Thor Easy 1

Question 1

62 What is DNP3 protocol?

Answer 1

used tcp port 20000. used for scada systems.particularly within the electrical and water utility industries. access control is very important.

Question 2

68 What is MITRE attack?

Answer 2

globally-recognized knowledge base of adversary tactics and techniques used in cyberattacks, based on real-world observations

Question 3

69 In prevention questions, which is most important? 2fa or software update

Answer 3

2fa

Question 4

70 What is a reciprocal site?

Answer 4

Reciprocal refers to an agreement between two organizations to host each other’s backup hardware and data in the event of a disaster. They are exact copies.

Question 5

72 In Kerberos, what is KDC?

Answer 5

a central server that acts as a trusted third party for authenticating principals (users and services) and issuing Kerberos tickets. It is the heart of the Kerberos authentication protocol and consists of two main components: the Authentication Server (AS) and the Ticket Granting Server (TGS).

Question 6

How do you measure qualitative vs quantitative risk?

Answer 6

quantitiative risk is a number. qualitative risk is a wording (subjective)

Question 7

102 What is the best answer for security awareness?

Answer 7

security posture, not compliance because not all security awareness is related to compliance and regualtion. You can do awareness for productivity, not regulation.

Question 8

105 What is covert timing channel? And how to prevent?

Answer 8

It has to do with sending data in a busy time so that it won’t go noticed. The solution to prevent this is to analyze without regard to timing

Question 9

107 What is a spectre attack? How to prevent it?

Answer 9

It exploits cpu vulnerability and leaks info. You update the operating system.

Question 10

113 If question is asking highest security controls, what is the answer?

Answer 10

secuirty accessment and audits

Question 11

115 When looking at log files, what is most important? What is not as important?

Answer 11

The source. Not the time

Question 12

119 In securing a network, what is most important? What is not as important?

Answer 12

access control is most. security assessment or audit is not.

Question 13

122 What is broadcast domain? What is something you get wrong?

Answer 13

it sends to all devices in network. All. Something you get wrong is it send to all device but doesn’t send to some devices