CIS 109
Pre-digital technology is:
Often enhanced by the introduction of digital features
A digital signature can provide which of the following benefits?
Data Integrity
Which technology hides the existence of data?
Steganography
Which of the following is a program advertised as performing one activity but actually does something else?
trojan
What are the three types of malware that have the primary traits of circulation and/or infection?
viruses, Trojans, and worms
From what term is war driving derived?
war dialing
Which type of web browser enhancement can change browser menus or create additional toolbars?
Add-on
Which of the following is a risk associated with the use of private data?
Associations with groups.
What type of backup is performed continually without any intervention by the user?
Continuous Backup
What do web servers use to track whether a user has previously visited a web site?
Cookies
When we talk about the uniqueness of cybertechnology, we mean that:
Digital technology has dramatically enhanced nearly every technology that came before it due to digital technology's scope of impact, speed, access & ease of use
What is it called when unsuspecting users visit an infected website and their browsers download code that targets a vulnerability in the user's browser?
Drive-by-download
What is contained within the body of an email message as a shortcut to a website?
Embedded Hyperlink
What does a VPN use to ensure that any transmissions that are intercepted will be indecipherable?
Encryption
What law contains rules regarding consumer privacy
Fair and Accurate Credit Transactions Act
Which law requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information?
GLBA (gramm leach bliley act)
Under which law must healthcare enterprises guard protected health information and implement policies and procedures to safeguard it, whether it be in paper or electronic format?
HIPAA
In the past, which term was commonly used to refer to a person who uses advanced computer skills to attack computers?
Hacker
Which of the following is an advantage of hardware encryption over software encryption?
Hardware encryption is not subject to attacks like software encryption.
Which of the following creates a digest and does not create ciphertext that can later be decrypted?
Hash Algorithm
Which of the following is NOT an element of asymmetric cryptography?
Hash algorithm
Ethical concerns about privacy have risen greatly because:
Inadequate attention is paid to developing public policy and good data security practices
What type of spyware silently captures and stores each keystroke that a user types on the computer's keyboard?
Keylogger
What security feature can you use to cause a mobile device to be completely locked for a period of time if the passcode is entered incorrectly a number of times?
Lockout period
Which of the following can be described as a poisoned ad attack?
Malvertising
Which of the following can be described as data that is used to describe the content or structure of the actual data?
Metadata
When we talk about the uniqueness of cyberethics, we mean that:
New cybertechnology capabilities have given rise to dramatically new versions of traditional ethics issues
Which of the following is NOT true about privacy?
Privacy of any level that you desire is easily achievable today.
What is another name for asymmetric cryptography?
Public key cryptography
On tablets and smartphones, what feature can be used that can erase the contents of the device if lost or stolen?
Remote Wipe
Which type of malware will hide or remove all traces of evidence that may reveal the malware, such as log entries?
Rootkit
What serves as the network name identifier in a Wi-Fi network?
SSID
What can be used to run JavaScript in a restricted environment and limit what resources it can access?
Sandboxing
What type of software update is a cumulative package of all patches and feature updates?
Service Pack
____ look for specific words and block email messages containing those words.
Spam Filters
HTTP is based on which larger set of standards for Internet communication?
TCP/IP
Which of the following is a type of action that has the potential to cause harm?
Threat
Which term is best described as a person or element that has the power to carry out a threat?
Threat Agent
Which of these is a characteristic of a secure hash algorithm?
Two different sets of data cannot produce the same digest
What is the best approach to establishing strong security with passwords?
Use technology for managing passwords
Which type of Wi-Fi device acts as the base station for wireless devices as well as providing a gateway to the external Internet?
Wireless Router
Some attackers might create a peer-to-peer network that connects a wireless device directly to another wireless device, such as the victim's laptop directly to the attacker's laptop. What is this type of network called?
ad hoc
What can an attacker use to divert all mail to their post office box so that the victim is never aware that personal information has been stolen?
change-of-address form
Which of the following is a place where steganography can hide data?
in the metadata of a file
What term is frequently used to describe the tasks of securing information that is in a digital format?
information security
What is data called that is input into a cryptographic algorithm for the purpose of producing encrypted data?
plaintext
What popular online activity involves grouping individuals and organizations into clusters or groups based on their likes and interests?
social networking
Which phrase best describes security?
the goal to be free from danger as well as the process that achieves that freedom
Which of the following is a characteristic of a weak password?
used on multiple accounts
If userA wants to send a secure message to userB using an asymmetric cryptographic algorithm, which key does userB use to decrypt the message?
userB's private key
What type of network uses an unsecured public network, such as the Internet, as if it were a secure private network?
virtual private network
Which of the following is NOT a privacy best practice?
Always carry your Social Security number with you
Which of the following ensures that data is accessible when needed to authorized users?
Availability
Botnets can flood a Web server with thousands of requests and overwhelm it to the point that it cannot respond to legitimate requests. What is this called?
Denying Services
Which of the following involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain?
Identity Theft
The ____ is a worldwide set of interconnected computers, servers, and networks.
Internet
Which of the following is a general term that refers to a wide variety of damaging or annoying software programs?
Malware
Which term can be described as a publicly released software security update intended to repair a vulnerability?
Patch
Information contained on devices is protected by three layers: Two of the layers are products and policies and procedures. What is the third layer?
People
Using which Internet security best practice is information not saved by the browser, such as pages that are visited will not be recorded to history or the address bar?
Private Browsing
Which type of malware is a set of software tools used by an attacker to hide the actions or presence of other types of malicious software, such as Trojans, viruses, or worms?
Rootkit
Whereas phishing involves sending millions of generic e-mail messages to users, which type of similar attack targets only specific users?
Spear-Phishing
What is the most secure option for the type of passcode that can be entered to access a mobile device?
Strong Alphanumeric Password
The term "cyberethics" refers to:
The ethical issues raised by cybertechnology and its uses , The societal issues raised by cybertechnology and its uses , The public policy issues raised by cybertechnology and its uses.
Which Windows feature provides information to users and obtains their approval before a program can make a change to the computer's settings?
User Account Control
vulnerability
What is a flaw or weakness that allows a threat agent to bypass security?
The ____ is composed of Internet server computers on networks that provide online information in a specific format.
World Wide Web
Which type of malware exploits a vulnerability on one system and then immediately searches for another computer on the network that has the same vulnerability?
Worm
An infected robot computer is known as a ____.
Zombie
What type of attack is a false warning, often contained in an email message claiming to come from the information technology (IT) department?
hoaxes
Security is ____ convenience.
inversely proportional to
What security feature on a smartphone prevents the device from being used until a passcode is entered?
lock screen
What type of malware can, for example, locks up a user's computer and then display a message that purports to come from a law enforcement agency that states the user must pay a fine for illegal activity? adware
ransomware
AV software on a computer must have its ____ files regularly updated by downloads from the Internet.
signature