Cyber Ops Checkpoint Exam

A PC user issues the netstat command without any options. What is displayed as the result of this command?

A list of all established active TCP connections

Match the Windows 10 boot sequence after the boot manager (bootmgr.exe) loads.

the Windows boot loader win load.exe loads - 1

ntoskrnl.exe and hal.dll are loaded - 2

win load.exeis loaded - 3

ntoskrnl.exe loads and executes - 4

winlogon.exe is loaded and executes the logon process - 5

Which type of Windows PowerShell command performs an action and returns an output or object to the next command that will be executed?

A technician has installed a third party utility that is used to manage a Windows 7 computer. However, the utility does not automatically start whenever the computer is started. What can the technician do to resolve this problem?

Change the startup type for the utility to Automatic in Services.

What technology was created to replace the BIOS program on modern personal motherboards?

UEFI

What is the purpose of entering the netsh command on a Windows PC?

to configure networking parameters for the PC

Match the Windows system tool with the description.

A - a hierarchical database of all system and user information.
B - Maintains system logs
C - Selectively denies traffic on specified interfaces
D - A CLI environment used to run scripts and automate tasks

Which Windows tool can be used by a cybersecurity administrator to secure standalone computers that are not apart of an active directory or domain?

Local Security Policy

An IT technician wants to create a rule on two Windows 10 computers to prevent an installed application from accessing the public Internet. Which tool would the technician use to accomplish this task?

Windows Defender Firewall with Advanced Security

Which two commands could be used to check if DNS name resolution is working properly on a Windows PC?

nslookup, ping

A user logs in to Windows with a regular user account and attempts to use an application that requires administrative privileges. What can the user do to successfully use the application?

Run as Administrator

A user creates a file with .ps1 extension

Match the commonly used ports on a Linux server with the corresponding service.

443 - HTTPS, 53 - DNS, 23 - Telnet, 25- SMTP

Match the octal value to the file permission description in Linux.

000 - No Access, 010 - Write only, 110 - Read and write, 101 - Read and execute, 001 - Execute only

Match the Linux system component with the description.

Daemon - A background process that runs without the need for user interaction
Shell - A program that interprets and executes user commands
CLI - A text based interface that accepts user commands

Why would a network administrator choose Linux as an operating system in the Security Operations Center (SOC)?

The administrator has more control over the operating system.

Which two methods can be used to harden a computing device?

Ensure physical security and Enforce the password history mechanism.

A Linux system boots into the GUI by default, so which application can a network administrator use in order to access the CLI environment?

Terminal emulator

What is the outcome when a Linux administrator enters the man man command?

The man man command provides documentation about the man command

Why is Linux considered to be better protected against malware than other operating systems?

file system structure, file permissions, and user account restrictions

Match the description to the Linux term.

A type of file that is a reference to another file or directory - Daemon
Protecting remote access - Symlink
A running background process that does not need user interaction - Hardening

these are not correct however the tests says they are correct would be symlink, hardening, daemon

Which type of tool allows administrator to observe and understand every detail of a network transaction?

packet capture software

Which Linux command can be used to display he name of the current working directory?

pwd

In the Linux shell, which character is used between two commands to instruct the shell to combine and execute these two commands in sequence?

|

Match the Linux command to the function.

ps - Lists the processes that are currently running
pwd - Displays the name of the current working directory
sudo - Runs a command as another user
chmod - Modifies file permissions

What is the purpose of using the net accounts command in Windows?

to review the settings of password and logon requirements for users

Which statement describes the function of the Server Message Block (SMB) protocol?

It is used to share network sources.

Match typical Linux log files to the function.

/var/log/dmesg or messages - Used by RedHat and CentOS computers and tracks authentication-related events

/var/log/secure or auth.log - Stores information related to hardware devices and their drivers

/var/log/messages or dmesg - Used by Debian and Ubuntu computers and stores all authentication-related events

/var/log/auth.log or secure - Contains generic computer activity logs, and is used to store information and noncritical system messages
^ all wrong

Consider the ls -l command in the Linux output below. What are the file permissions assigned to the sales user for the analyst.txt file?

ls -l analyst.txt
-rwxrw-r-- sales staff 1028 May 28 15:50 analyst.txt

read, write, execute

Why is Kali Linux a popular choice in testing the network security of an organization?

It is an open source Linux security distribution containing many penetration tools.

What are two benefits of using an ext4 partition instead of ext3?

improved performance, increase in the size of supported files, not decreased load time

Match the Windows command to the description.

dir - list files in a directory
mkdir - creates a new directory
cd - changes the current directory
ren - renames a file

What are two advantages of the NTFS file system compare with FAT32?

NTFS supports larger files,
not NTFS allows faster formatting of drives