Google Cybersecurity practice 1

What are the three pillars of information security according to the CIA Triad?. Confidentiality, Integrity, Authorization. Confidentiality, Integrity, Availability. Control, Identity, Availability. Confidentiality, Isolation, Accountability.

Which type of data includes medical or financial information?. PII. SPII. Public Data. Unclassified Data.

Which 1986 virus spread via floppy disks?. Morris worm. The Love Letter. Brain virus. Equifax breach.

What was the impact of the Morris worm in 1988?. It crashed 10 percent of the internet. It spread via floppy disks. It stole medical data. It initiated the first social engineering attack.

Which attack is considered the first major social engineering attack according to the text?. Brain virus. Morris worm. Equifax breach. The Love Letter.

What caused the Equifax breach in 2017?. Failing to patch known vulnerabilities. A zero-day exploit. Insider threat. Phishing emails.

Which framework is used to structure risk mitigation in organizations?. OWASP Top 10. NIST CSF. TCP/IP Model. PASTA.

Which type of log records attempted or established connections for inbound and outbound traffic at the perimeter?. Server logs. Network logs. Firewall logs. Application logs.

What is the primary function of network logs?. Tracking website requests. Tracking devices entering and leaving the internal network. Recording inbound perimeter traffic. Identifying zero-day exploits.

Which events are tracked by server logs?. Routing protocols. Devices joining the LAN. Application-level events like website requests and login authentications. Packet fragment offsets.

Which structural layer of the web is indexed and accessible via standard browsers?. Surface Web. Deep Web. Dark Web. Internal Web.

Which web layer requires authorization and includes corporate intranets?. Surface Web. Deep Web. Dark Web. Public Web.

Which web layer requires specialized routing software and is structurally hidden?. Deep Web. Surface Web. Dark Web. Perimeter Web.

What is Defense in Depth?. Replacing hardware with cloud virtualization. Layering administrative, technical, and physical controls. Using only symmetric encryption. Filtering traffic by MAC address.

In the SDLC, when should secure code reviews occur?. Planning phase. Deployment phase. Development and testing phase. Post-incident phase.

According to OWASP principles, how do you minimize the attack surface?. By layering administrative controls. By reducing potential vulnerabilities, disabling unused features, and limiting entry points. By moving to a cloud-native SIEM. By prioritizing server logs over network logs.

What does the Principle of Least Privilege dictate?. All users should have admin access. Applications and users should only have the exact permissions required to execute their specific functions. Complex security architectures are better. Passwords should be short.

According to OWASP, why should security be kept simple?. It costs less. Overly complex security architectures are prone to misconfiguration and human error. It requires fewer developers. It speeds up internet routing.

What is the mathematical process of converting plaintext into ciphertext?. Hashing. Encapsulation. Encryption. Spoofing.

Which IAM phase involves a user verifying who they are, such as presenting a username?. Identification. Authentication. Authorization. Accountability.

What does the Authorization phase of IAM entail?. Presenting a swipe card. Logging and tracking user actions. The system granting access rights and specific resource permissions based on proven identity. Proving identity with a password.

Which IAM phase ensures data is used properly by logging and tracking user actions?. Identification. Authentication. Authorization. Accountability.

Which SIEM deployment is managed entirely on internal hardware?. Cloud-hosted. Cloud-native. Self-hosted. Hybrid.

Which SIEM deployment is built specifically to leverage cloud computing capabilities like extreme speed?. Self-hosted. Hybrid. Internal. Cloud-native.

What are the 5 functions of the NIST CSF?. Prepare, Categorize, Select, Implement, Assess. Identify, Protect, Detect, Respond, Recover. Preparation, Containment, Eradication, Recovery, Post-Incident. Identify, Authenticate, Authorize, Account, Audit.

How many steps are in the NIST RMF lifecycle?. 4. 5. 7. 8.

Which physical network component transmits data in a 'broadcast' format to all devices?. Switch. Router. Hub. Modem.

How does a switch intelligently send data to the intended destination?. By mapping physical MAC addresses to its internal ports. By reading the destination IP address. By broadcasting to all ports. By resolving DNS queries.

Which component connects multiple separate networks by routing data packets based on IP addresses?. Hub. Switch. Router. Modem.

What connects the router to the ISP infrastructure to provide Internet access?. Switch. Modem. Hub. Firewall.

Which addressing format uses a 32-bit format?. IPv4. IPv6. MAC. DNS.

Which addressing format consists of 128 bits to solve address exhaustion?. IPv4. IPv6. MAC Address. Subnet Mask.

What is the difference between Public and Private IPs?. Private IPs are assigned by the ISP. Public IPs are hidden from the outside. Public IPs are visible on the Internet, while Private IPs are used at the LAN level. Private IPs are 128-bit.

What replaces physical hubs, switches, and routers with software-defined instances in remote data centers?. Cloud Architecture. VPN. SIEM. DMZ.

Which layer of the TCP/IP model handles physical transmission using MAC addresses?. Layer 1 (Network Access Layer). Layer 2 (Internet Layer). Layer 3 (Transport Layer). Layer 4 (Application Layer).

Which TCP/IP layer performs network-to-network routing using IP addresses?. Layer 1. Layer 2. Layer 3. Layer 4.

Which protocol operates at Layer 3 (Transport Layer) to provide flow and error control via a handshake?. HTTP. IP. TCP. Ethernet.

At which TCP/IP layer does direct interaction with software like HTTP, FTP, and Email occur?. Layer 1. Layer 2. Layer 3. Layer 4.

What translates a domain name to a routable IP address?. ARP. TCP. DNS. VPN.

What is the function of ARP (Address Resolution Protocol)?. Translates domain names to IPs. Finds the physical MAC address of the next hop based on its IP. Encrypts data. Establishes a session.

Which protocol encrypts data using SSL/TLS to ensure secure web browsing?. HTTP. FTP. HTTPS. ARP.

Which attack exploits the TCP handshake by leaving ports hanging without sending a final ACK?. ICMP Flood. SYN Flood. Ping of Death. Replay Attack.

Which attack sends a malformed ICMP packet exceeding the 64-kilobyte limit?. Ping of Death. Smurf Attack. IP Spoofing. SYN Flood.

Which of the following are among the 8 CISSP Domains?. Security and risk management. Asset security. Communication and network security. Physical facility maintenance.

Which of the following are examples of SIEM systems mentioned in the text?. Splunk. Wireshark. Chronicle. tcpdump.

Which technical skills are explicitly highlighted in the first video summary?. Linux usage. Databases with SQL. Scripting. HTML/CSS design.

Which of the following are examples of Authentication?. Presenting a username. Passwords. Biometrics. Multi-Factor Authentication.

Which of the following are phases of Incident Response Playbooks?. Preparation. Containment. Eradication and Recovery. System Architecture.

What does an internal audit encompass?. Goal scoping. Risk assessment. Controls assessment. Compliance verification.

Which steps are part of the TCP 3-way handshake?. SYN. SYN/ACK. ACK. FIN.