Questions

You can test your knowledge of the topics covered in this chapter with the following questions. The answers can be found at the end of the book.

1. Which of these techniques is an example of the privilege escalation tactic?
   1. Domain policy modification
   2. Use of an alternate authentication method
   3. Email collection
   4. Phishing for information
2. Which of the following is not a principle of Microsoft’s Zero Trust guidance?
   1. Use least privileged access
   2. Assume breach
   3. Decommission network perimeters
   4. Verify explicitly
3. Which of the following refers to an approach attackers can use to avoid installing their own malware and, instead, leverage built-in capabilities?
   1. lolcat
   2. lolbin
   3. lolsys
   4. lolwin
4. According to a 2021 IBM Security report, how many days, on average, did it take for a cybersecurity breach to be identified?
   1. 31
   2. 90
   3. 182
   4. 212
5. What are the risks of Remote Desktop Protocol (RDP) being exposed over the internet? Choose all that apply.
   1. Credentials might have leaked online.
   2. RDP is inherently an insecure protocol.
   3. Authentication might be protected with only a single factor of authentication.
   4. CredSSP does not support encrypting credentials over the internet.