A ____________ detects suspicious activity on a host or a network, logs it, and alerts system or network administrators

Intrusion Detection System (IDS)

studbud

BLOCK 5 (1-3)

99 termsStudBud Administration26 plays

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
The destructive behavior where the attacker changes entries in records is known as __________ _________
Data Destroyer
Info Gathering
Data Diddling
Data Destruction
2
Ensuring the third party is ____________ is an important prerequisite when considering moving in-house services off-site
Securing the Data
Securing the Hardware
Utilizing Software
Utilizing Anti-Virus Protocols
3
___________ is a specific form of spear phishing targeted at high-value targets.
Whaling
Spear Phishing
Phishing
Baiting
4
Verification Process requires individuals to identify themselves and for a system to verify that they are who they say.
Verification
Authorization
Multifactor Authentication
Authentication
5
Combining a username & password is considered multifactor authentication.
False
True
6
____________ software is your system’s protection against viruses.
Anti-Virus
Anti-Hacker
Macafe
Norton
7
The process of repairing a vulnerability or flaw that is identified after the release of an application.
Application Update
Software Patching
None of the Above
Software Update
8
_______ is claiming you didn’t do something or were not responsible
Repudiation
Spoofing
Elevation of Privilege
Denial of Service
9
determine whether someone attempted to break into a system and if it was successful, along with what they may have done.
Intrusion Log
Detection Measures
Intrusion Detection
Detection Log
10
_____________ is presenting information about yourself to a system, such as a username or a smartcard.
Accounting
Authentication
Identification
Authorization
11
This type of authentication factor requires a biometrics system.
Somewhere You Are
Something You Are
Something you DO
Something You Have
12
_________ is responsible for receiving packets from the sensor and performing analysis on packets to determine suspicion
BitLocker
Analysis Engine
Sensor
Console
13
Malware's most common pathways from criminals to users is through Email & World Wide Web.
True
False
14
A ______ is an aggregation of compromised computers, turning them into _______ to be used by attackers.
Virus , Robots
Virus , Malware
Botnet , Robots
Robot , Botnets
15
Administrators should check logs weekly for signs of security compromise.
False
True
16
Type of authentication factor includes swipe cards, physical tokens and codes sent to mobile phones via text message
Something you DO
Somewhere You Are
Something You Have
Something You Are
17
Firewalls can be implemented as hardware, software, or both.
False
True
18
______ Self-replicate themselves without needing a user to activate the virus.
Scripts
Worms
Malware
Trojans
19
National Security may also be threatened by worms, viruses, and other types of malware.
True
False
20
The destructive behavior where the attacker deletes files is known as _____________________
Data Destruction
Data Diddling
Data Destroyer
Info Gathering
21
A File Infector Virus operate in memory and infect _________ _________
Software Applications
Background Applications
Operating Systems
Executable Files
22
________ is a common attack that uses Javascript to inject malicious code into a web application.
None of the Above
Cross Site Scripting (XXS)
Site Scripting
ActiveX
23
This type of virus installs a piece of software that contains code that will not execute until a certain event occurs.
Trojan Horse
Logic Bomb
Boot Sector Virus
File Infector Virus
24
What ways can worms replicate themselves?
Infected flash drives in host PC
Opening infected E-mails
Vulnerable Network Ports
All the Above
25
What are some measures that can be done to reduce the risk of being affected by a DoS attack?
Packet Filtering
Running Servers at a level close to capacity
Security related Patches for host OS
All the Above
26
Which of the following are application vulnerabilities?
ActiveX Controls
All the Above
Cookies
Peer-to-Peer File Sharing
27
Anti-Virus programs inspect the content of each file & search for specific patterns that match a malicious profile known
Virus Signature
Antigens
Virus Pathways
Virus Code
28
A flaw or weakness in a system’s design or operation that could be exploited to violate the systems security policy.
Vulnerability
Whaling
Security Patches
Phishing
29
What is NOT an example of "something you know" authentication?
Physical Tokens
Personal Identification Numbers (PINs)
Passwords
All The Above
30
________ servers provide security, privacy, and web filtering
Proxy
Hybrid
DNS
VPN
31
Agentless NAC does not require agent ___________ to be installed on a client
Systems
Applications
Hardware
Software
32
A ___________ firewall sits at the edge of a network and controls what traffic is allowed to enter and leave.
Hardware-Based
Software-Based
Packet-Filtering
Stateful Packet Inspection
33
A proxy resides between a users computer and the internet
False
True
34
The part of AAA services that validate the identification presented by a user is ____________
Accounting
Authorization
Identification
Authentication
35
A ____________ detects suspicious activity on a host or a network, logs it, and alerts system or network administrators
Intrusion Awareness System (IAS)
Intrusion Detection System (IDS)
Intrusion Monitor System (IMS)
Intrusion Prevention System (IPS)
36
Attacks can be characterized according to intent, point of initiation, and method of delivery.
False
True
37
with ___ clients can access a network remotely by connecting to a client which sends authentication request through UDP.
DIAMETER
RADIUS
DOLAN
DORA
38
______________ authentication uses any combination of two factors.
Multifactor
Single-Sign On
AllFactor
SingleFactor
39
Cross site scripting injects malicious code into what?
Files
Cookies
Website Code
Web Applications
40
method uses a magnetic field to erase data and cause irreversible damage to the data.
Degaussing
Demagnetization
Electronic Shredding
Spear Fishing
41
Without the BitLocker key the system cannot boot.
False
True
42
Allowing someone to do something they are not authorized to do is known as ....
Spoofing
Tampering
Information Disclosure
Elevation of Privilege
43
A ______ is any circumstance or event with the potential to adversely affect a system through unauthorized access
Outside Attack
Tampering
Threat
Inside Attack
44
When using Full Disk Encryption (FDE), what stores the cryptographic keys?
Motherboard
CMOS
BIOS
Trusted Platform Module (TPM)
45
Exhausting resources needed to provide services to the user is known as....
Information Disclosure
Denial of Service
Elevation of Privelege
Repudiation
46
A Boot-Sector Virus resides where?
ROM
First Sector of a Disk
Operating System
Software
47
______ is a newer AAA protocol that gives a more reliable and secure communication service through TCP
DOLAN
DIAMETER
RADIUS
DORA
48
Systems that provide centralization of authentication, authorization, and accounting are known as
RADIUS
Triple C (CCC)
DIAMETER
Triple A (AAA)
49
attackers encrypt a victims entire system, specific files, or they may lock the system’s screen until they pay a ransom.
RansomVirus
Rootkit
Ransompay
Ransomware
50
____________ is a type of phishing that targets a specific individual, utilizing messaging that appeals to that person.
Phishing
Baiting
Whaling
Spear Phishing
51
Utilizes software installed on clients which authenticates the client to the NAC before scanning/allowing network access
Agentless NAC
Agent-Based (NAC)
Dissolvable Agents
Network Access Control (NAC)
52
The 2 types of destructive behavior are Data Diddling and Data Destruction.
True
False
53
If an account is compromised, a hacker can now access multiple servers is a drawback to what service?
Network Access Control (NIC)
MultiFactor
Single Sign-On (SSO)
802.1X
54
____________ Attacks occur when more requests are sent to a machine (host) than it can handle.
Trojan Horse
Unauthorized
Distribution Denial of Service
Denial of Service
55
The console is where alerts & notifications are typically sent to. The admin configures the NIDS from the console.
True
False
56
Network administrators secure a network by implementing permissions on the ________ and _______
Files , Software
Applications, Folders
Application , Software
Files , Folders
57
A ____________ monitor hosts or networks for suspicious activity and take corrective action.
Intrusion Prevention System (IPS)
Intrusion Awareness System (IAS)
Intrusion Monitor System (IMS)
Intrusion Detection System (IDS)
58
The sensor is responsible for collecting traffic from that segment and then forwarding the traffic to the ______________
Console
Analysis Engine
Administrator
Trusted Platform Module (TPM)
59
Viruses are classified into many categories, based on how they propagate and the nature of their behavior.
True
False
60
After verifying the account information, the user is granted access to the network. Which part of AAA is this?
Identification
Authentication
Authorization
Accounting
61
The model Microsoft uses for threat analysis and identification
DOLAN
STRIDE
DORA
STRIKE
62
_________ leads a user to perform some action to trigger a trap, such as installing malware.
Phishing
Baiting
Whaling
Spear Phishing
63
Accounting logs user activity on a network and tracks usage. Any network resource user consumes during session is logged
False
True
64
A ___________ firewall is a piece of software that is installed on a single system to protect that one system.
Software-Based
Hardware-Based
Stateful Packet Inspection
Packet-Filtering
65
Psychological manipulation of people into divulging confidential information beneficial to an attacker.
Social Engineering
Social Manipulation
Spear Phishing
Fraud
66
Routine ___________ results identify hosts that are vulnerable to attacks.
Searching
Firewall
Addressing
Scanning
67
Websites using _______ can manipulate a system, gain full system access & potentially exploit security vulnerabilities.
Cookies
Google Chrome
ActiveX Controls
Javascript
68
Hardware encryption applies very complex encryption more quickly than software encryption.
False
True
69
A __________ restricts data communication traffic to and from the network it’s connected to.
Proxy
Virus
Gateway
Firewall
70
_____________ reduces security issues on a network by taking measures to prevent them in the first place.
Application Hardening
Input Validation
Input Hardening
Application Validation
71
A ___________ firewall can filter traffic based and look at the context of the conversation and make a determination.
Stateful Packet Inspection
Software-Based
Packet-Filtering
Hardware-Based
72
By default administrators should configure firewalls to block all traffic.
True
False
73
What type of attack involves multiple computers sending more requests than the target can handle? (performed by Botnet)
Distributed Denial of Service (DDOS)
Data Destruction
Data Diddling
Denial of Service (DOS)
74
Software that covertly gathers user info through the user's Internet connection without their knowledge, for advertising
Cookies
Malware
Worms
Adware
75
In the _____ SDLC model, each phase of development must be completed prior to passing on to the following phase.
Agile
Waterfall
Deployment
Design
76
A ___________ firewall can block or allow traffic based on the source or destination IP address & Port number
Packet-Filtering
Software-Based
Hardware-Based
Stateful Packet Inspection
77
How can you stop an attacker from booting up a different operating system to gain access?
Enable Admin Boot
Secure Boot
Reboot
Disable Boot
78
A _______ in a supply chain is an intermediary, subcontracted individual, or company that provides a product or service
Third Party
Second Party
First Party
Organization
79
a popular protocol for hardening a network to ensure that anyone who connects has valid credentials before access.
802.1F
802.1X
802.1A
802.1D
80
What is the purpose of social engineering?
Fraud
All the Above
Info Gathering
System Access
81
List Folder Contents, Read, Read and Execute, Write, Modify, and Full Control are examples of _______ permissions.
NFST
NSTF
Administrator
NTFS
82
The ____ SDLC model, backtracking and repeating development steps is possible, making it receptive to customer feedback.
Design
Deployment
Waterfall
Agile
83
Malicious code is __________ or __________ written to intentionally cause undesired effects, security breaches or d
Malware, Scripts
Malware , Software
Software , Adware
Software , Scripts
84
Which of the following are application vulnerability prevention techniques?
All the Above
Apply Software Patches
Application Hardening & Configuration Baseline
Cross-Site Request Forgery Prevention
85
software, typically hidden from the administrator, installed on a system by a hacker to give privileged access.
Logic Bomb
Worm
Rootkit
Ransomware
86
_______ is software designed to infiltrate or damage a computer system without the owner's informed consent.
Malware
Logic Bomb
Adware
Worm
87
Providing information to someone not authorized to have it is __________ ____________
Inside Attack
Information Disclosure
Elevation of Privilege
Denial of Service
88
attempt to acquire sensitive data, such as account passwords through fraudulent solicitations via email, txt, websites.
Whaling
Baiting
Spear Phishing
Phishing
89
The most common methods of spreading a virus is through e-mail.
False
True
90
Training informs users of common pitfalls that can cause system vulnerabilities and what they can do to mitigate them
User-Awareness Training
Malware Protection Training
Vulnerability Protection Training
Virus Awareness Training
91
Wired/wireless network security solution that allows control of access based on predefined conditions systems must meet
Network Security Control (NSC)
Network Security Protocol (NSP)
Network Access Protocol (NAP)
Network Access Control (NAC)
92
What device/service provides security, privacy, and web filtering?
FIrewall
VPN
Gateway
Proxy
93
This type of authentication factor is based on user habits, like typing patterns.
Something You Have
Something You Are
Something you DO
Somewhere You Are
94
Ensuring the integrity of software is called ________________
Hardware Security
Software Security
Application Integrity
Application Security
95
A Network Intrusion Detection System (NIDS) is made up of what 3 components?
Sensor, Analysis Engine, Console
Sensor, Analysis Engine, BIOS
Sensor, TPM, Console
Console, Sensor, CMOS
96
Countermeasures against social engineering include what techniques?
Email & Attachments
Antivirus/AntiMalware
Multifactor Authentication / Good Judgement
All the Above
97
The goal of _________ attacks is to access a resource that a machine should not provide to the attacker.
Unauthorized
Inside
Phishing
Baiting
98
A mail gateway can be set up to scan and filter out problematic .....
Viruses
Spam
All the Above
File extensions
99
This authentication factor is based upon a user’s location.
Something you DO
Somewhere You Are
Something You Have
Something You Are

BLOCK 5 (1-3) Flashcards | StudBud

BLOCK 5 (1-3)

99 termsStudBud Administration26 plays

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
The destructive behavior where the attacker changes entries in records is known as __________ _________
Data Destroyer
Info Gathering
Data Diddling
Data Destruction
2
Ensuring the third party is ____________ is an important prerequisite when considering moving in-house services off-site
Securing the Data
Securing the Hardware
Utilizing Software
Utilizing Anti-Virus Protocols
3
___________ is a specific form of spear phishing targeted at high-value targets.
Whaling
Spear Phishing
Phishing
Baiting
4
Verification Process requires individuals to identify themselves and for a system to verify that they are who they say.
Verification
Authorization
Multifactor Authentication
Authentication
5
Combining a username & password is considered multifactor authentication.
False
True
6
____________ software is your system’s protection against viruses.
Anti-Virus
Anti-Hacker
Macafe
Norton
7
The process of repairing a vulnerability or flaw that is identified after the release of an application.
Application Update
Software Patching
None of the Above
Software Update
8
_______ is claiming you didn’t do something or were not responsible
Repudiation
Spoofing
Elevation of Privilege
Denial of Service
9
determine whether someone attempted to break into a system and if it was successful, along with what they may have done.
Intrusion Log
Detection Measures
Intrusion Detection
Detection Log
10
_____________ is presenting information about yourself to a system, such as a username or a smartcard.
Accounting
Authentication
Identification
Authorization
11
This type of authentication factor requires a biometrics system.
Somewhere You Are
Something You Are
Something you DO
Something You Have
12
_________ is responsible for receiving packets from the sensor and performing analysis on packets to determine suspicion
BitLocker
Analysis Engine
Sensor
Console
13
Malware's most common pathways from criminals to users is through Email & World Wide Web.
True
False
14
A ______ is an aggregation of compromised computers, turning them into _______ to be used by attackers.
Virus , Robots
Virus , Malware
Botnet , Robots
Robot , Botnets
15
Administrators should check logs weekly for signs of security compromise.
False
True
16
Type of authentication factor includes swipe cards, physical tokens and codes sent to mobile phones via text message
Something you DO
Somewhere You Are
Something You Have
Something You Are
17
Firewalls can be implemented as hardware, software, or both.
False
True
18
______ Self-replicate themselves without needing a user to activate the virus.
Scripts
Worms
Malware
Trojans
19
National Security may also be threatened by worms, viruses, and other types of malware.
True
False
20
The destructive behavior where the attacker deletes files is known as _____________________
Data Destruction
Data Diddling
Data Destroyer
Info Gathering
21
A File Infector Virus operate in memory and infect _________ _________
Software Applications
Background Applications
Operating Systems
Executable Files
22
________ is a common attack that uses Javascript to inject malicious code into a web application.
None of the Above
Cross Site Scripting (XXS)
Site Scripting
ActiveX
23
This type of virus installs a piece of software that contains code that will not execute until a certain event occurs.
Trojan Horse
Logic Bomb
Boot Sector Virus
File Infector Virus
24
What ways can worms replicate themselves?
Infected flash drives in host PC
Opening infected E-mails
Vulnerable Network Ports
All the Above
25
What are some measures that can be done to reduce the risk of being affected by a DoS attack?
Packet Filtering
Running Servers at a level close to capacity
Security related Patches for host OS
All the Above
26
Which of the following are application vulnerabilities?
ActiveX Controls
All the Above
Cookies
Peer-to-Peer File Sharing
27
Anti-Virus programs inspect the content of each file & search for specific patterns that match a malicious profile known
Virus Signature
Antigens
Virus Pathways
Virus Code
28
A flaw or weakness in a system’s design or operation that could be exploited to violate the systems security policy.
Vulnerability
Whaling
Security Patches
Phishing
29
What is NOT an example of "something you know" authentication?
Physical Tokens
Personal Identification Numbers (PINs)
Passwords
All The Above
30
________ servers provide security, privacy, and web filtering
Proxy
Hybrid
DNS
VPN
31
Agentless NAC does not require agent ___________ to be installed on a client
Systems
Applications
Hardware
Software
32
A ___________ firewall sits at the edge of a network and controls what traffic is allowed to enter and leave.
Hardware-Based
Software-Based
Packet-Filtering
Stateful Packet Inspection
33
A proxy resides between a users computer and the internet
False
True
34
The part of AAA services that validate the identification presented by a user is ____________
Accounting
Authorization
Identification
Authentication
35
A ____________ detects suspicious activity on a host or a network, logs it, and alerts system or network administrators
Intrusion Awareness System (IAS)
Intrusion Detection System (IDS)
Intrusion Monitor System (IMS)
Intrusion Prevention System (IPS)
36
Attacks can be characterized according to intent, point of initiation, and method of delivery.
False
True
37
with ___ clients can access a network remotely by connecting to a client which sends authentication request through UDP.
DIAMETER
RADIUS
DOLAN
DORA
38
______________ authentication uses any combination of two factors.
Multifactor
Single-Sign On
AllFactor
SingleFactor
39
Cross site scripting injects malicious code into what?
Files
Cookies
Website Code
Web Applications
40
method uses a magnetic field to erase data and cause irreversible damage to the data.
Degaussing
Demagnetization
Electronic Shredding
Spear Fishing
41
Without the BitLocker key the system cannot boot.
False
True
42
Allowing someone to do something they are not authorized to do is known as ....
Spoofing
Tampering
Information Disclosure
Elevation of Privilege
43
A ______ is any circumstance or event with the potential to adversely affect a system through unauthorized access
Outside Attack
Tampering
Threat
Inside Attack
44
When using Full Disk Encryption (FDE), what stores the cryptographic keys?
Motherboard
CMOS
BIOS
Trusted Platform Module (TPM)
45
Exhausting resources needed to provide services to the user is known as....
Information Disclosure
Denial of Service
Elevation of Privelege
Repudiation
46
A Boot-Sector Virus resides where?
ROM
First Sector of a Disk
Operating System
Software
47
______ is a newer AAA protocol that gives a more reliable and secure communication service through TCP
DOLAN
DIAMETER
RADIUS
DORA
48
Systems that provide centralization of authentication, authorization, and accounting are known as
RADIUS
Triple C (CCC)
DIAMETER
Triple A (AAA)
49
attackers encrypt a victims entire system, specific files, or they may lock the system’s screen until they pay a ransom.
RansomVirus
Rootkit
Ransompay
Ransomware
50
____________ is a type of phishing that targets a specific individual, utilizing messaging that appeals to that person.
Phishing
Baiting
Whaling
Spear Phishing
51
Utilizes software installed on clients which authenticates the client to the NAC before scanning/allowing network access
Agentless NAC
Agent-Based (NAC)
Dissolvable Agents
Network Access Control (NAC)
52
The 2 types of destructive behavior are Data Diddling and Data Destruction.
True
False
53
If an account is compromised, a hacker can now access multiple servers is a drawback to what service?
Network Access Control (NIC)
MultiFactor
Single Sign-On (SSO)
802.1X
54
____________ Attacks occur when more requests are sent to a machine (host) than it can handle.
Trojan Horse
Unauthorized
Distribution Denial of Service
Denial of Service
55
The console is where alerts & notifications are typically sent to. The admin configures the NIDS from the console.
True
False
56
Network administrators secure a network by implementing permissions on the ________ and _______
Files , Software
Applications, Folders
Application , Software
Files , Folders
57
A ____________ monitor hosts or networks for suspicious activity and take corrective action.
Intrusion Prevention System (IPS)
Intrusion Awareness System (IAS)
Intrusion Monitor System (IMS)
Intrusion Detection System (IDS)
58
The sensor is responsible for collecting traffic from that segment and then forwarding the traffic to the ______________
Console
Analysis Engine
Administrator
Trusted Platform Module (TPM)
59
Viruses are classified into many categories, based on how they propagate and the nature of their behavior.
True
False
60
After verifying the account information, the user is granted access to the network. Which part of AAA is this?
Identification
Authentication
Authorization
Accounting
61
The model Microsoft uses for threat analysis and identification
DOLAN
STRIDE
DORA
STRIKE
62
_________ leads a user to perform some action to trigger a trap, such as installing malware.
Phishing
Baiting
Whaling
Spear Phishing
63
Accounting logs user activity on a network and tracks usage. Any network resource user consumes during session is logged
False
True
64
A ___________ firewall is a piece of software that is installed on a single system to protect that one system.
Software-Based
Hardware-Based
Stateful Packet Inspection
Packet-Filtering
65
Psychological manipulation of people into divulging confidential information beneficial to an attacker.
Social Engineering
Social Manipulation
Spear Phishing
Fraud
66
Routine ___________ results identify hosts that are vulnerable to attacks.
Searching
Firewall
Addressing
Scanning
67
Websites using _______ can manipulate a system, gain full system access & potentially exploit security vulnerabilities.
Cookies
Google Chrome
ActiveX Controls
Javascript
68
Hardware encryption applies very complex encryption more quickly than software encryption.
False
True
69
A __________ restricts data communication traffic to and from the network it’s connected to.
Proxy
Virus
Gateway
Firewall
70
_____________ reduces security issues on a network by taking measures to prevent them in the first place.
Application Hardening
Input Validation
Input Hardening
Application Validation
71
A ___________ firewall can filter traffic based and look at the context of the conversation and make a determination.
Stateful Packet Inspection
Software-Based
Packet-Filtering
Hardware-Based
72
By default administrators should configure firewalls to block all traffic.
True
False
73
What type of attack involves multiple computers sending more requests than the target can handle? (performed by Botnet)
Distributed Denial of Service (DDOS)
Data Destruction
Data Diddling
Denial of Service (DOS)
74
Software that covertly gathers user info through the user's Internet connection without their knowledge, for advertising
Cookies
Malware
Worms
Adware
75
In the _____ SDLC model, each phase of development must be completed prior to passing on to the following phase.
Agile
Waterfall
Deployment
Design
76
A ___________ firewall can block or allow traffic based on the source or destination IP address & Port number
Packet-Filtering
Software-Based
Hardware-Based
Stateful Packet Inspection
77
How can you stop an attacker from booting up a different operating system to gain access?
Enable Admin Boot
Secure Boot
Reboot
Disable Boot
78
A _______ in a supply chain is an intermediary, subcontracted individual, or company that provides a product or service
Third Party
Second Party
First Party
Organization
79
a popular protocol for hardening a network to ensure that anyone who connects has valid credentials before access.
802.1F
802.1X
802.1A
802.1D
80
What is the purpose of social engineering?
Fraud
All the Above
Info Gathering
System Access
81
List Folder Contents, Read, Read and Execute, Write, Modify, and Full Control are examples of _______ permissions.
NFST
NSTF
Administrator
NTFS
82
The ____ SDLC model, backtracking and repeating development steps is possible, making it receptive to customer feedback.
Design
Deployment
Waterfall
Agile
83
Malicious code is __________ or __________ written to intentionally cause undesired effects, security breaches or d
Malware, Scripts
Malware , Software
Software , Adware
Software , Scripts
84
Which of the following are application vulnerability prevention techniques?
All the Above
Apply Software Patches
Application Hardening & Configuration Baseline
Cross-Site Request Forgery Prevention
85
software, typically hidden from the administrator, installed on a system by a hacker to give privileged access.
Logic Bomb
Worm
Rootkit
Ransomware
86
_______ is software designed to infiltrate or damage a computer system without the owner's informed consent.
Malware
Logic Bomb
Adware
Worm
87
Providing information to someone not authorized to have it is __________ ____________
Inside Attack
Information Disclosure
Elevation of Privilege
Denial of Service
88
attempt to acquire sensitive data, such as account passwords through fraudulent solicitations via email, txt, websites.
Whaling
Baiting
Spear Phishing
Phishing
89
The most common methods of spreading a virus is through e-mail.
False
True
90
Training informs users of common pitfalls that can cause system vulnerabilities and what they can do to mitigate them
User-Awareness Training
Malware Protection Training
Vulnerability Protection Training
Virus Awareness Training
91
Wired/wireless network security solution that allows control of access based on predefined conditions systems must meet
Network Security Control (NSC)
Network Security Protocol (NSP)
Network Access Protocol (NAP)
Network Access Control (NAC)
92
What device/service provides security, privacy, and web filtering?
FIrewall
VPN
Gateway
Proxy
93
This type of authentication factor is based on user habits, like typing patterns.
Something You Have
Something You Are
Something you DO
Somewhere You Are
94
Ensuring the integrity of software is called ________________
Hardware Security
Software Security
Application Integrity
Application Security
95
A Network Intrusion Detection System (NIDS) is made up of what 3 components?
Sensor, Analysis Engine, Console
Sensor, Analysis Engine, BIOS
Sensor, TPM, Console
Console, Sensor, CMOS
96
Countermeasures against social engineering include what techniques?
Email & Attachments
Antivirus/AntiMalware
Multifactor Authentication / Good Judgement
All the Above
97
The goal of _________ attacks is to access a resource that a machine should not provide to the attacker.
Unauthorized
Inside
Phishing
Baiting
98
A mail gateway can be set up to scan and filter out problematic .....
Viruses
Spam
All the Above
File extensions
99
This authentication factor is based upon a user’s location.
Something you DO
Somewhere You Are
Something You Have
Something You Are