Question 1

An online retailer has just discovered a data breach of the system used to store all of the data for shipments of products, including tracking numbers, date shipped, customer names, and addresses. Which of the following has the company failed to protect?
A) PRI
B) PII
C) PCI
D) PHI

Accepted Answer

The company failed to protect Personally Identifiable Information (PII), which includes any data that could potentially identify a specific individual, such as customer names and addresses.

Question 2

A startup company has invented a new IoT device and stored the design documents on an internal network share. Which of the following types of data are they trying to protect?
A) PII
B) PHI
C) IP
D) PCI

Accepted Answer

The design documents for a new IoT device would be considered Intellectual Property (IP), as they contain proprietary information about the device's design and functionality.

Question 3

Van has been tasked with designing a fault-tolerant system for a critical application. Which of the following is the biggest concern about the design of this system?
A) Downtime
B) Recovery time
C) Data integrity
D) System process criticality

Accepted Answer

Downtime is the biggest concern in designing a fault-tolerant system because the primary goal of such a system is to ensure continuous operation without interruptions, which directly addresses the issue of downtime.

Question 4

Tyrese, a cybersecurity analyst, is performing an audit of user accounts when he discovers a handful of accounts that do not appear to represent actual employees at his organization. As he continues to investigate, he finds that the accounts were created around four months ago and only connect to resources from outside the network. Which of the following might he have discovered?
A) APT
B) DDoS
C) Zero day
D) Ransomware

Accepted Answer

Tyrese likely discovered Advanced Persistent Threats (APTs), as the accounts do not correspond to real employees and exhibit behavior typical of APTs, such as accessing resources from outside the network over an extended period.

Question 5

Bettye manages a server for which a major vulnerability was recently reported in one of the services that her company uses. However, a patch is not currently available to fix the vulnerability, so she needs to ensure that the firewall and other protections in place will prevent a threat actor from exploiting the vulnerability. Which of the following describes the type of vulnerability on the server she manages?
A) APT
B) DDoS
C) Ransomware
D) Zero day

Accepted Answer

A zero-day vulnerability is one for which no patch or fix is currently available, making it a prime target for exploitation by threat actors. Bettye's situation, where a major vulnerability has been reported without an available patch, fits the definition of a zero-day vulnerability.

Question 6

Alisi, a cybersecurity manager, has found that a former employee was engaging in illegal activities online;she must report these activities to local law enforcement authorities. She locks the employee's computer in a closet to which only she and two of her peers have access. Which of the following should be created as part of the documentation for this incident?
A) PII form
B) PHI tracker
C) Incident response plan
D) Chain of custody

Accepted Answer

The correct answer is D) Chain of custody. This document is crucial in legal contexts to track the possession, handling, and location of evidence from the time it is identified until it is presented in court. It ensures the integrity and security of the evidence, in this case, the employee's computer, by documenting who has access to it and any actions taken with it.

Question 7

Dharma manages a Linux server and wants to ensure that none of the users on the system have common passwords that would be in a standard password dictionary. Which of the following would best help accomplish her goal?
A) Rainbow tables
B) Password dictionary
C) Chained credentials
D) Crack list

Accepted Answer

The answer of Dharma manages a Linux server and wants...

Question 8

Kevin is working the after-hours shift in the NOC and receives an alert that there has been a potential intrusion into one of the servers. He pulls out the incident response plan and sees that the first step is to notify the on-call manager. Where might he find that information?
A) Chain of custody
B) Escalation list
C) Incident form
D) Crime tape

Accepted Answer

The escalation list is typically where one would find the contact information for individuals who need to be notified in the event of an incident, such as an on-call manager. This list is part of an organization's incident response plan and outlines who to contact and in what order when an incident occurs.

Question 9

Dion is developing an application that will allow users to create their own passwords. He then needs to store that information in a database to be used when the user attempts to log in again. Which of the following provides the strongest option for Dion to accomplish this task?
A) SHA-256
B) MD4
C) MD5
D) SHA-512

Accepted Answer

SHA-512 is the strongest option among those listed for hashing passwords because it produces a longer hash value (512 bits) compared to SHA-256 (256 bits), MD5 (128 bits), and MD4 (128 bits), making it more resistant to brute-force attacks and collisions.

Question 10

Boris, a cybersecurity analyst, has just received a client's hard drive that needs a forensic analysis. He needs to ensure that the data on the drive maintains its integrity and that no unallocated blocks are changed so he can attempt to undelete files on the drive. Which of the following tools would be most useful as part of his analysis?
A) Multiport hub
B) Write blocker
C) Universal hard drive adapter kit
D) Tamper-evident tape

Accepted Answer

A write blocker is specifically designed to allow read access to a hard drive without allowing any data on the drive to be modified, ensuring the integrity of the data for forensic analysis. This is crucial for undeleting files without altering unallocated blocks.

Question 11

Takara is building a digital forensics workstation. She needs the ability to connect to PATA and SATA devices for forensic analysis. Which of the following tools might best fit her needs?
A) Multiport hub
B) Universal hard drive adapter kit
C) Write blocker
D) Firewire hard drive controller

Accepted Answer

A universal hard drive adapter kit is designed to connect to various types of hard drives, including PATA and SATA, which is exactly what Takara needs for connecting different types of storage devices for forensic analysis.

Question 12

Dahlia has just been hired as a new cybersecurity manager at an organization. Up until now, the organization has not had any formal procedures in place to handle events such as malware or data breaches. Dahlia would like to ensure that everyone follows the same procedures when responding to these events. Which of the following should she create?
A) IRP
B) DRP
C) IP
D) CDP

Accepted Answer

An Incident Response Plan (IRP) is specifically designed to provide a structured and systematic approach to managing and responding to cybersecurity incidents such as malware attacks or data breaches.

Quiz 7: Reacting to a Cyber Incident: Impact and Forensics

An online retailer has just discovered a data breach of the system used to store all of the data for shipments of products, including tracking numbers, date shipped, customer names, and addresses. Which of the following has the company failed to protect?

A startup company has invented a new IoT device and stored the design documents on an internal network share. Which of the following types of data are they trying to protect?

Van has been tasked with designing a fault-tolerant system for a critical application. Which of the following is the biggest concern about the design of this system?

Dharma manages a Linux server and wants to ensure that none of the users on the system have common passwords that would be in a standard password dictionary. Which of the following would best help accomplish her goal?

Kevin is working the after-hours shift in the NOC and receives an alert that there has been a potential intrusion into one of the servers. He pulls out the incident response plan and sees that the first step is to notify the on-call manager. Where might he find that information?

Dion is developing an application that will allow users to create their own passwords. He then needs to store that information in a database to be used when the user attempts to log in again. Which of the following provides the strongest option for Dion to accomplish this task?

Takara is building a digital forensics workstation. She needs the ability to connect to PATA and SATA devices for forensic analysis. Which of the following tools might best fit her needs?