PRCC Network Security Practice Exam

These questions are part of the practice quiz. Start practicing

• What attack has been detected if ICMP echo requests are received for the entire range of IP addresses on the external subnet?
• What regulation should an administrator be aware of to protect payment card information?
• What principle ensures that secret data remains confidential in IT methodologies?
• What security measure can be taken to protect web-based applications from SQL injection attacks?
• Which protective measure is crucial for safeguarding Personally Identifiable Information (PII)?
• Which of the following is typically not a containment action during a cybersecurity incident?
• Which tool would be most useful for ensuring data integrity on a client's hard drive during forensic analysis?
• What security measure can prevent unauthorized access to sensitive corporate data?
• What should a network engineer modify on a core router to prevent unauthorized internal access from specific IP address ranges?
• What type of cloud computing model is designed primarily for a single organization to secure their data?
• If a user account attempts to access prohibited resources, what type of attack could this indicate?
• What is one of the main considerations for a cybersecurity team when merging systems specific to the medical field?
• What type of access control is indicated by the error message that specifies different access levels for a user trying to access a resource?
• In network security, what does the acronym SMB stand for?
• What will happen if the user with IP address 10.15.30.45 attempts to access a website at 10.20.30.40 with the given ACL?
• When establishing security controls, which element is vital for accurate vulnerability assessment?
• Which action is crucial before considering the eradication of malware?
• Which system allows for real-time monitoring and management of security information?
• In SCADA systems, what is a critical aspect to ensure operational integrity?
• What type of networking device is Suki likely using to analyze traffic among several computers?
• What access control model should a rapidly growing company implement to manage permissions more effectively?
• What control type does the implementation of a password policy represent?
• Which process ensures modifications to infrastructure go through an approval process before implementation?
• What method is commonly used to enforce geographical restrictions for system access?
• Which configuration should a network engineer apply to control protocol communication between subnets?
• Which team is responsible for defending the company's infrastructure according to the security division structure?
• What is the strongest option for securely storing user-created passwords in an application?
• What could the security administrator implement to prevent customer service employees from accessing control panels?
• What type of document has Karin created to define acceptable behavior for users of company devices?
• What aspect of cybersecurity can a layered approach improve?
• What type of program is likely being used by a threat actor to analyze unencrypted email traffic?
• Masa is targeted by someone impersonating IT personnel. What type of attack is he experiencing?
• Which feature in a Group Policy would help restrict access to certain applications for users?
• What tool can Tobias use to check whether an SMTP server is running on his Linux virtual machine?
• Which method is used to ensure users cannot tamper with logs of security events?
• Which principle of information security is focused on ensuring that data is not altered by unauthorized individuals?
• What component of the AAA framework is vital for tracking and monitoring user activity?
• Which tool might a threat actor use to examine the source code of a program they detected during a scan?
• Which security measure could help address concerns about unauthorized physical access to a building?
• The service model that provides complete management of hardware and networking while allowing users to focus on applications is known as?
• What type of information was compromised in the recent data breach at the online retailer?
• When dealing with malware incidents, which is an essential step in the incident response process?
• Which of the following best describes the function of a vulnerability scanner?
• Which network device creates virtual connections and segments traffic within different departments of an organization?
• Which of the following best describes a methodology to manage risks associated with electronic communications in an organization?
• What documentation should Alisi create when reporting illegal activities involving a former employee?
• Which security technology is specifically designed to monitor and block unauthorized access to a network?
• What is the biggest concern when designing a fault-tolerant system for a critical application?
• The metrics that describe normal network activity are known as what?
• What system can detect sensitive information in email attachments that violate company policy?
• What type of technology can distract intruders and provide security teams additional time to respond to threats?
• What type of control is being implemented when a Linux server displays a warning message about unauthorized access?
• What does Frank's observation of multiple failed login attempts with the same password suggest?
• Which term describes the technology that analyzes incoming traffic for malicious activity and can automatically redirect it for further analysis?
• What type of device might Falik be interested in implementing based on features he learned at a cybersecurity conference?
• Which of the following terms is not commonly associated with access control systems in computing?
• What is a common symptom that may indicate a potential DDoS attack?
• What is Misaki most concerned about regarding the accidental release of confidential information?
• What is indicated by a user being able to upload third-party apps not found in the App Store?
• What tool can a consultant use to display the likelihood and impact of potential risk events?
• What technique might Moira choose to contain a compromised computer while minimizing damage?
• What technology should Faruq embed in the movie file to restrict viewing to authorized customers?
• What is the primary goal Tim is trying to determine regarding a new vulnerability scanning tool?
• What is a key goal of an Incident Response Plan (IRP)?
• What might be the best response for Lilith when discovering an extensive Advanced Persistent Threat (APT)?
• What service might Muhammed consider using to help his organization keep up with cybersecurity growth?
• Which of the following regulations does not address notification of individuals or a government entity in the event of a data breach?
• In a company utilizing a MAC model, what is typically required for users to gain access to classified resources?
• If a user wishes to visualize network traffic to check for suspicious activities, which tool is commonly used?
• What additional security measure could Valley implement to enhance detection capabilities?
• What is the primary task Victoria should perform after disconnecting an infected computer from the network?
• When analyzing a security vulnerability, which tool would aid in the automation of vulnerability scanning?
• What security feature requires users to provide a rotating six-digit code in addition to their username and password?
• What type of rule set should be created in a network to re-route malicious traffic securely?
• Which security solution would be most appropriate for Boe to secure her critical servers with a limited budget?
• Which threat actor type is most likely attacking after the release of a controversial movie?
• What is a key setting to consider in a cloud service provider regarding patient data retention?
• What term describes the implementation of technology without IT department involvement?
• What is a critical concern when employees use technology independently from IT?
• Which technique can Amir use to restore functionality to a computer after a malware infection when no snapshot is available?
• Which technology can help identify and prevent potential data leaks in an organization?
• What protocol should Jonquil consider for monitoring traffic flowing through network routers and switches?
• Which family of standards should Craig be familiar with while implementing ISO standards for cybersecurity?
• What additional configuration is likely required for Barry to analyze network traffic with Wireshark?
• What type of attack has been executed when devices are planted to capture documents sent to printers?
• What is the most effective way to improve security posture after analyzing vulnerabilities?
• What title describes the principal party responsible for managing data in an organization?
• After eradicating malware, what is the next step Alika should take during the validation process?
• Which technique generates random URLs for malware to communicate with command and control servers?
• What type of control is described when a firewall automatically creates new rules to block malicious traffic?
• What would be the primary benefit of implementing a WAF for web applications?
• Which cloud model allows Vinesh to focus only on data management while the provider handles resources and scalability?
• What might indicate that an attacker is employing a dead-drop method for botnet control?
• What method should Annya use for the secure disposal of a failed hard drive?
• What type of data is a startup company trying to protect by storing design documents on an internal network share?
• What is likely one of the first actions Dharma will take as she establishes a new cybersecurity team?
• What type of tool most likely generated a list of IP addresses with time metrics for each hop?
• As a cybersecurity analyst in a hospital, which regulation should Tyrese be aware of?
• What type of script format would be helpful for Simone to know in order to create a plug-in for vulnerability scanners?
• What set of software tools ensures company security policies extend to data stored in the cloud?
• For deploying a healthcare application that must remain on-premises, which cloud type should Donny select?
• Which policy might Tara consider updating after finding the John the Ripper tool on the network?
• Where can Kevin find the first step in the incident response plan after receiving an alert of a potential intrusion?
• What key element is necessary for a sender to verify their identity and ensure message integrity in communication?
• What document is likely required when a consultant analyzes critical systems within an organization?
• Which system can be used to collect events from network devices in a centralized location for analysis?
• Which policy could have potentially prevented a successful brute force attack discovered by Abdul?
• What is the primary goal of Digital Rights Management (DRM)?
• Which of the following tools best helps in determining service vulnerabilities during a penetration test?
• What tool might Bea use to assess the existing infrastructure's security posture in her new role?
• What type of systems does Lee's utility most likely use to automate water flow control?
• What type of access control allows data owners to set permissions on files?
• Which command-line tool might Malik initially use to investigate suspicious remote connections on his computer?
• Which protocol is being exploited by malware that connects to named pipes?
• Which of the following commands is recommended against for copying a string to a destination buffer without checking its length?
• What role did the penetration tester assume when exploiting a vulnerability and performing a port scan?
• What method is most effective for determining if new email filters successfully reduced malware detections?
• What is the term for monitoring user behavior within an AAA framework?
• What should a company implementing a data controller policy take into account?
• What type of policy is essential for defining the responsibilities of data custodians as identified by Penelope?
• What should Sarita implement to securely connect branch offices to headquarters via the Internet?
• In which scenario would a chain of custody be critical for evidence handling?
• What might be the reason for insufficient information during a forensic process after a web server attack?
• What does 'jailbreaking' typically allow a user to do on their device?
• What type of access control method is defined by rules enacted by system administrators rather than users?
• Mikael is interested in a vulnerability scanner published under the GNU GPL. Which of the following is he likely referring to?
• What type of attack could a penetration tester perform after capturing tokens from an HTTP-based login?
• Which tool would Marco use to discover other resources within an organization's network after exploiting a perimeter firewall vulnerability?
• Which data source is recommended for a vulnerability scanner that requires constant updates on new vulnerabilities?
• Which service is focused on providing security functionalities for end-users by leveraging the cloud?
• What could be the cause for clients on the network contacting the same external IP address every five minutes?
• Which U.S. government's published guidelines should Hattie become familiar with in her cybersecurity role?
• What report should Elon create after completing a vulnerability review project?
• What is an effective tactic for an organization to enhance security against internal threats in an ICS environment?
• What should Dahlia create to ensure consistent response procedures for malware or data breaches in her new organization?
• Which tool might Maya use to detect applications that utilize unencrypted passwords?
• What technique might Tabitha use during the reconnaissance phase of her penetration test?
• What does the term 'credential stuffing' refer to?
• What function is critical in ensuring the security integrity of copied data to a buffer?
• Which tool might Louise use to compile a report on insecure traffic types entering the organization's network?
• What type of assessment is being conducted when evaluating the impact and risks that attacks could have on an organization?
• What should a solutions architect ensure while setting up a publicly accessible web application?
• What is a key vulnerability of the modbus protocol in ICS systems?
• When handling a compromised network device, what is a critical first measure?
• What legal consideration must be factored in when choosing a cloud service provider for data storage?
• What valid data classification labels should Tabitha use for U.S. government systems?
• What could be a response to the issue of surveillance in an automobile testing environment?
• As a consultant, what is one of the first pieces of data that Tonya might request to validate security controls?
• Which security tool is effective for monitoring network traffic and detecting intrusions?
• What solution might Stan implement to restrict device access based on physical location?
• What is the term for the networks that connect components together in automated vehicles?
• What term best describes devices like a network-connected thermostat?
• To ensure cybersecurity best practices, which document is essential for detailing how data custodians should manage security?
• During the merger of doctor's offices, which regulation must the cybersecurity team consider while sharing information?
• What is a recommended method to prevent brute force attacks during a login process?
• What is the likely cause of observing 28 echo requests and replies in firewall logs over five minutes?
• What is Graciela attempting to determine by assessing the servers' accessibility from the internet?
• What term is used to describe the modular updates for the Nessus vulnerability scanning application?
• What type of attack involves intercepting communications between two parties?
• What is the primary benefit of deploying multi-factor authentication (MFA) in an organization?
• What is a primary goal of a penetration tester when employed by an organization?
• What type of controls are being implemented when developing onboarding and offboarding procedures for employees?
• What is the most likely cause of the vulnerability involving unauthorized JSON-formatted objects being passed in Tera's analysis?
• Which practice involves the consistent review and updates of the organization’s security policies?
• What type of attack might Myleene be dealing with if she notices failed login attempts with apostrophes in the email addresses?
• What role does a firewall play when it discards traffic from an identified malicious IP address?
• Which device can be used to manage access to a private database server from a public-facing web server?
• Which of the following is not one of the components of the Cyber Kill Chain?
• Which regulation should Samuel be familiar with as part of his work in telecommunications?
• What does beaconing traffic indicate in network logs?
• What process is Aaron tasked with implementing in the albums distributed by his record label?
• Which native tool might help Nichole verify a potential ping flood on a Windows server?
• Which type of devices is used for surveillance concerns in testing environments?
• What is a key focus when validating a system after malware removal?
• Which team is primarily focused on offensive security measures within an organization?
• Which component is modified as emails are transferred between mail transfer agents (MTAs)?
• What is Trita likely creating when she assesses risks and potential damages from attacks on her organization?
• Which solution should Justin consider to prevent employees from sending sensitive information to personal email?
• What is a primary goal in cybersecurity regarding unauthorized access attempts?
• What foundational standard should a cybersecurity manager be aware of related to best practices in information security?
• What is the main purpose of implementing a write blocker during forensic analysis?
• Which technical solution could directly address concerns about unauthorized access within physical premises?
• Which device type is commonly vulnerable to network breaches if not secured properly?
• What is the most effective method to prevent an industrial control system from being exploited by external attackers?
• Which system might be implemented to control multiple ICS systems in a plant?