Week 6: What distinguishes a Remote Access Trojan (RAT) from a standard Trojan?

RATs provide unauthorized remote access to the victim's computer.

Week 2: What is the primary security flaw in relying solely on secret encryption algorithms?

Once known, all messages are compromised.

Week 9: What distinguishes sessions from cookies in web browsing?

Sessions store data on the server-side, while cookies are client side.

Week 3: Why is DES considered insecure for modern use?

Small key length susceptible to brute-force attacks

Week 3: Why is Triple DES preferred over Double DES?

It provides resistance to meet-in-the-middle attacks

Week 11: What is the main role of the Message Store (MS) in an email system?

To store and manage emails for recipients

Week 9: What is the primary difference between DOM-based XSS and other types of XSS?

Scripts are executed entirely on the client side through DOM manipulation

Week 9: Why is HTTP referred to as a stateless protocol?

It does not retain information about previous requests

Week 7: How does TCP/IP Reset impact the confidentiality aspect of data transmission?

By terminating secure connections, leading to potential eavesdropping.

Week 7: Which step in a SYN Flood attack ensures the server's resources are exhausted?

Using spoofed IP addresses for TCP handshakes

Week 2: What is the key weakness of a block cipher when encrypted blocks are independent of one another?

It allows rearranged ciphertext to still be valid.

Week 9: Why might XSS attacks be considered more damaging than CSRF attacks in certain cases?

XSS attacks can steal sensitive data, cookies and execute malicious scripts

Week 6: What is the primary function of a rootkit in malware operations?

To hide its presence and the presence of other malware.

Week 9: How does Cross-Site Request Forgery (CSRF) exploit a user's session?

By submitting unauthorized requests using the victim authenticated session.

Week 1: What is a key concern when using outdated software and unsupported systems?

Increased security vulnerabilities

Week 7: What role do zombie systems play in a DDoS attack?

They generate legitimate-looking requests to overwhelm the target.

Week 10: Which of the following best illustrates the concept of "Exposure Factor (EF)" in risk management?

The percentage of an asset's value lost due to a specific threat.

Week 7: Which of the following best explains why IP spoofing is effective in denial of service attacks?

It prevents victims from identifying the true source of attack packets.

Week 10: Which of the following best describes the iterative nature of risk management?

Risk management is continuous evaluation and adaptation to new threats

Week 1: Why is authentication necessary in securing systems?

It ensures only legitimate users gain access

Week 11: What is a key feature of S/MIME in email encryption?

It uses X.509 certificates for authentication.

Week 10: In the context of risk management, what is the primary distinction between a threat and a vulnerability?

A threat is an external event. A vulnerability is an internal weakness.

Week 7: Why might an attacker prefer a Smurf attack over a basic ping flooding attack?

It amplifies the attack by exploiting multiple devices on the network.

Week 2: Which of the following best explains why block ciphers are preferred over stream ciphers in modern computing?

Block ciphers are less prone to substitution attacks.

Week 10: In a risk register, what is the significance of assigning a priority level to each identified risk?

It helps allocate resources effectively to address the most critical risks.

Week 10: What is the key difference between the ISO 27005 framework and the NIST SP 800-30 framework?

ISO 27005 focuses on info security. NIST SP 800-30 addresses broader risks

Week 7: Why is the server's response critical to the success of a SYN Flood attack?

The server creates resource allocation for each incomplete handshake.

Week 7: What is a shared vulnerability between Smurf and Fraggle attacks? (This might make the attacks less effective)

Both rely on broadcast addresses to amplify the attack.

Week 8: How does an iterative DNS query differ from a recursive one?

Iterative queries return referrals instead of final answers

Week 3: What is a major drawback of Double DES compared to Triple DES?

It is vulnerable to meet-in-the-middle attacks

studbud

Computer Security Multiple Choice 5*

100 termsStudBud Administration16 plays

Hard Multiple choice questions --- Answer key: https://cccu-my.sharepoint.com/:w:/g/personal/ba387_canterbury_ac_uk/EZNq8Tmyn2VBnwxstYHp4TABKwIzHvWz7IxpyeDJA6gMBQ?e=bwfiSp

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
Week 8: Which DNS record type is specifically designed to allow domain aliasing, often used by CDNs?
AAAA-Record
CNAME
MX
NS
2
Week 6: What distinguishes a Remote Access Trojan (RAT) from a standard Trojan?
RATs cannot transmit data to attackers.
RATs are limited to modifying browser settings.
RATs only target mobile devices.
RATs provide unauthorized remote access to the victim's computer.
3
Week 2: What is the primary security flaw in relying solely on secret encryption algorithms?
They are too complex to implement.
Once known, all messages are compromised.
They support only one-way communication.
They often use symmetric keys.
4
Week 9: What distinguishes sessions from cookies in web browsing?
Cookies are always encrypted, whereas sessions are not.
Sessions store data on the server-side, while cookies are client side.
Sessions use JavaScript, whereas cookies are stored as plain text.
Sessions store data on the client side, while cookies are server-side.
5
Week 3: Why is DES considered insecure for modern use?
High computational requirements for encryption
Limited compatibility with legacy systems
Vulnerable to meet-in-the-middle attacks
Small key length susceptible to brute-force attacks
6
Week 8: What record type is used in DNS to specify the mail server responsible for receiving email?
MX
A-Record
CNAME
NS
7
Week 11: What is the primary role of DKIM (Domain Keys Identified Mail) in email security?
Preventing email spoofing
Filtering spam emails in inboxes
Ensuring messages are sent through
Encrypting email attachments
8
Week 3: Why is Triple DES preferred over Double DES?
It provides resistance to meet-in-the-middle attacks
It requires only a single key
It uses fewer computational resources
It is faster
9
Week 11: What is the main role of the Message Store (MS) in an email system?
To store and manage emails for recipients
To store email temporarily before delivery
To send emails to the correct mail server
To filter spam emails
10
Week 9: What is the primary difference between DOM-based XSS and other types of XSS?
DOM-based XSS executes scripts in the browser through the DOM
Scripts are executed entirely on the client side through DOM manipulation
DOM-based XSS relies solely on malicious email content.
DOM-based XSS does not use cookies for attack execution.
11
Week 11: Which protocol is responsible for sending emails from a client to the server or from one server to another?
SMTP
S/MIME
IMAP
POP3
12
Week 9: Why is HTTP referred to as a stateless protocol?
It uses cookies for all transactions.
It does not retain information about previous requests
It cannot distinguish between different users.
It encrypts user data by default.
13
Week 7: How does TCP/IP Reset impact the confidentiality aspect of data transmission?
By forcing reconnections that reveal encryption keys.
By interrupting data streams and causing partial data leaks.
By exposing data to third-party systems during the attack.
By terminating secure connections, leading to potential eavesdropping.
14
Week 6: Which type of malware modifies user configurations, such as the web browser home page, without consent?
Keylogger
System-Modifying Software
Automatic Download Software
Tracking Software
15
Week 2: A cipher has a key space of 26! (26x25x24…x1) What type of cipher is it most likely to be?
Caesar
Transposition
Monoalphabetic substitution
Stream cipher
16
Week 7: Which step in a SYN Flood attack ensures the server's resources are exhausted?
Completing the three-way handshake multiple times
Sending an ICMP Echo Request packet to the server
Using spoofed IP addresses for TCP handshakes
Flooding the server with UDP packets
17
Week 2: What is the key weakness of a block cipher when encrypted blocks are independent of one another?
It increases computation time.
It allows rearranged ciphertext to still be valid.
It prevents cipher chaining.
It reduces key space size.
18
Week 3: What year was Rijndael selected as the Advanced Encryption Standard (AES)?
1998
1994
2002
2000
19
Week 9: Why might XSS attacks be considered more damaging than CSRF attacks in certain cases?
XSS attacks rely on user input rather than server-side vulnerabilities.
XSS attacks can steal sensitive data, cookies and execute malicious scripts
XSS attacks exploit encrypted sessions exclusively.
XSS attacks bypass session management entirely.
20
Week 6: What is the primary function of a rootkit in malware operations?
To delete files from the victim's computer
To monitor user behaviour without consent.
To encrypt user data for ransom.
To hide its presence and the presence of other malware.
21
Week 9: How does Cross-Site Request Forgery (CSRF) exploit a user's session?
By deleting all cookies stored in the victim's browser.
By generating a random session ID from the user's browser.
By tricking the victim into injecting malicious scripts into the server.
By submitting unauthorized requests using the victim authenticated session.
22
Week 1: What is a key concern when using outdated software and unsupported systems?
Improved network stability
Increased security vulnerabilities
Higher reliability
Increased system efficiency
23
Week 2: In a monoalphabetic substitution cipher, why must each plaintext letter map to a unique ciphertext letter?
To preserve grammar
To ensure unique decryption
To reduce the keyspace
To allow brute force attacks
24
Week 7: What role do zombie systems play in a DDoS attack?
They encrypt attack traffic to avoid detection.
They act as intermediaries to sniff data during the attack.
They generate legitimate-looking requests to overwhelm the target.
They redirect traffic away from the target server.
25
Week 1: What security mechanism prevents privilege escalation attacks?
Default credentials
Confidentiality measures
Least privilege principle
Open service ports
26
Week 10: Which of the following best illustrates the concept of "Exposure Factor (EF)" in risk management?
The percentage of an asset's value lost due to a specific threat.
The frequency of a risk event occurring.
The likelihood of a threat exploiting a vulnerability.
The total monetary value of an asset.
27
Week 8: Which type of DNS hijacking involves altering DNS settings at the router level?
Local DNS hijacking
Server DNS hijacking
MITM DNS hijacking
Router DNS hijacking
28
Week 1: Which security principle ensures that data remains accurate and trustworthy?
Authentication
Authorization
Availability
Integrity
29
Week 7: Which of the following best explains why IP spoofing is effective in denial of service attacks?
It enables attackers to encrypt malicious packets for secure delivery.
It prevents victims from identifying the true source of attack packets.
It creates bottlenecks by overloading DNS servers.
It allows attackers to bypass firewalls using random port numbers.
30
Week 10: Which of the following best describes the iterative nature of risk management?
Risk management is continuous evaluation and adaptation to new threats
Risk management is only necessary for large-scale enterprises.
Risk management focuses solely on the initial identification of risks.
Risk management is a one-time process that concludes after mitigation.
31
Week 1: Why is authentication necessary in securing systems?
It grants unlimited access to users
It removes the need for passwords
It eliminates insider threats
It ensures only legitimate users gain access
32
Week 1: Which of the following attacks involves flooding a system with excessive requests?
Man-in-the-middle
SQL Injection
Denial-of-Service
Buffer Overflow
33
Week 10: When calculating Annualized Loss Expectancy (ALE), which of the following would result in the highest ALE?
Low SLE and low ARO.
High Single Loss Expectancy (SLE), low Annualized Rate of Occurrence (ARO).
Low SLE and high ARO.
High SLE and high ARO.
34
Week 11: What is a key feature of S/MIME in email encryption?
It is incompatible with popular email clients like Outlook.
It replaces SMTP for secure email transmission.
It uses X.509 certificates for authentication.
It encrypts only the headers of an email
35
Week 6: Which type of malware is specifically designed to extort money by locking access to a device?
Ransomware
Rootkit
Keylogger
Spyware
36
Week 9: Which type of cookie disappears when the browser is closed?
Third-party cookie
HTTP-only cookie
Persistent cookie
Session cookie
37
Week 9: Which mitigation technique for CSRF involves adding a unique value to form submissions?
Using random CSRF tokens
Limiting authentication times
Using HTTP-only cookies
Encrypting session cookies
38
Week 8: In a DNS hierarchy, which component is responsible for managing .ac.uk domains?
JISC
Nominet
ICANN
Verisign
39
Week 10: In the context of risk management, what is the primary distinction between a threat and a vulnerability?
A threat is a method of attack. Vulnerability is the impact of the attack.
A threat is an external event. A vulnerability is an internal weakness.
A threat is a potential harm. A vulnerability is the likelihood of harm.
A threat is a flaw in the system. A vulnerability is an external actor.
40
Week 3: Which value in Diffie-Hellman is kept private by the sender?
Private exponent
Public value
Base
Modulus
41
Week 7: Why might an attacker prefer a Smurf attack over a basic ping flooding attack?
It amplifies the attack by exploiting multiple devices on the network.
It avoids detection by network monitoring tools.
It does not rely on ICMP packets for execution.
It only targets routers with limited bandwidth.
42
Week 1: What is a common security flaw in C programming that can lead to vulnerabilities?
Strong type enforcement
Cryptographic misconfiguration
Buffer overflows
Automatic memory management
43
Week 2: Which of the following best explains why block ciphers are preferred over stream ciphers in modern computing?
Stream ciphers require less memory
Block ciphers are easier to program.
Block ciphers are less prone to substitution attacks.
Stream ciphers cannot be reversed
44
Week 10: In a risk register, what is the significance of assigning a priority level to each identified risk?
It ensures that all risks are mitigated simultaneously.
It helps allocate resources effectively to address the most critical risks.
It eliminates the need for further risk analysis.
It focuses on risks with the lowest probability of occurrence.
45
Week 10: What is the key difference between the ISO 27005 framework and the NIST SP 800-30 framework?
ISO 27005 is prescriptive, while NIST SP 800-30 is descriptive.
ISO 27005 focuses on info security. NIST SP 800-30 addresses broader risks
ISO 27005 is qualitative, while NIST SP 800-30 is quantitative.
ISO 27005 is US-centric, while NIST SP 800-30 is international.
46
Week 3: What is the key length used in Two-Key Triple DES encryption?
168 bits
128 bits
56 bits
112 bits
47
Week 7: Why is the server's response critical to the success of a SYN Flood attack?
The server creates resource allocation for each incomplete handshake.
The server closes all ports after detecting malicious traffic.
The server sends ICMP replies to confirm the attack's success.
The server encrypts all packets during the handshake process.
48
Week 7: What is a shared vulnerability between Smurf and Fraggle attacks? (This might make the attacks less effective)
Both exploit TCP handshake protocols.
Both rely on broadcast addresses to amplify the attack.
Both bypass network firewalls using spoofed MAC addresses.
Both specifically target routers with weak encryption.
49
Week 8: How does an iterative DNS query differ from a recursive one?
Iterative queries are handled entirely by the initial server
Iterative queries fetch records from cache
Iterative queries return referrals instead of final answers
Iterative queries involve multiple resolvers chaining responses
50
Week 3: What is a major drawback of Double DES compared to Triple DES?
It requires three keys instead of two
It is slower than AES
It is vulnerable to meet-in-the-middle attacks
It cannot encrypt plaintext messages
51
Week 11: What is the role of the "MX" (Mail Exchange) record in email systems?
Encrypts outgoing messages
Filters spam messages
Stores email messages
Directs emails to mail servers
52
Week 10: Which of the following is a critical consideration when selecting a risk assessment framework?
The framework's reliance on subjective assessments.
The framework's ability to address regulatory requirements
The framework's emphasis on eliminating all risks.
The framework's focus on qualitative analysis only.
53
Week 7: What is the primary challenge in mitigating a DDoS attack initiated by a botnet?
Distinguishing legitimate traffic from malicious requests
Tracing the source of the attack due to spoofed IPs
Blocking ICMP packets without disrupting network services
Preventing resource exhaustion on the attacker’s systems
54
Week 1: What type of control is an employee security awareness training session classified as?
Technical
Operational
Managerial
Physical
55
Week 8: Which of the following is a key vulnerability that allows DNS cache poisoning to succeed?
Trust-based decentralized architecture
Encryption of DNS responses
DNS records with long TTLs
Use of TCP connections in DNS
56
Week 6: What is the primary reason endpoints are considered vulnerable in network security?
They cannot be updated with security patches.
A vulnerability on one endpoint can compromise the entire network.
Endpoints are limited to desktop computers only.
They are not connected to any network.
57
Week 10: In the OCTAVE methodology, why is the development of risk measurement criteria considered the first phase?
It provides a standardized approach to evaluating and prioritizing risks.
It ensures that all risks are treated equally regardless of their impact.
It eliminates the need for subsequent phases in the methodology.
It focuses solely on financial risks.
58
Week 8: What is the primary limitation of a DNS cache poisoning attack?
It cannot spoof NS records
It cannot affect recursive resolvers
It can only poison one record at a time
It works only on HTTPS traffic
59
Week 6: What is a key disadvantage of hardware keyloggers compared to software keyloggers?
They cannot be detected by users.
They cannot capture keystrokes.
They require physical installation and removal.
They are unable to store captured data.
60
Week 11: Which protocol allows email clients to download messages from a mail server for offline access?
IMAP
SMTP
POP3
STARTTLS
61
Week 6: Which type of malware uses a computer network to replicate and exploit vulnerabilities in other systems?
Logic Bomb
Worm
Bloatware
Backdoor
62
Week 6: What is the primary difference between a file-based virus and a file-less virus?
File-based viruses do not require a host file.
File-based viruses cannot infect executable files.
File-less viruses exploit native OS services to avoid detection.
File-less viruses are limited to infecting Microsoft Office documents.
63
Week 10: How does the NIST SP 800-30 framework address the challenge of regulatory compliance for non-US organizations?
By emphasizing the importance of context-specific adaptations.
By excluding regulatory considerations from its methodology.
By providing universal guidelines that are not US-centric.
By focusing on qualitative risk assessments only.
64
Week 8: What is the main functional difference between a stub resolver and a recursive resolver in DNS resolution?
Stub resolvers cache DNS records independently
Recursive resolvers initiate queries from applications
Stub resolvers delegate recursion to recursive resolvers
Recursive resolvers only resolve internal domain names
65
Week 7: How does the TCP Reset attack differ from the SYN Flood attack in terms of impact?
TCP Reset disrupts active connections. SYN Flood prevents new connections.
TCP Reset targets the application layer. SYN Flood targets physical layer.
TCP Reset consumes bandwidth. SYN Flood depletes server CPU resources.
TCP Reset requires spoofed IPs, while SYN Flood does not.
66
Week 1: What type of security attack relies on manipulating employees into revealing sensitive information?
Social engineering
SQL Injection
Phishing
Malware infection
67
Week 2: Which cryptographic attack involves testing all possible keys until the correct one is found?
Cipher chaining
Side-channel attack
Statistical analysis
Brute force
68
Week 8: Which of the following is a primary function of DNS-SEC?
Provide data origin authentication and integrity
Enable IPv6 compatibility for DNS
Block all cache poisoning attacks
Encrypt all DNS queries and responses
69
Week 11: How many email users are there currently?
2.6 billion
4 billion
3.9 billion
1.3 billion
70
Week 11: Which of the following is a major threat associated with instant messaging (IM) systems?
Lack of user authentication methods
Information disclosure due to plaintext transmission
Email spoofing
Overuse of server storage
71
Week 11: What does "MS" in email terminology stand for?
Mail Sender
Mail Server
Message Store
Mail Service
72
Week 7: Why is a Fraggle attack harder to detect than a classic Ping of Death attack?
Fraggle attacks exploit vulnerabilities in encrypted traffic
Fraggle attacks use UDP traffic, which does not require an acknowledgment.
Fraggle attacks bypass firewalls by embedding malicious packets in requests
Fraggle attacks originate from a single compromised system.
73
Week 3: What problem arises in key distribution for a network of 10,000 nodes?
Requirement of 50 million keys - Unsustainable
Incompatibility with AES encryption
Unmanageable computational overhead
Vulnerability to man-in-the-middle attacks
74
Week 9: Which type of cookie reduces the risk of session cookie theft during an XSS attack to not allowing JavaScript?
Persistent cookie
Secure cookie
Third-party cookie
HTTP-only cookie
75
Week 1: What is the primary purpose of accounting in security (AAA model)?
To encrypt confidential data
To track and log user activities
To store passwords securely
To prevent unauthorized access
76
Week 2: What is the purpose of adding a ‘salt’ to password hashing?
To make brute-force attacks harder
To simplify key generation
To reduce file size
To prevent password reuse
77
Week 9: What is the key difference between HTTP-only cookies and secure cookies in mitigating attacks?
HTTP-only cookies encrypt data. Secure cookies prevent JavaScript access.
HTTP-only cookies block 3rd Parties. Secure cookies encrypt transmission.
HTTP-only cookies prevent JavaScript. Secure cookies encrypt transmission.
HTTP-only cookies don't track. Secure cookies have no expiration date.
78
Week 2: What characteristic of the DES encryption algorithm ensures its security resides in the key, not the algorithm?
Use of substitution and permutation
Use of 64-bit blocks
Public availability of the algorithm
Multiple Feistel rounds
79
Week 11: What is the primary difference between SMTP and POP3/IMAP protocols?
SMTP is only used within local networks, while POP3/IMAP work globally.
SMTP encrypts messages, whereas POP3/IMAP does not.
SMTP can synchronize with the server, but POP3/IMAP cannot.
SMTP is used to send emails, while POP3/IMAP are used for receiving emails.
80
Week 11: Which header component in an email specifies where bounce-backs or errors should be sent?
Return-Path
Subject
To
Message-ID
81
Week 1: In computer security, why is security generally inversely related to convenience?
Convenience reduces risk
Increased security requires more authentication steps
Security improves usability
Security decreases protection
82
Week 3: In the RSA algorithm, what mathematical process provides its security?
Addition of strings
Factorization of large prime numbers
Generation of random keys
Multiplication of strings
83
Week 11: What is the purpose of "MIME" in email systems?
It provides encryption for email messages.
It allows emails to handle multiple content types.
It prevents spam messages from being delivered.
It manages email traffic between servers.
84
Week 11: What does the "MSA" handle in email transmission?
Delivery of emails to the recipient
Filtering spam emails
Submission of emails by the sender
Management of mailboxes
85
Week 2: Which of the following best describes the concept of "non-repudiation" in cryptography?
Scrambling plaintext into ciphertext
Validating the key size
Ensuring a message can't be denied later
Making information unclear
86
Week 9: What is the main vulnerability exploited by an XSS attack?
Inadequate user input validation
Overreliance on session cookies
Weak user authentication methods
Lack of encryption for persistent cookies
87
Week 9: Which type of XSS attack involves scripts stored on the web server or backend?
Reflected XSS
DOM-based XSS
Persistent XSS
Non-persistent XSS
88
Week 11: Which component is responsible for transferring emails to the recipient's mail server?
MUA – mail user agent
MSA – mail submission agent
MTA – mail transfer agent
MS – Message Store
89
Week 11: What is the significance of the STARTTLS method in email communication?
It filters spam emails at the server level.
It ensures email headers remain unaltered during transmission.
It provides secure communication for text-based protocols like SMTP.
It encrypts all email attachments using MIME.
90
Week 6: What is the purpose of packers in malware creation?
To remove vulnerabilities from malicious software.
To execute malware directly in the kernel.
To obfuscate malware code and evade detection.
To compress files for legitimate storage purposes only.
91
Week 3: What is the primary method of hiding data in steganography?
Embedding the payload into the carrier
Encoding with a symmetric cipher
Encrypting the data
Using asymmetric encryption techniques
92
Week 11: Which of the following correctly describes the function of an "MTA"?
It acts as the server responsible for transferring emails.
It filters spam from the sender's mailbox.
It stores email messages for future access.
It encrypts email content for secure transmission.
93
Week 11: What is a notable advantage of PGP over S/MIME in email encryption?
PGP encrypts emails without using MIME attachments.
PGP uses RSA exclusively, whereas S/MIME uses Diffie-Hellman.
PGP has a dedicated key server for public key distribution.
PGP is more user-friendly and requires no updates.
94
Week 8: What is the reason TLD (top level domain) servers are almost never affected by DNS cache poisoning?
They use symmetric key encryption
They only serve .gov domains
They don’t allow recursive queries
They are rarely queried due to caching
95
Week 10: What is the primary advantage of using a quantitative risk analysis over a qualitative one?
It provides precise numerical values for risk impact and likelihood.
It eliminates the need for subjective judgment.
It focuses exclusively on high-priority risks.
It is faster and requires fewer resources.
96
Week 2: Why was DES eventually withdrawn from general use?
It only worked on 8-bit systems.
The key space was too small
It required special hardware
The algorithm was flawed
97
Week 11: Which protocol is associated with the functionality of the "MIME" component?
Filtering email attachments
Syncing emails between devices
Transferring encrypted messages
Handling various content types in email messages
98
Week 11: What is the main responsibility of the "MDA" in the email process?
Encrypting email messages during transfer
Synchronizing emails between devices
Delivers email to the recipient’s mailbox
Handling spam and junk email filtering
99
Week 6: Which infection technique involves adding malicious code to the end of a host file?
Appending Malware
Overwriting Malware
Prepending Malware
Cavity Malware
100
Week 11: What does the term "MUA" stand for in email terminology?
Mail Utility Agent
Message Upload Agent
Mail User Agent (Sender's Machine)
Message Update Agent

Computer Security Multiple Choice 5* Flashcards | StudBud