EMT Practice Test

1. Question Content...

---

Question1: Which of the hacking methodology steps can be used to identify the applications and vendors used?

Question2: Which of the following is the stance that by default has a default deny approach?

Question3: Which of the following is the name of hacking for a cause?

Question4: Which of the following are NOT components of an ICS/SCADA network device?

Question5: Which of the following can be used to view entire copies of web sites?

Question6: Which component of the IT Security Model is attacked with masquerade?

Question7: Which mode within IPsec provides secure connection between two endpoints but does NOT protect the sender and the receiver?

Question8: Which mode within IPsec provides a secure connection tunnel between two endpoints AND protects the sender and the receiver?

Question9: Which of the following names represents inbound filtering?

Question10: What does the SPI within IPsec identify?

Question11: Which of the following ports are used for communications in Modbus TCP?

Question12: Which of the following is a weakness of a vulnerability scanner?

Question13: Which of the CVSS metrics refer to the exploit quotient of the vulnerability?

Question14: Which of the ICS/SCADA generations is considered distributed?

Question15: Which of the following is required to determine the correct Security Association?

Question16: How many main score areas are there in the CVSS?2

Question17: What is a vulnerability called that is released before a patch comes out?

Question18: What step of the malware infection installs the malware on the target?

Question19: Which of the registrars contains the information for the domain owners in Europe?

Question20: Which of the ICS/SCADA generations is considered networked?

Question21: Which of the following is known as a prebuilt directional gateway that is unidirectional?

Question22: What is the size of the AH in bits with respect to width?

Question23: Which component of the IT Security Model is usually the least priority in ICS/SCADA Security?

Question24: At what layer does a switch normally operate?

Question25: With respect to the IEC 62443, how many steps are in the Defense in Depth process?

Question26: Which of the following are valid TCP flags?

Question27: What share does the WannaCry ransomware use to connect with the target?

Question28: A Security Association is a __________ way connection?

Question29: In physical to logical asset protections, what threat can be directed against the network?

Question30: What type of protocol is represented by the number 6?

Question31: Which of the following is NOT an exploit tool?

Question32: Which component of the IT Security Model is the highest priority in ICS/SCADA Security?

Question33: How many IPsec rules are there in Microsoft Firewall configuration?

Question34: What is the extension of nmap scripts?

Question35: Which of the IPsec headers contains the Security Parameters Index (SPI)?

Question36: How many firewalls are there in the most common ICS/SCADA architecture?