CompTIA CySA+ CS0-002 Final Exam 105 Questions with 100% Correct Answers

CompTIA CySA+ CS0-002 Final Exam 105 Questions with 100% Correct Answers Which of the following terms refers to the act of an attacker gathering information from a target without actually ever visiting that target? -A ...

CompTIA CySA+ CS0-002 Final Exam 105 Questions with 100% Correct Answers Which of the following terms refers to the act of an attacker gathering information from a target without actually ever visiting that target? -Answer- passive reconnaissance You would like to find out whether there are any unauthorized services available on a network. Which of the following techniques can be used to determine whether or not there are services running on the network that should not be running? -Answer- service discovery Assume that you have received reports that malicious users are trying to exploit a well-known vulnerability on specific devices within your network. Which of the following actions would allow these malicious users to match well-known vulnerabilities to specific devices within your network? -Answer- OS fingerprinting Assume that you have received reports that malicious users are trying to exploit a well-known vulnerability on specific devices within your network. Which of the following actions would allow these malicious users to match well-known vulnerabilities to specific devices within your network? -Answer- phishing Assume that a number of users within your organization were tricked into clicking a link that led them to a website that ultimately infected your company's network with a virus. What kind of cyber attack did your organization experience? -Answer- social engineering Which of the following actions would be the most effective methods of mitigating threats against an organization's wireless network? -Answer- Set radio transmission strength to the lowest level possible that still services the required area. Assume that an attacker has accessed your organization's virtual network and has taken control of the program that enables your organization to host several different virtual machines on a single device. To what type of attack has your organization fallen victim? -Answer- VM sprawl Which of the following tools is a command-line utility that displays network connections for TCP/IP? -Answer- netstat Which of the following actions has - as its primary goal - the creation of a network diagram that identifies network devices and their connective relationships? -Answer- network mapping Which of the following items can detect unauthorized access to a network and quarantine affected devices to prevent access to other parts of the network? -Answer- NIPS Which of the following network devices is responsible for inspecting and controlling network traffic? -Answer- firewall Assume that you have started a new job as a cyber security analyst for a consulting firm. Your knowledge of the firm's network is minimal, and the firm has little useful documentation for you to use. Which of the following would provide you with a list of network devices, their connectivity relationships to one another, and the internal IP addressing scheme being used by the firm? -Answer- topology discovery Assume that you are observing a third party conducting a penetration test on your organization's network and you overhear members of this third party discussing the possibility of scanning all ports on the network. To which of the following operations is this third party referring? -Answer- service discovery Which of the following can reveal which users on a network are sending unencrypted traffic? -Answer- packet capture Assume that your organization is conducting its own penetration test in advance of a test that will be conducted soon by a compliance body. Your organization needs to obtain a port scanning tool. Which of the following is one of the most popular port scanning tools in use today? -Answer- Nmap