Certiport CyberSecurity Certification Practice Exam

These questions are part of the practice quiz. Start practicing

• What is privilege escalation in the context of IT systems?
• Which of the following best describes the purpose of error monitoring in the Physical Layer?
• What does the General Data Protection Regulation (GDPR) aim to protect?
• What does a full backup entail?
• What type of information is primarily found in system logs within the event viewer?
• What does a Host-Based Intrusion Prevention System (HIPS) primarily do?
• What is the main purpose of VPN authentication?
• Which protocol is NOT part of the Transport Layer?
• Which of the following represents a typical method of an insider threat?
• How can evidence be best secured during an investigation?
• In legal cases, what consequence could result from a broken chain of custody?
• What is the primary purpose of Mobile Device Management (MDM)?
• Who is referred to as an adversary in the context of cybersecurity?
• What does 'In Processing' refer to in the realm of information security?
• What is the primary function of a warmsite in disaster recovery?
• What is the risk associated with a cyber threat?
• Who are considered Nation State Actors in cybersecurity?
• Which protocol typically uses port 443?
• What is meant by the term 'At Rest' in cybersecurity?
• What does a Disaster Recovery Plan (DRP) primarily concentrate on?
• What is NOT a valid method of backing up data daily?
• What does multi-factor authentication (MFA) provide in a BYOD environment?
• What is the concept of Shadow IT?
• How does a host-based detection system signal an intrusion?
• What is an example of Shadow IT?
• When does the chain of custody begin?
• What vital role does a hypervisor play in computing?
• What does SSID stand for in a Wi-Fi network?
• What protocol is designed for network management?
• What common outcome can be caused by substituting an invalid MAC address?
• What is a potential risk of not using proper Mobile Device Management?
• What does the command 'ls -l' do in a Linux environment?
• What does BYOD stand for in a cybersecurity context?
• What is the primary function of Wireshark in network management?
• What is an incremental backup?
• Which of the following is a characteristic of criminal syndicates in the context of cyber threats?
• What is the main focus of a Business Continuity Plan (BCP)?
• What is a characteristic of a managed switch?
• What is the main use of port 80?
• Which OSI layer manages the encryption and decryption of data?
• What do corrective controls aim to achieve?
• FISMA is aimed at ensuring what type of information protection?
• Which principle is NOT a component of Information Assurance?
• Which tool is widely used for network management and system security courses to troubleshoot?
• What is recommended as a security practice regarding the SSID?
• What type of phishing attack utilizes voice communication?
• Which of the following is a valid range for Private IP Addresses?
• Which RAID configuration provides fault tolerance through data mirroring?
• What does the protocol HTTPS indicate?
• What function does the Syslog protocol serve in IT environments?
• To ensure data safety, what is a recommended backup practice?
• What function does the arp -a command provide?
• Why might hackers target PowerShell?
• Which tools can be utilized to see IP addresses within a network?
• Which protocol is primarily used for querying DNS?
• What does the Session Layer manage between two nodes?
• What is the main characteristic of RAID 0?
• Who is responsible for the upfront cost of the device in a CYOD model?
• In the COPE strategy, what is offered to employees?
• Which method can help prevent spoofing in cybersecurity?
• What type of reconnaissance involves actively probing a network or system?
• Which example illustrates the consequence of a successful threat?
• How often should the Principle of Least Privilege be reviewed in a business setting?
• Which of the following is NOT listed as a reason for successful cyber attacks?
• In cybersecurity, what does the term 'capability' refer to?
• What does Mobile Content Management (MCM) primarily assist IT admins with?
• What types of data does SIEM typically ingest?
• What can be inferred from the overall CVSS score assigned to a vulnerability?
• What technology is primarily used to detect vulnerabilities against applications or computers?
• What does RAID 5 utilize to achieve fault tolerance?
• What do vulnerabilities expose an organization to?
• What is the primary purpose of SSH (Secure Shell)?
• What does integrity in information security guarantee?
• What is the primary goal of a warmsite?
• Which layer of the OSI model is referred to as the Application Layer?
• What does social engineering rely on to be successful?
• What does confidentiality in cybersecurity focus on?
• Which of the following actions violates the chain of custody?
• Which technology allows a computer to run multiple operating systems at the same time?
• What does passive reconnaissance primarily involve?
• What does the ipconfig/ifconfig command display?
• What type of documentation is essential for maintaining the chain of custody?
• Why is it important to hide the SSID in a Wi-Fi network?
• What is the definition of malware?
• Which type of threat actor is typically motivated by financial gain?
• What ensures that only authorized users can modify data according to cybersecurity principles?
• Which type of device is classified as corporate-owned?
• What does the term 'Defense in Depth' refer to in cybersecurity?
• What does NAC (Network Access Control) do?
• What security measure is recommended for unused ports?
• Which method is used in smishing attacks?
• What does IMAP (Internet Message Access Protocol) allow users to do?
• What type of data is considered 'data in transit'?
• What type of attack identifies a specific individual as the target using personalized information?
• What is the role of SIEM in cybersecurity?
• Why is availability important in an information system?
• Which protocol is associated with port 161?
• What port is used by the Remote Desktop Protocol (RDP)?
• What is the main function of a firewall in network security?
• Which system continuously monitors a network and can take action to prevent malicious activity?
• What is included in the infrastructure of a cyber threat?
• Which port is associated with the Lightweight Directory Access Protocol (LDAP)?
• What is the purpose of MAC control on a Wi-Fi network?
• What is the main goal of physical controls in cybersecurity?
• What legal protection does HIPAA provide?
• Which group is most likely responsible for attacks from within a company?
• What does the Netstat command provide information about?
• Which Act regulates the privacy of consumer financial information?
• What does FileVault do on a MAC system?
• What does the risk of a data breach often include?
• What does a differential backup do?
• What is a key characteristic of spear phishing attacks?
• Which of the following protocols operates at speeds of 1000 Mbps?
• What is a common goal of ransomware?
• What is a host-based firewall?
• What is the key limitation of a Network-Based Intrusion Detection System (NIDS)?
• Which of the following layers is included in the acronym "All People Seem To Need Data Processing"?
• Which command is useful for determining the IP address of a target hostname?
• What is war flying primarily used for in reconnaissance?
• Who can be considered a victim in a cyber attack?
• Who might be included in the definition of a victim in cyber threats?
• Which type of backup allows for the most efficient storage use?
• Why might competitors launch attacks against an opponent's system?
• What is the main goal of limiting user access rights according to the Principle of Least Privilege?
• What is the purpose of a honeypot in cybersecurity?
• What is the purpose of authentication in cybersecurity?
• Which form of backup is considered a valid daily method for protecting data?
• What is the primary function of a host-based intrusion detection system (HIDS)?
• What type of information can application logs in the event viewer provide?
• What is the Principle of Least Privilege?
• What is TCPDump used for?
• Where is a Network-Based Intrusion Prevention System (NIPS) typically located?
• What does the Diamond Model of Intrusion Analysis help information security professionals to do?
• Which RAID configuration requires only one additional disk for redundancy and provides fault tolerance?
• What does Nmap primarily do?
• What type of protocol is UDP?
• What action can an attacker take to prevent internet access to users?
• What kind of backups does the term 'Sneakernet' refer to?
• Which protocol operates on port 110 for email retrieval?
• Which protocol is used to test and verify network connectivity?
• Which protocol is associated with the Session Layer of the OSI model?
• Which of the following describes a threat in cybersecurity?
• What is the primary goal of information security?
• What is the purpose of the CVE list?
• In terms of cybersecurity, what does DRP stand for?
• Which type of WPA is designed for business environments?
• What kind of security does 'defense in depth' provide?
• What is the function of SMTP (Simple Mail Transfer Protocol)?
• Which of the following is an added benefit of using a VPN?
• Unified Equipment Management (UEM) combines which of the following?
• What is the goal of Information Assurance?
• What is the primary objective of a DNS-based attack?
• What describes insiders in a cybersecurity context?
• Which command would you use to list all active connections on your PC?
• What is the primary focus of the Gramm-Leach-Bliley Act (GLBA)?
• Which type of reconnaissance involves actively probing for vulnerabilities?
• What is PowerShell primarily known for?
• What is a critical benefit of utilizing cloud computing services for data security?
• What is a key role of the Presentation Layer in the OSI model?
• PCI DSS is essential for protecting which type of data?
• Which term refers to the act of scanning for open ports and vulnerabilities?
• What is the main function of the Data Link Layer in the OSI model?
• What is the main characteristic of a man-in-the-middle (MITM) attack?
• What is a Man-in-the-Middle Attack (MITM)?
• Which type of attack is characterized by leaving unsecured connections open?
• Which of the following devices operates at the Physical Layer of the OSI model?
• Why is RAID not used as a method of backup?
• What aspect does technical control primarily cover in a cybersecurity framework?
• In what way can an attacker steal data from another device?
• Which of the following could be a consequence of not maintaining the chain of custody?
• What does the command ipconfig/ifconfig NOT provide information about?
• What does error code 513 CAP12 indicate?
• How does an attacker typically execute a DNS attack?
• What does the term 'data at rest' encompass?
• In cybersecurity, what is considered worse: a false positive or a false negative?
• What is the purpose of a Demilitarized Zone (DMZ) in network security?
• What is the objective of a Business Continuity Plan (BCP)?
• What ports are commonly associated with File Transfer Protocol (FTP)?
• What services are provided by the Transport Layer?
• What is the primary purpose of establishing a chain of custody in forensics?
• What is one significant advantage of cloud computing regarding maintenance?
• In terms of cybersecurity, what does the term "nonrepudiation" mean?
• What characterizes a half-open attack or SYN flood?
• What is the purpose of the nslookup/dig command?
• Which of these statements accurately describes NAT’s capability?
• Which wireless security is considered the best for personal use?
• What does an Acceptable Use Policy (AUP) define?
• What function does Network Address Translation (NAT) serve?
• An example of an insider hacker is:
• Which of the following best describes the concept of chain of custody?
• What are detective controls designed to do?
• What key feature differentiates a managed switch from an unmanaged switch?
• What are social engineering attacks designed to do?
• Which control type is aimed at preventing problems before they occur?
• Dynamic routing allows a router to do what without administrative intervention?
• What is the role of DHCP (Dynamic Host Configuration Protocol)?
• What is the primary function of a Multi Layer Switch (Layer 3 switch)?
• What are administrative controls primarily focused on?
• War driving is an example of what type of reconnaissance?
• Which strategy enforces corporate policies for applications on mobile devices?
• What does DNS hijacking intend to accomplish?
• What is essential for performing audits and monitoring in IT operations?
• Which of the following is a common reason for successful cyber attacks?
• What is the main characteristic of APT attacks?
• What layer of the OSI model is responsible for generating and detecting signals for data transmission?
• What is the main function of Virtual Desktop Infrastructure (VDI)?
• What type of hacker is classified as a hacktivist?
• Which of the following is NOT a characteristic of a cold site?
• What aspect of a dynamic routing technique helps in route selection?
• What information does Nbtstat display?
• What capability does PowerShell provide to attackers regarding code injection?
• Which term describes data that is preserved on a storage device?
• What does data in motion refer to?
• Which protocol guarantees delivery of data through a connection-based approach?
• What does SOAR primarily focus on in a security environment?
• What defines a threat actor?
• How does a proxy server contribute to online privacy?
• What is the key element in preserving the integrity of evidence during an investigation?
• What is the implication of turning off unused ports in a network?
• Which aspect is NOT part of maintaining a chain of custody?
• What does Common Vulnerabilities and Exposures (CVE) identify?
• What does availability in cybersecurity ensure?
• What does the tracert/traceroute command display?
• Which protocol uses port 53 for its operations?
• What is meant by data in processing or in use?
• What do technical controls in cybersecurity encompass?
• What defines a DDoS (Distributed Denial of Service) attack?
• Which of the following is vital for ensuring the admissibility of evidence in court?
• What characterizes an insider threat?
• What term describes tools used for delivering capability in cyber threats?
• What is nonrepudiation in the context of cybersecurity?
• What is the primary requirement by NIST for BYOD devices in a HIPAA compliant environment?
• Which layer of the OSI model is responsible for routing data?
• What defines a Zero Day Attack?
• What is the primary risk associated with not using multi-factor authentication for BYOD devices?
• Which of the following is NOT an example of a corrective control?
• Which characteristic defines script kiddies?
• Why are botnets particularly dangerous?
• What encryption standard does WPA2 utilize?
• Which of the following describes Mobile Application Management (MAM)?
• Which of the following best describes a VPN's function?
• What does the National Vulnerability Database (NVD) maintain?
• Which port is used by Telnet for remote communication?
• What are botnets?
• How does an Intrusion Detection System (IDS) primarily function?
• What is an Advanced Persistent Threat (APT)?
• Which act focuses on the privacy of college student records?
• What do preventive controls focus on?
• What is the purpose of HTTP (Hypertext Transfer Protocol)?
• What is a cold site?
• Forensics relies on which fundamental concept to maintain evidence authenticity?
• Which of the following is an example of a physical control in cybersecurity?
• What is a Disaster Recovery Plan (DRP) primarily concerned with?
• What do suspicious logins or repetitive bad logins in Security logs typically indicate?
• What characterizes a hot site?
• What are containers for phones used for?
• What role does documentation play in the chain of custody?