CCP Cybersecurity Fundamentals & Concepts 3

Question 1

What is the primary function of a Security Information and Event Management (SIEM) system?

Accepted Answer

To aggregate and correlate security logs for real-time analysis

Answer

A SIEM collects and analyzes log data from across an organization's infrastructure to detect threats and generate alerts.

Question 2

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan Horse

Answer

A Trojan Horse masquerades as legitimate software while secretly performing malicious actions.

Question 3

What is 'defense in depth' as a cybersecurity strategy?

Accepted Answer

Layering multiple security controls so that failure of one does not compromise the system

Answer

Defense in depth uses multiple overlapping security controls so an attacker must defeat several layers to succeed.

Question 4

Which protocol is used to securely transfer files and provides encrypted channel over SSH?

Accepted Answer

SFTP

Answer

SFTP (SSH File Transfer Protocol) uses SSH to provide encrypted, secure file transfer capabilities.

Question 5

An attacker intercepts communications between two parties without their knowledge. This is an example of what attack?

Accepted Answer

Man-in-the-Middle (MitM)

Answer

A Man-in-the-Middle attack involves secretly intercepting and potentially altering communications between two parties.

(CCP) Certified Cybersecurity Professional Practice Test