Certiport CyberSecurity Certification Practice Exam – All Questions

Browse all practice questions for the Certiport CyberSecurity Certification Practice Exam. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Start practice test Flash cards

Hacktivists hack for political protest: motivations and implicationsHacktivists mainly perform attacks for what purpose?How dynamic routing lets routers learn and add the best routing information automaticallyDynamic routing allows a router to do what without administrative intervention?Keeping evidence access limited to authorized personnel protects its integrityWhy is it crucial that no unauthorized person has access to the evidence?Learn how to find the mapping of IP addresses to MAC addressesWhat command will show the mapping between IP addresses and MAC addresses?Understanding Choose Your Own Device and Its Impact on Workplace SecurityWhat does Choose Your Own Device (CYOD) allow employees to do?Understanding the Common Vulnerability Scoring System in CybersecurityWhat does CVSS stand for in cybersecurity?Understanding the Importance of Network Access Control in CybersecurityWhat aspect does NAC primarily focus on?Understanding the Primary Function of a VPN and Its Importance in Digital SecurityWhat is the primary function of a VPN (Virtual Private Network)?Understanding the Role of Network Devices at the Data Link LayerWhich device types are typically associated with the Data Link Layer?Understanding the Role of Script Kiddies in CybersecurityScript kiddies are described as:What Happens When Evidence Has a Disrupted Chain of Custody?What should be done if evidence is found to have a disrupted chain of custody?What is ransomware and how it works in cybersecurityWhat type of software is ransomware?What is the primary goal of a warm site in business continuity and disaster recovery?What is the primary goal of a warmsite?

More practice questions

These questions are part of the practice quiz. Start practicing

What is the main goal of physical controls in cybersecurity?
What does confidentiality in cybersecurity focus on?
What does multi-factor authentication (MFA) provide in a BYOD environment?
Which of the following protocols operates at speeds of 1000 Mbps?
What does a Disaster Recovery Plan (DRP) primarily concentrate on?
What types of data does SIEM typically ingest?
How does an attacker typically execute a DNS attack?
War driving is an example of what type of reconnaissance?
What encryption standard does WPA2 utilize?
Which term describes data that is preserved on a storage device?
What type of phishing attack utilizes voice communication?
Which group is most likely responsible for attacks from within a company?
What layer of the OSI model is responsible for generating and detecting signals for data transmission?
What is the Principle of Least Privilege?
What capability does PowerShell provide to attackers regarding code injection?
Which of the following best describes a VPN's function?
What does a differential backup do?
What is the purpose of authentication in cybersecurity?
Which type of threat actor is typically motivated by financial gain?
PCI DSS is essential for protecting which type of data?
What is a characteristic of a managed switch?
What is the main function of Virtual Desktop Infrastructure (VDI)?
What function does the arp -a command provide?
Which layer of the OSI model is responsible for routing data?
What does the term 'data at rest' encompass?
To ensure data safety, what is a recommended backup practice?
What does 'In Processing' refer to in the realm of information security?
What is a key characteristic of spear phishing attacks?
What does the Session Layer manage between two nodes?
What is the implication of turning off unused ports in a network?
What does the command 'ls -l' do in a Linux environment?
What function does the Syslog protocol serve in IT environments?
What is nonrepudiation in the context of cybersecurity?
How does an Intrusion Detection System (IDS) primarily function?
What aspect does technical control primarily cover in a cybersecurity framework?
What is the purpose of MAC control on a Wi-Fi network?
What type of documentation is essential for maintaining the chain of custody?
Which of the following is a common reason for successful cyber attacks?
What is a Disaster Recovery Plan (DRP) primarily concerned with?
What is the primary purpose of establishing a chain of custody in forensics?
What security measure is recommended for unused ports?
What does integrity in information security guarantee?
What is the purpose of the CVE list?
Why are botnets particularly dangerous?
Which example illustrates the consequence of a successful threat?
What does availability in cybersecurity ensure?
What is a common goal of ransomware?
What does error code 513 CAP12 indicate?
What are social engineering attacks designed to do?
What does the risk of a data breach often include?
What is the purpose of the nslookup/dig command?
How can evidence be best secured during an investigation?
What is privilege escalation in the context of IT systems?
What does the command ipconfig/ifconfig NOT provide information about?
What is an example of Shadow IT?
What are botnets?
Where is a Network-Based Intrusion Prevention System (NIPS) typically located?
What is the purpose of HTTP (Hypertext Transfer Protocol)?
Which protocol uses port 53 for its operations?
What does a full backup entail?
What is a potential risk of not using proper Mobile Device Management?
Which RAID configuration requires only one additional disk for redundancy and provides fault tolerance?
What ensures that only authorized users can modify data according to cybersecurity principles?
Which RAID configuration provides fault tolerance through data mirroring?
Which protocol operates on port 110 for email retrieval?
What kind of security does 'defense in depth' provide?
What port is used by the Remote Desktop Protocol (RDP)?
Forensics relies on which fundamental concept to maintain evidence authenticity?
Which of the following is a characteristic of criminal syndicates in the context of cyber threats?
What does data in motion refer to?
What action can an attacker take to prevent internet access to users?
Which of the following describes Mobile Application Management (MAM)?
What do technical controls in cybersecurity encompass?
Which protocol is NOT part of the Transport Layer?
What is the main function of a firewall in network security?
Who are considered Nation State Actors in cybersecurity?
What type of hacker is classified as a hacktivist?
What kind of backups does the term 'Sneakernet' refer to?
When does the chain of custody begin?
Which of the following actions violates the chain of custody?
How often should the Principle of Least Privilege be reviewed in a business setting?
What ports are commonly associated with File Transfer Protocol (FTP)?
What can be inferred from the overall CVSS score assigned to a vulnerability?
Why is RAID not used as a method of backup?
Which layer of the OSI model is referred to as the Application Layer?
What does FileVault do on a MAC system?
Which tool is widely used for network management and system security courses to troubleshoot?
Which of the following is vital for ensuring the admissibility of evidence in court?
What are administrative controls primarily focused on?
What does SOAR primarily focus on in a security environment?
What is the main characteristic of a man-in-the-middle (MITM) attack?
What do corrective controls aim to achieve?
What does Nmap primarily do?
What are detective controls designed to do?
What vital role does a hypervisor play in computing?
Which type of reconnaissance involves actively probing for vulnerabilities?
What type of information can application logs in the event viewer provide?
Which control type is aimed at preventing problems before they occur?
What does the General Data Protection Regulation (GDPR) aim to protect?
What key feature differentiates a managed switch from an unmanaged switch?
What is TCPDump used for?
Which of the following could be a consequence of not maintaining the chain of custody?
Who might be included in the definition of a victim in cyber threats?
What is NOT a valid method of backing up data daily?
What does IMAP (Internet Message Access Protocol) allow users to do?
What is the definition of malware?
What is included in the infrastructure of a cyber threat?
What does the protocol HTTPS indicate?
What type of attack identifies a specific individual as the target using personalized information?
In legal cases, what consequence could result from a broken chain of custody?
What is the goal of Information Assurance?
What is the purpose of a Demilitarized Zone (DMZ) in network security?
What is one significant advantage of cloud computing regarding maintenance?
What is the objective of a Business Continuity Plan (BCP)?
Which Act regulates the privacy of consumer financial information?
Who is responsible for the upfront cost of the device in a CYOD model?
What is the primary goal of information security?
What is the primary function of a warmsite in disaster recovery?
What is the role of DHCP (Dynamic Host Configuration Protocol)?
What is the primary focus of the Gramm-Leach-Bliley Act (GLBA)?
What function does Network Address Translation (NAT) serve?
What type of protocol is UDP?
What is the primary requirement by NIST for BYOD devices in a HIPAA compliant environment?
An example of an insider hacker is:
Which aspect is NOT part of maintaining a chain of custody?
What is the primary objective of a DNS-based attack?
What does NAC (Network Access Control) do?
Which of the following is a valid range for Private IP Addresses?
What does the term 'Defense in Depth' refer to in cybersecurity?
What is the key element in preserving the integrity of evidence during an investigation?
What is the primary purpose of Mobile Device Management (MDM)?
How does a host-based detection system signal an intrusion?
Which of the following is NOT listed as a reason for successful cyber attacks?
Which protocol is primarily used for querying DNS?
What does RAID 5 utilize to achieve fault tolerance?
Why might competitors launch attacks against an opponent's system?
In cybersecurity, what does the term 'capability' refer to?
What technology is primarily used to detect vulnerabilities against applications or computers?
What characterizes a hot site?
What is essential for performing audits and monitoring in IT operations?
What is meant by the term 'At Rest' in cybersecurity?
Which protocol is associated with port 161?
What does BYOD stand for in a cybersecurity context?
What is the main purpose of VPN authentication?
Which tools can be utilized to see IP addresses within a network?
What term describes tools used for delivering capability in cyber threats?
Which of the following is an example of a physical control in cybersecurity?
Which term refers to the act of scanning for open ports and vulnerabilities?
What does an Acceptable Use Policy (AUP) define?
What defines a threat actor?
Which command would you use to list all active connections on your PC?
What describes insiders in a cybersecurity context?
Which of these statements accurately describes NAT’s capability?
What is a Man-in-the-Middle Attack (MITM)?
In terms of cybersecurity, what does the term "nonrepudiation" mean?
What is the key limitation of a Network-Based Intrusion Detection System (NIDS)?
What is the role of SIEM in cybersecurity?
What is the purpose of a honeypot in cybersecurity?
Who can be considered a victim in a cyber attack?
What role does documentation play in the chain of custody?
Which type of device is classified as corporate-owned?
Which strategy enforces corporate policies for applications on mobile devices?
What does the tracert/traceroute command display?
What is the primary risk associated with not using multi-factor authentication for BYOD devices?
Which of the following layers is included in the acronym "All People Seem To Need Data Processing"?
What do suspicious logins or repetitive bad logins in Security logs typically indicate?
What does social engineering rely on to be successful?
Which of the following devices operates at the Physical Layer of the OSI model?
What is the main goal of limiting user access rights according to the Principle of Least Privilege?
What is a cold site?
What does DNS hijacking intend to accomplish?
What is an Advanced Persistent Threat (APT)?
What services are provided by the Transport Layer?
What do preventive controls focus on?
FISMA is aimed at ensuring what type of information protection?
What is a key role of the Presentation Layer in the OSI model?
Which method is used in smishing attacks?
What is meant by data in processing or in use?
Which protocol is associated with the Session Layer of the OSI model?
Which of the following best describes the purpose of error monitoring in the Physical Layer?
Which type of backup allows for the most efficient storage use?
What is a critical benefit of utilizing cloud computing services for data security?
What is war flying primarily used for in reconnaissance?
What does the ipconfig/ifconfig command display?
What is the main characteristic of RAID 0?
What legal protection does HIPAA provide?
Which type of WPA is designed for business environments?
What does the Diamond Model of Intrusion Analysis help information security professionals to do?
Which OSI layer manages the encryption and decryption of data?
What is the primary function of a host-based intrusion detection system (HIDS)?
What does the National Vulnerability Database (NVD) maintain?
Which system continuously monitors a network and can take action to prevent malicious activity?
Which method can help prevent spoofing in cybersecurity?
What protocol is designed for network management?
Unified Equipment Management (UEM) combines which of the following?
What does passive reconnaissance primarily involve?
In terms of cybersecurity, what does DRP stand for?
What defines a DDoS (Distributed Denial of Service) attack?
Why is it important to hide the SSID in a Wi-Fi network?
Which characteristic defines script kiddies?
Which form of backup is considered a valid daily method for protecting data?
Which of the following is NOT a characteristic of a cold site?
Which protocol guarantees delivery of data through a connection-based approach?
What is an incremental backup?
What information does Nbtstat display?
Why is availability important in an information system?
Which technology allows a computer to run multiple operating systems at the same time?
What is the function of SMTP (Simple Mail Transfer Protocol)?
What is the main characteristic of APT attacks?
What does SSID stand for in a Wi-Fi network?
What are containers for phones used for?
Which protocol typically uses port 443?
Why might hackers target PowerShell?
Who is referred to as an adversary in the context of cybersecurity?
What is the main function of the Data Link Layer in the OSI model?
In what way can an attacker steal data from another device?
Which port is associated with the Lightweight Directory Access Protocol (LDAP)?
What defines a Zero Day Attack?
Which of the following is NOT an example of a corrective control?
What is recommended as a security practice regarding the SSID?
What type of reconnaissance involves actively probing a network or system?
What is the main focus of a Business Continuity Plan (BCP)?
Which wireless security is considered the best for personal use?
How does a proxy server contribute to online privacy?
What does Mobile Content Management (MCM) primarily assist IT admins with?
What is the primary function of a Multi Layer Switch (Layer 3 switch)?
What is a host-based firewall?
What does a Host-Based Intrusion Prevention System (HIPS) primarily do?
What do vulnerabilities expose an organization to?
What type of information is primarily found in system logs within the event viewer?
Which type of attack is characterized by leaving unsecured connections open?
Which command is useful for determining the IP address of a target hostname?
What does the Netstat command provide information about?
Which principle is NOT a component of Information Assurance?
What is the primary function of Wireshark in network management?
What type of data is considered 'data in transit'?
Which of the following best describes the concept of chain of custody?
What characterizes an insider threat?
In the COPE strategy, what is offered to employees?
Which act focuses on the privacy of college student records?
What is the concept of Shadow IT?
What is PowerShell primarily known for?
What is the primary purpose of SSH (Secure Shell)?
Which of the following represents a typical method of an insider threat?
What does Common Vulnerabilities and Exposures (CVE) identify?
Which protocol is used to test and verify network connectivity?
Which of the following describes a threat in cybersecurity?
What aspect of a dynamic routing technique helps in route selection?
Which port is used by Telnet for remote communication?
What is the main use of port 80?
What common outcome can be caused by substituting an invalid MAC address?
What is the risk associated with a cyber threat?
What characterizes a half-open attack or SYN flood?
In cybersecurity, what is considered worse: a false positive or a false negative?
Which of the following is an added benefit of using a VPN?

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy