stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
NCR-MO-140 Cybersecurity Essentials CH 1-4 Flashcards | StudBud
Explore
/
NCR-MO-140 Cybersecurity Essentials CH 1-4
NCR-MO-140 Cybersecurity Essentials CH 1-4
82 terms
·
StudBud Administration
·
6 plays
Imported from external platform
Flashcards
82 cards
F
Practice quiz
P
Host live
L
Questions
82
Answers
1
What does a rootkit modify?
programs
Microsoft Word
operating system
Notepad
Delete unused software.
screen savers
2
Which three protocols use asymmetric key algorithms? (Choose three.)
Advanced Encryption Standard (AES)
Telnet
Secure Sockets Layer (SSL)
Secure File Transfer Protocol (SFTP)
Pretty Good Privacy (PGP)
Secure Shell (SSH)
3
What is the term used when a malicious party sends a fraudulent email disguised as being from a legitimate source?
backdoor
social engineering
Trojan
phishing
vishing
4
Which term describes the sending of a short deceptive SMS message used to trick a target into visiting a website?
grayware
smishing
spam
impersonation
5
Which symmetric encryption algorithm was developed by the NSA
AES
Skipjack
3DES
Two Fish
6
What is a method of sending information from one device to another using removable media?
LAN
infrared
wireless
sneaker net
packet
wired
7
Think
very
fast! What does the term BYOD represent?
bring your own disaster
bring your own decision
buy your own disaster
bring your own device
8
What are three examples of administrative access controls? (Choose three.)
encryption
policies and procedures
background checks
intrusion detection system (IDS)
hiring practices
guard dogs
9
Which term describes the technology that protects software from unauthorized access or modification?
copyright
watermarking
access control
trademark
10
If you find a USB thumb drive in the parking lot, you should plug it into your computer and check it out.
True
False
11
What are two common hash functions? (Choose two.)
MD5
RC4
Blowfish
RSA
SHA
ECC
12
What encryption algorithm uses the same pre-shared key to encrypt and decrypt data?
asymmetric
one-time pad
symmetric
hash
13
What are two common indicators of spam mail? (Choose two.)
The email has keywords in it.
The email has no subject line.
The email has misspelled words or punctuation errors or both.
The email is from your supervisor.
The email is from a friend.
The email has an attachment that is a receipt for a recent purchase.
14
What workforce framework category includes review & evaluation of information to determine if it is useful?
Analyze
Securely Provision
Oversight and Development
Protect and Defend
15
What type of hacker is this?
Blue Hat
Grey Hat
Black Hat
Whlte Hat
16
What is the difference between a virus and a worm?
Worms require a host file but viruses do not.
Viruses self-replicate but worms do not.
Worms self-replicate but viruses do not.
Viruses hide in legitimate programs but worms do not.
17
What encryption algorithm uses one key to encrypt data and a different key to decrypt data?
transposition
asymmetric
symmetric
one-time pad
18
"Use of rapport with the victim to establish a relationship and trust" is which Social Engineering Principal?
Urgency
Familiarity / Liking
Consensus or Social Proof
Authority
Scarcity
Intimidation
19
What occurs on a computer when data goes beyond the limits of a buffer?
a buffer overflow
cross-site scripting
a system exception
an SQL injection
20
What is the name for the type of software that generates revenue by generating annoying pop-ups?
trackers
spyware
pop-ups
adware
21
What name is given to a storage device connected to a network?
SAN
DAS
RAID
NAS
Cloud
22
Which two reasons describe why WEP is a weak protocol? (Choose two.)
WEP uses the same encryption features as Bluetooth.
Everyone on the network uses a different key.
The key is static and repeats on a congested network.
The key is transmitted in clear text.
The default settings cannot be modified.
23
Which two terms are used to describe cipher keys? (Choose two.)
key space
keylogging
key length
key randomness
24
What three design principles help to ensure high availability? (Choose three.)
provide for reliable crossover
Use encryption
detect failures as they occur
eliminate single points of failure
check for data consistency
ensure confidentiality
25
What type of attack targets an SQL database using the input field of a user?
Cross-site scripting
XML injection
SQL injection
buffer overflow
26
What type of hacker is this?
Black Hat
Grey Hat
Whlte Hat
Blue Hat
27
A request for payment before the user data is allowed to be accessed by the same user is what type of malware?
a type of ransomware
a type of virus
a type of worm
a type of logic bomb
28
What is a vulnerability that allows criminals to inject scripts into web pages viewed by users?
SQL injection
buffer overflow
XML injection
Cross-site scripting
29
What are three access control security services? (Choose three.)
access
repudiation
authorization
availability
authentication
accounting
30
What principle prevents the disclosure of information to unauthorized people, resources, and processes?
availability
integrity
nonrepudiation
accounting
confidentiality
31
Answer Question Below:
Preventive
deterrent
masking
detective
32
What is identified by the first dimension of the cybersecurity cube?
safeguards
knowledge
goals
tools
rules
33
Relative to cyber security, what does the acronym IoE represent?
Internet of Everything
In Out Exit
Intelligence on Everything
Insight into Everything
Internet of Things
Internet of Everyday
34
What name is given to any changes to the original data (users changing data, programs processing and updating data)
corruption
integrity
deletion
backup
dissemination
modification
35
What type of cipher encrypts plaintext one byte or one bit at a time?
hash
elliptical
stream
enigma
block
36
What type of an attack can disable a computer by forcing it to use memory or by overworking its CPU?
exhaustion
DDos
algorithm
APT
37
What kind of activity might this friendly gentleman in the back hat represent?
wireshark
tcpdump
man-in-the-middle
packet-sniffing
MITM
winpcap
38
What are two methods that ensure confidentiality? (Choose two.)
encryption
authorization
availability
authentication
integrity
nonrepudiation
39
Answer The Question Below....
El-Gamal
IDEA
RSA
AES
ECC
40
Which type of cipher is able to encrypt a fixed-length block of plaintext into a 128-bit block of ciphertext?
Hash
Stream
Symmetric
Block
Transform
41
What does the term vulnerability mean?
a known target or victim machine
a weakness that makes a target susceptible to an attack
a method of attack to exploit a target
invincibility
a computer that contains sensitive information
a potential threat that a hacker creates
42
An attacker outside a store is wirelessly copying emails and contacts from nearby devices. What type of attack is this?
bluejacking
RF jamming
smishing
bluesnarfing
43
Thwarting cyber criminals includes which of the following? (Choose three)
changing operating systems
applying the latest security updates
sharing cyber Intelligence information
keeping passwords on your desktop
shutting down the network
establishing early warning systems
44
What type of attack uses many systems to flood the resources of a target, thus making the target unavailable?
ping sweep
spoof
SQL injection
ransomware
DDoS
DoS
45
What is the term used to describe the science of making and breaking secret codes?
factorization
impersonation
spoofing
jamming
cryptology
46
"Coaxing as a result of believing there is a limited time to act" is which Social Engineering Principal?
Familiarity / Liking
Urgency
Authority
Scarcity
Consensus or Social Proof
Intimidation
47
What three tasks are accomplished by a comprehensive security policy? (Choose 3)
gives security staff the backing of management
vagueness
useful for management
sets rules for expected behavior
is not legally binding
defines legal consequences of violations
48
Social Engineers use honesty as a tactic to get information from unsuspecting targets
True
False
49
"Use of bullying or threats to persuade" is which Social Engineering Principal?
Intimidation
Consensus or Social Proof
Familiarity / Liking
Scarcity
Urgency
Authority
50
Which 128-bit block cipher encryption algorithm does the US government use to protect classified information?
AES
Caesar
Skipjack
Vignere
3DES
51
A criminal is using software to obtain information about the user's computer. What is the name of this type of software?
spyware
adware
phishing
virus
52
What three methods help to ensure system availability? (Choose three.)
up-to-date operating systems
system resiliency
integrity checking
system backups
equipment maintenance
fire extinguishers
53
What is a Trojan Horse?
a fake USB drive
Malware that pretends to be another app
A fake website
A fraudulent email pretending to be from a known source
54
Think fast! What is an example of an Internet data domain?
Palo Alto
Linkedin
Juniper
Cisco
55
What name is given to an amateur hacker?
red hat
black hat
script kiddie
purple team
blue team
red team
56
What is the term used to describe an email that is targeting a specific person employed at a financial institution?
vishing
spyware
target phishing
spear phishing
spam
57
Which three devices represent examples of physical access controls? (Choose three.)
locks
firewalls
video cameras
swipe cards
servers
routers
58
What is data obfuscation?
The art of making the message confusing or harder to understand
Corrupting a data file so it cannot be used
The art of replacing sensitive information with non-sensitive information
Hiding information inside of a non text file
59
What is the meaning of the term logic bomb?
a malicious worm
a malicious program that hides itself in a legitimate program
a malicious program that uses a trigger to awaken the malicious code
a malicious virus
60
What mechanism can organizations use to prevent accidental changes by authorized users?
hashing
backups
encryption
version control
SHA-1
61
Why Become a Cybersecurity Specialist? (pick all that apply)
challenging and fascinating career
rewarding career opportunity
higher earning potential
there is MUCH work to be done
service to the public
highly portable - work from anywhere!
62
What name is given to hackers who hack for a cause?
blue hat
hactivist
hacker
white hat
63
Which three processes are examples of logical access controls? (Choose three.)
guards to monitor security screens
firewalls to monitor traffic
biometrics to validate physical characteristics
intrusion detection system (IDS) to watch for suspicious network activity
swipe cards to allow access to a restricted area
fences to protect the perimeter of a building
64
What type of hacker is this?
Grey Hat
Whlte Hat
Blue Hat
Black Hat
65
What is the name given to a program or program code that bypasses normal authentication?
worm
Trojan
backdoor
virus
ransomware
66
Why would a cyber attacker use a keylogger?
to revel a user's sensitive information
to encrypt sensitive emails
to make sure they are not visiting a prohibited site
to lock a user out of his/her computer
67
For the purpose of authentication, what three methods are used to verify identity? (Choose three.)
something you have
something you do
something you know
something you are
where you are
68
What term is used to describe concealing data in another file such as a graphic, audio, or other text file?
obfuscation
masking
steganography
hiding
69
What are the three foundational principles of the cybersecurity domain? (Choose three.)
confidentiality
integrity
policy
availability
encryption
security
70
What are the three states of data? (Choose three.)
in-cloud
in-process
in-transit
encrypted
at rest
suspended
71
What is a secure virtual network called that uses the public network?
VPN
IDS
NAC
Firewall
MPLS
IPS
72
Which asymmetric algorithm provides an electronic key exchange method to share the secret key?
RSA
hashing
WEP
DES
Diffie-Hellman
73
Which two methods help to ensure data integrity? (Choose two.)
data consistency checks
availability
hashing
privacy
authorization
repudiation
74
What are two ways to protect a computer from malware? (Choose two.)
Empty the browser cache.
Keep software up to date.
Delete unused software.
Defragment the hard disk.
Use antivirus software.
75
What is the name of the method in which letters are rearranged to create the ciphertext?
enigma
substitution
one-time pad
transposition
76
What are three types of sensitive information? (Choose three.)
declassified
classified
published
memes
PII
business
77
Which types of records would cyber criminals be interested in stealing from organizations. (Choose four.)
medical
game
employment
education
financial
vinyl records
78
What does MAC stand for
Mandatory Application Code
Major Access Computer
Minute Access Code
Mandatory Access Control
79
What are 2 tactics used by a social engineer to obtain personal information from an unsuspecting target? (Choose two.)
integrity
urgency
honesty
intimidation
80
What type of cybersecurity laws protect you from an organization that might want to share your sensitive data?
integrity
nonrepudiation
confidentiality
authentication
privacy
81
What service determines which resources a user can access along with the operations that a user can perform?
token
authentication
biometric
authorization
accounting
82
What term describes the technology that replaces sensitive information with a non-sensitive version?
blanking
whiteout
masking
hiding
retracting