stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of Block 5 Practice Test Flashcards | StudBud
Explore
/
Duplicate of Block 5 Practice Test
Duplicate of Block 5 Practice Test
30 terms
·
StudBud Administration
·
13 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
____ is a program employed to identify vulnerabilities in informations systems processing national security information
COMPUSEC
OPSEC
TEMPEST
INFOSEC
2
What is the last phase of (AFI) 17-203, Cyber Incident Handling?
Preliminary response actions
Post-Incident Analysis
Preliminary analysis and identification
Response and recovery
3
What should define incident categories?
Incident Handling Process
Incident Response Plan
Vulnerability reporting
Malware Response Program
4
Where should routers, switches, and servers be stored? (2 answers)
Locked safe
Behind barbed wire
Server rooms
Secured communications room
5
What type of attack sends more requests than a machine can handle?
Unauthorized access
Denial of Service
Data Destruction
Data Diddling
6
What would be an example of “Something You Have”?
Entering a password as well as entering a PIN that was texted to you
Needing a CAC card to gain access into the AF portal
Scanning your fingerprint to sign into a PC
All of the above
7
With ____, clients can access a network remotely
TACAS+
XTACAS
RADIUS
DIAMETER
8
Dissolvable NAC agents are permanent
True
False
9
The ___ classification is given to national security info or material that requires the highest degree of protection
Yankee white
Top Secret
Classified
Secret
10
____ is the practices and steps that maintain system health and improve online security
Cyber operations
Cyber security
Cyber hygiene
Cyber awareness
11
Which data port is disabled on all DoD computers to prevent threats?
USB
Ethernet
CD
HDMI
12
_____ is an attempt to acquire sensitive information through fraudulent solicitations
Spyware
Social Engineering
Baiting
Phishing
13
What does the S in STRIDE stand for?
Spacing
Security
Spamming
Spoofing
14
Device encryption/Hardware encryption applies very complex encryption, but it is slower than software encryption
False
True
15
A(n) ____ is able to limit web sites an employee can visit
New Technology File System
Active directory
Proxy server
Access Control List
16
Granting ____ or _____ access to a third-party can leave information systems vulnerable to exploitation
Administrative; user
Software; hardware
Top secret; secret
Physical; virtual
17
Concerning AAA, ______ logs user activity on a network and tracks usage
Authorization
Authentication
Accounting
Analyzing
18
Which SDLC Model requires each phases of development to be completed prior to passing on to the following phase?
Agile
Waterfall
ActiveX
Rigid
19
_____ based NAC utilizes software installed on clients which authenticates the client to the NAC
Agentless
Biometric
Agent
Authentication
20
___ is the use of coding systems to encrypt and decrypt information
Crypto linguist
Cryptanalysis
Crypto currency
Cryptography
21
The best security practice is to enable booting from alternative drives other than the primary storage drive
False
True
22
A(n) _____analyzes packets and determine whether they are allowed to pass through
Processor
Enigma
Full disk encryption
Firewall
23
What is the first phase of (AFI) 17-203, Cyber Incident Handling?P
Preliminary analysis and identification
Detection and reporting of events
Preliminary Response Actions
Incident analysis
24
The local area network resides in this zone
Private Zone
Public Zone
Extranet Zone
Demilitarized Zone
25
Incident analysis is a series of analytical steps taken to find out what happened in an incident, to include the _____
Root canal
Root code
Root cause
Root incident
26
_____ensures appropriate implementation of measures to protect all Air Force info systems resources and information
COMPUSEC
INFOSEC
OPSEC
TEMPEST
27
_____ is a type of virus that activates when a certain event occurs
Logic bomb
Worm
Boot-sector virus
Macro virus
28
Cloud computing relies on a _____ to handle your data
Software engineer
Network administrator
Third party
SIPR
29
______ is a wired/wireless network security solution that allows control of access based based on predefined conditions
Network Access Control
Firewall
Multi factor authentication
Proxy server
30
______ and ______ are vulnerabilities associated with third party access
Whaling; spear phishing
Compromised hardware/software; supply management vulnerabilities
Software code; intellectual property
Malicious action, carelessness