When viewing the protection rings of a computer system, which two are true?

Applications run at ring 3, The kernel is at ring 0

What advantages do demilitarized zones provide?

customers reach the website but cant access corporate network

Why has the frequency of successful brute-force attacks increased?

Processor speed and power have increased.

Gosia create a driving simulator with a library of cars from web . hacker is detected on her computer , cause ?

The DLL or shared object had a back door.

Heather following PCI-DSS encrypts all credit card data on hard drive. 10,000 customer details are stolen. why ?

The hacker downloaded the credit card details while processing in RAM.

Which of the following best describes a digital signature?

A method to let the receiver of the message prove the source & integrity

several hard drives were stolen. The drives were swap space drives. What is primary concern ?

Data that resides in swap space is unencrypted.

Which of the following is NOT a characteristic of a one-way hash function?

It converts a message of fixed length to an arbitrary length value.

What is the primary purpose of using one-way hashing on user passwords?

It prevents anyone from reading passwords in plaintext.

Biniyam is a black hat hacker with access to password hashes. He runs a collision attack for which purpose ?

To attempt to find a value that creates the same hash

What is the difference between the DSA and RSA algorithms?

DSA is used for signing only; RSA is for signing and encryption.

a systems administrator and data custodian, seeks the best option to storebackup tapes?

Offsite facility that is climate controlled

Which of the following is not an advantage of virtual machines?

Networking is only available in bridged mode.

What is the goal of cryptanalysis?

To determine the strength of an algorithm

What is the definition of an algorithm’s work factor?

The time it takes to break the encryption

Which of the following best describes a certificate authority?

An organization that issues certificates

What is an advantage of RSA over DSA?

It can provide digital signature and encryption functionality.

studbud

DOMAIN3 INFORMATION SECURITY

81 termsStudBud Administration4 plays

Imported from external platform

Flashcards81 cardsFPractice quizPHost liveL

Questions 81

Answers

1
analyzing changes in environment around a cryptosystem to infer the encryption key whose processing causes those changes
Implementation attack
Fault injection attack
Timing attack
Side-channel attack
2
When viewing the protection rings of a computer system, which two are true?
Applications run at ring 3
The kernel is at ring 1.
Applications run at ring 2.
The kernel is at ring 0
3
What advantages do demilitarized zones provide?
Allows customers to reach the website and corporate network
Allows employees to reach their home-office network
customers reach the website but cant access corporate network
The location to build out the honeynet
4
Which security model is also known as the Chinese Wall and monitors conflicts of interests?
Brewer-Nash
Graham-Denning
Clark-Wilson
Harrison-Ruzzo-Ullman
5
Laslo, a software developer, implements the garbage collector service to resolve which of the following?
Data deduplication
Dumpster diving
Spam emails
Memory leaks
6
When using the Biba security model, users not being able to write to a higher level of security is :
. Strong-simple integrity
Star integrity
. Simple integrity
Strong-star integrity
7
Of the following encryption methods, which system is the MOST DIFFICULTto crack?
One-time pad
Caesar
Vigenère
Null cipher
8
Why has the frequency of successful brute-force attacks increased?
Key length reduces over time.
As algorithms get stronger, they get less complex
. The use of permutations and transpositions in algorithms has increased.
Processor speed and power have increased.
9
Gosia create a driving simulator with a library of cars from web . hacker is detected on her computer , cause ?
The application is written in the C language.
The malware protection was not updated.
The DLL or shared object had a back door.
The system was air gapped.
10
Edward is a software developer creating applications for Windows, Linux, and Apple. Which cloud model will he use ?
SaaS
PaaS
. IaaS
NaaS
11
What is the framework that uses seven evaluation assurance levels to help evaluatethe security of technology devices?
Evaluation Assurance
Common Criteria
Functional Testing
. United Labs
12
What type of attack could occur when implementing shared folders in a virtual machine environment?
Cloudburst
Data leak
Virtual machine escape
Data loss
13
Heather following PCI-DSS encrypts all credit card data on hard drive. 10,000 customer details are stolen. why ?
The hacker downloaded the credit card information from the hard drive.
hacker downloaded credit card details while traveling across the internet
The hacker tricked the customers into providing their credit card numbers.
The hacker downloaded the credit card details while processing in RAM.
14
Which of the following best describes a digital signature?
A method to let the receiver of the message prove the source & integrity
A method to encrypt confidential information
A method to provide an electronic signature and encryption
A method of transferring a handwritten signature to an electronic document
15
Judy encrypts the message GOLD HERE for Carolyn. Carolyn receives MWLI CMOM,which is an example of what?
. Plaintext
. Asymmetric
Diffusion
. Ciphertext
16
Edward is a software developer creating applications for Windows, Linux, and Apple. Which cloud model will he use?
SaaS
NaaS
PaaS
. IaaS
17
several hard drives were stolen. The drives were swap space drives. What is primary concern ?
The hard drives were expensive.
Whether they can be replaced with the exact same model.
Data that resides in swap space is unencrypted.
Whether the backup tapes were validated.
18
Tom creates software by C language and has entries for to enter their phones and email . What is her BEST mitigation?
Malware protection
Input validation
Optimizing the compiler
Host-based firewall
19
Computer components that are signed, consistently monitor integrity and confidentiality?
Trusted components
Process encapsulation
. Memory protection
. Hard drive encryption
20
Which of the following is NOT a characteristic of a one-way hash function?
finding the corresponding message should be computationally infeasible
It converts a message of fixed length to an arbitrary length value.
It converts a message of arbitrary length into a value of fixed length.
Deriving same digest from different messages should be impossible .
21
Which of the following is a U.S. federal government algorithm developed for creating secure message digests?
Secure Hash Algorithm
Data Encryption Algorithm
Digital Signature Standard
Data Signature Algorithm
22
A firewall self-detects that it is faulty. The device "decides" to shut down. This is an example of which type ?
Fail up
Fail secure
Fail open
Fail down
23
Phillip creates cipher where every A is the letter Q, every B is the letter J, and every C is the W ,type of cipher ?
Plaintext
. Substitution
Diffusion
Asymmetric
24
Public key certificates are defined by the X.509 standard format. Which of the following is NOT part of the standard?
Expiration date
Username
Public key
Time zone
25
What is the primary purpose of using one-way hashing on user passwords?
It prevents replay attacks.
minimizes the primary and secondary storage needed to store passwords.
It prevents anyone from reading passwords in plaintext.
It avoids excessive processing required by an asymmetric algorithm.
26
Biniyam is a black hat hacker with access to password hashes. He runs a collision attack for which purpose ?
To break the hash into multiple parts
To attempt to find a value that creates the same hash
To uncover the private key
To determine the user's exact passwords
27
MD5 hashing is more vulnerable than SHA-1 to which attack because it has a shorter message digest?
Correlation
Birthday
Collision
Happy
28
What is the difference between the DSA and RSA algorithms?
DSA is used for signing only; RSA is for signing and encryption.
DSA is used for hashing, RSA for signing.
DSA is used for signing, RSA for hashing.
. DSA is used for encryption only; RSA is for signing and encryption.
29
Which of the following security models is designed with confidentiality as its priority ?
Biba
Graham-Denning
Bell-LaPadula
Clark-Wilson
30
Attila enables a technique to strengthen passwords, making them harder to crack. Which feature does he engage?
Injection
. Input validation
Scripting
Salting
31
a security admin is designing the message system. What makes him use symmetric key cryptography over asymmetric
Key strength
Public key features
Speed
Ease of scaling
32
a systems administrator and data custodian, seeks the best option to storebackup tapes?
Fireproof safe within the SOC
. A cool, dry location
Lower level of the SOC facility
Offsite facility that is climate controlled
33
Which of the following is not an advantage of virtual machines?
Snapshot capability
Isolation from other virtual machines.
Networking is only available in bridged mode.
Multiple operating systems exist on the same computer.
34
Software running at which level has full access to hardware and system resources?
Driver
User
Application
Kernel
35
What is the goal of cryptanalysis?
To determine the permutations used
To determine the strength of an algorithm
To increase the substitution functions in a cryptographic algorithm
To decrease the transposition functions in a cryptographic algorithm
36
Vasek is a hacker looking to pass a message discreetly to a system he has attacked. best way ?
Supra channel
Timing channel
Override channel
Secret channel
37
Erving creates a cipher where every A is the letter G, B is the letter J, C is the letter B,etc . Choose 2
. Key
Decryption
Cryptovariable
Encryption
38
What is the definition of an algorithm’s work factor?
The time it takes to break the encryption
The time to implement 16 rounds of computation
The time it takes to encrypt and decrypt the same plaintext
The time it takes to apply substitution
39
Kristyna maintains a list of digital certificates that revoked because they expired or were compromised.this list named?
PKI
CA
RA
CRL
40
What is used to create a digital signature?
The receiver’s public key
The sender’s public key
The sender’s private key
The receiver’s private key
41
Which of the following attacks can be used against an asymmetric system?
Chosen ciphertext
Chosen plaintext
Ciphertext only
Known plaintext
42
Which of the following best describes a certificate authority?
An organization that validates encryption processes
An organization that issues certificates
An organization that verifies encryption keys
An organization that issues private keys and the corresponding algorithms
43
Leon just completed backing up several servers for the organization. Which is the BEST way for him to verify the backup?
Perform a tape retention.
Conduct full restores.
Restore a few test files.
Read the first 100 bytes of the tapes.
44
Patricia is a security manager investigating the best models to use for their next automated teller machine (ATM) design
. Graham-Denning
.Biba
Bell-LaPadula
Clark-Wilson
45
What is an advantage of RSA over DSA?
It uses fewer resources and encrypts faster because it uses symmetric keys.
It employs a one-time encryption pad.
It is a block cipher rather than a stream cipher.
It can provide digital signature and encryption functionality.
46
When comparing encryption systems, asymmetric systems have which feature that is NOT available in symmetric systems?
Key
Non-repudiation
Encryption algorithm
. Decryption algorithm
47
Bud is seeking to corrupt several virtual machines on a public cloud model. Which BEST technical attack for him to run?
Cross-site scripting
Cloudburst
Phishing
SQL injection
48
Attacker uses an encrypted tunnel over port 80. What type of attack is this?
Encrypted tunnel
SSH-over-HTTP
Covert channel
Telnet-over-HTTP
49
a security admin seeks an encryption algorithm to pass a shared key securely. Which option does she choose?
MD5
Blowfish
. RC4
Diffie-Hellman
50
Which of the following is based on the fact that it is hard to factor large numbers into two original prime numbers?
ECC
RSA
MD5
SHA
51
Databases use four transaction properties to guarantee data validity. Which of the following is NOT of them ?
Isolation
Durability
Consistency
Aggregation
52
Which of the following is a true statement pertaining to data encryption when it is used to protect data?
It does not require much system overhead in resources.
It requires careful key management.
It verifies the integrity and accuracy of the data.
It requires keys to be escrowed.
53
Websites reside in demilitarized zone (DMZ), What additional component can be added to better secure the website?
WPA2 encryption
Screened subnet
WAF
Database
54
A device that resides on computer motherboards to manage cryptographic keys and passwords is called what?
MBR
HSM
TPM
TCG
55
River is a data custodian planning the backup and recovery strategy for laboratory systems. Which is less important ?
Backup tape quality
Cost of the tape drive and backup tapes
. Restoration times
Off-site storage distance
56
Alison investigates multiple hashing algorithms to managethe integrity of millions of her documents. What does she find?
. MD5SUM results in fewer collisions than 3DES.
SHA256 results in fewer collisions than MD5SUM.
DES results in fewer collisions than MD5SUM.
MD5SUM results in fewer collisions than SHA256.
57
Mikael desires to attack with the least technology possible.Which is the MOST likely attack that he performs?
. Social engineering
Phishing
Spam
Trojan horse
58
Why would a certificate authority revoke a certificate?
If the user’s public key has become compromised
f the user changed over to using the PEM model that uses a web of trust
If the user’s private key has become compromised
If the user moved to a new location
59
Radu, security engineer,sends a encrypted message to security engineer Katerina.Katerina will decrypt the message by ?
. Radu's public key
Her public key
. Her private key
Radu's private key
60
Royal, a security manager, considers what would be the best setup for biometriccontrols.Which is he likely NOT to choose
. Voice
Fingerprint
. Height and weight
Retinal scan
61
Cheryl is junior admin has rights users havent. Senior admin can also add and remove networks, which Cheryl cant
RBAC
NDAC
. DAC
MAC
62
Cameron creates an application in the C language allowingusers to enter their name and address. Which of the follow
Software will be used on systems without C compilers
Potential of users having malware.
Potential for buffer overflow attacks.
Users spelling their names incorrectly.
63
Egor is an administrator at VBC Corp. and sends encrypted messages to his boss.Which keys are distributed?
. Encrypted
Passwords
. Private
Public
64
The control that enforces policy over a subject's ability to interact with objects is known as the what?
Biba
Reference monitor
Referee
Access control system
65
Which of the following systems need strict identity verification for every subject accessing resources over a network?
Identity and access management
Identity management
Zero-trust architecture
Castle-and-moat
66
Tom emails Danielle and Danielle responds . Tom denies sending the email.How can Danielle prove Tom sent the email?
Integrity checking
Confidentiality
. Availability attack
Non-repudiation
67
Encryption algorithms such as IKE, SSL, and PGP are all families of what type of cryptography?
Public key
Pearson key
Private key
Personal key
68
When Tom attempts to access files with secret access, he is denied. Which model does this BEST represent?
MAC
RBAC
NDAC
DAC
69
Nicole, a systems administrator and data custodian, seeks the best option to store backup tapes?
Fireproof safe within the SOC
A cool, dry location
Offsite facility that is climate controlled
Lower level of the SOC facility
70
Thomas is passing values from pc to pc, after XORed data , What is result 11001110 and 10111010
10001011
11111110
10001010
01110100
71
Chantel is a network engineer installing wireless networks in the most secure way possible. Which does she AVOID?
Disabling SSID broadcast
Setting WPA2 encryption
Setting maximum signal strength
Enabling MAC address filtering
72
Laura is a black hat hacker that has a stolen shadow file from a Linux system. What can she do with this?
Attempt to unencrypt the shadow file.
Convert the shadow file into the passwd file.
Attempt to crack the password hashes
Use the user IDs and clear passwords to attack the Linux system.
73
a security manager sets the privilege so that her team can read her files.What access model does this BEST represent?
ABAC
. DAC
. MAC
RBAC
74
Jessica receives her email online from a cloud provider to communicate with her supervisor. Which cloud model ?
PaaS
IaaS
SaaS
NaaS
75
Arantxa seeks to start the computer management console on her Windows 10 system. Which command does she use?
compmgmt.msc
eventvwr.msc
perfmon.msc
regedit.exe
76
Which of the following are true about a public key infrastructure's digital certificate? (Choose 2)
Signed by the certificate issuer
. Contains the owner's public key
Signed by the owner
Contains the owner's private key
77
Tim is a security administrator that manages expired encryption keys. Where will he put these expired keys?
. Keychain
. Key escrow
Key layaway
Secure key disposal
78
Bernarda is working with the board of directors on securing the business from employee smartphones. What is her FIRST ?
Require all employees to put passwords on their phones.
Develop and release an employee smartphone policy
Install malware protection on all employee smartphones.
Enable location setting on smartphones in case an emergency wipe is needed
79
Which of the following asymmetric algorithms encrypts and decrypts files based on calculating logarithms?
RSA
ElGamal
RC6
. AES
80
Which asymmetric system calculates keys using large prime numbers and modulo math?
. HMAC
MD5
RSA
RC4
81
a security manager follows his employees into the building without scanning his access card. attack called?
Social engineering
Phishing
. Piggybacking
Vishing

DOMAIN3 INFORMATION SECURITY Flashcards | StudBud