stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
IST 254: Chps 3&4 Review Flashcards | StudBud
Explore
/
IST 254: Chps 3&4 Review
IST 254: Chps 3&4 Review
25 terms
·
StudBud Administration
·
4 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
What is another term for a worm?
Fileless virus
Bot
Zombie
Network virus
2
Which of the following requires a carrier to be infected with a file-based virus?
Vulnerable DLL files in the operating system
A device that is already compromised with a backdoor
A human to transfer these files from an infected computer
Vulnerabilities in the application or software on the computer.
3
------Disguises itself as legitimate software but usually delivers a harmful payload
Trojan
Worm
Spyware
Adware
4
------it prevents end-users from copying data from the system onto unapproved mobile devices
DLP
SIEM
EDR
NGFW
5
Which of the following is the target of an attacker in a server-side request forgery (SSRF)?
Web server
User end device data
User end device application
ML training data
6
At any given time, data can be in one of the three stages except
Data at rest
Data in Transit
Data saved
Data in use
7
What type of attack occurs when meeting-scheduling software secretly tracks other applications?
Spyware
Backdoor
PUP
Trojan
8
A database that contains low-level settings used by the Windows OS and for those applications that elect to use it is?
Directory
DLL
Registry
CLI
9
Malware that encrypts all the files on the device so that none of them can be opened until a ransom is paid.
Cryptomalware
Ransomware
MITM
Spyware
10
An indicator that malicious activity is occurring but is still in the early stages.
Signal
Alert
APT
IOC
11
Which protocol is used in AIS (Automated Indicator Sharing)?
TAXII
TCP/IP
IMAP
FTP
12
-----is specific to the local system and is designed to prevent attacks at the host level.
HIDS
NIDS
HIPS
NIPS
13
What software assurance tool is used for static analysis of Java code?
SonarQube
FindBugs
Peach
YASCA
14
An attack that takes advantage of a website that accepts user input without validating it.
MarioNet Attack
Virus
SSRF
XSS
15
What is an attack on a NoSQL database compromised by data manipulation when the input is not sanitized by the app?
SQL injection
Backdoor attack
XML injection
Trojan attack
16
Which of the following is a broad term used for cybersecurity risks in (AI) and (ML)?
Cyber weapon
Adversarial AI
Offensive AI
Cyberwar
17
Carol installed a free AVI-to-MPEG converter. After, unwanted apps began auto-installing. What attack is this?
RAT
Ransomware
Resource exhaustion
Spyware
18
Open source is proprietary information owned by an entity that has an exclusive right to it.
True
False
19
Which of the following boot security modes provides the highest degree of security?
UEFI native mode
Trusted boot
Legacy BIOS boot
Measured boot
20
Which of the following is a coding technique wherein an app is written so its functionality is difficult to understand
Proper input validation
Normalization
Dead code
Obfuscation code
21
A secure cookie is a cookie that is only sent to the server with an encrypted request over the secure HTTPS protocol.
True
False
22
A structure that sends instructions to infected bot computers
Watering hole
Honeypot
Botnet
C&C
23
Malicious program that uses a computer network to replicate.
Trojan
RAT
Worm
Logic bomb
24
TAXII is A language and format used to exchange cyberthreat intelligence.
False
True
25
attack captures the data sent between the users by snooping and copying the data and using it for malicious activities.
XML injection
Backdoor attack
Replay attack
SQL injection