stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Net+ Day 9 Quiz Flashcards | StudBud
Explore
/
Net+ Day 9 Quiz
What is one of the main goals of MITM?
What is encryption?
Net+ Day 9 Quiz
43 terms
·
StudBud Administration
·
26 plays
Imported from external platform
Flashcards
43 cards
F
Practice quiz
P
Host live
L
Questions
43
Answers
1
What is encryption?
Sending data through a VPN
Compressing files to save space
Converting plaintext into ciphertext
Copying data to a backup drive
2
What is one of the main goals of MITM?
To degrade DNS resolution
To optimize network performance
To block malware
To steal sensitive or corporate information
To decrease network redundancy
To fix corrupted files
3
Which attack involves removing encryption to expose secure communications?
Phishing
SSL stripping
DNS poisoning
WPA cracking
Logic bomb
ARP de-escalation
4
Which principle of the CIA Triad ensures that data is protected from unauthorized access?
Scalability
Redundancy
Authentication
Confidentiality
Availability
Integrity
5
What is the primary goal of a social engineering attack?
Install ransomware
Exploit software vulnerabilities
Trick individuals into revealing confidential
Gain unauthorized access to physical locations
6
Which of the following is an example of shoulder surfing?
Sending a fake invoice via email
Digging through trash for documents
Watching someone type their password
Pretending to be tech support
7
Which of the following would MOST LIKELY be considered a critical asset?
Breakroom schedule
Core transaction processing system
Coffee machine in the breakroom
Social media account
8
Which is a key benefit of conducting a security audit?
Lowering network speed
Creating new job descriptions
Increasing social media engagement
Automating job functions
Reducing hardware costs
Highlighting areas for security improvement
9
What is a major risk of a rogue DHCP server on a network?
Distribution of invalid configuration to clients
Expired SSL certificates
Reduced signal strength
Excessive file compression
10
Risk is calculated based on which two factors?
Time and Effort
Impact and Likelihood
Security Awareness and Speed
Vulnerability and Budget
Asset Value and Training
Firewall Rules and Uptime
11
What resource is most associated with Data in Use?
IDS
UTM
SSD
HDD
RAM
ROM
12
Which of the following BEST defines a dictionary attack?
Trying every possible character combination
Listening to password input via a microphone
Guessing passwords using a list of common words
Decrypting password hashes
13
What does GDPR emphasize in terms of user interaction?
Informed consent and data rights
Software license agreements
Strict password policies
24/7 security operations
14
What does BIA primarily assess?
Software version history
Employee productivity
Server uptime
Potential losses from threat scenarios
15
What is the main purpose of deception technologies in cybersecurity?
To delete unused files
To back up system data
To update firewall firmware
To patch known vulnerabilities
To monitor social media use
To confuse and divert cyber attackers
16
What are the two main techniques used in VLAN hopping attacks?
MAC flooding
Double tagging
ARP spoofing
Switch spoofing
VPN tunneling
SSL stripping
17
All of the following are types of social engineering attacks EXCEPT:
Firewall spoofing
Tailgating
Shoulder surfing
Dumpster diving
18
Which of the following is NOT a common type of spoofing attack?
ARP spoofing
SQL spoofing
DNS poisoning
Email spoofing
19
What is the main goal of MAC flooding?
Strengthen network authentication
Overload the switch's CAM table
Encrypt all user traffic
Replace the switch firmware
20
Which part of the CIA Triad is MOST concerned with preventing unauthorized data modification?
Non-repudiation
Integrity
Encryption
Hashing
Availability
Confidentiality
21
What makes unpatched or legacy systems vulnerable?
Lack of updates or support
They include unnecessary software
They are not connected to the internet
They use outdated cables
22
What does the double tagging exploit?
The number of active MAC addresses
Port mirroring configuration
The failure of DHCP lease renewal
Wireless channel overlapping
The use of two usernames
The way VLAN tags are read by switches
23
Which of the following is a goal of a vulnerability assessment?
Detecting malware and deleting it
Physically securing the server rack
Archiving user credentials
Rebooting all endpoints
Evaluating a system’s security based on configuration
Reinstalling all apps
24
What happens when a switch’s CAM table is full due to a MAC flooding attack?
It shuts down immediately
It disables wireless functionality
It blocks all traffic
It starts broadcasting
25
Which state of data refers to information stored on a hard drive or SSD?
Data in Use
Data in Motion
Data Archived
Data at Rest
Data in Cloud
Data in Transit
26
Which regulation is specifically aimed at protecting cardholder data?
PCI DSS
NIST 800-53
GDPR
HIPAA
27
What is the primary objective of a VLAN hopping?
Improve switch efficiency
Bypass VLAN security
It disables wireless functionality
Distribute software updates
28
What makes brute force attacks different from dictionary attacks?
They use user-provided hints
They use zero-day exploits
They monitor keyboard strokes
They attempt every possible character combination
29
Where are deception technologies typically placed?
Inside mobile applications
Between internal and external networks
On employee workstations
Within customer-facing portals
30
Why are DNS attacks dangerous?
They can silently redirect users to malicious websites
They overload RAM
They prevent files from being saved
They require physical access to a server
31
What is spoofing in cybersecurity?
Creating a firewall rule
Compressing sensitive data
Disguising oneself to gain unauthorized access
Encrypting user credentials
32
What is the main focus of the GDPR?
Auditing system performance
Regulating credit card transactions
Controlling access to classified government data
Collection and processing of personal data in the EU
Protecting bank account balances
Monitoring employee productivity
33
Which of the following is NOT typically associated with a threat?
External scanning tool
Malicious intent
Attack vector
Accidental internal action
Asset value
Threat actor
34
Who can access encrypted data?
Only employees in the IT department
Anyone with physical access to the server
All Admins
The general public
Only authorized users with the decryption key
Anyone with administrative privileges
35
Which of the following BEST defines a vulnerability?
A hacker actively attacking your network
A user clicking on a malicious link
A phishing email
An unpatched system with a known flaw
The probability of data loss
An antivirus program
36
Which of the following is an example of an on-path attack?
Session hijacking
Keylogging
IP spoofing
Ransomware
37
How can rogue DHCP servers lead to on-path attacks?
By creating extra broadcast domains
By encrypting outgoing traffic
By bypassing user authentication
By overwriting VLAN configurations
By assigning attackers as default gateways
By deleting DHCP leases
38
What is a Zero-Day vulnerability?
A software license expiration
A vulnerability exploited with no patch made
A vulnerability that’s been patched
A threat discovered during a full moon
39
Which of the following is a known consequence of DNS attacks?
Overheating of servers
Invalid BIOS configuration
Poor wireless reception
Disruption of internet services
40
Which encryption method is typically used to protect data in transit?
TPM
AES
TLS
BitLocker
41
What is an example of a threat?
Regular patching schedule
VPN encryption
Missing firewall rules
Weak password policy
Safe browsing habits
Employee intentionally leaking data
42
What is one primary purpose of encryption?
To ensure data confidentiality
To reduce file size
To increase system boot speed
To hide data from the user
43
How do social engineering attacks typically succeed?
By jamming wireless signals
By exploiting outdated software
By appearing trustworthy or authoritative
By using sophisticated malware
