What two phases were essential to the US hacking ISIS?

Infiltration and Maunevering, Reconaissance

What is the function of the Data Link Layer?

Connects hosts on the same network

What should you look for when looking for vulnerabilities ?

Look for bugs, Recon identifies web server and version number, Injection attacks

What is sanitization?

actions to "clean" malicious or vulnerable code out of a user's input

A measure of the threat by a potential circumstance or event.

Digital certificates ensure that the data sent is unchanged

"Continuously run a block of code until a certain condition is met."

piece of information used to control a cipher’s output

An actor with the potential to adversely impact an information system.

What is Hypertext Transfer Protocol Secure (HTTPS)?

Combination of HTTP with encryption

What does the command ipconfig do

Tells you which ports your computer is listening on

The purpose of password attacks are?

Crack passwords wih offline tools, Get the password hashes, Use those passwords to gain authorized access

Which of the following is NOT needed for the Vigenere Cipher to be uncrackable:

The Key contains letters and numbers

Network security device that monitors network traffic

Which is NOT a reason why we use Steganography?

To scramble messages so that only intended recipients can unscramble it

algorithm used to perform the transformation

studbud

SY110 Intro to Cyber Security part 1

97 termsStudBud Administration51 plays

This is a compilation of student-submitted questions for review for the SY110 final

Flashcards97 cardsFPractice quizPHost liveL

Questions 97

Answers

1
What is HTTP
Hypertext Transfer Protocol
Hypertrans Tickle Pickle
Holotext Transport Protocol
Hypotext Transfer Protocol
2
What is a "script?"
"Pop-up message"
"A program that runs inside another program (e.g. a browser)"
"Continuously run a block of code until a certain condition is met."
"Programming language of the web"
3
What is capability?
An adverse effect that results from an event occurring.
A weakness that can be exploited to compromise a pillar of cyber security
The knowledge and skill set required by a threat to carry out an event.
The resources and positioning required by a threat to carry out an action.
4
What protocol does the Data Link Layer use?
Ethernet and Wifi
IP, IPMP
No Protocol
TCP, UDP
5
What two phases were essential to the US hacking ISIS?
Execution
Infiltration and Maunevering
Acessbility
Reconaissance
6
What is the function of the Data Link Layer?
To use the ethernet and wifi
To connect the computer to the internet
Connects hosts on the same network
Connects computer to computer
7
What should you look for when looking for vulnerabilities ?
Establish connection
Look for bugs
Recon identifies web server and version number
Injection attacks
8
The first use of Binary system in computing?
Alan Turing
Bernard Shaw
IBM
Charles Babbage
9
The Application Layer includes _____ & ______ running on different hosts
Programs, Media
Apps, Media
Apps, Programs
Apps, Domains
10
What pillar do digital certificates fulfill?
Authentication
Confidentiality
Non-Repudiation
Integrity
11
Encryption hides the ______ of a message, while Steganography hides the ______ of a message.
contents, existence
existence, contents
details, meaning
meaning, details
12
What is sanitization?
actions to "clean" malicious or vulnerable code out of a user's input
actions to verify that inputs by the user are properly formed
html form element, indicates action to be taken when submitted
All of the above
13
When a message is hidden in some sort of medium, the result is called...
Cover-Medium
Crypto-Medium
Stego-Cover
Stego-Medium
14
What is risk?
A measure of the threat by a potential circumstance or event.
An adverse effect that results from an event occurring.
An actor with the potential to adversely impact an information system.
The knowledge and skill set required to carry out an event
15
Which of the following are considered a Modern Steganography Carrier File?
gif
mp3
Document
Jpeg
16
What does ARP stand for?
Artificial Resource Protocol
Address Resolution Protocol
Archetectual Ramification Protocol
None
17
Which of the follwing is not a common peripheral?
power drives
network cards
Output devices
Input devices
18
Cryptanalysis is the study of methods for obtaining the meaning of encrypted information without knowledge of the key
TRUE
FALSE
19
HTTPS Includes..
Authentication and Confidentiaility
Security and Authentication
Confidentiality and Availiability
Encryption and Authentication
20
Which of the following is "A collection of files that contain the content you see displayed?
Web Client
Internet
Web Site
World Wide Web
21
Which of these is an Example of a Caesar Shift Cipher?
157 45893
4e 50 6f 69
WKH TXLFN
22
Which is false
Digital certificates help to prevent a man-in-the-middle attack
A website can be its own certifying authority
digital certificate involves a certifying authority
Digital certificates ensure that the data sent is unchanged
23
What is a "loop?"
"Pop-up message"
"A command to perform an action"
"Continuously run a block of code until a certain condition is met."
"a statement to evaluate a value"
24
Steganography violates the integrity of the hidden message.
FALSE
TRUE
25
What kind of hardware does the Data Link Layer use?
Switch
Routers
None
Hubs
26
Steganography is the act of hiding a message in "plain sight"
FALSE
TRUE
27
Is RAM Volatile or NONVolatile
nonvolatile
volatile
28
Which program is a useful tool for brute force attacks?
Jack the Ripper
DOD Reasearch Table
John the Ripper
Kali
29
A Cipher is scrambling a message so the only the recipient can unscramble it
TRUE
FALSE
30
What is a DoS attack?
Denial of Service
Defensive Operation Strike
Denial of Survey
Department of Service
31
What is the Key
piece of information used to control a cipher’s output
the transformed information created by combining the plaintext
algorithm used to perform the transformation
The original, unaltered information
32
A Denial of Service Attack (Dos) violates which pillar of cybersecurity?
Integrity
Authentication
Availability
Non-repudiation
33
What is a threat?
An actor with the potential to adversely impact an information system.
The knowledge and skill set required by a threat to carry out an event.
The resources and positioning required by a threat to carry out an action.
The motivation of a threat to carry out an action.
34
What is Hypertext Transfer Protocol Secure (HTTPS)?
Text written with any editor
Recorded data when you visit a website
A means of transferring data
Combination of HTTP with encryption
35
Hashing is an easily reversible used to verify the integrity of a file
FALSE
TRUE
36
What does the command ipconfig do
Tells your IP address, subnet mask, and DNS server
Translates host names to IP addresses
Tells which IP addresses match with MAC addresses
Tells you which ports your computer is listening on
37
Which host is at RISK when vulnerable code is run in a client-side script?
value
name
Client
Server
38
Which term matches the definition: "the data we'll hide the embedded message in"?
Embedded-medium
Embedded-message
Cover-medium
Stego-medium
39
What are the two types of computer memory?
Volatile & Un-volatile
Long term & Flash memory
Volatile & Non-volatile
Non-volatile & Violent
40
Which of the following is not a computer component?
RAM
Mouse
Soft Drive
Monitor
41
What are factors of IPS (information prevention system)
No impact on availability
Requires in line traffic
Active control
Can work offline
42
The purpose of password attacks are?
Crack passwords wih offline tools
Get the password hashes
Escalate Privledges
Use those passwords to gain authorized access
43
What does RAM stand for?
robots accessing memory
Random access media
Random access memory
Random Account Memory
44
In Symmetric Encryption Bob and Alice share the _____ key
same
different
45
Which of the following is NOT needed for the Vigenere Cipher to be uncrackable:
The Key contains letters and numbers
the key is never re-used
The key is long or longer than the message
The key is random group of letters
46
What are firewalls
A hash function for symnetric encyrption
A program that exploits vulnerabilities
Network security device that monitors network traffic
A physical barrier to the system
47
Who invented the first computing machine known as an "Analytical Engine?"
IBM
Microsoft
Alan Turing
Charles Babbage
48
Which is NOT a reason why we use Steganography?
To act as a security reinforcement layer
To scramble messages so that only intended recipients can unscramble it
To encapsulate data
To avoid snooping from third-parties
49
What does URL stand for?
Undefined Resource Lable
Unified Recordance Location
Unified Resource Locator
Unified Record Lable
50
What is the Cipher
algorithm used to perform the transformation
the transformed information created by combining the plaintext
piece of information used to control a cipher’s output
The original, unaltered information
51
Which host STORES the code in a sever-side script, BEFORE a request to the server is made?
name
value
Server
Client
52
What data unit is ARP stored in?
Mac Address
IP Address
Bytes
Bits
53
Which does not belong
Fetch
Execute
Encode
Decode
54
What is Cryptography?
Substitution Ciphers
Caesar Shift Cipher
The study and practice of hiding information
Symmetric Encryption
55
What does "20"+ "24" equal to in Java Script?
44
2024
20.24
20 plus 24
56
What kind of address does the Data Link Layer use?
Port numbers
IP Address
Mac Address
None
57
What is an action?
None of the above
actions to "clean" malicious or vulnerable code out of a user's input
actions to verify that inputs by the user are properly formed
html form element, indicates action to be taken when submitted
58
What does "!=" mean?
Not equal to.
Equal to.
Greater than or equal to.
Less than or equal to.
59
Which one of these is NOT a step to the Risk Management Process?
Reflect
Identify
Monitor
Address
60
What is validation?
html form element, indicates action to be taken when submitted
actions to verify that inputs by the user are properly formed
I didn't study
actions to "clean" malicious or vulnerable code out of a user's input
61
What does this mean: "while (D >=3)."
It is a while loop with D having to be equal to 3.
It is a while loop with D having to be greater than or equal to 3.
It is a while loop with D not having to be equal to 3.
It is a while loop with D having to be less than or equal to 3.
62
Which of the following do cyber attacks do?
Manipulate
Degrade
Disrupt
Destroy
63
What is a difference between Memory and Storage?
Memory is Slower
Memory requires power
Memory is faster
Memory retains memory when power is off
64
What is the Cipher Text
The original, unaltered information
algorithm used to perform the transformation
piece of information used to control a cipher’s output
the transformed information created by combining the plaintext
65
What does SSH do?
I don't know.. BBQ Sauce?
Gives aministrator access
uses TCP port 80
Provides secure access to a command shell on a remote machine
66
What does "/-Y" correlate to? move /-Y C:\Users\billy\Downloads\vacation.jpg
Order
Argument
Command Name
Options
67
Which of the following is not an element of HTML?
Empty choice
Empty choice
Empty choice
Empty choice
68
which is the correct cycle order that is sued to run a program?
Decode,fetch, decode
Fetch, Excecute, decode
Fetch, Decode, Excecute
Decode, Excecute, Fetch
69
What is the goal of Defense in Depth
Prevent
Delay
Allow
Report
70
Steganography protects which pillar of Cyber Security?
Integrity
Availability
Confidentiality
Non-repudiation
71
You only need 2 of the 3 to decrypt (i.e Plaintext + Key or Key + Ciphertext)
TRUE
FALSE
Maybe?
72
What is opportunity?
The resources and positioning required by a threat to carry out an action.
The motivation of a threat to carry out an action.
An actor with the potential to adversely impact an information system.
An adverse effect that results from an event occurring.
73
Which is NOT part of a digital certificate? (Certificate Authority: CA)
Encrypted with CA's private key
Encrypted with CA's public key
The Domain's public key
The Domain Name
74
The use of salts would defeat which type of attack?
Rainbow Table
Buffer Overflow Attack
Malware
Brute Force Attack
75
Which is true of software firewalls
Packets must be dissected and compared with defined rules
Runs as a service on a host
Does NOT allow application to filter network traffic
Usually placed at network perimeter
76
The worst place to encode a hidden message is in the ____ bytes of an image.
Middle
Last
Least Significant
Most Significant
77
What is the data unit used by the Data Link Layer?
0's and 1's
Segments
Datagrams
Frames (header, tailer)
78
Which of the following is a basic function of a computer
create files
watch TV
communication
input data
79
In the URL, http://www.usna.edu/CoronaVirus/Students, which of the following is the protocol?
/CoronaVirus/Students
/www.usna.edu
http:/
URL
80
What is DNS?
An IP Address
An aspect of a Default Gateway.
The Internet Phonebook
A server
81
Which is an example of a Certificate Authority?
Amazon
Bodybuilding.com
GeoTrust
Federal Trade Commission
82
What 2 components go hand in hand with the Operating System? (Choose 2)
Code
Hardware
Passwords
Users & Applications
83
Symmetric Encryption DOES NOT protect which of the following Pillars of Cyber Security
Confidentiality
Authentication
Authentication
Non-Repudiation
84
Frequency Analysis is a method of solving a cipher by analyzing which characters appear more often than others
FALSE
TRUE
85
Who worked for the NSA and said remote security can't be guaranteed?
Bernard Peters
Bill Gates
Steve Jobs
Bernard Shaw
86
What does the Relative Path refer to? move /-Y C:\Users\billy\Downloads\vacation.jpg
Command Name
Argument
Options
Code
87
Encryption/Decryption requires all of these EXCEPT...
Key
Plaintext
Cipher
Cipher Text
88
Which of the following is true about the Caesar Shift Cipher?
It cannot be solved by Frequency Analysis
It only has a limited number of keys
It has infinite keys
It is unsolvable
89
A DDoS attack is a ____ instrument?
Useful
Marine Corps
Lazer
Blunt
90
Who certifies the certifying authority
Amazon
Google
Itself
Any certifying authority higher than that one
91
What is a process?
running instance of a program
Howt you do a problem
The infinite iterations of a program
The code behind a program
92
T or F storage can retain information when powered off?
T
F
93
What is the Plain Text
piece of information used to control a cipher’s output
the transformed information created by combining the plaintext
The original, unaltered information
algorithm used to perform the transform
94
Why is the Vigenere Cipher more secure than the Caesar Shift Cipher
not this one
It has multiple keys needed to decrypt it
It uses private and public keys
it cannot be solved by frequency analysis (if key length unkwon)
95
Encryption hides the ____ of the message.
Contents
Existence
96
What does move correlate to? move /-Y C:\Users\billy\Downloads\vacation.jpg
Options
Argument
Command Name
Order
97
What is a buffer?
Stream of bytes into a fixed size region of memory
The small space between network hubs.
Solution which neutralizes the pH of a substance.
The area in which electricity passes through a motherboard.

SY110 Intro to Cyber Security part 1 Flashcards | StudBud