stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
TestOut ITF+ Ch. 10.2 CyberSecurity Flashcards | StudBud
Explore
/
TestOut ITF+ Ch. 10.2 CyberSecurity
TestOut ITF+ Ch. 10.2 CyberSecurity
27 terms
·
StudBud Administration
·
469 plays
Imported from external platform
Flashcards
27 cards
F
Practice quiz
P
Host live
L
Questions
27
Answers
1
Which of the following would be BEST to keep the data on a laptop safe if the laptop is lost or stolen?
Strong administrator password
Full disk encryption
Host-based firewall
Anti-malware software
2
A 'who you are' factor of identification that uses a feature unique to an individual to authenticate to a system.
Security question
Pin number
username and password
biometrics
3
The act of using a tool to listen in on a telephone conversation is called
wiretapping
eavesdropping
man in the middle
replay attack
4
A hacker intercepts communication between a client and a server and tricks both into thinking he is the other one.
Man-in-th-Middle (On-Path) attack
Impersonation attack
Pharming attack
Replay attack
5
When logging in to a laptop, which of the following is an example of multifactor authentication?
A user entering a strong password to log in.
A technician using the fingerprint reader and a retina scan
Logging on via key fob, password, and fingerprint reader
Entering an account number to log in
6
Making sure data is not corrupted in any way relates to which type of security concern?
Permissions
Integrity
Availability
Confidentiality
7
What information does cybersecurity protect?
It protects us from cybersecurity monsters
It protects our privacy on the Internet
Integrity and privacy of data, both in storage and in transit
Integrity and privacy of data, both in transit
8
What type of security concern does social engineering fall under?
Integrity
Confidentiality
Availability
9
A general technique used to secretively discover private information about a person, company - Often an insider threat
scam / hoax
phishing emails
pharming
Snooping
10
An attacker steals or alters communication by placing a host between two devices.
man-in-the-middle attack
replay attack
snooping
eavesdropping
11
It is reasonable to expect digital privacy at school or in the workplace
False
True
12
The CIA security triangle refers to .....
Confidentiality, Integrity, Availability
Central Intelligence Agency
Compliance, Insurance, Assets
Commerce, Independence, Aquisition
13
Searching through trash or papers that are not secured for documents to obtain sensitive information is called....
shoulder surfing
dumpster diving
Phishing
eavesdropping
14
Which should be done to reduce the risk of having sensitive passwords compromised while browsing the internet?
Disable autofill of forms and passwords
Use ad-blocking software on the computer
Enable software firewalls to block unknown ports
Enable screensavers and time-outs on the computer
15
The user leaves personal credentials written on a piece of paper for the technician-what has been violated?
A. Password confidentiality
A. Password complexity
A. Password expiration
A. Password history
16
DDOS (Distributed Denial of Serivce) uses....
power grid take-downs to disable networks
reconaissance to secure passwords
bot malware to enlist multiple systems to overload a server or network
manual hacking skills to take down a server
17
What is cybersecurity?
Protection of computer systems and data
Digital police
Type of network
getting bullied
18
A huge increase in network traffic which could bring down access to a website
Denial of service attack
dumpster diving
man- in-the-middle attack
replay attack
19
A collection of zombies controlled by a herder is called a....
zombie apocalypse
robo-threat
World War III
botnet
20
A specific form of eavesdropping that uses packet sniffers to capture data being transmitted over a network
dumpster diving
snooping
shoulder surfing
wiretapping
21
A surveillance device is used to capture log-in credentials and confidential information is then accessed.
snooping
man-in-the-middle attack
replay attack
dumpster diving
22
The acronym PII stands for
Places In Irregularity
People In Igloos
Poor Identification Information
Personal Identifiable Information
23
Permissions granted to users "
should neither be too lenient nor too restrictive
" describes this principle.
least privilege
most access
most secure
permission controlled
24
This type of authentication utilizes two or more factors to verify an entity's identity
MFA
DDOS
Single Sign-On
AUP
25
Which of the following would BEST be described as password best practices? (Select all that apply)
Use of long passwords
Keeping default passwords
Limit password re-use
Use of special characters
26
An employee who is working for a small business wants to prevent shoulder surfing. What should the employee do?
Create a strong password
Lock the computer
Purchase a privacy screen
Enable encryption
27
Permission levels are controlled by....
ACL's
BIOS
DDOS
CMOS
