An IT administrator is setting up a secure file transfer service for his company. He needs a protocol that provides directory listing, file transfers, and file management capabilities. Which protocol should he consider?
- FTP
- HTTP
- SMTP
- SSH
The protocol that provides directory listing, file transfers, and file management capabilities is FTP (File Transfer Protocol). FTP is commonly used for these purposes, allowing secure and efficient file transfers.
Alice visits a popular news website and sees a pop-up that says "Hacked!". Upon investigation, it's found that the website itself was not compromised but the script from an ad provider was. What kind of attack was most likely leveraged?
- Cross-Site Request Forgery (CSRF)
- Cross-Site Scripting (XSS)
- Distributed Denial of Service (DDoS)
- SQL Injection
Alice likely experienced a Cross-Site Scripting (XSS) attack, where malicious code was injected into the ad provider's script, affecting the website's visitors.
When performing ethical hacking, what permission level should the hacker ideally have?
- Limited Access
- No Permission
- Root/Administrator Access
- Standard User
Ethical hackers should ideally have Standard User permissions. Giving them full access could lead to unintended consequences, while having no access impedes their work. Standard User access provides a balance of access for testing without causing harm.
Which cryptographic technique ensures that the content of a message or document has not been altered during transmission?
- Compression
- Encryption
- Hashing
- Steganography
Hashing is a cryptographic technique that ensures data integrity. It creates a fixed-size hash value from the original data, and any alteration in the data will result in a different hash value, indicating that the data has been tampered with.
Emily, a system administrator, is configuring a new server. She ensures that only necessary services run, disables default accounts, and sets strong password policies. What process is Emily engaged in?
- Patch Management
- Server Clustering
- Server Hardening
- Server Virtualization
Emily is engaged in the process of "Server Hardening." This involves securing a server by minimizing vulnerabilities, such as disabling unnecessary services, strengthening password policies, and removing or disabling default accounts. The goal is to reduce the server's attack surface.
A common technique used by attackers where they trick users into revealing their passwords by pretending to be legitimate tech support is called _______.
- Phishing
- Ransomware
- Social Engineering
- Spear Phishing
The technique where attackers trick users into revealing their passwords by pretending to be legitimate tech support is known as Social Engineering. It's a psychological manipulation technique to gain confidential information.
During a penetration test, a tester was able to access a company's internal network by mimicking an employee's behavior and tailgating into a secure area. This tester exploited a weakness in what area of security?
- Access Control Systems
- Network Security
- Physical Security
- Social Engineering
The tester exploited a weakness in Social Engineering, as they used tactics to manipulate people into allowing unauthorized physical access.
Which term describes the act of intentionally finding and exploiting vulnerabilities in a system, but with the goal of improving its security?
- Cracking
- Cybercrime Prevention
- Hacking
- Penetration Testing
Penetration Testing is the process of intentionally finding and exploiting vulnerabilities in a system with the goal of improving its security. Unlike malicious hacking or cracking, penetration testing is done with the organization's consent to identify and rectify vulnerabilities before potential attackers can exploit them.
Advanced Persistent Threats (APTs) typically involve long-term attacks that focus on _______ rather than immediate harm.
- DDoS Attacks
- Data Exfiltration
- Exploiting Vulnerabilities
- Phishing Campaigns
APTs aim at "Data Exfiltration," which involves stealing data over an extended period, focusing on long-term gains, not causing immediate harm.
IPsec is a suite of protocols designed to secure what type of communication?
- Internet browsing
- Network
- Wireless connections
IPsec (Internet Protocol Security) is designed to secure network communication, ensuring data integrity and confidentiality. It's often used to create VPNs for secure network connections.