BLOCK 5 (1-3)

Ensuring the integrity of software is called ________________

Malware's most common pathways from criminals to users is through Email & World Wide Web.

Firewalls can be implemented as hardware, software, or both.

determine whether someone attempted to break into a system and if it was successful, along with what they may have done.

Wired/wireless network security solution that allows control of access based on predefined conditions systems must meet

method uses a magnetic field to erase data and cause irreversible damage to the data.

Which of the following are application vulnerabilities?

How can you stop an attacker from booting up a different operating system to gain access?

A proxy resides between a users computer and the internet

Network administrators secure a network by implementing permissions on the ________ and _______

_________ is responsible for receiving packets from the sensor and performing analysis on packets to determine suspicion

A ______ is an aggregation of compromised computers, turning them into _______ to be used by attackers.

A ____________ monitor hosts or networks for suspicious activity and take corrective action.

Without the BitLocker key the system cannot boot.

Ensuring the third party is ____________ is an important prerequisite when considering moving in-house services off-site

_____________ reduces security issues on a network by taking measures to prevent them in the first place.

____________ software is your system’s protection against viruses.

Verification Process requires individuals to identify themselves and for a system to verify that they are who they say.

A __________ restricts data communication traffic to and from the network it’s connected to.

Systems that provide centralization of authentication, authorization, and accounting are known as

Combining a username & password is considered multifactor authentication.

Anti-Virus programs inspect the content of each file & search for specific patterns that match a malicious profile known

software, typically hidden from the administrator, installed on a system by a hacker to give privileged access.

______ Self-replicate themselves without needing a user to activate the virus.

The most common methods of spreading a virus is through e-mail.

The model Microsoft uses for threat analysis and identification

This type of virus installs a piece of software that contains code that will not execute until a certain event occurs.

A ___________ firewall can block or allow traffic based on the source or destination IP address & Port number

What device/service provides security, privacy, and web filtering? 

This type of authentication factor requires a biometrics system.

________ servers provide security, privacy, and web filtering

____________ is a type of phishing that targets a specific individual, utilizing messaging that appeals to that person.

Routine ___________ results identify hosts that are vulnerable to attacks.

National Security may also be threatened by worms, viruses, and other types of malware.

______ is a newer AAA protocol that gives a more reliable and secure communication service through TCP

Allowing someone to do something they are not authorized to do is known as ....

The sensor is responsible for collecting traffic from that segment and then forwarding the traffic to the ______________

If an account is compromised, a hacker can now access multiple servers is a drawback to what service?

attackers encrypt a victims entire system, specific files, or they may lock the system’s screen until they pay a ransom.

When using Full Disk Encryption (FDE), what stores the cryptographic keys?

Which of the following are application vulnerability prevention techniques?

What are some measures that can be done to reduce the risk of being affected by a DoS attack?

Exhausting resources needed to provide services to the user is known as....

What type of attack involves multiple computers sending more requests than the target can handle? (performed by Botnet)

Malicious code is __________ or __________ written to intentionally cause undesired effects, security breaches or d

The ____ SDLC model, backtracking and repeating development steps is possible, making it receptive to customer feedback.

_______ is software designed to infiltrate or damage a computer system without the owner's informed consent.

A flaw or weakness in a system’s design or operation that could be exploited to violate the systems security policy.

A Network Intrusion Detection System (NIDS) is made up of what 3 components?

_____________ is presenting information about yourself to a system, such as a username or a smartcard.

Websites using _______ can manipulate a system, gain full system access & potentially exploit security vulnerabilities.

Accounting logs user activity on a network and tracks usage. Any network resource user consumes during session is logged

Utilizes software installed on clients which authenticates the client to the NAC before scanning/allowing network access

The part of AAA services that validate the identification presented by a user is ____________

Countermeasures against social engineering include what techniques?

By default administrators should configure firewalls to block all traffic.

The destructive behavior where the attacker deletes files is known as _____________________

Software that covertly gathers user info through the user's Internet connection without their knowledge, for advertising

The process of repairing a vulnerability or flaw that is identified after the release of an application.

After verifying the account information, the user is granted access to the network. Which part of AAA is this?

The destructive behavior where the attacker changes entries in records is known as __________ _________

A ___________ firewall can filter traffic based and look at the context of the conversation and make a determination.

What is the purpose of social engineering?

Type of authentication factor includes swipe cards, physical tokens and codes sent to mobile phones via text message

Cross site scripting injects malicious code into what?

______________ authentication uses any combination of two factors.

This type of authentication factor is based on user habits, like typing patterns.

A ___________ firewall is a piece of software that is installed on a single system to protect that one system.

What is NOT an example of "something you know" authentication?

____________ Attacks occur when more requests are sent to a machine (host) than it can handle.

Attacks can be characterized according to intent, point of initiation, and method of delivery.

List Folder Contents, Read, Read and Execute, Write, Modify, and Full Control are examples of _______ permissions.

Providing information to someone not authorized to have it is __________ ____________

The goal of _________ attacks is to access a resource that a machine should not provide to the attacker.

In the _____ SDLC model, each phase of development must be completed prior to passing on to the following phase.

Training informs users of common pitfalls that can cause system vulnerabilities and what they can do to mitigate them

A ___________ firewall sits at the edge of a network and controls what traffic is allowed to enter and leave.

This authentication factor is based upon a user’s location.

Viruses are classified into many categories, based on how they propagate and the nature of their behavior.

What ways can worms replicate themselves?

A Boot-Sector Virus resides where?

Psychological manipulation of people into divulging confidential information beneficial to an attacker.

Hardware encryption applies very complex encryption more quickly than software encryption.

with ___ clients can access a network remotely by connecting to a client which sends authentication request through UDP.

A ______ is any circumstance or event with the potential to adversely affect a system through unauthorized access

________ is a common attack that uses Javascript to inject malicious code into a web application.

_________ leads a user to perform some action to trigger a trap, such as installing malware.

Agentless NAC does not require agent ___________ to be installed on a client

A mail gateway can be set up to scan and filter out problematic .....

a popular protocol for hardening a network to ensure that anyone who connects has valid credentials before access.

___________ is a specific form of spear phishing targeted at high-value targets.

The 2 types of destructive behavior are Data Diddling and Data Destruction.

A _______ in a supply chain is an intermediary, subcontracted individual, or company that provides a product or service

_______ is claiming you didn’t do something or were not responsible

Administrators should check logs weekly for signs of security compromise.

The console is where alerts & notifications are typically sent to. The admin configures the NIDS from the console.

A File Infector Virus operate in memory and infect _________ _________

A ____________ detects suspicious activity on a host or a network, logs it, and alerts system or network administrators

attempt to acquire sensitive data, such as account passwords through fraudulent solicitations via email, txt, websites.