SANS Cyber Aces Practice Test

These questions are part of the practice quiz. Start practicing

• What command would you use to check the connectivity status to a remote host?
• Which regular expression correctly identifies the names "Orville" or "Wilbur" Wright?
• What does a network packet do?
• Which command is used to view the contents of a file in a paginated format?
• What is a botnet?
• Is a MAC address hard-coded and impossible to spoof?
• When your computer wants to know the IPv4 address for isc.sans.org, which DNS Resource Record type is being requested?
• What does the acronym MFA stand for in cybersecurity?
• What is the goal of data encryption?
• What is another default subnet mask for the IP range 172.16.0.0/16?
• Which of the following is NOT a feature of a VPN?
• What does the 'uniq' command accomplish in Linux?
• What is the correct way to reference an array element?
• What do security incidents typically refer to in cybersecurity?
• How does a VPN enhance user privacy?
• Which types of routes can a router support?
• What is the primary function of the 'sort' command in Linux?
• What is the default subnet mask for the IP range 172.16.0.0/16?
• What gateway address will your computer use to communicate with the IP address 192.168.200.100?
• Which of these commands would not successfully display the contents of a text file?
• Which type of organization typically employs continuous monitoring?
• If a computer wants to send a packet from Host 1 (192.168.6.10/24) to Host 2 (192.168.47.35/24), what route will the packet take?
• What is the purpose of patch management?
• What does the 'chmod' command primarily affect?
• What noun is used in cmdlets to manage the execution policy for scripts?
• Which command is best for viewing the available cmdlets related to the history of commands?
• What is the purpose of the 'ping' command?
• Which command allows a user to change their password?
• Where in the Local Security Policy can you control whether CTRL-ALT-DEL is required to log in?
• What does DHCP stand for?
• What information does the netstat command provide in Windows?
• Which command would you use to remove an alias in PowerShell?
• What does the acronym IDS stand for in cybersecurity?
• Which type of security control is used to prevent unauthorized access?
• Which command would you use to rename a file in Linux?
• What is the main goal of a DDoS attack?
• What is the primary use of the 'ren' command?
• Which of the following is a key benefit of continuous monitoring?
• Which command can help determine where packets are being dropped in a network?
• What is the concept of least privilege in security?
• What does the command 'cat' do in Linux?
• Which command in Linux is used to copy a file?
• What is the primary function of antivirus software?
• Which status code indicates that access to the requested URL is forbidden?
• In scripting, what does the operator '-lt' represent?
• What is the result of using a variable without initializing it?
• Which command would launch Windows Explorer as user "bob"?
• What is the purpose of the 'tail' command in Linux?
• What does the 'ifconfig' command provide details about?
• Which of the following best describes a star topology network?
• What defines a firewall rule?
• Which of the following is a method to define a function in scripting?
• What are inherited permissions in a system?
• What do the first three octets of a MAC address identify?
• What happens if a user is in a group with inherited "ALLOW" and another with explicit "DENY" for reading a file?
• What function does the 'less' command serve in Linux?
• To communicate with devices on the same subnet, what does a computer need to communicate with?
• What is the meaning of the acronym CSIRT?
• How is a subnet mask typically written?
• What does endpoint security primarily focus on?
• How would you map a drive to access a share named "FILES" on a server named "SERVER"?
• What is the purpose of digital signatures?
• What is the correct sequence of steps followed by a DHCP client to obtain an IP address?
• What is the difference between an IDS and an IPS?
• What is the main purpose of a proxy server?
• What is the proper syntax to check if "$a" is greater than 4?
• What is malware that appears legitimate but executes malicious code called?
• Which command is used to create an array?
• Which command serves the function of associating a new name to an existing file in Linux?
• Which command is NOT valid for starting the WebClient service?
• For searching text within a file or STDIN in Linux, which command should you use?
• What does the term "phishing" refer to?
• What is the main goal of risk assessment in cybersecurity?
• Which three packets establish a TCP connection in order?
• What is meant by the term "vulnerability" in cybersecurity?
• What is the difference between symmetric and asymmetric encryption?
• What does the term "exfiltration" refer to in cybersecurity?
• What does SSL stand for in cybersecurity?
• What technique is being used if an attacker sends fragmented packets where "shadow" overwrites "junker" when reassembled?
• Which subnet mask will logically place the devices with IP addresses 10.10.5.5 and 10.10.10.10 on the same network?
• Using 'su' without specifying a username defaults to which user?
• Which statement about data transfer reliability is true?
• Curly Braces are used for which of the following purposes?
• Given that you can ping your own device and external addresses, but not browse the internet, what could be a potential cause?
• What are explicit permissions in relation to file access?
• What is the purpose of penetration testing?
• What can be a result of not utilizing a VPN on unsecured networks?
• Which of the following best describes the nature of continuous monitoring?
• What does the term "encryption key" mean?
• How does TRACET.EXE identify all the hops in a route?
• What is the purpose of network segmentation?
• What does the 'rm' command accomplish in a Linux environment?
• What is social engineering?
• What is a security breach?
• What is a zero-day exploit?
• What defines an access control list (ACL)?
• What does a subnet mask do in a network?
• What is the primary advantage of using biometrics for authentication?
• How do you comment a line in a script?
• Which of the following best describes a firewall?
• In a network, what is the role of the default gateway?
• At which layer of the OSI model does fragmentation occur?
• What is the function of the 'ls' command in Linux?
• What regular expression would be used to match text within double quotes?
• What is the main function of an SSL certificate?
• What type of attack is characterized by flooding a target with traffic?
• What does the acronym PII stand for?
• What is the name of the $_ variable in scripting?
• Which command in Linux would you utilize to print the contents of a file on the terminal?
• What is the output of the 'stat' command in Linux?
• What is one common component of endpoint security?
• Which command is typically used to display the current active directory structure?
• What is the role of an antivirus program?
• What role does encryption play in a VPN?
• If a user has explicit "ALLOW" for reading a file but also belongs to a group with inherited "DENY", what is the result?
• What information does the 'ps' command provide?
• What type of attack involves intercepting and altering communications?
• What type of malware is specifically designed to hold a system hostage for ransom?
• What does the command 'file' in Linux do?
• Which command would successfully run if you want to see the current directory location in PowerShell?
• Which of the following commands is best for monitoring real-time log file updates?
• Which command is used to change the permissions of a file in Linux?
• What does "security auditing" involve?
• If a user belongs to a group with explicit "ALLOW" and another with explicit "DENY" for reading a file, what will be the outcome?
• What command can determine the full path and parameters for starting the WebClient service?
• In Linux, what does the '/' character denote?
• What does the 'kill' command do?
• What does a security incident response plan entail?
• Which command is used to change the current working directory in Linux?
• What is the purpose of a script block?
• Which command displays the network configuration of the local system in Windows?
• What are security patches?
• What does the 'whoami' command return in a Linux environment?
• What does the 'tail -F' command do?
• At which layer do switches operate within the OSI model?
• What is the definition of phishing in cybersecurity?
• What is the function of the 'rmdir' command in Linux?
• In which section of the Local Security Policy can you grant a user permission to change the time zone?
• Which command will list the files on a remote share?
• Which cmdlet would you use to create a new directory?
• What does a Security Information and Event Management (SIEM) system primarily do?
• What is the main function of anti-virus software?
• What does a risk management framework help organizations to do?
• Which of the following statements about MAC addresses is true?
• What is the primary purpose of a firewall?
• What is a common method used in social engineering?
• What is the name of the registry key that initiates the NETCAT backdoor on a computer?
• Which command would you use to sort a file's contents?
• What is the purpose of a digital certificate?
• What type of attack involves sending malicious packet fragments that when reassembled reveal a different payload?
• What does a strong password typically include?
• Which command returns network configuration information?
• What is the primary purpose of the 'su' command in Linux?
• What is the primary role of encryption in data security?
• What is an exploit in cybersecurity?
• To view the permissions and timestamps of a file, which command should you use?
• Which command would you use to create a directory in Linux?
• What does BYOD stand for?
• What is the valid range of TCP ports?
• Which device operates ONLY at the Physical Layer?
• What is the command to remove a file in Linux?
• What command retrieves aliases for the Get-ChildItem cmdlet?
• What does the term "internal threat" refer to?
• What does the CIA triad in cybersecurity stand for?
• What is a significant challenge of implementing continuous monitoring?
• If your computer has an IP address of 192.168.100.5, will this address be recorded in the logs of www.sans.org when accessed?
• Which command would list the contents of a directory sorted alphabetically?
• What does the term “zero-day vulnerability” refer to?
• When Bob runs "runas /user:bob_admin cmd.exe", what must be true for the command to succeed?
• HTTP operates at which layer of the OSI model?
• What security benefit does a VPN provide in public Wi-Fi environments?
• Which command is NOT used to either create or delete directories?
• What type of information does 'netstat' display?
• What does the 'pwd' command do in Linux?
• What is a honeypot in cybersecurity?
• What is continuous monitoring in cybersecurity?
• By default, can PowerShell execute scripts written locally on the computer?
• What could be a possible issue if several computers on a network are assigned the wrong DNS server IP address while using DHCP?
• If you can reach a website by its IP address but not by its host name, what is the first logical step to investigate?
• What is a security policy?
• What does the term "social engineering" usually involve?
• If an IP address is 192.168.231.6, what gateway will your computer need to communicate with it?
• What is the primary purpose of a VPN (Virtual Private Network)?
• What does the 'lsof' command show in Linux?
• What are the two hash formats used by SAM to store user passwords?
• Which Windows command is used to display the state of the system's network interfaces?
• What is the output of 'Write-Output "Hello World"'?
• What subnet mask would also place devices with the IP addresses 10.10.5.5 and 10.10.10.10 on the same network?
• What command provides a list of files in the current directory in Linux?
• Which of the following IP addresses must use NAT to access resources on the internet?
• Which command is used to display the first 10 lines of a file in Linux?
• Which command checks if "$a" ends with the string "find me"?
• What role does encryption play in cybersecurity?
• Which of the following is a key benefit of multi-factor authentication?
• What are cyber threats?
• What does the tasklist command do in Windows?
• What is the purpose of vulnerability scanning?
• What is the purpose of the 'ln' command in Linux?
• Which command updates all installed RPM packages except for a specific package?
• Which authentication method is supported by RIP Version 1 for route updates?
• Which command terminates a running process in Windows?
• What is two-factor authentication (2FA)?
• What does the 'grep' command do in the context of file management in Linux?
• What is phishing?
• Which command can be used in Windows to display a list of network connections?
• What is a cybersecurity incident?
• What would you use to view all available aliases in PowerShell?
• Continuous monitoring focuses mainly on which aspect of cybersecurity?
• Why is continuous monitoring important in the context of regulatory compliance?
• What response code does a web server issue if a requested file does not exist?
• Which of the following best describes a firewall?
• What does "social media awareness" involve in the context of cybersecurity?
• In which context is 'foreach' primarily used?
• To connect devices within the same subnet, which component must be used?
• What does VPN stand for?
• Which PowerShell cmdlet retrieves the current date and time?
• Which operator is used for string comparison?
• What could happen if two DHCP servers are operating on the same network?
• What does "data at rest" refer to?
• Why is it important for routers to support different types of routes?
• What configuration should you apply to a firewall to allow internal ping requests while blocking external traceroute requests?
• Which command allows you to change the properties of an existing directory?
• What does 'return' do in a function?
• What are the main components of an intrusion detection system (IDS)?
• What could happen if the subnet mask is not correctly set between two devices?
• What command is used to install updates on a system?
• What does the 'cat' command do in Linux?
• What process occurs when obtaining a DNS answer for ISC.SANS.ORG?
• In what way does a VPN provide secure data transmission?
• Which of the following is NOT a proper application of the UDP protocol?
• What type of data is typically analyzed in continuous monitoring?
• What is the purpose of the 'mv' command in Linux?
• Which command in Linux is specifically designed to print the current path of the working directory?
• What is a DDoS attack?
• How can you prevent LANMAN hashes from being stored without disabling LANMAN?
• Which layer operates on the principle of establishing a reliable connection in data transfer?
• Which type of malware is designed to replicate itself and spread to other computers?
• What is the purpose of a penetration test in cybersecurity?
• Is it true that your MAC address will be recorded in the logs of an internet web server you access?
• Which command syntax is correct for an attacker to create a registry key to run NETCAT?