Network Security Vulnerability Technician (NSVT) Module 6 Practice Test

These questions are part of the practice quiz. Start practicing

• What does the term "spoofing" refer to in cybersecurity?
• What does a firewall do?
• What is the primary goal of risk management in network security?
• Where are all SCI spillages reported to?
• Which TCP port is related to the Domain Name System (DNS)?
• What is the difference between a threat and a vulnerability?
• What is the primary purpose of the Web Security Virtual Appliance (WSAV)?
• Why is regular software updating critical in cybersecurity?
• What is an example of resource exhaustion?
• What is persistent data?
• What is an example of an adverse event in network systems?
• What is meant by the term "vulnerability footprint"?
• What is the purpose of a security audit?
• What is defined as a network security device that monitors and controls network traffic?
• What type of threat does phishing represent?
• Which of the following categories includes common types of security controls?
• What is a VPN and how does it enhance security?
• Which of the following is considered a physical security control?
• Identify one benefit of using multi-factor authentication.
• What is a significant characteristic of the password complexity for the CANES ESS account?
• What does the term "credential stuffing" refer to?
• What aspect of human behavior does social engineering typically target?
• What does the concept of defense in depth refer to?
• What is the primary function of penetration testing?
• Which cyber event category involves unauthorized privileged access to a DoD system?
• What actions are part of an Incident Response?
• Which tool is recognized as an open source software for collecting and preserving volatile data?
• How does a host-based IDS differ from a network-based IDS?
• What is the primary focus of the Incident Response process?
• What action must be taken immediately upon detection of a cyber event?
• What does IDS stand for in network security?
• What is a security incident response plan?
• What is the main purpose of a vulnerability assessment?
• What is the primary goal of network security?
• What does password hashing achieve?
• What is the importance of logging and monitoring in network security?
• Which type of accounts allows management of device permissions and user groups in a domain environment?
• What is the function of a firewall in network security?
• Who ultimately receives the filtered information regarding high-level attacks?
• How does multi-factor authentication increase security?
• In the acronym CIA, what does the "I" stand for in network security?
• What does NAC stand for in network security?
• What type of attack involves intercepting communications between two parties?
• What is a botnet?
• What is a security breach notification?
• Which account is used for Master Repository replication and off-ship communications?
• Which of the following is a common vulnerability in web applications?
• What is the focus of the Joint Malware Catalog (JMC)?
• What is a security token?
• Who is the organization responsible for filtering high-level attack information to lower echelons?
• What characterizes an adverse event in network security?
• Which of the following is not typically considered a cyber event?
• What type of vulnerabilities does vulnerability scanning typically identify?
• What does electronic spillage refer to?
• What type of cyber event is categorized as Cat 2?
• What role does a network access control (NAC) system play in network security?
• What service provides data encryption for both data at rest and data in motion in CANES?
• What benefit does using security information and event management (SIEM) systems provide?
• What role does a digital certificate play in network security?
• What would NOT typically be considered a type of security control?
• What is Tier II in the Technical Reporting Structure?
• Which type of client is used to access different enclaves without needing multiple workstations in CANES?
• What defines a security token?
• What allows for information transfer between different security domains in CANES?
• What event category is associated with resource exhaustion that blocks authorized connections to network resources?
• What is the function of TCP port 80?
• What is two-way authentication?
• What is the local logon account for the SQL Server Agent service in CANES?
• What is Tier I in the Technical Reporting Structure?
• Which of the following is NOT typically a responsibility of the Command Security Manager?
• What is the key distinction between a threat and a vulnerability?
• Which of the following is categorized as a cyber event of Cat 8?
• What is the focus of a Category 1 cyber event?
• What is a common consequence of unpatched software vulnerabilities?
• Define the term "threat landscape."
• What is the purpose of a Security Information and Event Management (SIEM) system?
• What service provides the capability to manage users and groups within a domain environment in CANES?
• How does encryption contribute to data integrity?
• What is a common risk assessment technique?
• Which service is used by CANES for Identification, Authentication, and Authorization?
• Which tool is commonly used for disk-based recovery and preservation of data?
• What is social engineering in the context of network security?
• Which of the following best describes the purpose of encryption in data security?
• What role does encryption play in network security?
• What is malware?
• What is social engineering?
• What is the main goal of malware analysis?
• What is the local logon account for the SQL Server service in CANES?
• What is the primary function of a keylogger?
• What is involved in a risk assessment?
• In network security, what is the function of a security token?
• Why is patch management significant in network security?
• What is the primary function of antivirus software?
• What is the central repository for storing malware files and their associated analysis maintained by USCYBERCOM?
• What is the main role of a security policy?
• What is a common method used by attackers to exploit network vulnerabilities?
• What role does encryption play in maintaining confidentiality?
• In terms of cyber administration, what is the main focus during the Stage 1 Administrative Review?
• Which method increases security by ensuring availability during attacks?
• Which cyber event category is associated with the installation of malicious software?
• How are CANES security boundaries separated?
• How long does the Stage 1 Administrative Review process typically take?
• What is the impact of a Zero-Day vulnerability?
• What method is commonly used to secure wireless networks?
• What is the significance of access controls in network security?
• What does multi-factor authentication add to security processes?
• How do strong password policies help mitigate security risks?
• What is the purpose of the Common Vulnerabilities and Exposures (CVE) tool?
• Which TCP Port is used for Secure Shell (SSH) connections?
• What term describes unauthorized access to an information system?
• Which of the following best describes the term "Electronic Spillage"?
• What implication does employee training have on cybersecurity?
• What does IDS stand for in network security?
• What role does a proxy server play in network security?
• What does the term "exfiltration" refer to in data security?
• Which of the following describes a common characteristic of malware?
• What is the requirement of two-factor authentication (2FA)?
• Which service in CANES is specifically designed for user authentication and identity verification?
• In CANES, what type of service does the Secure Office Trusted Thin Client (SOTTC) provide?
• What does multi-factor authentication enhance in network security?
• What is Technical Impact (TI) concerned with?
• What TCP port is designated for HTTP over SSL (HTTPS)?
• What function does the Identity Service Engine (ISE) serve in a CANES environment?
• What characterizes the risk evaluation phase in risk assessments?
• What is the primary purpose of encryption?
• What describes a supply chain attack?
• What is the role of a firewall in network security?
• What does the process of system analysis involve?
• What is the primary purpose of an incident response plan?
• What aspect of a user is NOT considered during the ISE's network access policy?
• What is an exploit in cybersecurity?
• How can organizations minimize the risks associated with social engineering?
• What is the role of a Security Information and Event Management (SIEM) system?
• Which method is commonly used to assess network vulnerabilities?
• What is a common consequence of a network security breach?
• Why is threat intelligence significant in cybersecurity?
• What is the purpose of patch management in network security?
• What type of malware disguises itself as legitimate software?
• What defines a ransomware attack?
• What is a zero-day vulnerability?
• How is CANES Agent deployment performed when Rogue Auto Push Task is disabled?
• What are the three stages of Command Cyber Security Inspection (CSI) and Command Cyber Operational Readiness Assessment (CORA)?
• What is a Zero-Day vulnerability?
• What does CIA stand for in the context of information security?
• How can network segmentation improve security?
• What type of attack uses fake websites to mimic real ones to steal user information?
• What does the principle of least privilege mean?
• What is the primary function of the Domain Name System (DNS) in network security?
• Which document contains the Incident Handling Checklist?
• Which of the following best describes volatile data?
• What is the primary purpose of conducting regular security audits?
• What is the purpose of a security policy in an organization?
• Which cyber event category indicates potential non-compliance due to vulnerabilities?
• What is the purpose of a network sniffer?
• What is the duration of a Stage 2 Unit Level Technical Assistance Visit?
• What is the role of antivirus software in network security?
• Which of the following is NOT a characteristic of ransomware?
• Describe what a brute-force attack entails.
• What is the main function of the NCDOC?
• What is the main focus during the Stage 2 unit level technical visit?
• What is a common method for detecting malware on a network?
• What distinguishes symmetric encryption from asymmetric encryption?
• What does network analysis primarily focus on?
• What is the primary role of a Command Security Manager (CSM) in relation to Electronic Spillage?
• How is "data leakage" defined?
• What is ransomware?
• What does the principle of least privilege entail?
• What are the four main steps in the vulnerability assessment process?
• What is the main aim of an intrusion detection system (IDS)?
• Which two components are essential in a risk management framework?
• Define "phishing."
• What event occurs when a denial of service blocks authorized connections to network resources?
• What is included in an incident report as part of Technical Reporting?
• What cyber event category involves actions that make DoD systems potentially vulnerable?
• What is a component being inspected by the WSAV?
• What account does ePO use to communicate with the MSSQL database in the CANES environment?
• What is the default setting for CANES policy enforcement?
• Define phishing.
• What is one of the methods for CANES Agent deployment?
• What is the main function of a VPN?
• What is categorized under Cat 7 in cyber events?
• Which of the following is NOT a common sign of a network security breach?
• What is the primary event that can be observed on a system or network?
• Which cyber event category involves suspicious activity that requires further review?
• What is the primary purpose of a honeypot in cybersecurity?
• What does "SQL injection" refer to?
• Operational Impact refers to what aspect of incident assessment?
• What does the term "patch" refer to in cybersecurity?
• What does "network segmentation" aim to achieve?
• What does TCP port 22 correspond to?
• What programming service is used for session management in CANES?
• How can employee training enhance network security?
• What is meant by the term "attack surface"?
• What type of incidents does Technical Reporting primarily address?
• What is the purpose of using a demilitarized zone (DMZ) in network architecture?
• What is a DMZ in network security?
• What is the purpose of a security policy?
• Why is regular training on cybersecurity important for employees?
• What is the main purpose of Cross Domain Services in the CANES environment?
• What does the term "social engineering" refer to in cybersecurity?
• What is a key aspect of effective security breach notifications?
• What are common forms of volatile data?
• What does a firewall primarily do?
• What is NOT a requirement for the CANES ESS account password complexity?
• What does SSL stand for, and what is its purpose?
• Which type of testing involves attempting to exploit vulnerabilities in a controlled environment?
• What does Operational (Incident) Reporting provide to commanders?
• What is an encryption key?
• What is an outcome of electronic spillage?
• What authorization mechanism must all CANES devices and resources authenticate through?
• What is the main objective of penetration testing?
• What is the significance of analyzing log files in a security context?
• Which of the following describes asymmetric encryption?
• What is the purpose of Technical (Incident) Reporting?
• What is one primary goal of implementing encryption?
• What is an endpoint in network security?
• What is a data breach?
• Are registry keys created by all programs for malware?
• What is the term for the different engineering segments used to achieve CANES security?
• What is the main difference between vulnerability scanning and penetration testing?
• Why is encryption important in network security?
• What does the term 'patch management' involve?
• In network security, what does DDoS stand for?
• What is the function of an access control list (ACL)?
• What is the primary function of an SSL certificate?
• Explain the concept of network monitoring.
• What is a common tool for conducting vulnerability scans?
• What is the main purpose of a security patch?
• What tier includes local commands within the Technical Reporting Structure?
• How does redundancy improve network security?
• In network security, what is "salting"?
• What are common signs of a network security breach?
• Which are the two main types of intrusion detection systems?
• What is a common method used for discovering network vulnerabilities?