Echo Request)
E
TCP Connect
QUESTION 15 OF 33
Which two (2) of these are other names for a protocol analyzer? (Select 2)
A
Packet analyzerCorrect Answer
B
Port analyzer
C
Snooper
D
Network analyzerCorrect Answer
QUESTION 16 OF 33
Which is the most popular packet sniffer used?
VULNERABILITY ASSESSMENT TOOLS GRADED ASSESSMENT
A
WireSharkCorrect Answer
B
PacketGrabber
C
SniffMaster
D
ProtoALL
QUESTION 17 OF 33
Which of these is identified by a basic port scanner?
A
OSI Layer 1 data
B
MAC addresses
C
IP addressess
D
Open portsCorrect Answer
QUESTION 18 OF 33
Port numbers 0 through 1023 are known as what?
A
Registered Ports
B
Dynamic and Private Ports
C
Well known portsCorrect Answer
D
Virtual Ports
QUESTION 19 OF 33
If a port is blocked, what response will be sent to the port scanner?
A
A "this port is blocked" message will be sent
B
A reply will be sent containing the next higher port number that is open.
C
There will be no responseCorrect Answer
D
A challenge message will be sent requestion appropriate authorization codes
QUESTION 20 OF 33
Which type of scan notes the connection but leaves the target hanging, i.e. does not reveal any information to the target about the host that initiated the scan?
A
Ping (ICMP Echo Request)
B
TCP Connect
C
UDP port scan
D
Stealth scan
E
TCP/Half Open Scan (aka a SYN scan)Correct Answer
QUESTION 21 OF 33
True or False. Packet sniffers are used by hackers but have no legitimate place in legitimate network management.
A
True
B
FalseCorrect Answer
QUESTION 22 OF 33
Which component of a vulnerability scanner provides high-level graphs and trend reports for executive leadership?
A
Engine Scanner
B
Database
C
Report ModuleCorrect Answer
D
User Interface
QUESTION 23 OF 33
How does a vulnerability scanner detect external threats?
A
By reviewing incident data retrieved from a SIEM system
B
By scanning commonly access external hosts from within the network
C
By scanning hosts
D
By scanning internet facing hosts from the InternetCorrect Answer
QUESTION 24 OF 33
What are the three (3) components that make up the overall Common Vulnerability Score (CVSS)? (Select 3)
A
External
B
EnvironmentalCorrect Answer
C
TemporalCorrect Answer
D
Internal
E
BaseCorrect Answer
QUESTION 25 OF 33
In which component of a Common Vulnerability Score (CVSS) would attack complexity be reflected?
A
Base-Exploitability SubscoreCorrect Answer
B
Base-Impact Subscore
C
Temporal Score
D
Environmental Score
QUESTION 26 OF 33
In which component of a Common Vulnerability Score (CVSS) would integrity be reflected?
A
Environmental Score
B
Base-Impact SubscoreCorrect Answer
C
Base-Exploitability Subscore
D
Temporal Score
QUESTION 27 OF 33
In which component of a Common Vulnerability Score (CVSS) would remediation level be reflected?
A
Environmental Score
B
Base-Exploitability Subscore
C
Temporal ScoreCorrect Answer
D
Base-Impact Subscore
QUESTION 28 OF 33
In which component of a Common Vulnerability Score (CVSS) would impact subscore be reflected?
A
Base-Exploitability Subscore
B
Environmental Score
C
Temporal ScoreCorrect Answer
D
Base-Impact Subscore
QUESTION 29 OF 33
True or False. The US Dept of Defense has produced a number of Security Technical Implementation Guides to show the most secure ways to deploy common software packages such as operation systems, open source software, and network devices. These guides are restricted to use by US military agencies only.
A
True
B
FalseCorrect Answer
QUESTION 30 OF 33
The Center for Internet Security (CIS) has implementation groups that rank from the least secure to the most secure. Which of these are required to meet the middle level of security?
A
CIS Sub-Controls for small, commercial off-the-shelf or home office software environments.
B
CIS Sub-Controls focused on helping security teams manage sensitive client or company information.
C
CIS Sub-Controls that reduce the impact of zero-day and targeted attacks from sophisticated adversaries.
D
"a" and "b" onlyCorrect Answer
E
"a" and "c" only
F
All of the above.
QUESTION 31 OF 33
The Center for Internet Security (CIS) has implementation groups that rank from the least secure to the most secure. Which of these has the least stringent security requirements?
A
a) CIS Sub-Controls for small, commercial off-the-shelf or home office software environments.Correct Answer
B
b) CIS Sub-Controls focused on helping security teams manage sensitive client or company information.
C
c) CIS Sub-Controls that reduce the impact of zero-day and targeted attacks from sophisticated adversaries.
D
“a” and “b” only
E
“a” and “c” only
F
All of the above.
QUESTION 32 OF 33
Which type of scan sends an empty packet or packet with a different payload for each port scanned. A response is received only for closed ports?
A
UDP port scanCorrect Answer
B
TCP/Half Open Scan (aka a SYN scan)
C
Stealth scan
D
Ping (ICMP Echo Request)
E
TCP Connect
QUESTION 33 OF 33
Which is the most popular packet sniffer used?
A
WireSharkCorrect Answer
B
PacketGrabber
C
SniffMaster
D
ProtoALL
Ready to test your recall?
Which component of a vulnerability scanner would perform security checks according to its installed plug-ins?