stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity Unit 1 and Part of Unit 2 Flashcards | StudBud
Explore
/
Cybersecurity Unit 1 and Part of Unit 2
Cybersecurity Unit 1 and Part of Unit 2
40 terms
·
StudBud Administration
·
818 plays
Project Lead the Way - All of Unit 1 and up to 2.2.1 in Unit 2
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
What is the main purpose of the
tracert
command ?
To determine the owner of a registered domain name.
view information about route a packet takes from a host to a destination
To determine the existence of a host on a network.
To match a domain name with an IP address.
2
Which of the following best describes data integrity?
Assurance that a set of data is factually correct.
Assurance that a set of data comes from reliable sources.
Assurance that a set of data is accurate and consistent over time.
Assurance that only authorized users can access the data.
3
a person who does not have permission to test a site but does so w/o the intent of doing harm & reports their finding
White Hat Hacker
Grey Hat Hacker
Hacktivist
Black Hat Hacker
4
An attacker attempts to discover a password by trying variations of commonly used words/passwords. This is called a ____
smurf
dictionary
rainbow table
brute force
5
Which of the following exploits usually or always use social engineering techniques to make the exploit effective?
tailgating
whaling
all listed
watering hole
6
A computer system contains the file
somefile.bat.
Which of the following best describes how this file should be handled?
If opened, harmful commands may be executed by the system shell.
The file should be deleted immediately.
The file should be copied to a USB drive for further analysis.
The OS will open this harmlessly using the default text editor.
7
An attacker attempts to discover a password by trying every possible combination of characters of a given length.
teardrop
smurf
dictionary
brute force
8
What service commonly uses port 25?
SMTP
FTP
HTTPS
DNS
9
start Task Manager on Windows and you see a spike in CPU usage while no user processes are running.
An unknown process that should be investigated as possible malware
You need a new CPU.
Task Manager is incorrect and should be restarted.
A process is hung and should be killed.
10
Describes the most desirable tradeoffs among the CIA triad for data consisting of online banking transactions?
High availability at the expense of confidentiality and integrity.
All three components of the CIA triad are equally important.
High confidentiality at the expense of integrity and availability.
High integrity at the expense of confidentiality and availability.
11
What are the three security principles that make up the CIA triad?
Content, Installation, Administration
Cybersecurity, Information, Access
Confidentiality, Integrity, Availability
Confidence, Insurance, Access
12
Which is the best description of an IP address.
A number assigned to all computers located at the same postal address.
A permanent indicator of a device’s geographic location.
A unique numeric id applied to the network interface card of a device
A # assigned to hosts on a network allowing for unique id & message routing
13
What service commonly uses port 443?
SMTP
HTTP
HTTPS
FTP
14
Consider the url
http://www.cutepuppies.com/images/mypuppy.jpg.
What is the domain name of this site?
cutepuppies.com
www
mypuppy.jpg
http
15
Which of the following best describes spyware?
MW that secretly collects information about a computer system
Malware that allows an attacker to bypass the normal authentication require
Malware that is disguised as legitimate software.
Malware that is spread by user action, such as clicking a link
16
Which of the following best describes the perpetrators of the Stuxnet worm?
Hacktivist
Warfare/Espionage
Script Kiddie
Cyber Syndicate
17
Which of the following passwords is likely to be the most difficult for an attacker to crack?
1w7b0t1w7w0t
twasthebestoftimesitwastheworstoftimes
!w+8oTiW+w0t
iwtbotiwtwot
18
Which of the following best describes the role that website certificates play in ensuring secure online browsing?
Certificates indicate that the site is using encryption to secure traffic.
used primarily as marketing tool to give users a sense of security
Certificates are issued by FCC/indicate that a website complies with laws
can give the user confidence that the site is legit instead of spoofed
19
Fraudulent email specifically targeting certain employees of an organization with the intent of stealing personal
spam
spear phishing
whaling
phishing
20
A computer system contains the file
somefile.vba.txt.
What is the extension of the file?
somefile.vba
.vba
.vba.txt
.txt
21
Which of the following best describes a backdoor?
MW that allows an attacker to bypass normal authentication require 2 access
Malware that is spread by user action, such as clicking a link
MW that uses services running on a computer such as network connection
Malware that is disguised as legitimate software.
22
Malware that prevents a user from accessing data on a system until money is paid.
Rootkit
Botnet
Keylogger
Ransomware
23
Exploring files stored on a computer, which actions is least important to help identify potentially malicious files?
Show the owner of the file
Sort files by date of file creation
Show hidden files
Show the full file extension
24
What is the main purpose of the
nslookup
command ?
To determine the existence of a host on a network.
To match a domain name with an IP address.
To view info about the route a packet takes from host to a destination
To determine the owner of a registered domain name.
25
Which permission should be set to “Blocked” to improve browsing security while still maintaining functionality?
Camera
JavaScript
Motion sensors
Cookies and site data
26
What service commonly uses port 20?
HTTP
FTP
DNS
SMTP
27
Which of the following best describes data confidentiality?
Only authorized persons should have access to the data.
Only the compilers should have access to the data.
Only personally identifiable data should be held confidential.
All users who request access should be given access to the data.
28
A group of devices that contain malware coordinating them to attack a target together
Botnet
Keylogger
Ransomware
Man-in-the-Middle
29
Malware that runs with elevated privileges on a system to attempt to gain access to restricted accounts or data.
Rootkit
Man-in-the-Middle
Keylogger
Botnet
30
What is the main purpose of the
ping
command ?
To determine the existence of a host on a network.
To match a domain name with an IP address.
To determine the owner of a registered domain name.
View information about the route a packet takes from host to a destination
31
The practice of sending fraudulent emails appearing to be from legitimate sources asking the recipient to email back
spam
spear phishing
phishing
whaling
32
Which of the following best describes a virus?
Malware that is disguised as legitimate software.
MW that allows an attacker to bypass the normal authentication require
MW that secretly collects information about a computer system
Malware that is spread by user action, such as clicking a link
33
What is the main purpose of the
netstat
command ?
view the info about network connections for the host such as IP and ports
To determine the existence of a host on a network.
View info about the route a packet takes from a host to a destination
To match a domain name with an IP address.
34
Which of the following best describes a trojan horse?
Malware that is spread by user action, such as clicking a link or sharing a
Malware that is disguised as legitimate software.
Malware that allows an attacker to bypass the normal authentication require
Malware that secretly collects information about a computer system
35
“process name”, “parent process id”, “process id”. What process should be killed to stop all svchost.exe processes?
kill all svchost.exe processes individually
services.exe
fontdrvhost.exe
WUDFHost.exe
36
What is the difference between a DoS attack and a DDoS attack?
D - “Directed”. DDoS attacks are aimed specific target rather random target
The extra D - “Distributed”. DDoS attacks come from multiple sources
The extra D - “Discrete”. DDoS attacks involve encryption of the source IP
The extra D stands for “Damage”. DDoS attacks are worse than DoS attacks.
37
Which of the following best describes a worm?
Malware that is disguised as legitimate software.
MW that allows an attacker to bypass the normal authentication require
Malware that is spread by user action, such as clicking a link or sharing a
MW that uses services running on a computer such as network connection
38
Which of the following is not an action that will significantly increase the security of a personal laptop?
Enable firewall software if available.
Use settings that drain the least amount of power.
Keep anti-virus definitions up to date.
Set the computer to lock when the lid is closed.
39
Irrelevant or inappropriate email sent to a large number of recipients is called __________.
spear phishing
spam
whaling
phishing
40
Appropriate network architecture for an e-commerce site. What data / inappropriate store on public facing server?
Web site log files
Product pricing
Html data for the web site
Customer login and passwords
