stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security Fundamentals Flashcards | StudBud
Explore
/
Security Fundamentals
Security Fundamentals
67 terms
·
StudBud Administration
·
141 plays
Imported from external platform
Flashcards
67 cards
F
Practice quiz
P
Host live
L
Questions
67
Answers
1
Creation occurs after a user is positively identified
False
True
2
All of following are ways to deal with risk except?
Mitigate
Accept
Error
Transfer
3
Key management and passphrases fewer than 20 are WPA vulnerabilitiea
False
True
4
Used for email
OSCP
SMIME
SSL and TLS
VoIP
5
This attack uses the user's web browser settings to impersonate that user
XSRF
XSX
XSS
6
Can detect attack as it occurs
None of the above
Intrusion detection system
Inline IDS
Passive IDS
7
An IEEE 802.11 security protocol designed to ensure that only authorized parties can view transmissions
WPA
WEP
LEAP
WPA2
8
HTTPS is a secure version of HTTP
True
False
9
Compares current detected behavior with baseline
Anomaly-based monitoring
Heuristic monitoring
Behavior-based monitoring
Signature-based monitoring
10
Which is not a characteristic that determines resiliency?
Randomness
Key strength
Cryptoperiod
Length of key
11
A certificate that is no longer valid is?
Revocation
Recovery
Expired
Key escrow
12
What type of malware encrypts all the files on a device and displays that a fee must be paid to receive a key to unlock
Remote Access Trojan
Spyware
Ransomware
Crypto-malware
13
Cryptographic Key is a value that serves as input to an algorithm
True
False
14
Knows the application protocols that it supports
Application/multipurpose proxy
Forward proxy
Transparent proxy
Reverse proxy
15
Vendor allows customers to deploy their own software, including OSs and applications?
PaaS
SECaaS
IaaS
SaaS
16
A hardware device that identifies and blocks real-time DDoS attacks
Correlation engine
DDoSSEC
DDoS mitigator
DNSSEC
17
SSL and TLS widely used protocols are used to protect data-in-transit ?
False
True
18
All are the Cryptographic Algorithms except?
Hash
Symmetric
Asymmetric
Non-repudiation,
19
Uses software "agents" to gather information and report back
NAC
DLP
NAT
20
May occur when an employee is on a leave of absence
Mandatory Vacation
Vacation
Suspension
Termination
21
For cryptography to be useful it needs to be widespread?
False
True
22
IP operates at which layer of the OSI Model?
Layer 4
Layer 3
Layer 2
Layer 1
23
Which proxy routes requests coming from an external network to the proper server?
Reverse proxy
SQL
Application/multipurpose proxy
Forward proxy
24
Type of relationship that can exist between individuals and entities?
Trust
Third-Party Trust
Direct Trust
Trust Model
25
Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) is the encryption protocol used for
WEP
WPA2
WPA
PEAP
26
Logic Bomb is a computer code that lies dormant until it is triggered by a specific logical event?
True
False
27
Which is not a virtual private network (VPN)
Remote-access VPN
Heuristic
Always on VPN
Site-to-site
28
A WLAN using an AP is operating in Infrastructure mode
True
False
29
The most secure Algorithm is ?
Symmetric
Initializaton Vectov (IV)
Asymmetric
None of the above
30
FTP control port
Port 19
Port 24
Port 20
Port 21
31
Types of social engineering approaches include
Phishing, Dumpster Diving, Vishing
Tailgating, Dumpster Diving
Phishing, Dumpster diving, Tailgating
None of the above
32
In wireless networks, AP can be divided into Fat vs. thin, Controller vs. Standalone, & Captive portal APs
True
False
33
UEFI was created to replace BIOS
False
True
34
Social engineering is a means of gathering information for an attack from individuals
True
False
35
A
metamorphic virus
is rewritten with every iteration so that every succeeding version of the code is different
True
False
36
The virtual machine monitor program is called a Hypervisor
True
False
37
Which is a digital certificate?
All of the above
Hardware and Software Certificates
Domain Certificates
Root Certificates
38
The beginning point of the chain, created and verified by a CA?
Root Digital Certification
CCMP
AES
Supply Chain
39
Encrypts commands sent over the control port, data port may not be encrypted
FTP
SFTP
HTTP
FTPS
40
IPS monitors network traffic to immediately block a malicious attack
True
False
41
Latest IEEE?
802.11x
802.11g
802.11ac
802.11z
42
Three types of poisoning
DNS
Privilege Escalation
All of the above
ARP
43
What are the two types of privilege escalation? (Choose all that apply)
Horizontal
MITM
MITB
Vertical
44
Removes all public and private keys and user's identification from the CA
Deletion
Removal
Destruction
Replay
45
These individuals sell their knowledge of vulnerabilities to attackers or other governments?
Brokers
Threat Actor
Hackers
Threat Agent
46
Provide details regarding requests for specific files?
Access logs
Event logs
Security logs
Audit logs
47
What are the three parts of the CIA triangle?
Confidentiality, Integrity, Authentication
Confidentiality, Integrity, Authenticity
Computers, Impersonation, Applications,
Confidentiality, Integrity, Availability
48
Specifies maximum rated speed of 54 Mbps using the 5GHz spectrum
IEEE 802.11n
IEEE 802.11a
IEEE 802.11g
IEEE 802.11z
49
Known as hijacking; captures data, records it, then sends it on
MITB
Replay Attack
DoS
MITM
50
What device operates at Layer 3?
PC
Switch
Access point (AP)
Router
51
A device that connects network hosts intelligently
Router
HUB
Switch
52
Current version is v1.2 and more secure than SSL 3.0
Cipher suite
ITU
TLS
SSH
53
Encrypts only the data portion of each packet and leaves the header unencrypted
Secure Socket Layer
Tunnel
Secure Shell
Transport
54
Most DLP systems use content inspection
True
False
55
JavaScript is the most popular scripting code
False
True
56
Published set of rules that govern operation of a PKI?
Certificate Practice Statement
Certificate Policy
Certificate Authority
Certificate Procedure
57
The process of running a user desktop inside a VM that resides on a server
Hypervisor
Virtual desktop infastructure
Virtual Distrubted Ethernet
None of the above
58
Uses a single TCP port instead of two and all commands are encrypted
SNMP
HTTPS
FTP
SFTP
59
Adds greater degree of functionality
Plug-ins
Add-ons
Extentions
None of the above
60
What are the advantages of proxy servers
Improved management
Stronger security
All of the above
Increases speed
61
Relies upon MAC spoofing, imitates another computer by means of changing the MAC address
ARP poisoning
Smurf Attack
Privilege Escalation
DNS poisoning
62
An attack that send unsolicited messages
Bluesmurfing
Bluetooth
Bluejacking
Bluesnarfing
63
What is public key infrastructure (P K I) ?
None of the above
a framework for all the users involved in digital certificates
a framework for all the entities involved in digital certificates
An organization that uses multiple digital certificates on a regular basis
64
Blocks cipher,perform 3 steps on every block of plaintext
CCMP
IDS
WID
AES
65
Actions on a firewall are all of the following accept?
Reject
Transparent
Allow
Drop
66
List of certificate serial numbers that have been revoked
Certificate Authority
Certificate Repository
Certificate Revocation (CR)
Certification Revocation List (CRL)
67
Occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer
SYN floood attack
Buffer overflow attack
Flood Guard
Integer overflow
