CD-454 CyberPatriot Principles of CyberSecurity

Question 1

Confidentiality is all about Encryption and User Access Control

Accepted Answer

True

Question 2

Worms can infect and spread without human assistance

Accepted Answer

False

Question 3

What does confidentiality, integrity, and availability all have in common?

Accepted Answer

user access control

Question 4

Passwords should be at least 18 characters long

Accepted Answer

False

Question 5

What is social engineering?

Accepted Answer

manipulating people into giving up personal information

Question 6

You should keep your PII in a document on your desktop

Accepted Answer

False

Question 7

What are the three goals of information security? (hint: CIA)

Accepted Answer

Confidentiality, Integrity, Availability

Question 8

You receive an email saying you were hacked and you need to change your password, you should...

Accepted Answer

realize that this is a phishing attempt and report the email

Question 9

Passwords should be at least _ characters

Accepted Answer

8

Question 10

Anti-malware software is used to scan for and remove malware.

Accepted Answer

true

Question 11

Authorization: Process of determining whether a user is allowed to access certain resources

Accepted Answer

True

Question 12

Threat: An attacker or piece of malware that desires and/or is able to cause harm to a target

Accepted Answer

True

Question 13

In IT shoulder surfing is...

Accepted Answer

a person looking over your shoulder to steal your PII

Question 14

Accountability: Holds computers responsible for their actions on a user

Accepted Answer

false

Question 15

Availability is about making backups and data as easily and unsecurely accessible to others

Accepted Answer

False

Question 16

Viruses are a type of spyware

Accepted Answer

false

Question 17

Attackers use malware to install backdoors on the computers they infect

Accepted Answer

true

Question 18

A backdoor is an entry point into a program without all the normal, built-in security checks

Accepted Answer

True

Question 19

Trojans are used to cause computer crashes, gain remote access to your comp, or steal your data

Accepted Answer

True

Question 20

Which is the best example of maintaining information confidentiality?

Accepted Answer

allowing only approved users have access to data

Question 21

A keylogger keeps track of the number of times you press your keys

Accepted Answer

False

Question 22

A botnet is a bunch of zombies that allow hackers to bring down entire networks through DDoS

Accepted Answer

True

Question 23

You do not need to have a different password for each website that requires one.

Accepted Answer

false

Question 24

A backdoor can be installed by keyloggers, viruses, worms, and trojans.

Accepted Answer

false

Question 25

There is no need to shield your keyboard when you type passwords

Accepted Answer

False

Question 26

A virus can infect and spread but needs human assistance to do so

Accepted Answer

True

Question 27

What is malware? (MA)

Accepted Answer

software that steals your data, software that allows others to take control of your computer

Question 28

DDoS (Distributed Denial of Service) attacks send an overwhelming amount of data to a network..

Accepted Answer

to make it so that no one can use that network

Question 29

Vulnerability: Flaw in an environment that an attacker can use to harm the target

Accepted Answer

True

Question 30

Which of these is a risk of having a mobile device?

Accepted Answer

is easily lost and stolen

Question 31

You should share your password wit your friend if they need it

Accepted Answer

False

Question 32

You only need to change your password once a year

Accepted Answer

false

Question 33

Identification verifies a person's identity in a computer system

Accepted Answer

False

Question 34

Passwords should contain at least 1 number, 1 uppercase letter, and 1 symbol

Accepted Answer

true

Question 35

Spyware: Collects information about you, without your knowledge or consent

Accepted Answer

True

Question 36

Risk: The potential that a vulnerability will exploit a threat

Accepted Answer

False

Question 37

Which of the following could you use safely as a password?

Accepted Answer

Gibberish

Question 38

Which of these is not a fix for the risks associated with mobile devices?

Accepted Answer

giving your phone to a stranger

Question 39

Which of these is a risk of having a mobile device?

Accepted Answer

applications collecting information about you

Question 40

A trojan is a program that looks like it does something that you want

Accepted Answer

True

Question 41

Which is the best example of maintaining information integrity (MA)

Accepted Answer

validating the data received with a hash algorithm, encrypting company files

Question 42

Which of these is not a risk of having a mobile device?

Accepted Answer

your device allowing you to be more productive

Question 43

Which is not a condition in which a time bomb will activate?

Accepted Answer

A folder is created

Question 44

Authorization: verifying a person's identity in a computer system

Accepted Answer

True

Question 45

Viruses are programs with a hidden malicious function

Accepted Answer

false

Question 46

Which of these is a fix for the risks associated with mobile devices?

Accepted Answer

Customizing your security settings

Question 47

Dumpster diving in IT is when...

Accepted Answer

Thieves sift through garbage for documents with PII on it

Question 48

What are mobile devices?

Accepted Answer

a device that you can carry with you that can hold data

Question 49

Integrity is about file permissions, user access control, and encryption

Accepted Answer

True

Question 50

Which of the following isn't malware?

Accepted Answer

screenloggers

Question 51

Zombies are compromised mangos that allow an attacker to completely control them

Accepted Answer

false

Question 52

Identification provides a user's identity to a computer system

Accepted Answer

true

Question 53

A brute force attack is a hacker testing every possible combination until the password is found

Accepted Answer

True

Question 54

Exploit: The method by which an attacker can use a vulnerability

Accepted Answer

True

Question 55

Fishing is an attempt to manipulate people to give away their PII over the phone

Accepted Answer

False, Vishing

Question 56

Phishing is fraud by a person using a fake version of a trusted source to get your PII

Accepted Answer

True

Question 57

It is ok to let strangers use your computer

Accepted Answer

False

Question 58

Malware stands for Malicious Software.

Accepted Answer

True

Question 59

You should lock your computer before leaving it to go do something else

Accepted Answer

True

Question 60

Which is the best way to maintain information availability?

Accepted Answer

putting data on a network drive for specific people to use

CD-454 CyberPatriot Principles of CyberSecurity

Questions 60

CD-454 CyberPatriot Principles of CyberSecurity

Questions 60