stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
FIT - Security Part #1 Flashcards | StudBud
Explore
/
FIT - Security Part #1
FIT - Security Part #1
51 terms
·
StudBud Administration
·
157 plays
Imported from external platform
Flashcards
51 cards
F
Practice quiz
P
Host live
L
Questions
51
Answers
1
How can you tell if a website is safe to enter credit card information? What should you look for?
SSH://
HTTP://
SHTTP://
HTTPS://
2
What best practice should you use when downloading software?
Official company site
Anywhere but check HASH from offical site
Go anywhere that is free
Only 3rd party websites
3
Client-side scripting and code...
is executed on the server before it's passed to the user
is always run on the user's computer
is always coded by the user
include programs like PHP and MySQL
4
If you're unsure where a link goes, what can you do safely?
Run antivirus scan on your computer
Just click it
Turn off firewall
Hover over the hyperlink
5
What is a replay attack?
Evil twin uses packet sniffer
Injecting code into a user's session
Password is stolen for a user
Data transmission is maliciously or fraudulently repeated or delayed
6
What is PII?
Information that can be used to identify someone.
Information that can be used to identify houses.
Information that can be used to identify your pets.
Information that can be used to identify shopping malls.
7
What might you have if every time you search on the internet you're forced to use a different search engine?
Malware infection
You're not using HTTPS
Outdated web browser
Expired SSL certificate
8
what is black hat hacking?
Maliciously hacking a person or businesses network
Giving someone a black hat
trolling a person for business or fun
Getting paid to find holes in someone's online security
9
What is the name of an application that appears to be a helpful application but instead does harm to your computer?
Spyware
Trojan horse
Ransomware
Worm
10
What type of integrity concern does a hacker intercept your message?
Ransomware
DoS
Man-in-the-middle
DDoS
11
What is Patching?
A secure means of communication, that authenticates users
Applying updates to software to improve security
A type of encryption, based on distributed ledgers
A new fashion among teenagers in California
12
Which of the following Operating Systems are susceptible to viruses?
Windows
All OS types
Linux
MAC
13
Select all
examples of Personally Identifiable Information
(PII)
Account number
Passport number
Social security number (SSN)
Driver's license number
14
What site can I use to check if extensions are safe for Chrome or Firefox?
https://safebrowsing.net
http://safeXtensions.org
https://hash#tag.io
https://crxcavator.io/
15
What does a Proxy Server do?
Enhance a companies security along with hiding the IP and increasing speed
Slow down a companies speed but improve security
Allow a company to hide their IP but decreases their security
Store company files without their consent
16
What is the main difference between hacking and ethical hacking?
They are the same
Wearing a white hate
Wearing a black hat
Permission from the owner
17
A brute force attack is most often used to...?
Crack Passwords
Sniff Packets
Carry out DOS
Break Firewalls
18
Which security threats occurs when a user receives an email from an illegitimate source asking for login information?
Cracking
Spam
Hacking
Phishing
19
Which of the following is the
FIRST
thing a technician should do to secure the router (SOHO)?
Disable SSID broadcast
Change the router's default password
Adjust the radio power levels
Press the WPS button
20
What attack consists of guessing hashes to gain unauthorized access?
DDoS
Rainbow table
Dictionary attack
Brute force
21
Spoofing.. what are the basics?
Going viral on youtube
Using a different IP Address.
Pretending to be someone you're not.
Modifying your MAC address.
22
You're browsing the internet and suddenly see this. What security threat is that?
Multipartite
Rootkit
Ransomware
Spyware
23
You wanted to encrypt your whole harddrive. What data at rest policy is this?
Full disk encryption
Folder encryption
Passwordless encryption
File encryption
24
AUP
Application Use Policy
Access Use Policy
Acceptable Use Policy
Account Use Policy
25
Confidentiality means..?
Not talking about company business with others
The right way to blow your nose
The wrong way to make a sandwich
Not sharing your personal lives with your boss
26
What is the gold standard for percentage of availability for services (e-mail, website...)? How much down time a year?
99.99% (52 minutes)
99.999% (5 minutes)
99.99999% (3 seconds)
99.9% (8.7 hours)
27
What is the best defence against cyber attacks?
User awareness training
Access auditing
Acceptable use policy (AUP)
Strong passwords
28
How does SQL Injection work?
SQL Injection only access music and video files
SQL Injection opens and unlocks the hosts website
The SQL code can give unauthorised access to the database
SQL query is entered into the input box of a website
29
Dumpster diving is ...
watching over someones shoulder as they enter sensitive info
tricking users to spread false information
pretending to be an inspector that needs access or else
sifting through discarded material for information
30
What is the goal of DOS and DDOS?
Downtime of device for real users
Steal passwords through brute force
Money to stop
Hacking into the system and steal data
31
What security threat keeps a record of every keystroke you type?
Keyblogger
Trojan horse
Keylogger
Keystroke virus
32
What do tracking cookies do???
track what cookies you eat
Slows down your internet speed
Track your exact GPS location
Store personal data
33
Which of these are safe for downloading apps?
WalMart dot com
Momma's Mobile Apps site
The iPhone app store
Google play store
34
Your employer can view your work e-mails?
True
False
35
What security threat is when a co-worker sitting next to you always seems to look at your login/password screen?
Shoulder surfing
Phishing
Creepy
Coincidence
36
Which availability factor is a technician preparing for by installing an uninterruptible power supply (UPS) device?
DoS
Data Redundancy
Power outage
Wiretapping
37
Public and private keys use what form of encryption?
Semicircular
Counter intuitive
Asymmetric
Symmetrical
38
How is DDoS different than DoS?
They are the same thing
DDoS uses multiple bots (zombies)
DoS uses multiple bots (zombies)
DDoS uses one computer
39
What type of exploit is used to circumvent normal security processes on a computer?
Phage virus
Spyware
Backdoor
Trojan horse
40
Which one of the following best describes social engineering?
Websites deceiving humans into giving away personal data
An automated attack on computer systems
Humans use methods trick or manipulate people into handing over information
Cybercriminals stealing data through hacking into systems
41
What type of confidentiality concern is something looking through trash?
Dumpster diving
Wiretapping
Eavesdropping
Snooping
42
When using Chrome's incognito mode what is true about an ISP?
ISP sells your data to your employer
ISP can't view your activity
ISP can view your activity
You're anonymous on the web
43
What is a host-based firewall?
software primarily protect a computer from malicious traffic
software that encrypts your data and demands money
a firewall that hosts something external DNS
Idk
44
What are (computer) cookies?
Computer program that is able to replicate itself
A tasty treat for computers
Software that installs itself onto a user's computer
pieces of data that track Web user's Internet usage
45
What is the name of security software installed to prevent popup and pop-under windows?
Antivirus
Popup Blocker
Spam Filter
Antispyware
46
What is true about posting on social media?
Your posts are private
You waive for your rights for privacy
Only your friends can see your tik toks
Facebook has never been hacked, you're safe
47
What is a service outage?
Backup UPS power
Unscheduled downtime on network / equpiment
Destroying networking equipment
Scheduled downtime on network / equpiment
48
What is a cryptographic hash? (example SHA)
Password
SALT
Output from One-way algorithm of data
Ciphertext with password
49
What security factor should be configued to prevent a user from changing their password within 5 days?
Maximum password age
Enforce password history
Account lockout threshold
Minimum password age
50
What does the term SPAM refer to in
computing
?
Installing malware on a computer
Canned meat
Excessive pop-up windows
Unsolicited emails
51
What kind of cyber attack is this ?
Eavesdropping Attack
Man in the Middle
DOS (Denial of Service)
Replay Attack
