Intro to Network security quiz
What kind of server connects a remote system through the Internet to local serial ports using TCP/IP?
Serial server
An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:
Session hijacking
The expected monetary loss every time a risk occurs
Single Loss Expectancy (SLE)
An attack that broadcasts a ping request to computers yet changes the address so that all responses are sent to the victim.
Smurf attack
What term below is used to describe a means of gathering information for an attack by relying on the weaknesses of individuals?
Social engineering
Which of the following is not one of the four methods for classifying the various types of malware?
Source
A phishing attack that targets only specific users
Spear phishing
What is the term used to describe unsolicited messages received on instant messaging software?
Spim
Anti-virus products typically utilize what type of virus scanning analysis
Static analysis
One of the armored virus infection techniques utilizes encryption to make virus code more difficult to detect, in addition to separating virus code into different pieces and inject these pieces throughout the infected program code. What is the name for this technique?
Swiss cheese
An attack that corrupts the ARP cache
ARP Poisoning
Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment
Acceptable use policies
A policy that defines the actions users may perform while access systems and networking equipment.
Acceptable use policy (AUP)
The process of setting a user's account to expire
Account expiration
The least restrictive access control model in which the owner of the object has total control over it
Discretionary access control (DAC)
What type of undocumented yet benign hidden feature launches after a special set of commands, key combinations, or mouse clicks, and was no longer included in Microsoft software after the start of their Trustworthy Computing initiative?
Easter egg
What is the best way to prevent data input by a user from having potentially malicious effects on software
Escaping user responses
Script kiddies acquire which item below from other attackers to easily craft an attack:
Exploit kit
The PC Card and CardBus devices are being replaced by what technology
ExpressCard
The second version of the Terminal Access Control Access Control System (TACACS) authentication service
Extended TACACS (XTACACS)
Select below the option that is not one of the SD format card families
Extreme Capacity (SDXC)
Mobile devices such as laptops are stolen on average once every 20 seconds
False
Passwords provide strong protection
False
Successful attacks on computers today consist of a single element, malicious software programs that are created to infiltrate computers with the intent to do harm.
False
The CardBus is a 64-bit bus in the PC card form factor
False
The demand for certified IT professionals who know how to secure networks and computers is at an all-time low
False
The demand for certified IT professionals who know how to secure networks and computers is at an all-time low.
False
A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment
False Acceptable Use Policy (AUP)
An event that in the beginning is considered to be a risk yet turns out to not be one
False positive
A metallic enclosure that prevents the entry or escape of an electromagnetic field is known as a
Faraday cage
What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization
Incident management
What country is now the number one source of attack traffic?
Indonesia
An _______________ is a type of threat that can come from employees, contractors, and business partners, such as a disgruntled worker.
Insider
Select below the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.
Integrity
The act of movinng individuals from one job responsibility to another
Job rotation
Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users
Kerberos
Software or a hardware device that captures and stores each keystroke that a user types on the computer's keyboard.
Keylogger
Providing only the minimum amount of privileges necessary to perform a job or function
Least privilege
Mobile devices with global positioning system (GPS) abilities typically make use of
Location services
Computer code that lies dormant until it is triggered by a specific logical event
Logic bomb
To date, the single most expensive malicious attack occurred in 2000, which cost an estimated $8.7 billion. What was the name of this attack?
Love Bug
Which hashing algorithm below is used with NTLMv2's Hashed Message Authentication Code
MD5
A computer virus that is written in a script known as a macro
Macro virus
What information security position reports to the CISO and supervises technicians, administrators, and security staff?
Manager
What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian
Mandatory Access Control
What are values that are attributed to a system of beliefs that help the individual distinguish right from wrong called
Morals
An attack that uses the Internet Control Message Protocol (ICMP) to flood a victim with packets.
Ping flood
Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability
True
Because of how a rootkit replaces operating system files, it can be difficult to remove a rootkit from a system.
True
Geolocation is the identification of the location of a person or object using technology, and can be used as part of an authentication method
True
Today's software attack tools do not require any sophisticated knowledge on the part of the attacker.
True
Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites
True
XSS attacks occur when an attacker takes advantage of web applications that accept user input without validating it and then present it back to the user.
True
The first phase of the security policy cycle involves a vulnerability assessment
True 1- vulnerability assessment 2- create the security policy using information from risk management study 3- compliance monitoring and evaluation
How can an area be made secure from a non-secured area via two interlocking doors to a small room
Using a mantrap
A person's fundamental beliefs and principals, which are used to define what is good, and how to distinguish right from wrong, are collectively called a person's
Values
The two types of malware that require user intervention to spread are:
Viruses and trojans
A phishing attack that uses telephone calls instead of e-mails.
Vishing
What kind of data can be lost when a computer is turned off
Volatile
Select below the type of computing device that uses a limited version of the Linux operating system and uses a web browser with an integrated media player
Web-based
What language below is for the transport and storage of data, with the focus on what the data is?
XML
Due to the potential impact of changes that can affect all users in a organization, and considering that security vulnerabilities can arise from uncoordinated changes, what should an organization create to oversee changes
change management team
Computer code that is typically added to a legitimate program but lies dormant until it is triggered by a specific logical event is known as a?
logic bomb
A series of instructions that can be grouped together as a single command and are often used to automate a complex set of tasks or a repeated series of tasks are known as:
macro
What type of attack involves an attacker stealing a file containing password digests and comparing the digests with digests created by the attacker
offline cracking
The action that is taken by a subject over an object is called a(n)
operation
During a vulnerability assessment, what type of software can be used to search a system for port vulnerabilities
port scanner
Those who wrongfully disclose individually identifiable health information can be fined up to what amount per calendar year?
$1,500,000
Select below the string of characters that can be used to traverse up one directory level from the root directory:
../`
nother name for locally shared object (LSO)
.Flash cookie
What is the maximum effective range of a typical passive RFID tag?
19
According to the U.S. Bureau of Labor Statistics, what percentage of growth is the available job outlook supposed to reach by the end of the decade?
22
How many different Microsoft Windows file types can be infected with a virus?
70
According to the Federal Bureau of Investigation (FBI), what percentage of crime committed today leaves behind digital evidence that can be retrieved via computer forensics
85
What kind of software program delivers advertising content in a manner that is unexpected and unwanted by the user, and is typically included in malware?
Adware
A software program that delivers advertising content in a manner that is unexpected and unwanted by the user.
Adware
All In information security, what constitutes a loss?
All of the above
In information security, an example of a threat agent can be ____.
All of the above
In software development, the process of defining a collection of hardware and sfotware components along with their interfaces in order to create the framework for software development
Architectural Design
What type of learner tends to sit in the middle of the class and learns best through lectures and discussions
Auditory
The security protection item that ensures that the individual is who they claim to be (the authentic or genuine person) and not an imposter is known as?
Authentication
Software code that gives access to a program or a service that circumvents normal security protections.
Backdoor
What type of system security malware allows for access to a computer, program, or service without authorization?
Backdoor
Which item below is an imaginary line by which an element is measured or compared, and can be seen as the standard
Baseline
A logical computer network of zombies under the control of an attacker.
Botnet
What type of attack involves using every possible combination of letters, numbers, and characters to create candidate digests that are then matched against those in a stolen digest file
Brute force
An attack that occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer
Buffer overflow attack
When a company needs to identify mission-critical business functions and quantify the impact a loss of such functions may have on the organization in terms of it's operational and financial position, what should be performed
Business impact analysis (BIA)
The default root directory of the Microsoft Internet Information Services (IIS) Web server is located at which directory below?
C:\Inetpub\ wwwroot
A methodology for making modifications to a system and keeping track of those changes
Change management
In software development, presenting the code to multiple reviewers in order to reach agreement about its security.
Code review
Injecting and executing commands to execute on a server
Command injection
Using technology to search for computer evidence of a crime in order to retrieve information, even if it has been altered or erased, that can be used in pursuit of an attacker or criminal is an example of:
Computer forensics
Malicious computer code that, like its biological counterpart, reproduces itself on the same computer.
Computer virus
Which of the three protections ensures that only authorized parties can view information?
Confidentiality
Most DLP systems make use of what method of security analysis below
Content inspection
Mobile Device Management systems that allow users to store usernames and passwords within a device are said to be using
Credential management
What term is used to describe a loose network of attackers, identity thieves, and financial fraudsters?
Cybercriminals
The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options
DAP
Entries within a Directory Information Base are arranged in a tree structure called the
DIT
When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:
DNS
How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?
DNS poisoning
An attack that substitutes DNS addresses so that the computer is automatically redirected to an attacker's device.
DNS poisoning
ARP poisoning is successful because there are few authentication procedures to verify ARP requests and replies.
False
Because of the minor role it plays, DNS is never the focus of attacks.
False
Because the XSS is a widely known attack, the number of Web sites that are vulnerable is very small.
False
Duplicate image backups are considered a primary key to uncovering evidence because they create exact replicas of the crime scene
False
The ____ Act requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.
Gramm-Leach-Bliley
A penetration test where some limited information has been provided to the tester.
Gray box
Under which law are health care enterprises required to guard protected health information and implement policies and procedures whether it be in paper or electronic format?
HIPAA
What language below is designed to display data, with a primary focus on how the data looks?
HTML
What portion of the HTTP packet consists of fields that contain information about the characteristics of the data being transmitted?
HTTP header
A false warning designed to trick users into changing security settings on their computer
Hoax
A computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, but are actually imitations of real data files, to trick attackers into revealing their attack techniques.
Honeypot
The use of a single authentication credential that is shared across multiple networks is called
Identity management
What type of theft involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain?
Identity thef
The termination of an agreement between parties.
Off-boarding
Select below the decentralized open-source FIM that does not require specific software to be installed on the desktop
OpenID
Risk control type that covers the operational procedures to limit risk
Operational risk control type
A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network
Peer-topeer network
Disabling unused application/service ports to reduce the number of threat vectors.
Port security
security policy that outlines how the organization uses personal information it collects
Privacy policy
On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?
Privilege escalation
The remaining cluster space of a partially filled sector is padded with contents from RAM. What is the name for this type of scenario
RAM slack
Proximity readers utilize a special type of tag that can be affixed to the inside of an ID badge. What is the name for this type of tag
Radio Frequency Identification tag (RFID)
Malware that locks or prevents a device from functioning properly until a fee has been paid is known as:
Ransomware
Which of the following is not one of the types of settings that would be included in a Microsoft Windows security template
Resolution settings System services User rights Account policies
A situation that involves exposure to danger
Risk
The practice of requiring that processes should be divided between two or more individuals.
Separation of duties
When using Role Based Access Control (RBAC), permissions are assigned to
Roles
Which access control model can dynamically assign roles to subjects based on a set of defined rules
Rule Based Access Control
What language below is used to view and manipulate data that is stored in a relational database?
SQL
Select below the term that is used to describe individuals who want to attack computers yet lack the knowledge of computers and networks needed to do so:
Script kiddies
The physical procedure whereby an unauthorized person gains access to a location by following an authorized user is known as?
Tailgating
A risk control type that involves using technology to control risk
Technical risk control type
A person or element that has the power to carry out a threat
Threat agent
Limitation imposed as to when a user can log in to a system or access resources
Time-of-day restriction
Select below the type of malware that appears to have a legitimate use, but actually contains or does something malicious:
Trojan
A QR code can store website URLs, plain text, phone numbers, e-mail addresses, or virtually any alphanumeric data up to 4296 characters
True
A macro is a series of instructions that can be grouped together as a single command.
True
A security administrator has both technical knowledge and managerial skills.
True
Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.
True
Keyed entry locks are much more difficult to defeat than deadbolt locks
True
RAM slack can contain any information that has been created, viewed, modified, downloaded, or copied since the computer was last booted
True
Securing the host involves protecting the physical device itself, securing the operating system software on the system, using security-based software applications, and monitoring logs
True
Security is the goal to be free from danger as well as the process that achieves that freedom.
True
Software keyloggers are programs that silently capture all keystrokes, including passwords and sensitive information.
True
The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own
True
The CompTIA Security+ Certification is aimed at an IT security professional with the recommended background of a minimum of two years experience in IT administration, with a focus on security.
True
A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology
anti-climb collar
An item that has value.
asset
The code that can be executed by unauthorized users in a software program
attack surface
During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password
authentication request
What is the name for a standard or checklist against which systems can be evaluated and audited for their level of security (security posture)
baseline
Multiple sectors on a disk, when combined, are referred to as a
cluster
In order to minimize vulnerabilities in software, code should be subject to and analyzed while it is being written in what option below
code review
A premeditated, politically motivated attack against information, computer systems, computer programs, and data, which often results in violence
cyberterrorism
In what kind of attack can attackers make use of hundreds of thousands of computers under their control in an attack against a single server or network?
distributed
A user has become compromised as a result of visiting a specific web page, without clicking on any kind of content. What type of attack has occurred?
drive-by-download
Automated attack package that can be used without an advanced knowledge of computers
exploit kit
Automated attack package that can be used without an advanced knowledge of computers
exploit kit
DLP agent sensors are unable to read inside compressed files and binary files
false
Spreading similarly to a virus, a worm inserts malicious code into a program or data file.
false
What type of device, sometimes called a packet filter, is designed to prevent malicious network packets from entering or leaving computers or networks
firewall
Attacker who attacks for ideological reasons that are generally not as well defined as a cyberterrorist's motivation
hactivist
Which is the term for a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, yet they are actually imitations of real data files.
honey Pot
What is the center of the weakness of passwords
human memory
Which term below is frequently used to describe the tasks of securing information that is in a digital format?
information security
A virus that infects an executable program file is known as
program virus
An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use
protocol analyzer
Passwords that are transmitted can be captured by what type of software
protocol analyzer
Which type of attack below is similar to a passive man-in-the-middle attack?
replay
Proper ________________ involves identifying risks but making the decision to not engage in the activity.
risk avoidance
An independently rotating large cup affixed to the top of a fence prevents the hands of intruders from gripping the top of a fence to climb over it. What is the name for this technology
roller barrier
To what specific directory are users generally restricted to on a web server?
root
What type of malware consists of a set of software tools used by an attacker to hide the actions or presence of other types of malicious software, such as Trojans, viruses, or worms?
rootkitv
Which position below is considered an entry-level position for a person who has the necessary technical skills?
security technician
Attacks that take place against web based services are considered to be what type of attack?
server-side
A service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service, is known as
service level agreement
HTML uses which option below within embedded brackets (< >) causing a web browser to display text in a specific format?
tags
A type of action that has the potential to cause harm.
threat
The goal of what type of threat evaluation is to better understand who the attackers are, why they attack, and what types of attacks might occur
threat modeling
The means by which an attack could occur
threat vector
What type of malware is heavily dependent on a user in order to spread?
virus
Which of the following is malicious computer code that reproduces itself on the same computer?
virus
A flaw or weakness that allows a threat agent to bypass security
vulnerability
What is the name of the process that takes a snapshot of the current security of an organization?
vulnerability appraisal
Which SQL injection statement example below could be used to discover the name of the table?
whatever' AND 1=(SELECT COUNT(*) FROM tabname); -
Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?
whatever' AND email IS NULL; --
Choose the SQL injection statement example below that could be used to find specific users:
whatever' OR full_name LIKE '%Mia%'
Which SQL injection statement can be used to erase an entire database table?
whatever'; DROP TABLE members; --
Which tester has an in-depth knowledge of the network and systems being tested, including network diagrams, IP addresses, and even the source code of custom applications
white box
The exchange of information among DNS servers regarding configured zones is known as:
zone transfer
Part of the TCP/IP protocol for determining the MAC address based on the IP address.
Address Resolution Protocol (ARP)
A comparison of the present state of a system to its baseline
Baseline reporting
What type of filtering utilizes a an analysis of the content of spam messages in comparison to neutral / non-spam messages in order to make intelligent decisions as to what should be considered spam
Bayesian filtering
An attack that injects scripts into a web application server to direct attacks at clients.
Cross-site scripting (XSS)
An event that does not appear to be a risk but actually turns out to be one.
False negative
What security goal do the following common controls address: hashing, digital signatures, certificates, nonrepudiation tools
Integrity
An agreement through which parties in a relationship can reach an understanding of their relationships and responsibilities.
Interoperability agreement
An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content
LDAP injection attack
The most restrictive access control model, typically found in military settings in which security is of supreme importance
Mandatory access control (MAC)
What type of management system below can help facilitate asset tracking
Mobile Device Management (MDM)
The start-up relationship agreement between parties.
On-boarding
What term below describes a hand-held mobile device that was intended to replace paper systems, and typically included an appointment calendar, an address book, a "to-do" list, a calculator, and the ability to record limited notes
Personal digital assistant (PDA)
A form of verification used when accessing a secure web application
Session token
The current version of the Terminal Access Control Access Control System (TACACS) authentication service
TACACS+
What type of attack is targeted against a smaller group of specific individuals, such as the major executives working for a manufacturing company?
Watering Hole
