Why would simply disabling directory browsing not fully prevent attackers from accessing sensitive files?

Sensitive files may still be accessible if their paths are known.

Why are biometrics considered sensitive data?

They cannot be changed if stolen

What is a common method used in a dictionary attack?

Matching hashed words to hashed passwords

What makes adware dangerous?

It often comes bundled with malware

Why are updates critical for your OS security?

They fix known security vulnerabilities

What critical condition allows a Teardrop attack to succeed in crashing a vulnerable system?

Overlapping IP fragment offsets during reassembly

How can spyware compromise your security?

By secretly collecting personal info

Which method protects against wireless password attacks?

Using WPA2 and strong passphrases

How can an attacker use traceroute for malicious purposes?

To identify internal network hops

What happens if an attacker finds a weak link in a network?

Malware can spread across the network

What does antivirus software primarily do?

Scans for known malware and removes it

What risk comes from enabling directory browsing?

Exposure of internal server files

Which scenario best demonstrates a brute force attack?

A hacker tries passwords in alphabetical order

Which describes a forceful directory browsing attack?

Guessing file paths on a server

Which combined oversight would still allow attackers to retrieve sensitive log files even after moving them?

Moving logs to inetpub and failing to disable directory browsing

Which hidden assumption in IPv4 fragmentation creates risk in multi-fragment packet delivery?

That all fragments will be received and trusted as valid

How does CAPTCHA enhance online security?

By confirming the user is human

Why is it risky to use '123456' as a password?

It's commonly used and easy to guess

Which CIA trade-off is true?

High integrity means less availability

What makes employee info high in confidentiality?

It contains social security numbers

Why do packet reassembly issues matter in cybersecurity?

They can hide malicious payloads

Which misstep most directly undermines the layered security model in a school network?

Relying only on HTTPS to stop malware downloads

What makes employee info high in confidentiality?

It contains social security numbers

What risk comes from enabling directory browsing?

Exposure of internal server files

How does locking your computer protect it?

It prevents unauthorized physical access

If a keylogger captures your login credentials on a secure HTTPS site, which layer of security has most likely failed?

The user's local device was already compromised

Why are wireless networks more vulnerable than wired networks?

Attackers need no physical access

studbud

Cybersecurity: You Either Know It or You’re the Vulnerability

61 termsStudBud Administration28 plays

Review of PLTW Cybersecurity Units 1-3 (2024-2025)

Flashcards61 cardsFPractice quizPHost liveL

Questions 61

Answers

1
Why does Wireshark color-code packet lines?
For encryption checks
For faster MAC filtering
To identify DNS attacks
To highlight anomalies
2
Why would simply disabling directory browsing not fully prevent attackers from accessing sensitive files?
Disabling directory browsing hides files from the admin too.
Sensitive files may still be accessible if their paths are known.
It allows remote users to run scripts on the server.
Attackers can still upload files via anonymous FTP.
3
Why are biometrics considered sensitive data?
They cannot be changed if stolen
They're required for every login
They work only on Apple devices
They're stored in plain text
4
What is a downside of full confidentiality?
Data loses integrity
Frequent data loss
Too many people can edit
Not enough people can access
5
Which password is strongest?
Password123
Hopscotch#1
PurpleHopscotch
Purple#Hopscotch&is4me
6
Which factor can prevent ARP poisoning?
Randomized ports
Static ARP entries
Lower TTL settings
IPv6 headers
7
Why encrypt customer order data?
To allow public sharing
To block popups
To protect payment information
To improve page load speed
8
What visual clue in Wireshark can reveal a packet anomaly?
Protocol type count
Increased TTL value
Color change in packet list
Shorter IP length fields
9
What is a common method used in a dictionary attack?
Using encrypted passwords only
Matching hashed words to hashed passwords
Trying login names before passwords
Guessing answers to security questions
10
What makes adware dangerous?
It disables firewalls
It often comes bundled with malware
It cannot be removed easily
It is invisible to the user
11
Why are updates critical for your OS security?
They fix known security vulnerabilities
They change the interface regularly
They provide better design features
They add more firewall options
12
What critical condition allows a Teardrop attack to succeed in crashing a vulnerable system?
Misordered ARP resolution with spoofed IP
Improper TCP handshake retransmission logic
Overlapping IP fragment offsets during reassembly
Incomplete Wi-Fi beacon authentication loop
13
What is the danger of a wireless beacon with weak SSID encryption?
WEP key reuse attack
DOS via ping flooding
ARP table overflow
SSID spoofing
14
What pattern shift indicates ARP poisoning in a packet capture?
More SYN packets
Port 80 traffic increases
Duplicate ACKs
MAC address redirection
15
Which protocol and port does HTTPS use?
FTP, port 21
SMTP, port 25
HTTPS, port 443
HTTP, port 80
16
Which CIA component protects data from unauthorized access?
Encryption
Authentication
Availability
Confidentiality
17
What can overlapping IP fragments allow an attacker to do?
Spoof DNS responses
Bypass firewall rules
Open UDP tunnels
Flood ARP caches
18
How can spyware compromise your security?
By locking your screen
By replicating across a network
By secretly collecting personal info
By damaging system hardware
19
Which method protects against wireless password attacks?
Port forwarding
Using WPA2 and strong passphrases
Frequent ARP requests
MAC address filtering
20
Which protocol‚Äôs assumptions are exploited in a Teardrop attack?
TCP handshake assumptions
IPv4 fragment offset handling
ICMP echo request format
DNS resolution steps
21
How can an attacker use traceroute for malicious purposes?
To identify internal network hops
To detect operating system versions
To map firewall rules
To determine packet size limits
22
What happens if an attacker finds a weak link in a network?
The device becomes invulnerable
The vulnerability remains contained
It isolates the device completely
Malware can spread across the network
23
Which action best preserves data integrity?
Frequent password changes
Controlled editing access
Two-factor authentication
Secure backups
24
What behavior is most suspicious in a packet capture?
Echo requests without replies
Normal ARP broadcasts
Large beacon intervals
Repeated port 21 access
25
What does antivirus software primarily do?
Restricts internet access
Configures firewall rules
Scans for known malware and removes it
Creates long passwords
26
Which action best preserves data integrity?
Secure backups
Controlled editing access
Frequent password changes
Two-factor authentication
27
Why is high availability crucial for an e-commerce site?
To protect user credentials
To hide server structure
To prevent malware
So customers can shop anytime
28
What risk comes from enabling directory browsing?
Denial of service
User account duplication
Exposure of internal server files
Malware propagation
29
Which scenario best demonstrates a brute force attack?
Software records keyboard activity
A user forgets their password and resets it
An attacker sends phishing emails
A hacker tries passwords in alphabetical order
30
Which describes a forceful directory browsing attack?
Injecting SQL into login boxes
Phishing with fake emails
Guessing file paths on a server
Sending spam to users
31
What can make two-word passwords more secure?
Using only lowercase letters
Choosing common dictionary words
Repeating the words twice
Adding symbols or numbers
32
Why is a malformed fragment offset dangerous in an IP packet?
It can overwrite other data
It creates larger packets
It delays reassembly
It triggers ARP flooding
33
How does ARP poisoning redirect traffic?
By overwhelming routers
By spoofing MAC-to-IP bindings
By rerouting HTTP headers
By modifying DNS requests
34
Which combined oversight would still allow attackers to retrieve sensitive log files even after moving them?
Moving logs to inetpub and failing to disable directory browsing
Keeping FTP enabled and forgetting to reboot IIS
Using a strong password but leaving port 80 open
Disabling FTP and directory browsing but leaving SQL services open
35
Which hidden assumption in IPv4 fragmentation creates risk in multi-fragment packet delivery?
That all fragments are sent over UDP
That ARP will resolve before fragment arrival
That fragment offsets will increase sequentially
That all fragments will be received and trusted as valid
36
How does CAPTCHA enhance online security?
By validating the browser type
By blocking all unknown users
By storing login credentials
By confirming the user is human
37
Why is it risky to use '123456' as a password?
It's too long for most systems
It uses numbers only
It's commonly used and easy to guess
It requires special hardware
38
Which CIA trade-off is true?
Confidentiality and integrity are unrelated
Increasing availability boosts confidentiality
Only confidentiality matters
High integrity means less availability
39
What makes employee info high in confidentiality?
It requires no encryption
It is shared on public websites
It must be edited by all users
It contains social security numbers
40
Why do packet reassembly issues matter in cybersecurity?
They can hide malicious payloads
They slow down networks
They show MAC conflicts
They reveal switch configs
41
Which misstep most directly undermines the layered security model in a school network?
Relying only on HTTPS to stop malware downloads
Leaving Windows Firewall off during software installation
Training users before applying OS updates and patches
Reusing the same antivirus software across all devices
42
What makes employee info high in confidentiality?
It contains social security numbers
It must be edited by all users
It requires no encryption
It is shared on public websites
43
Why is high availability crucial for an e-commerce site?
To prevent malware
To hide server structure
To protect user credentials
So customers can shop anytime
44
IoT devices like smart locks should prioritize:
CIA balance
User convenience only
High availability only
Low confidentiality
45
What risk comes from enabling directory browsing?
Exposure of internal server files
Denial of service
User account duplication
Malware propagation
46
How does locking your computer protect it?
It hides system folders
It runs a full system scan
It encrypts all files instantly
It prevents unauthorized physical access
47
Why encrypt customer order data?
To block popups
To allow public sharing
To protect payment information
To improve page load speed
48
If a keylogger captures your login credentials on a secure HTTPS site, which layer of security has most likely failed?
The HTTPS encryption was bypassed
The firewall was misconfigured for outbound traffic
The antivirus failed to detect the malware
The user's local device was already compromised
49
Why are wireless networks more vulnerable than wired networks?
They fragment packets more often
Attackers need no physical access
They rely on ICMP requests
They use longer IP headers
50
How does Aircrack-ng help evaluate Wi-Fi security?
It reveals ARP requests
It cracks pre-shared keys
It traces DNS paths
It scans for open switches
51
IoT devices like smart locks should prioritize:
High availability only
CIA balance
Low confidentiality
User convenience only
52
What does disabling IP directed-broadcast help prevent?
DNS cache poisoning
DHCP starvation
TCP spoofing
ICMP reflection attacks
53
Which CIA component protects data from unauthorized access?
Authentication
Confidentiality
Encryption
Availability
54
What does a firewall do in a network?
It updates the antivirus software
It blocks unauthorized incoming traffic
It strengthens your password
It deletes malicious files
55
Which describes a forceful directory browsing attack?
Guessing file paths on a server
Injecting SQL into login boxes
Phishing with fake emails
Sending spam to users
56
What tactic improves defense against packet fragmentation attacks?
Using updated reassembly code
Routing through VPNs
Increasing ARP TTL
Disabling port forwarding
57
Which CIA trade-off is true?
Increasing availability boosts confidentiality
High integrity means less availability
Only confidentiality matters
Confidentiality and integrity are unrelated
58
What does a Smurf attack exploit to overwhelm a victim's network?
High packet TTL values
UDP service ports
ICMP echo replies from multiple hosts
Fragmented TCP packets
59
How does an attacker benefit from spoofing an ARP reply?
Shut down the switch
Steal DNS queries
Gain packet visibility
Flood network routers
60
What would you expect if a router ignored ICMP messages?
Port scans would increase
More DNS requests
Traceroutes would fail silently
Packet TTLs would rise
61
What is a downside of full confidentiality?
Too many people can edit
Data loses integrity
Not enough people can access
Frequent data loss

Cybersecurity: You Either Know It or You’re the Vulnerability Flashcards | StudBud