stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity Essentials: Chapter 5 Review Flashcards | StudBud
Explore
/
Cybersecurity Essentials: Chapter 5 Review
Cybersecurity Essentials: Chapter 5 Review
50 terms
·
StudBud Administration
·
130 plays
A Quiz! Review for Chapter 5 of Cybersecurity Essentials
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
What is NOT a common digital signature algorithm?
Skipjack
Rivest-Shamir-Adleman (RSA)
Elliptic Curve Digital Signature Algorithm (ECDSA)
Digital Signature Algorithm (DSA)
2
What is the name for using a list of choices instead of making users type their choice?
Data Type Validation
Data Field Validation Controls
Validation Rules
Drop Down Master Controls
3
What is an example of how digital signatures are used in Internet communication?
Pretty Good Privacy (PGP) encryption
Code Signing
VPNs
Digital certificates
4
Which is NOT a property of cryptographic hash functions?
The input must be a certain length
The function is one-way and is very difficult to reverse
The output has a fixed length
Two different inputs will almost never give the same hash values
5
To which type of attack is hashing vulnerable?
Man-in-the-middle
Social Engineering
Denial of Service (DoS)
Worms
6
What is the term for verifying data modifications when a system detects unusual patterns?
Hashing
Data entry controls
Anomaly verification
Validation rules
7
What is NOT a proper way to use a salt?
Hash on the server in a web application
The salt is unique for every user password
The length of the salt is between 4 and 8 digits
Salts are never reused
8
Which type of algorithm adds a secret key into a hash to add authentication to hashing?
HMAC
ECDSA
SHA-2
Salting
9
Which of the following hash algorithms have been shown to be insecure?
SHA-1
SHA-256
AES
MD5
10
What is NOT a common validation rule criteria?
Format
Check Digit
Randomness
Size
11
Which of the following is NOT a practical use of HMACs?
Authenticating a web user
Cisco routing protocol updates
Digital signatures
IPsec VPNs
12
What password attack provides a list of users that match a guessed password?
Lookup Table
Reverse Lookup Table
Rainbow Table
Dictionary attack
13
What is established when an examiner knows that one set of bits is identical to the original?
A restore point
Validity
Similarity
Fixity
14
What is NOT a type of attack used to crack hashed passwords?
Lookup Table
Rainbow Table
Regex attack
Dictionary attack
15
What password attack guesses all possible combinations of characters up to a given length?
Dictionary attack
Brute-force attack
Rainbow Table
Lookup Table
16
Which database integrity rule relates to foreign keys?
Domain Integrity
Referential Integrity
Entity Integrity
User-Defined Integrity
17
What is NOT something hash functions can do?
Protect against accidental changes or corruption
Encrypt and decrypt data
Prove that data has not been changed
Prove that data is authentic (from a specific sender)
18
What is the standard used to define the common structure of all PKI certificates?
802.11
X.509
RFC 1881
T2202
19
What is the name for checking whether a user is inputting the type of characters expected?
Data Type Validation
Validation Rules
Drop Down Master Controls
Data Field Validation Controls
20
What is the fixed-length representation of data (the result of a hash function) called?
Cipher text
MD5
Message digest
Hash value
21
What is a method used to check the authenticity and integrity of digital documents?
ElGamal encryption and decryption
Digital signatures
Digital certificates
HMAC
22
What is used to generate random salts?
Cryptographic Secure Pseudo-Random Number Generators (CSPRNGs)
Elliptic Curves
Lava Lamps
Cryptographic Safety Perfectly Random Name Generators (CSPRNGs)
23
When downloading files from the Internet, how can you check if the file downloaded is correct?
Compare the hash value provided by the website to the value from your file
The Internet is a safe place so I don't have to worry
Use HTTPS
Check that the website is the correct website
24
How should passwords be stored in password databases?
Using RSA encryption
Using cryptographic hash functions
Passwords should never be stored
In plaintext
25
Which type of cryptography is used with digital signatures?
Asymmetric Encryption
Symmetric Encryption
Block Encryption
Stream Encryption
26
What is the name for setting up rules for basic checks on user input?
Data Field Validation Controls
Validation Rules
Data Type Validation
Drop Down Master Controls
27
What is the name for seeing if data falls within a set to ensure completeness of data?
Drop Down Master Controls
Validation Rules
Data Field Validation Controls
Data Type Validation
28
True or False: A password database will store the password hash and the salt.
FALSE
TRUE
29
True or False: The salt should be added to the end of the password.
TRUE
FALSE
30
Which database integrity rule makes sure that all data in a column have proper values?
Entity Integrity
Domain Integrity
Referential Integrity
User-Defined Integrity
31
Which database integrity rule relates to databases needing a primary key for every entry?
Domain Integrity
Referential Integrity
Entity Integrity
User-Defined Integrity
32
What password attack guesses passwords by using a file of common words, phrases, and passwords?
Rainbow Table
Brute-force attack
Dictionary attack
Lookup Table
33
What is NOT a popular hash function?
Rivest-Shamir-Adleman (RSA)
Message Digest 5 (MD5)
SHA-256
Secure Hash Algorithm 1 (SHA-1)
34
What is typically added to passwords to make password hashing more secure?
Randomly-generated cumin
A hashed secret key
Randomly-generated pepper
Randomly-generated salt
35
What field uses hashing to verify that a digital clone has all the data from an original drive?
Penetration Testing
Software Development
Steganography
Digital Forensics
36
What is used to authenticate and verify that users are who they claim to be over the Internet?
Digital Certificates
Hashing
Encryption/Decryption
HMACs
37
What is the name for the rules required to create, manage, use, etc. digital certificates?
Priority Kernel Internet (PKI)
Asymmetric Infrastructure
X.509
Public Key Infrastructure (PKI)
38
What is NOT a way to ensure database integrity?
Validation rules
Hashing
Anomaly verification
Data entry controls
39
What is the name for organizations that give out digital certificates to people?
Internet Assigned Numbers Authority (IANA)
Certificate Authority (CA)
Internet Engineering Task Force (IETF)
Government-licensing Agency
40
True or False: A hash value for two different sets of data will never be the same.
TRUE
FALSE
41
What is the name for the chain of certificates that lead to a specific certificate?
Chain of Certificates
Chain of Authentication
Chain of Trust
Chain of Integrity
42
Which database integrity rule means that table relationships should not be changed?
Referential Integrity
User-Defined Integrity
Domain Integrity
Entity Integrity
43
What is a tool that takes data and produces a fixed-length representation of the data?
Obfuscation
Encryption
Data Masking
Hashing
44
What password attack uses a smaller table with a large amount of solutions to hashes?
Dictionary attack
Reverse Lookup Table
Brute-force attack
Rainbow Table
45
What is NOT an application that uses hash functions?
IP Security (IPsec)
Pretty Good Privacy (PGP)
Challenge Handshake Authentication Protocol (CHAP)
Public Key Infrastructure (PKI) certificates
46
Which database integrity rule is a set of user rules and does not relate to other rules?
Entity Integrity
Referential Integrity
Domain Integrity
User-Defined Integrity
47
What is NOT one of the processes that occurs when a certificate is received and validated?
Path Validation
Chain of Trust Sequencing
Revocation
Certificate Discovery
48
What is a term that means that a user cannot deny having sent or received a message?
Authenticity
Trust
Integrity
Non-repudiation
49
What password attack stores pre-computed hashes beside the related passwords in a dictionary?
Brute-force attack
Dictionary attack
Reverse Lookup Table
Lookup Table
50
What makes brute-force attacks more time-consuming using repeated hashing?
Key logging
Key stretching
Key Secrecy
Salting
