stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Chap 16 A Flashcards | StudBud
Explore
/
Chap 16 A
Chap 16 A
29 terms
·
StudBud Administration
·
2 plays
Imported from external platform
Flashcards
29 cards
F
Practice quiz
P
Host live
L
Questions
29
Answers
1
What is dumpster diving in cybersecurity?
A type of network sniffing
A type of phishing attack
Breaking into a system
Searching trash for useful data
2
What is a botnet?
An antivirus network
A software patch
A secure access method
A group of coordinated compromised devices
3
What is a zero-day vulnerability?
A vulnerability known but not yet patched
A vulnerability with no impact
A vulnerability with no known solution
A vulnerability already patched
4
What is brute force attack?
Cloning a device
Guessing every possible password
Redirecting browser traffic
Blocking a port
5
Which key is used in asymmetric encryption to decrypt data?
Private key
Group key
Public key
Session key
6
What does a dictionary attack use?
Browser extensions
Random number generators
Common words and phrases
All known hashes
7
What is a weakness that can be exploited to cause a breach?
Risk
Threat
Exploit
Vulnerability
8
What does DDoS stand for?
Data Disruption on Servers
Digital Denial of Security
Distributed Denial of Service
Directed Denial of Systems
9
What is BYOD?
Bring Your Own Database
Backup Your Online Data
Block Your Old Device
Bring Your Own Device
10
What is the goal of social engineering?
To create software
To physically steal computers
To encrypt data
To trick users into giving information
11
What is a digital signature used for?
Proving a message hasn’t been altered
Encrypting files
Generating passwords
Bypassing encryption
12
What is the goal of a DoS attack?
Overload a service and make it unavailable
Encrypt data files
Change user passwords
Steal user credentials
13
How can a plaintext password be captured?
Sniffing unencrypted network traffic
Decrypting the hash
Using a secure token
With email phishing only
14
What is shoulder surfing?
Watching someone type their password
A network spoofing method
A phishing scam
Intercepting wireless signals
15
Which term refers to making a system more secure?
Auditing
Encrypting
Hardening
Testing
16
Which attack uses a fake wireless access point?
Whaling
Evil twin
Vishing
Spoofing
17
What does the 'C' in the CIA triad stand for?
Connection
Control
Compliance
Confidentiality
18
What is the potential for something to exploit a vulnerability?
Threat
Exploit
Harm
Risk
19
What is key exchange used for?
Create session logs
Send passwords to users
Exchange encrypted emails
Share a symmetric key securely
20
What is the main vulnerability in web apps?
Failure to validate input
Incorrect font settings
Outdated design
Improper login screens
21
What does a non-compliant system indicate?
The system is virus-free
It drifted from its secure configuration
The system has extra features
It uses old hardware
22
What does XSS stand for?
Extra Secure System
Executable Session Software
Cross-Site Scripting
XML Secure Script
23
What type of code is used in client-side scripting?
Binary data files
Web server scripts
HTML only
Browser-executed scripts
24
What is a SQL injection?
Safe input validation
Attack that manipulates SQL queries
Malware that runs on SQL servers
An encryption method
25
What is the main purpose of a cryptographic hash?
Make passwords easy to read
Encrypt user credentials
Create a one-way representation of data
Display passwords in plain text
26
What does impersonation involve?
Installing malware
Physically accessing a device
Writing secure code
Pretending to be someone else
27
What is the main problem with symmetric encryption?
The key must remain secret and is hard to distribute
It’s too slow
It cannot encrypt data
It uses a public key
28
What is spear phishing?
Voice-based phishing
Phishing with known info about the target
Phishing using pop-ups
A random phishing email
29
What measures the likelihood and impact of a threat?
Availability
Risk
Control
Attack vector
