CD-454 CyberPatriot Principles of CyberSecurity

Question 1

Spyware: Collects information about you, without your knowledge or consent

Accepted Answer

True

Question 2

Threat: An attacker or piece of malware that desires and/or is able to cause harm to a target

Accepted Answer

True

Question 3

Which of the following could you use safely as a password?

Accepted Answer

Gibberish

Question 4

Identification verifies a person's identity in a computer system

Accepted Answer

False

Question 5

Authorization: Process of determining whether a user is allowed to access certain resources

Accepted Answer

True

Question 6

Trojans are used to cause computer crashes, gain remote access to your comp, or steal your data

Accepted Answer

True

Question 7

Vulnerability: Flaw in an environment that an attacker can use to harm the target

Accepted Answer

True

Question 8

Dumpster diving in IT is when...

Accepted Answer

Thieves sift through garbage for documents with PII on it

Question 9

Passwords should be at least 18 characters long

Accepted Answer

False

Question 10

Phishing is fraud by a person using a fake version of a trusted source to get your PII

Accepted Answer

True

Question 11

Passwords should be at least _ characters

Accepted Answer

8

Question 12

Worms can infect and spread without human assistance

Accepted Answer

False

Question 13

Malware stands for Malicious Software.

Accepted Answer

True

Question 14

You do not need to have a different password for each website that requires one.

Accepted Answer

false

Question 15

It is ok to let strangers use your computer

Accepted Answer

False

Question 16

Risk: The potential that a vulnerability will exploit a threat

Accepted Answer

False

Question 17

Integrity is about file permissions, user access control, and encryption

Accepted Answer

True

Question 18

A botnet is a bunch of zombies that allow hackers to bring down entire networks through DDoS

Accepted Answer

True

Question 19

Which is the best example of maintaining information integrity (MA)

Accepted Answer

encrypting company files, validating the data received with a hash algorithm

Question 20

Which of these is a fix for the risks associated with mobile devices?

Accepted Answer

Customizing your security settings

Question 21

You should share your password wit your friend if they need it

Accepted Answer

False

Question 22

Which is not a condition in which a time bomb will activate?

Accepted Answer

A folder is created

Question 23

Fishing is an attempt to manipulate people to give away their PII over the phone

Accepted Answer

False, Vishing

Question 24

Which of these is a risk of having a mobile device?

Accepted Answer

applications collecting information about you

Question 25

Which is the best example of maintaining information confidentiality?

Accepted Answer

allowing only approved users have access to data

Question 26

Authorization: verifying a person's identity in a computer system

Accepted Answer

True

Question 27

You only need to change your password once a year

Accepted Answer

false

Question 28

Confidentiality is all about Encryption and User Access Control

Accepted Answer

True

Question 29

In IT shoulder surfing is...

Accepted Answer

a person looking over your shoulder to steal your PII

Question 30

You should lock your computer before leaving it to go do something else

Accepted Answer

True

Question 31

Which of these is not a risk of having a mobile device?

Accepted Answer

your device allowing you to be more productive

Question 32

Passwords should contain at least 1 number, 1 uppercase letter, and 1 symbol

Accepted Answer

true

Question 33

Viruses are a type of spyware

Accepted Answer

false

Question 34

A brute force attack is a hacker testing every possible combination until the password is found

Accepted Answer

True

Question 35

A backdoor is an entry point into a program without all the normal, built-in security checks

Accepted Answer

True

Question 36

DDoS (Distributed Denial of Service) attacks send an overwhelming amount of data to a network..

Accepted Answer

to make it so that no one can use that network

Question 37

A virus can infect and spread but needs human assistance to do so

Accepted Answer

True

Question 38

Anti-malware software is used to scan for and remove malware.

Accepted Answer

true

Question 39

A backdoor can be installed by keyloggers, viruses, worms, and trojans.

Accepted Answer

false

Question 40

You receive an email saying you were hacked and you need to change your password, you should...

Accepted Answer

realize that this is a phishing attempt and report the email

Question 41

A keylogger keeps track of the number of times you press your keys

Accepted Answer

False

Question 42

You should keep your PII in a document on your desktop

Accepted Answer

False

Question 43

What does confidentiality, integrity, and availability all have in common?

Accepted Answer

user access control

Question 44

Which of these is a risk of having a mobile device?

Accepted Answer

is easily lost and stolen

Question 45

Attackers use malware to install backdoors on the computers they infect

Accepted Answer

true

Question 46

Which is the best way to maintain information availability?

Accepted Answer

putting data on a network drive for specific people to use

Question 47

Which of the following isn't malware?

Accepted Answer

screenloggers

Question 48

Exploit: The method by which an attacker can use a vulnerability

Accepted Answer

True

Question 49

A trojan is a program that looks like it does something that you want

Accepted Answer

True

Question 50

What are mobile devices?

Accepted Answer

a device that you can carry with you that can hold data

Question 51

Which of these is not a fix for the risks associated with mobile devices?

Accepted Answer

giving your phone to a stranger

Question 52

Availability is about making backups and data as easily and unsecurely accessible to others

Accepted Answer

False

Question 53

What is social engineering?

Accepted Answer

manipulating people into giving up personal information

Question 54

Identification provides a user's identity to a computer system

Accepted Answer

true

Question 55

What is malware? (MA)

Accepted Answer

software that allows others to take control of your computer, software that steals your data

Question 56

Accountability: Holds computers responsible for their actions on a user

Accepted Answer

false

Question 57

Viruses are programs with a hidden malicious function

Accepted Answer

false

Question 58

What are the three goals of information security? (hint: CIA)

Accepted Answer

Confidentiality, Integrity, Availability

Question 59

Zombies are compromised mangos that allow an attacker to completely control them

Accepted Answer

false

Question 60

There is no need to shield your keyboard when you type passwords

Accepted Answer

False

CD-454 CyberPatriot Principles of CyberSecurity

Questions 60

CD-454 CyberPatriot Principles of CyberSecurity

Questions 60