CSIA 105
the user's identity with his public key
A digital certificate associates ____________.
to verify the authenticity of the registration authorizer
Digital certificates can be used for each of the following except __________. A. to verify the authenticity of the Registration Authorizer B. to verify the identity of clients and servers on the Web C. to encrypt messages for secure e-mail communications D. to encrypt channels to provide secure communication between clients and servers
perfect forward secrecy
Public key systems that generate random public keys that are different for each session.
exploit kit
Script kiddies acquire which item below from other attackers to easily craft an attack:
script kiddies
Select below the term that is used to describe individuals who want to attack computers yet lack the knowledge of computers and networks needed to do so
risk loss
Which of these is NOT a basic security protection for information that cryptography can provide? a. risk loss b. integrity c. confidentiality d. authenticity
security technician
Which position below is considered an entry-level position for a person who has the necessary technical skills?
information security
Which term below is frequently used to describe the tasks of securing information that is in a digital format?
digest
a______is not decrypted but is only used for comparison purposes
certificate repository
a centralized directory of digital certificates is called
a smaller group of specific users
a watering hole attack is directed against
18
according to the US bureau of labor statistics, what percentage of growth is the available job outlook supposed to reach by the end of the decade
security and convenience are inversely proportional
adone is attempting to explain to his friend the relationship between security and convenience. which of the following statements would he use
HIPAA
healthcare enterprises are required to guard protected health information and implement policies and procedures whether it be in paper or electronic format
rsa
illya was asked to recommend the most secure asymmetric cryptographic algorithm to his supervisor. which of the following did he choose
certificate authority
in entity that issues digital certificates is a
all all of the above
in information security, what constitutes a loss?
distributed
in what kind of attack can attackers make use of hundreds of thousands of computers under their control in an attack against a single server or Network
tailgating
is following an authorized person through a secure door
intimidation
lykke receives a call while working at the help desk from someone who needs his account reset immediately when lykke questions the collar, he says if you don't reset my account immediately I will call your supervisor what psychological approach is the collar attention to use
online certificate status protocol
performs a real-time lookup of a digital certificate status
Non-repudiation
proving that a user sent an email message is known as
is the management of digital certificates
public key infrastructure
us Patriot act
purpose is to strengthen domestic security and broaden the powers of law enforcement agencies with regards to identifying and stopping terrorists
Gramm-Leach-Bliley Act
requires Banks and financial institutions to alert customers of their policies and practices in disclosing customer information
integrity
select below the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data
whaling
sends fishing messages only to wealthy individuals
obscurity
signe wants to improve the security of the small business where she serves as a security manager. she determines that the business needs to do a better job of not revealing the type of computer, operating system, software, and network connections they use. what security principle does signe want to use
Americans with disabilities
standards created to require accessibility of electronic media websites software applications, operating systems, video, etc.
in encrypt the key and the message
the hash message authentication code HMAC
authentication
the security protection item that ensures that the individual is who they claim to be the authentic or genuine person and not and an imposter is known as
digital certificate
the strongest technology that would assure Alice that Bob is the sender of the message is a
love bug
to date, the single most expensive malicious attack occurred in 2000, which cost an estimated 8.7 billion dollars. what was the name of the attack?
regulatory
what are industry-standard frameworks and reference architectures that are required by external agencies known as
difficulties: human error, contamination, not knowing policy, live operations
what are some key things people need to know about how to handle evidence related to different types of disputes civil, criminal, private? what makes this difficult at times
Indonesia
what country is now the number one source of attack traffic?
crypto service provider
what entity calls in crypto modules to perform cryptographic task
manager
what information security position reports to the ciso and supervises technicians, administrators, and security staff?
when two concurrent threads of execution access a shared resource simultaneously resulting in unintended consequences
what is a race condition
salt
what is a value that can be used to ensure that hashed plaintext will not consistent sleep result in the same digest
plain text
what is data called that is to be encrypted by inputting it into a cryptographic algorithm
brokers
what is the category of threat actors that sell their knowledge of vulnerabilities to other attackers or governments
command and control server
what is the name of the threat actors computer that gives instructions to an infected computer
bot herder
what is the term used for a threat actor who controls multiple bots in a botnet
identity theft
what type of theft involves stealing another person's personal information, such as a social security number, and then using the information to impersonate the victim, generally for financial gain?
Gramm-Leach-Bliley Act (GLBA)
which act requires Banks and financial institutions to alert their customers of their policies in disclosing customer information
extended validation
which did a digital certificate displays the name of the entity behind the website
cipher block chaining
which of the following block ciphers XO RS each block of plain text with the previous block of ciphertechs before being encrypted
confidentiality
which of the following ensures that only authorized parties can view protected information
information
which of the following is an Enterprise critical asset
a route kit is always the payload of a Trojan
which of the following is not a correct about a rootkit
variability
which of the following is not a method for strengthening a key
diffusion
which of the following is not a primary trait of malware
greater sophistication of defense tools
which of the following is not a reason why it is difficult to defend against today's attacks
purposes
which of the following is not a successive layer in which information security is achieved
security is a war that must be won at all cost
which of the following is not true regarding security
Diffe Helman
which of the following key exchanges uses the same keys each time
confidentiality
which of the three protections ensures that only authorized parties can view information
send spam email to moa's inbox on Tuesday.
which of these could not be defined as a logic bomb
hardware security module
which of these has an on-board key generator and key storage facility, as well as accelerated symmetric and asymmetric encryption and can back up system material in encrypted form
spyware
which of these is a general term used for describing software that gathers information without the user's consent
TLS v 1.2
which of these is considered the strongest cryptographic transport protocol
collision should be rare
which of these is not a characteristic of a secure hash algorithm
advanced encryption standard
which of these is the strongest symmetric cryptographic algorithm
books
which of these items retrieved through the dumpster diving would not provide useful information
it is designed for use on larger scale
which statement is not true regarding hierarchical trust models
software keyloggers are generally easy to detect
which statement regarding a keylogger is not true
advanced persistent threat
which tool is most commonly associated with nation-state threat actors
bridge
which trust model has multiple cas one of which acts as a facilitator
virus
which type of malware requires a user to transport it from one computer to another
metamorphic
which type of mutation completely changes a virus from its original form by rewriting its own code whenever it is executed
they can cause significant disruption by destroying only a few targets
why do cyber terrorists Target power plants, air traffic control centers, and water systems
session keys
AR symmetric keys to encrypt and decrypt information exchanged during the session in to verify its integrity
0
Abram was asked to explain to one of his coworkers the xor cipher. he showed his co-worker in the example of adding two bits, 1 + 1. what is the result of the sum
ROT13 cipher
Alexi was given a key to a substitution cipher the key show that the entire alphabet was rotated 13 steps. what type of cipher is used
crypto malware
Astrid's computer screen suddenly says that all files are now locked until money is transferred to a specific account, at which time she will receive amen means to unlock the files what type of malware has infected her computer
it displays the attackers programming skills
Each of the following is the reason adware is scorned except __________..
RAT
Ebba received a message from one of her tech support employees. in violation of company policy, a user had downloaded a free program to receive weather reports, but the program had also installed malware on the computer that gave the thread actor unrestricted access to the computer. what type of malware had been downloaded
verify the receiver
Edgar wanted to use a digital signature which of the following benefits will the digital signature not provide
extinguish risk
Gunner is creating a document that explains risk response techniques which of the following would he not list and explain in his document
security administrator
Ian recently earned his security certification and has been offered a promotion to a position that requires him to analyze and design security solutions as well as identifying users knees. which of these generally recognized security positions has in been offered
Alice's public key
If Bob wants to send a secure message to Alice using an asymmetric cryptographic algorithm, which key does he use to encrypt the message?
blocking ransomware
Linneafather called her to say that a message suddenly appeared on his screen that says his software license has expired and he must immediately pay $500 to have it renewed before control of the computer will be returned to him. what type of flower is this
vulnerable business processes
Tatiana is discussing with her supervisor potential reasons why a recent attack was successful against one of their systems. which of the following configuration issues would not covered
in the directory structure of the file system
The areas of a file in which steganography can hide data include all of the following EXCEPT ___
it provides cryptographic services in hardware instead of software
What is a characteristic of the Trusted Platform Module (TPM)?
to spy on citizens
What is an objective of state-sponsored attackers?
SHA-3
What is the latest version of the Secure Hash Algorithm?
serial server
What kind of server connects a remote system through the Internet to local serial ports using TCP/IP?
Cybercriminals
What term is used to describe a loose network of attackers, identity thieves, and financial fraudsters?
Misconfiguration
alyona has been asked by her supervisor to give a presentation regarding reasons why security attacks continue to be successful. she has decided to focus on the issue of widespread vulnerabilities. which of the following would a alyona not include in her presentation
confusion
alyosha was explaining to a friend the importance of protecting a cryptographic key from crypto analysis. he said that the key should not relate in a simple way to the ciphertext which protection is he describing
the children's online act
an act created to help protected children under the age of 13 from exploitation by governing the online collection of the child's personal information
diversity
an organization that practices purchasing products from different vendors is demonstrating which security principle
it would be a essentially impossible to keep its location a secret from everyone
at a staff meeting one of the technicians suggested that the Enterprise for tactics new web server by hiding it and not telling anyone where it is located why is security through obscurity a poor idea
through products, people, and procedures on the devices that store, manipulate, and transmit the information
complete this definition of information security. that which protects the integrity confidentiality and availability of information
computer security act
created 2 improve the security and privacy of sensitive information and to create acceptable security practices
Sarbanes-Oxley Act
created for corporate governance and financial practice
FERPA
created to protect the privacy of student records
payment-card industry act
defines minimum requirements for merchants and service providers to protect cardholder data
