Questions

As we conclude, here is a list of questions for you to test your knowledge regarding this chapter's material. You will find the answers in the Assessments section of the Appendix:

1. Which filesystems are supported by Alternate Data Streams (ADSes)?
   1. VHD
   2. FAT32
   3. NTFS
   4. CDFS
2. What utility can be used to stop the auditing or logging of events?
   1. Auditpol
   2. ADS
   3. Regedit
   4. NTFS
3. An attacker adding higher privileges to their account (adding themselves to the administrators group) is called what?
   1. Trinity slide
   2. Vertical escalation
   3. Sideloading
   4. Pass the hash
4. Clark brings in a new keyboard to work and gives it to Lois; soon after, Lois's credentials are being used on other systems. What do you suspect is the cause?
   1. A keylogger
   2. Malware
   3. MFA attacks
   4. Ransomware