In network monitoring what is analysis

A set of methods to examine a potential problem

In Risk Management which of the following would NOT be a impact on a business

Employees might not be able to get to work work

Which one of the following is NOT a principle of the data protection act

Not accessible to the general public

What implications does managing accounts of a social media platform have

Social media sites may have lower levels of security, Security may be compromised if accessed via social media

In monitoring documentation what is an audit log

A security relevant chronological record

In monitoring tools which best describes a port scanner

Applications used to probe a server or host for open ports

Which of these is NOT a method of accessing personal data

Physical Destruction of Hardware

Identify TWO info that would be useful to a hacker trying to hack a telephone banking system

Overdraft limit, Date of last cash withdrawal

In network monitoring what is classification

A set of methods on categorising potential problems

How can you avoid data loss during a power-cut

Uninterruptible Power Supply (UPS)

In monitoring documentation what is an security log

Used to track security information on a computer system

What are the stages of a sophisticated attack

Survey, Delivery, Breach, Affect

What is an IPS and what does it do

IPS uses real-time tracking to responds to identified attack, Intrusion Prevention System

After an attack each member of the research team needs to know their role because

The team is more likely to solve the case, React to attacks faster

In cyber security what is CHECK

The CHECK scheme is an NCSC approval system

In monitoring tools what is the difference between a honeypot and a honey-net

Honey-nets are typically larger

National Vulnerability Database

Explain how a breach in data confidentiality can allow third parties to pose as a customer

Personal data could be used to answer a security question, The 3rd party is able to give private/personal information

Which are 4 section of a network security plan

Overview, assessment, plan, gather resources and budget

In network monitoring what is an escalation protocol

Set of methods to determine severity of a potential problems

Standardise planning, delivery & support of IT for business.

After an attack why is liaising with the victim important

So that the customer is kept informed, Good customer service so customer feel part of the process

Describe ONE impact on a customer if all data held about them by the bank was lost

Their home details will be lost, The bank will not be able to verify who they are

Describe what is meant by the term data confidentiality

Data which is private / confidential, Access to the data is restricted

studbud

Cyber Security Quiz

90 termsStudBud Administration1,885 plays

A revision quiz to aid with the OCR Cyber Security Exam

Flashcards90 cardsFPractice quizPHost liveL

Questions 90

Answers

1
In forensics analysis what should be analysed
Departed forensics
Device forensics
Documentational forensics
Destination forensics
2
Which of the following is a possession based authentication system
Iris scanner
All of the above
Token
Password
3
In network monitoring what is analysis
Set of methods to validate a potential problem
Set of methods to determine severity of a potential problems
A set of methods to examine a potential problem
A set of methods on categorising potential problems
4
In Risk Management which of the following would NOT be a impact on a business
Employees might not be able to get to work work
They could lose profits
Employees might not be able to open their work
They could loose customer trust
5
Which one of the following is NOT a principle of the data protection act
Not kept for longer than is necessary
Processed in line with your rights
Not transferred to other countries without proper protection
Not accessible to the general public
6
What implications does managing accounts of a social media platform have
All your friends will be able to see your account
Social media sites store appropriate login details
Social media sites may have lower levels of security
Security may be compromised if accessed via social media
7
Which one of the following is NOT a principle of the data protection act
Secure
Accurate
Comprehensive
Up-to-data
8
In monitoring documentation what is an audit log
A security relevant chronological record
System and components applications used to record events
Used to track security information on a computer system
A list of all the requests for individual files
9
In forensics analysis what should be analysed
Anti-forensics techniques
Abstract forensic terms
Added forensic tit-bits
Additional forensic technologies
10
In monitoring tools which best describes a port scanner
Application used to detect intrusion into the network
Gathering information by running services through ports
Application used to capture/analyse signals and data traffic
Applications used to probe a server or host for open ports
11
Is (CEH), (LPT), (CPT) & (IACRB) a:
Online Resource
Standard
National Vulnerability Database
Qualification
12
In network monitoring what software would you use to protect the entire network
Anti-virus
Firewall
Wire-shark
Photoshop
13
Which of these is NOT a method of accessing personal data
Physical Destruction of Hardware
Social Engineering
Spyware
Phishing/Spear Phishing
14
Identify TWO info that would be useful to a hacker trying to hack a telephone banking system
Overdraft limit
Bank telephone number
National Insurance Number
Date of last cash withdrawal
15
Which is NOT a types of backup
Reverse Delta
Full
Layered
Incremental
16
In network monitoring what is classification
A set of methods to examine a potential problem
Set of methods to validate a potential problem
A set of methods on categorising potential problems
Set of methods to determine severity of a potential problems
17
Which one that follows is NOT an Information Technology Infrastructure Library(ITIL) volume?
ITIL Service Transition
ITIL Service History
ITIL Service Strategy
ITIL Service Operation
18
What is NOT covered by the data protection act
personal data
data about living people.
data stored post mortem
data stored on an organised paper filing system
19
How can you avoid data loss during a power-cut
Uninterruptible Power Supply (UPS)
Auto-save
High capacity Power Supply Unit (PSU)
Off-site backup
20
Which of the following is a bio-metric authentication system
Password
All of the above
Iris scanner
Token
21
In monitoring documentation what is an security log
A list of all the requests for individual files
A security relevant chronological record
System and components applications used to record events
Used to track security information on a computer system
22
Which is NOT a type of backup storage option
Onsite
Redundant array of independent disks (RAID)
Layered
Offsite
23
What is an advantage of backing-up to a DVD
no chance of obsolesce
capacity of disk
widely accessible
always reliable
24
Identify ONE type of access control other than encryption
Biometrics
Physical
Defragmentation
Encyption
25
What is the maximum penalty under the Computer Misuse Act 1990 for an offences?
£5000 fine
extradition to the USA
imprisonment and a fine
a Fixed Penalty Notice
26
What are the stages of a sophisticated attack
Supply, Detection, Binary, Authentication
Survey, Delivery, Breach, Affect
Such, Derogatory, Basic, Answers
Structural, Data, By, Aggregation
27
Which is NOT a type of backup media
Cloud
DVD
Layered
Remote
28
In network monitoring what does NAS stand for
Network Access Security
Network Access Server
Network Aggregation System
Not Actually Secure
29
What is an IPS and what does it do
Inclusion Priority System
IPS uses real-time tracking to responds to identified attack
Intrusion Prevention System
IPS uses real-time tracking to track parcels and deliveries
30
What are the stage of continues network security monitoring
Prepare files to be moved and archived
Scan, Analysis, Decipher
Plan, Monitor, Action
Install monitoring software and pray
31
What does DDoS stand for
Distributed Denial of Service
Directed Denial of Service
Dedicated Denial of Service
Domain Denial of Service
32
After an attack each member of the research team needs to know their role because
React to attacks longer
Know who is dealing with the complaint
The team is more likely to solve the case
React to attacks faster
33
In cyber security what is CHECK
The CHECK scheme is a government classification system
The CHECK scheme is an NCSC approval system
The CHECK scheme is an type of qualification
The CHECK scheme is a cyber security professional standard
34
Which of these is NOT considered personal data
Address
Date of Birth
Name
Height
35
What does VPN stand for
Vicinity Patrolled Network
Virtual Private Network
Very Poor Network
Virtually Programmable Network
36
What is NOT a classification of cyber attacks
Structural
Psychological
Virtual
Informational
37
In monitoring tools what is the difference between a honeypot and a honey-net
Honey-nets are typically trap more attacks
Honey-nets are typically larger
There is no difference
Honey-nets are typically have filters
38
In monitoring tools whats does SPI stand for
Silly People Imitation
Stress Procedure Implementation
Serial Peripheral Interface
Stateful Packet Inspection
39
What is the (NVD):
Qualification
National Vulnerability Database
Online Resource
Standard
40
What types of software are: Nessus, OpenVAS and Nexpose
Vulnerability scanners
Software frameworks and automation tools
Operating Systems
Password recovery tools
41
Explain how a breach in data confidentiality can allow third parties to pose as a customer
Personal data could be used to answer a security question
Personal data could be used to answer a personal question
The 3rd party is able to give private/personal information
The 3rd party is able to give anonymous information
42
Which are 4 section of a network security plan
Overview, assessment, plan, gather resources and budget
Allow breaches to take place and react
Assess, fix and wait for next breach
Design, develop, demonstrate and deploy
43
A sudden power cut could cause complete loss of data which are NOT ways to prevent it
mirroring, shadow disk
back-up generator
uninterruptible power supply
surge protector
44
In network monitoring what is an escalation protocol
Set of methods to determine severity of a potential problems
Set of methods to validate a potential problem
A set of methods on categorising potential problems
A set of methods to examine a potential problem
45
What are the ITIL's
Rules for playing an MMOLG
Standardise planning, delivery & support of IT for business.
Regulations for pentesting
Codes and practices for ethical hacking
46
After an attack why is liaising with the victim important
So that the customer is kept informed
Stop customers from being attacked in future
Good customer service so customer feel part of the process
So a bank can gauge liability
47
In Risk Management which of the following would NOT be included in a risk assessment
Evaluating levels of severity
Identifying key hazards
Identifying who's at risk
Evaluating employee liability
48
Describe ONE impact on a customer if all data held about them by the bank was lost
The bank could close
Their home details will be lost
The bank will not be able to verify who they are
Direct debits will not go though
49
With internet threats what does malicious code typically attack
Operating Systems
Hardware
Networks
Applications
50
Describe what is meant by the term data confidentiality
Data which makes users more confident
Data that is kept by confident individuals
Data which is private / confidential
Access to the data is restricted
51
What does RBAC stand for
Relatively Biased Access Control
Review Based Access Control
Re-active Based Access Control
Role Based Access Control
52
Which one of the following best describes a Denial of Service attack?
a user is prevented from accessing files on a home computer
a legitimate reduction of service
a user’s permission to access to services is withdrawn
an intentional attempt to overload a network resource
53
In monitoring tools which best describes a protocol analyser
Application used to detect intrusion into the network
Gathering information by running services through ports
Application used to capture/analyse signals and data traffic
Applications used to probe a server or host for open ports
54
In monitoring tools what does IDS stand for
Intrusion Detection Service
Incident Detection System
Intrusion Detection System
Incident Detection Service
55
In monitoring documentation what is an event log
A list of all the requests for individual files
Used to track security information on a computer system
System and components applications used to record events
A security relevant chronological record
56
Which of the following does a digital signature usually require?
a public key
a key generating algorithm
a private key
all of the above
57
In forensics analysis what should be analysed
Naughty forensics
Navigation forensics
Network forensics
Negative forensics
58
Which one of the following is NOT a principle of the data protection act
Fairly and lawfully processed
Processed for limited purposes
Adequate, relevant and not excessive
Privately distributed, secured and maintained
59
What is an advantage of backing-up to the Cloud
access to the internet is not required
capacity of cloud
internet backup is faster than local backup
no issues of trust/security
60
Is (OWASP), (CVE), (CiSP) & (CESG) a:
National Vulnerability Database
Qualification
Standard
Online Resource
61
In forensics analysis what should be analysed
Management forensics
Memory forensics
Migrations forensics
Mitigation forensics
62
After an attack why do members of the team needs to know what procedures must be carried out
To stop people from using insecure login details
So that every step is followed and the right people are told
The procedures may be industry/banking standards
So that blame can be assigned
63
Which of these is a reason to protect personal information
Stop idenity theft
Stop infections from viruses
Stop authorized user gaining access
Stop others from beating your high score
64
What is meant by adversarial thinking
Waiting for your adversary to make a decision
Reacting to an event or attack
Noticing what is happening around you
Being able to imagine yourself in an opponents position
65
Which of the following is a knowledge based authentication system
All of the above
Iris scanner
Token
Password
66
What strategies are criminal hackers known to employ
Reducing exposure, Mitigate each stage & Managing Losses
Hack, Hope and Surrender
Highlight vulnerabilities and share with the community
Design, develop, demonstrate and deploy
67
With internet threats whats does CERT stand for
Correcting Emergent Replication Threats
Computer Emergency Response Team
Correctly Expressed Relevant Terms
Computer Error Recovery Techniques
68
What is meant by situational awareness
Noticing what is happening around you
Being able to imagine yourself in an opponents position
Waiting for your adversary to make a decision
Reacting to an event or attack
69
In monitoring tools which best describes an IDS
Gathering information by running services through ports
Applications used to probe a server or host for open ports
Application used to capture/analyse signals and data traffic
Application used to detect intrusion into the network
70
Explain how encryption helps protect personal data
Encrypted data is dead
Encrypted data is unreadable to 3rd parties/hackers
An algorithm is used to scramble the information
Encrypted data is unaccessable to 3rd parties/hackers
71
What types of software are: Metasploit, Nmap and Fast-Track
Vulnerability scanners
Operating Systems
Password recovery tools
Software frameworks and automation tools
72
In network monitoring what is validation
Set of methods to validate a potential problem
A set of methods to examine a potential problem
Set of methods to determine severity of a potential problems
A set of methods on categorising potential problems
73
Which of these would a cyber criminal NOT be interested in
Version of Software
Username/Password
System Specifications
IP/MAC address
74
Identify the description of TWO methods a hacker could use to gain unauthorised access to data
All the above
Remote administration program
Packet sniffing
DDos attack
75
Scammers and phishers are types of attackers, what characteristics do they have
Scammers defraud their victims
Scammers attempt to get personal/private information
Phishers attempt to get personal/private information
Phishers defraud their victims
76
Which of these is typically NOT a reason to commit a cyber attack
Political Statement
Espionage
Intellectual Property
Intellectual Challenge
77
In monitoring tools which best describes banner grabbing
Applications used to probe a server or host for open ports
Application used to detect intrusion into the network
Gathering information by running services through ports
Application used to capture/analyse signals and data traffic
78
What types of software are: Cain and Abel and Rainbow Crack
Password recovery tools
Vulnerability scanners
Software frameworks and automation tools
Operating Systems
79
IPS's react rather than protect, explain what this means
Protection means an attack can not happen
Protection is the process of stopping an event happening
Reaction is the process of intervening after the attack
Reactions is better, because the attacker is known
80
What does MAC (address) stand for
Media Access Control
Media Application Control
Media Access Command
Media Application Command
81
In monitoring documentation what is an access log
Used to track security information on a computer system
A list of all the requests for individual files
A security relevant chronological record
System and components applications used to record events
82
Explain why a personal account is more likely to be hacked by an individual not a government
trying to access personal data
Individual hacker are more likely to be after money
It is a focused attack by an oganisation
Small attacks for individual/large attacks for Government
83
In Risk Management why might a company store data away from the main site
So that the data is more secure
So the data is held in more than one location as a backup
So the public have access to the data
So the other site might have access to the data
84
Which one of the following is a characteristic of ‘ransomware’?
encrypts files on a computer
removes vulnerabilities from a computer
provides the user with some benefit
secretly records user interaction
85
What strategies are ethical hackers known to employ
Hack, Hope and Surrender
Highlight vulnerabilities and share with the community
Reducing exposure, Mitigate each stage & Managing Losses
Design, develop, demonstrate and deploy
86
Is (PTES) & (CVSS) a:
Qualification
National Vulnerability Database
Standard
Online Resource
87
Explain TWO methods for checking an email is genuine
Open any attachments to check credentials
Check for spelling errors
Contact the sender by phone/fresh email
Follow the link attached to the email
88
What types of software are: Kali, Ubuntu and Jelly Bean
Operating Systems
Software frameworks and automation tools
Password recovery tools
Vulnerability scanners
89
When did GDPR replace the data protection Act
2016
2001
2018
1990
90
What does ITIL stand for
Information Technology Infrastructure Library
Iteration of Technical Identification Locks
Industry Terminology for IT Logs
Irrelevant and Tedious Informational Lectures

Cyber Security Quiz Flashcards | StudBud