Defense in Depth

Question 1

How are attack vectors and attack surfaces related?

• An attack surface is the sum of all attack vectors.
• An attack vector is the sum of all attack surfaces.
• They’re not actually related.
• They’re the same thing.

Question 2

While antivirus software operates using a ______, binary whitelisting software uses a whitelist instead.

• Whitelist
• Secure list
• Greylist
• Blacklist

Question 3

What is a class of vulnerabilities that are unknown before they are exploited?

• ACLs
• 0-days
• Attack Surfaces
• Attack Vectors

Question 4

Which of these host-based firewall rules help to permit network access from a Virtual Private Network (VPN) subnet?

• Active Directory
• Secure Shell (SSH)
• Access Control Lists (ACLs)
• Group Policy Objects (GPOs)

Question 5

Which of these plays an important role in keeping attack traffic off your systems and helps to protect users? Check all that apply.

• Antimalware measures
• Antivirus software
• Multiple Attack Vectors
• Full disk encryption (FDE)

Question 6

If a full disk encryption (FDE) password is forgotten, what can be incorporated to securely store the encryption key to unlock the disk?

• Application policies
• Secure boot
• Application hardening
• Key escrow

Question 7

A hacker exploited a bug in the software and triggered unintended behavior which led to the system being compromised by running vulnerable software. Which of these helps to fix these types of vulnerabilities?

• Implicit deny
• Software patch management
• Application policies
• Log analysis

Question 8

What is the combined sum of all attack vectors in a corporate network?

• The antivirus software
• The Access Control List (ACL)
• The attack surface
• The risk