stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of Duplicate of Duplicate of Duplicate of Security Review 1-5 (lil 6) Flashcards | StudBud
Explore
/
Duplicate of Duplicate of Duplicate of Duplicate of Security Review 1-5 (lil 6)
Duplicate of Duplicate of Duplicate of Duplicate of Security Review 1-5 (lil 6)
100 terms
·
StudBud Administration
·
92 plays
Imported from external platform
Flashcards
100 cards
F
Practice quiz
P
Host live
L
Questions
100
Answers
1
What is the image an example of?
Public Key Infrastructure
Key Exchange
Key Cloning
Key Destruction
2
Attacker enters this command: whatever or a=a into a forgot your password field and it lets you view all of the emails
XSS
XSRF
PKI
SQL Injection
3
Script Kiddies lack the knowledge of computers and networks. So they download freely available attack software called?
OPEN-SOURCE INTELLIGENCE
CLOSED-SOURCE INTELLIGENCE
EXTERNAL INTELLIGENCE
SOPHISTICATED INTELLIGENCE
4
Draco has overflowed the switch with frames that have been spoofed so each frame contains a different source MAC-Add so?
Load Guard
SYN Guard
Flood Guard
MAC Guard
5
This type of armored virus will scramble it's code in order to make it more difficult to detect. This type of virus is?
OLIGOMORPHIC
SWISS CHEESE INFECTION
LOGIC BOMB
POLYMORPHIC
6
Upon opening an Excel worksheet, a script is executed. What type of virus was activated?
TROJAN
MACRO
LOGIC BOMB
ROOTKIT
7
Vanessa knows Dwayne goes to Amazon.com often. Its well known and used. V uses this and puts an AD w/ malware on it.
Ad Fraud
Malvertising
Plug-Ins
Extensions
8
A user's keys were encrypted and divided among 3 parts. Parts were then distributed to multiple people. Is example of?
A, B, C Plan
Key Escrow
Distribution Control
M-of-N Control
9
This threat actor sells their knowledge of a vulnerability to other attackers or governments?
NATION STATE ACTOR
HACKTIVISTS
BROKERS
ORGANIZED CRIME
10
All the following are ways to deal with risk except:
IGNORE
TRANSFER
AVOID
MITIGATE
11
Which of the following browser additions work with a specific browser and adds functionality to the browser itself?
Plug-In
Scripting Code
Add-On
Extension
12
Daenerys is an admin for google.com. She uses proxy servers and NAT to hide her IP address. This protection falls under?
OBSCURITY
SIMPLICITY
LIMITING
LAYERING
13
Ericka is looking into a software encryption that uses NTFS. It uses cryptography for windows. What is this called?
EFS
FDE
FAT32
GNuPG
14
What is the image an example of?
Parental Trust Model
Bridge Trust Model
Distributed Trust Model
Hierarchical Trust Model
15
When your company uses security products from different manufacturers, they are using?
LAYERING
DIVERSITY
LIMITING
SIMPLICITY
16
Which interception attack intercepts a communication between two computers and sends a fictitious response to sender?
Man-In-The-Browser
ARP Replay Attack
Man-In-The-Middle
Replay Attack
17
Jorge hacks Lisa's computer. He uses her web browser to log onto mybank.com and impersonates Lisa to log onto her acct.
SQL Injection
PKI
XSRF
XSS
18
Performs a real-time lookup of a certificate's status and called request-response protocol is which of the following?
Public Key Infrastructure (PKI)
Online Certificate Status Protocol (OCSP)
Certificate Practice Statement (CPS)
Certificate Authority (CA)
19
A _Inserts itself into a file or program and then looks to reproduce itself on the same computer and unload a payload.
Virus
RAT
Trojan
Worm
20
A __________ is a type of mutation virus that completely changes from its original form when executed.
METAMORPHIC VIRUS
MALWARE VIRUS
OLIGOMORPHIC VIRUS
POLYMORPHIC VIRUS
21
Sonya is looking into different solutions for a key exchange within normal communications of cryptography. (Multiple)
Diffie-Hellman (DH)
Elliptic Curve Diffie-Hellman (ECDH)
Cryptography
Courier
22
What characteristics make up a secure hashing algorithm
All of the above
Secure
Unique
Original
23
Software encryption uses which of the following? (Select all that apply)
Full Disk Encryption (FDE)
Security
File and File system Cryptography
Hardware Security Module (HSM)
24
David trusts his wife. Maria trusts her brother, Chris. Because he trusts her, and she trusts Chris, He trusts him.
Direct Trust
Hierarchical Trust
Distributed Trust
Third Party Trust
25
A published set of rules that govern the operation of PKI and has baseline security requirements for use is known as?
Certificate Policy (CP)
Certificate Authority (CA)
Public Trust
Certificate Revocation List (CRL)
26
Which of the following are not actions in key handling procedures
Destruction
Recovery
Suspension
Cloning
27
What type of attack occurs when the user is tricked into clicking a link that is other than what it appears to be?
Session Hijacking
Clickjacking
Domain Hijacking
URL Hijacking
28
Matthew is hired to break into YAHOO.com and found a vulnerability. Instead of reporting this vulnerability he sells it.
BROKER
HACTIVISTS
GRAY HAT HACKER
CYBER-CRIMINAL
29
What is the image an example of?
Steganography
Hashing
Digital Signature
Cryptography
30
A technical document that describes in detail how the CA uses and manages certificates.
Certificate Practice Statement (CPS)
Key Escrow
Digital Certificate
Bridge Trust
31
What is this image an example of?
Hashing
Asymmetric Cryptography
Steganography
Symmetric Cryptography
32
What is the image an example of?
Distributed Trust Model
Bridge Trust Model
Hierarchical Trust Model
Sibling Trust Model
33
Which of the following is not a widely used plug-in for web browsers?
Android Play
Adobe Flash Player
Java
Apple Quick Time
34
Vanessa uses her credit card at Burger King to buy cheesecake. What legal protections are in place to protect her?
SARBOX
HIPAA
PCI-DSS
GLBA
35
Which security principle uses a defense-in-depth approach?
OBSCURITY
LAYERING
LIMITING
SIMPLICITY
36
What is the image an example of?
Hierarchical Trust Model
Bridge Trust Model
Distributed Trust Model
Government Trust Model
37
What is a private key cryptography?
Hashing
Asymmetric Cryptography
Symmetric Cryptography
Security
38
What is the image an example of?
Asymmetric Cryptography
Hashing
Steganography
Symmetric Cryptography
39
They are attackers who attack for ideological reasons that are generally not well-defined.
HACTIVISTS
CYBER-TERRORISTS
CYBER-THREAT
HACKER
40
Which of the following is not an information security layer?
PROCESSES
PEOPLE
PRODUCTS
POLICIES AND PROCEDURES
41
Use of an attacker to get information from employees by going through physical copies of old calendars and charts is?
Google Dorking
Dumpster Diving
Social Engineering
Watering hole attack
42
Select the term used to describe tracking software that is deployed without the consent or control of the user.
BOTNET
TROJAN
SPAM
SPYWARE
43
ARP poisoning relies on MAC spoofing.
True
False
44
What is the best social engineering technique that a threat actor can use in order to target only the major executives.
Impersonate an IT department employee and use phishing and vishing
Impersonate an executive and call the help desk to have a password reset
Use a watering hole attack
Claim to be the IT department and send out a hoax to the entire company
45
Mario downloaded a free wallpaper on his computer; started to encounter banners, popup ads, and new web browsers opened.
ADWARE
SPYWARE
MAN-IN-THE-MIDDLE
ZOMBIE ATTACK
46
A Fortune 500 company uses__as a framework to manage digital certificates. This allows the company to C, S, D, and R.
ACE
Distributed Trust
PKI
Certificate Trust
47
A__is a technology used to associate a user's identity to a public key and has been signed by a trusted third party.
Digital Key
Digital Certificate
Electronic Fingerprint
Electronic Key
48
Joe uses an XSS attack on Sarah's computer and steals her session token cookie for mybank.com. He tries to impersonate.
URL Hijacking
Clickjacking
Session Hijacking
Domain Hijacking
49
An employee has recently been terminated from their position prior to their contract end date. Whats this an example of?
Revocation
Expiration
Key Escrow
Destruction
50
If a hacker changes the amount of their purchase from $5,000 to $5, they have violated which protection?
AVAILABILITY
INTEGRITY
CONFIDENTIALITY
AUTHENTICATION
51
Joan gets a message on her computer that says her key can no longer be used. What part of the certificate life cycle?
Revocation
Expiration
Suspension
Allocation
52
Which DOS attack uses IP spoofing to change the address where a ping request came from, so the computer is overwhelmed?
DNS Amplication Attack
SYN Flood Attack
ACK Flood Attack
Smurf Attack
53
A__in software occurs when two concurrent threads of execution access shared resources and results in consequences.
RACE CONDITION
RESOURCE EXHAUSTION
MISCONFIGURATION
DEFAULT CONFIGURATION
54
Which interception attack starts with a Trojan infecting a computer and installing an "extension"?
ARP Replay Attack
Man-In-The-Browser
Man-In-The-Middle
Replay Attack
55
Mike is a human resources Administrator at Unicorn Sprinkles Company. Steve wants to access the human resources computer
Denial of Service
DNS Poisoning
Horizontal Privilege Escalation
Vertical Privilege Escalation
56
What basic protections does Asymmetric Cryptography give you? (Select all that apply)
Non-repudiation
Integrity
Authentication
Confidentiality
57
A virus and malware are interchangeable terms.
True
False
58
Nation state actors are well-resourced and highly trained attackers.
False
True
59
An administrator can configure a wired connection to automatically shut off if it detects what type of device?
Bridge
Switch
Computer
Router
60
Sue knows that her credit card information used on Amazon.com will be kept secure. Which protection is she trusting in?
INTEGRITY
CONFIDENTIALITY
AUTHENTICATION
AVAILABLILITY
61
Which of the following is not true about a worm?
Can leave behind a payload on the system infected and cause harm, aka virus
Uses a computer network to replicate
Take advantage of a vulnerability in an application or an operating system
A worm needs a user to infect a file
62
Which of the following are cryptographic transport algorithms? (Select all that apply)
Secure/ Multipurpose Internet Mail Extensions (S/ MIME)
Hypertext Transport Protocol Secure (HTTPS)
Hypertext Transport Protocol (HTTP)
Post Office Protocol (POP)
63
What basic protection does Hashing give you?
Peace of Mind
Security
Non-repudiation
Integrity
64
What is this image an example of?
Steganography
Digital Signature
Symmetric Cryptography
Hashing
65
One of the four traits that malware possesses is concealment. What are the other traits? (Select all that apply)
CIRCULATION
ELASTICITY
INFECTION
PAYLOAD CAPABILITIES
66
What is this image an example of?
Hashing
Steganography
AES
DES
67
Due to the fact that extensions act as part of the browser itself they generally have wider access privileges.
True
False
68
Which security attack will send all stored electricity to the computer in a single burst resulting in PC destruction?
UNITED AIRLINES
USB KILLER
YAHOO
AVS WINVote
69
Which of the following are characteristics that determine the resiliency of a key?
Digital Certificate
Aggressiveness, Latency, & Strength
Certificate Authority & Trusted Third Party
Randomness, Length, & Cryptoperiod
70
Which of the following is not true?
Virus inserts malicious code into a program or data file
A worm infects a file
A worm uses a network to travel from one computer to another
A virus needs another user for it to spread
71
Which of the following are cryptographic transport algorithms? (Select all that apply)
Secure Socket Layer (SSL)
Simple Mail Transfer Protocol (SMTP)
Digital Certificate
Secure Shell (SSH)
72
While Juliet entered her code to enter the secret room, Romeo was able to observe and get Juliet's code. Type of action?
Vishing
Shoulder surfing
Keylogging
Tailgating
73
Hacker A intercepts a transmission. Hacker makes a copy of the transmission and saves it for later. What type of attack?
Man-In-The-Browser
ARP Replay Attack
Man-In-The-Middle
Replay Attack
74
An attacker tries to take down a water plant. He chose this target because it will cause panic. What type of attacker?
GREY HAT HACKER
CYBER CRIMINAL
HACKER
CYBER TERRORIST
75
When an employee gains security's approval and opens the door, the attacker asks that the employee to hold the door is?
Hoaxes
Shoulder Surfing
Man-In-The-Middle
Tailgating
76
David knows and trusts his wife, Maria. What type of trust is this?
Third Party Trust
Hierarchical Trust
Direct Trust
Bridge Trust
77
A technician has realized that he needs to replace his Symmetric algorithm keys. Which is not a method he could use?
Diffie-Hellman Ephemeral
Hellman Secrecy
Elliptic Curve Diffie-Hellman
Diffie-Hellman
78
A series of irregular accounting procedures caused Enron Corporation to declare bankruptcy. What law protection is this?
PCI-DSS
SARBANES-OXLEY ACT
GRAMM-LEACH-BLILEY ACT
HIPPA
79
an employee created malicious code that would destroy data. It would remain dormant as long as it existed in the payroll
POISONING ATTACK
TROJAN
DDOS
LOGIC BOMB
80
A trust model that uses an outside person between two individuals?
Private Trust
Public Trust
Direct Trust
Third Party Trust
81
Malware installs itself as part of some other download, backdoor, or worm and takes steps to prevent the detection.
SPYWARE
ROOTKIT
LOGIC BOMB
RESIDENT VIRUS
82
Jack executes a program on Steve's computer to store data on RAM beyond the boundaries of the storage buffer on PC. How?
Integer Overflow Attack
Replay Attack
Buffer Overflow Attack
Denial of Service Attack
83
What basic protections does Symmetric Cryptography give you? (Select all that apply)
Authentication
Integrity
Diversity
Confidentiality
84
SGT Billings's poor attempt to deny that he sent digitally signed email for all of 1st platoon to report to PT at 0700.
Diffusion
Non-repudiation
Authentication
Obfuscation
85
Mary creates a company called BobisFun. She had to register a large # of sites that are a variant of the domain name.
Web Hijacking
URL Hijacking
Session Hijacking
Clickjacking
86
Chakhala, can not only monitor Janet's computer activity but can change her computer settings, browse files, etc. Type?
ROGUE ACCESS
RAT
TROJAN
MACRO
87
Which of the following can a Digital Signature perform?
Verify the receiver
Provide Confidentiality of the message
None of the above
Prevent the sender from sending the message
88
Which attack can be done in two different locations: on the local host table or on the external DNS server?
MAC Spoofing
ARP Poisoning
DNS Poisoning
Privilege Escalation
89
Michael has been using Telnet to access remote computers but learned that it is unsecure. Protocol used to secure it?
S/MIME
TLS
SSH
HTTPS
90
This type of attack takes advantage of web applications that accept user input without validating it.
SQL Injection
PKI
XSS
XSRF
91
Patrick climbs through a hole in the fence and steals the scooter. In this scenario what does the scooter represent?
ASSET
VULNERABILITY
RISK
THREAT ACTOR
92
What is a public key cryptography?
Asymmetric Cryptography
Symmetric Cryptography
Hasing
Steganography
93
Industry-standard frameworks provide a resource of how to create a secure IT environment.
False
True
94
Rachel calls her boss to ensure that the message she received is unaltered. What type of protection is she enforcing?
Availability
Confidentiality
Integrity
Authentication
95
A screen appears on A-Aron's computer that his files are now encrypted, and must pay a fee to receive a key to unlock.
CRYPTO-MALWARE
TROJAN
SPYWARE
KEYLOGGER
96
If properly configured, what device will provide loop prevention?
Bridge
Switch
Computer
Hub
97
Google dorking is an electronic variation of dumpster diving.
False
True
98
Joe decided to download a calendar that was advertised online, but it also executed malware that scanned his system.
CRYPTO-MALWARE
TROJAN
BACKDOOR
RAT
99
Hardware encryption uses which of the following? (Select all that apply)
Asymmetric Cryptography
Trusted Platform Module
Pretty Good Privacy (PGP)
USB Device encryption
100
Which of the following are reasons for successful attacks?
HARDWARE LIMITATIONS
ALL OF THE ABOVE
POORLY DESIGNED SOFTWARE
WIDESPREAD VULNERABILITIES