Cyber Security Jobs Cyber Security Software 3 — Questions and Answers
Question 1: Which tool is best known as a penetration testing framework for developing and executing exploits?
- Metasploit (Correct answer)
- Excel
- Docker
- Grafana
Correct answer: Metasploit
Metasploit is a leading framework used by penetration testers to develop and run exploit code.
Question 2: What is the primary purpose of a WAF (Web Application Firewall)?
- Encrypt hard drives
- Filter and block malicious HTTP traffic (Correct answer)
- Manage backups
- Schedule patches
Correct answer: Filter and block malicious HTTP traffic
A WAF inspects HTTP/HTTPS requests to block attacks like SQL injection and XSS.
Question 3: Which tool would an analyst use to scan open ports and discover services on a network?
- Nmap (Correct answer)
- Audacity
- Blender
- WinRAR
Correct answer: Nmap
Nmap is the standard tool for port scanning and network service discovery.
Question 4: A sandbox in malware analysis is used to do what?
- Speed up the CPU
- Safely execute and observe suspicious files (Correct answer)
- Compress backups
- Encrypt emails
Correct answer: Safely execute and observe suspicious files
A sandbox isolates and runs suspicious code so its behavior can be observed without risk.
Question 5: Which type of software provides single sign-on and federated identity across applications?
- IAM/SSO platform (Correct answer)
- Disk defragmenter
- Photo editor
- Spreadsheet app
Correct answer: IAM/SSO platform
Identity and Access Management (IAM) platforms enable SSO and federated authentication.
Question 6: What does antivirus signature-based detection rely on?
- Known patterns of malicious code (Correct answer)
- Random guessing
- User passwords
- Network bandwidth
Correct answer: Known patterns of malicious code
Signature-based detection matches files against a database of known malware patterns.
Question 7: Which tool is widely used for cracking or auditing password strength?
- John the Ripper (Correct answer)
- PowerPoint
- Zoom
- Calculator
Correct answer: John the Ripper
John the Ripper is a popular password-cracking tool used to audit weak credentials.
Cyber Security Jobs Cyber Security Software 3
Which tool is best known as a penetration testing framework for developing and executing exploits?