stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security + Review Flashcards | StudBud
Explore
/
Security + Review
The trust model displayed here is :
Which is not cloud computing?
Security + Review
47 terms
·
StudBud Administration
·
24 plays
Imported from external platform
Flashcards
47 cards
F
Practice quiz
P
Host live
L
Questions
47
Answers
1
Which is not cloud computing?
Neighborhood Cloud
Hybrid Cloud
Private Cloud
Public Cloud
2
The trust model displayed here is :
Hierachial Trust Model
Lateral Transfer Trust
Distributed Trust Model
Siblings Trust Model
3
SGT Gray missed a point and posted a QR code that installed malware on everyone's phones. When we scanned it we were all
Accessing Untrusted Content
QR Splicing
QR Spoofing
QR Spoofing
4
A DMZ functions as a separate network that rests outside of the secure network perimeter.
false
true
5
Which password attack method is the slowest yet most thorough?
Brute Force Attack
Dictionary Attack
Mask Attack
Rule Attack
6
SGT Aponshine impersonated the pizza man and got into a building by waiting for an employee. This is an example of :
Tailgaiting
Shoulder Surfing
MITM
Hoax
7
What technology sends an alert to the administrator when a tablet containing PII is used outside of the hospital?
Remote Control
Geolocate
Geo-fencing
Camera
8
Monitoring methodology that uses experience-based techniques to find threats on a network
Host-based monitoring
Actions based monitoring
Hueristic monitoring
Behavior based monitoring
9
SGT Curry watched SGT Anderson enter a code to get into a secret room. SGT Curry was ____
Keylogging
Daydreaming
Shoulder Surfing
Tailgating
10
Software that is deployed without the consent of or control of the user.
SPAM
Botnet
Spyware
Trojan
11
An ____ router's ACL is often configured with permit and deny statements for specific addresses.
Gloabal
Internal
Remote
Local
12
What is a proper way to manage accounts and passwords?
Have users write their passwords
disable accounts but don’t delete them
Implement recovery policies
Automatically create passwords
13
SGT Singh finds a vulnerability on a network he was hired at, to test for weaknesses. He sells it to a competitor.
He is a GrayHat Hacker
He is a CyberBully
He is a Hacktivist
He is a Broker
14
Which of the following is not an information security layer?
People
Processes
Policies and Procedures
Prouducts
15
Which of the following is NOT a key Management procedure?
Keep track of issued keys
Secure unused keys in a locked safe
Change locks within 24 hours of being reported lost or stolen
Notify your supervisor before issuing keys
16
Federal law designed to protect shareholders, employees, and the public from accounting errors in business.
PCI-DCC
CASB
Gramm and Leach Act
Sarbanes-Oxley Act
17
A type of mutation virus that completely changes from its original form when executed.
Polymorphic Virus
Patino Virus
Metamorphic Virus
Malware Virus
18
All of the following are ways to deal with risk except:
Ignore
Transfer
Avoid
Mitigate
19
A public key is used to verify someone's identity by a third party using ____
a photo id
a digital certificate
an electronic key
a smile
20
SGT Pena will connect his Android to a network wirelessly through an _______
EMU
Etherenet Cable
Access Point
Apple TV
21
A set of software tools that act as a gatekeeper between the enterprise and cloud infrastructure:
BaaS ( Broker as a Service)
SaaS (Software as a Service)
CaaS(Cloud as a Service)
CASB (Cloud Access Security Broker)
22
SFC Sweitzer can configure security on a WLAN, using what two common WPS methods:
Open and Shut Method
Pin method, Push-button method
Lockout and Opt-Out Method
Password Option and Listen Method
23
SSG Galarza's got a message on his computer that his certificate can no longer be used. It has
been suspended
been revoked
been allocated
expired
24
SGT Waliser cannot deny he sent a document signed with his digital signature because of :
Diffusion
Obfuscation
Authentication
Non-Repudiation
25
This image is an example of :
Hashing
Asymmetric Cryptography
Email Transactions
P.O. Box Transanctions
26
FTPS uses port 21. SSL and what other protocol is used to encrypt commands.
SSH, SSL
TLS, SSL
Telnet, SSL
HTTP, SSL
27
Computers that have no traditional applications and all user files are stored on the internet are known as:
Network Book
Web-based Computer
Public Device
Netbook
28
After placing her order, Dolly used her Apple Watch to pay for her meal with what technology?
RFID
EMI
Multicast
NFC
29
This virus can change SSG Trinidad's computer settings, browse files, monitor the network and copy files.
RAT
Trojan
Rogue Machine
Backdoor
30
Which of the following is not an advantage of a token over a password?
Tokens are hardware
Passwords are easy to remember bcause we make them
Tokens produce dynamic passwords
Tokens are easy to be seen or noticed if stolen
31
What can be used to monitor a network's data usage?
Network Tap
Network Ears
networklistner.exe
VM
32
Daysi turns up her thermostat through her mobile device connected through the _____, allowing access from anywhere.
ICS
IoT - Internet of Things
Small Form Factor
ICE
33
SGT Moore told SGT Holt to ensure systems couldn't be attacked based on Windows vulnerabilities. He didn't listen so she
Implemented Windows BitLocker
Implemented Patch Management
Implemented Windows Updates
Implemented Windows Securit
34
The image below is an illustration of :
Extensible Authentication Protocol
dot1q
Client-side execution
802.1x authentication
35
Communication with a website and SGT Waliser's cell is intercepted on a network and saved for later, for what attack?
Google Attack
Replay Attack
ARP Attack
Capture attack
36
This allows the company to create, store, distribute and revoke certificates.
PKI
Distributed Store
Certificate Trust
ACE
37
SGT Cravcenco got an email that her Facebook is being used in Russia, instead of Ohio, thanks to ______
Geolocation
Geotagging
Geo Steganography
Geo-addressing
38
Malicious code that remains dormant until a specific event.
Logic Bomb
Trojan
Poison DNS
DDOS
39
Industry-standard frameworks provide a resource of how to create a secure IT environment.
true
false
40
A trust model that uses an outside person between two individuals
Direct Trust
Private Trust
Public Trust
Third Party Trust
41
In software, this happens when two concurrent threads of execution access a shared resource simultaneously.
Misconfiguration
Email Hoax
Race Condition
Resource Exhaustion
42
_____ requires all domain names be registered to prevent harm to users that are trying to access a legitimate site.
URL Jacking
Site Jacking
Web Jacking
Click Jacking
43
A list of non-approved users is also known as what?
Redlist
Blacklist
Whitelist
Graylist
44
Attack that pretends to be the valid web browser and verifies that it received the pre-roll and
Malvertising
Ad Fraud
Script Kiddie
Extension
45
Which of the following combines the functions of a printer, copier, scanner, and fax machine?
Multi-Functional Device
All Together Services
Multitasking Machine
All-In-One
46
This firewall examines a packet based on rules and conditions set by admin, before making decisions.
Stateful Packet Filtering
Implicit Deny
Stateless Packet Filtering
Explicit Deny
47
This attack takes advantage of web applications accepting user input without validation:
CCS
XSS
PKI
XSRF