stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Intro Cyber Final Review Flashcards | StudBud
Explore
/
Intro Cyber Final Review
Intro Cyber Final Review
49 terms
·
StudBud Administration
·
198 plays
#cybersecurity
Flashcards
49 cards
F
Practice quiz
P
Host live
L
Questions
49
Answers
1
What IP Class would 20.12.0.0/13 belong to?
D
C
A
B
2
From Greek words meaning hidden. Transforming info so its secure while transmitted/stored.
cryptogram
crypt
cryptography
cryptanalysis
3
Uses his/her advanced computer skills to attack to expose security flaws, w/o malicious intent
white hat hacker
cyberterrorist
black hat hacker(cracker)
script kiddie
4
apparent source of email is likely to be individual in authority w/in recipient's own company
spear phishing
smishing
pharming
whaling
5
Which secure network protocol is recommended for remote access?
IP Security (IPsec)
Network TIme Protocol (NTP)
Secure Real-time Transport Protocol(SRTP)
Virtual Private network(VPN)
6
A security defense mechanism for preventing MAC flooding is which of the following:
Configure switch so only 1 port is assigned per MAC address
Secure the switch in a locked room
Use ARP detection appliance
Use switch that can close ports with too many MAC addresses
7
One of 5 fundamental security principles, this one deals w/who gets access to what resources:
limiting
obscurity
diversity
layering
8
Ensures that information is correct & that no unauthorized person/program can/has altered data.
accessibility
integrity
availability
confidentiality
9
Not attached to host document/program, doesn't require any action by user & can self-replicate.
trojan horses
viruses
worms
back doors
10
Attack targets high-profile employees such as CEO in order to steal sensitive information
pharming
whaling
smishing
spear phishing
11
What is the recommended secure protocol for voice and video applications?
Secure Real-time Transport Protocol(SRTP)
Network Time Protocol(NTP)
Hypertext Transport Protocol Secure(HTTPS)
Secure/Multipurpose Internet Mail Extensions(S/MIME)
12
The process of attempting to break an encrypted message.
cryogenesis
chemotherapy
cryptanalysis
cryptography
13
motivation defined by ideology & their goals are defacing websites to spread propaganda
black hat hackers
trolls
cyberterrorists
script kiddies
14
An event or object which might defeat the security measures you have to protect your assets.
asset
risk
threat agent
threat
15
Keeping type of computer, OS version, & software brand secret are part of this defense strategy
Layering
Limiting
Obscurity
Diversity
16
The likelihood that an asset will be stolen or damaged.
threat
risk
assessment
vulnerability
17
Secret combination that validates/authenticates user; used in combination with username
cryptogram
pigpen cipher
password
cypher
18
Program that secretly attaches to another document/program & executes when document opens.
logic bombs
trojan horses
worms
viruses
19
Hardware device/software used to join 2 separate computer networks to enable communication
router
hub
switch
bridge
20
This cryptography algorithm uses a simple key value that substitutes one letter for another.
Polybius square
pigpen cipher
Brute force
Caesar cipher
21
When accounts are improperly configured or accounts are provided more access than is necessary
default configuration
lack of vendor support
end of life systems
misconfiguration
22
Information security layers image indicates we need to protect the data's CIA. What are these?
People, Products, Policies and Procedures
Confidentiality, Autonomy, Inscrutability
Confidentiality, Integrity, Availability
Information, Confidentiality, Access
23
When hardware device gets no support from company that made device, this vulnerability known as
lack of vendor support
poorly designed software
extended support
mainstream support
24
Governments using state-sponsored attackers for launching computer attacks against their foes.
Trolls
Crackers
Hackers
Nation State Actors
25
Network device that forwards packets across different computer networks. Uses routing table
router
hub
bridge
switch
26
Violates system's security w/malicious intent using advanced knowledge of computers to exploit
cyberterrorist
script kiddie
white hat hacker
black hat hacker(cracker)
27
A person or thing that has the power to carry out a threat.
risk
threat
your neighbor
threat agent
28
The Layer 2 Data Link (Layer 2) includes which of these protocols?
PPP
HTTP
NFS
JPEG
29
A handler, sends zombie computers instructions to flood specific server w/requests-what attack?
Smurf Attacks
Logic Bombs
DDoS(Distributed Denial of Service)
ARP Spoofing
30
DNS Poisoning can be thwarted by using which of the following?
Secure/Multipurpose Internet Mail Extensions (S/MIME)
Domain Name System Security Extensions(DNSSec)
Network Time Protocol (NTP)
Secure Real-time Transport Protocol (SRTP)
31
Layered security approach using multiple layers of protection is also known as:
defense-in-depth
simplicity
vendor diversity
industry standard frameworks
32
Fraudulent practice of sending emails in order to induce individuals to reveal personal info
smishing
vishing
whaling
phishing
33
This ensures that only authorized parties can view information.
availability
integrity
accessibility
confidentiality
34
A software update to fix a security flaw or other problem.
exploit
asset
patch
fix
35
General term for malicious code - designed to break into computers or otherwise create havoc.
viruses
maleficent
malware
trojans
36
Managing & presenting computer resources by function w/out regard to physical layout/location
virtualization
on-premises
cloud computing
Software as a Service(SaaS)
37
A greeting message from one computer to another using Internet Control Message Protocol (ICMP)
bing
ping
Mac Address
traceroute
38
Surprise attacks by terrorist groups that could cripple nation's electronic infrastructure:
cyberterrorism
cyberdefenders
cybersociety
cybercrime
39
How many bits are reserved in class A, B, and C, networks for the host addresses?
1
2
6
16
40
Relies on tricking and/or deceiving someone to access a system. May include dumpster diving.
exploiting
social engineering
smishing
risk analysis
41
Secret entrance in computer of which user is unaware/designed into system during testing phases
logic bombs
backdoors
trojan horses
frontdoors
42
Limited resources that allow attacker to intentionally consume more resources than needed
hardware limitations
poorly designed software
limited access
connectivity limitations
43
Convert 652 from a decimal number to a binary number. You may use pencil/paper to solve
1010001100
110011001
11111111
11001100
44
Hardware address unique to an individual machine, the media access control, also known as the:
MAC Address
Street Address
Serial Number
IP Address
45
MAC stands for what in networking/security?
Making Angry Comments
Macaroni And Cheese
Media Access Control
Media Accessible Copper
46
A thing or entity of value.
risk
threat agent
asset
threat
47
1100 - convert this binary number to decimal (base10 number)
24
12
16
8
48
Taking advantage of a known weakness or vulnerability
Availability
Confidentiality
Exploitation (exploiting)
Integrity
49
TCP/IP stands for what?
topical connection process/internal processes
transmission control protocol/internet protocol
transmission connection process/internet protocol
top core phone/internet phone
