Personally Identifiable Information

What unit is responsible for executing DODIN and DCO operations?

Marine Corps Cyberspace Operations Group (MCCOG)

Certificate Authority

An entity that issues and signs digital certificates with id and a key

Why is PKI important?

It is a critical part that allows certificate-based technology to establish

PKI is a __ that consists of hardware, __, people, processes, and __, that together helps identify info security __

framework, software, policies, problems

What are some other types of countermeasures?

Conventional firewalls, Encryption/decryption programs, Antivirus programs, spyware detection/removal programs, biometric authentication systems

What is a SuperAgent?

Agents that are designated to act as a source of content updates

A program or file intentionally designed to be harmful to a computer or net

What is the Security Center?

The system that controls all connected Nessus Scanners.

Certificate info stored in an archive that allows older keys to be used.

A form of social engineering where fraudulent emails are sent to steal data

What is Availability?

The principle that information is easily accessible by those authorized

What are voice features within IP technology, such as voice calls and voicemail?

Voice Over Internet Protocol (VoIP)

What is the primary responsibility of Information Security?

Establishing a set of processes that will protect information assets

What are the benefits of cybersecurity?

asset protection, personal info protection, protection against cyber threats, security assurance

What are the different types of cybersecurity threats?

Malware, Ransomware, Man-in-the-middle attacks, Social engineering, Phishing and spear phishing, Insider threats, DDos Attacks, advance persistent threats

What is End User security?

Measures taken to ensure that users are protected against threats

What is Application Security?

The use of software hardware and procedural methods to protect applications

What is a Host Intrusion Prevention System (HIPS)?

A system employed to protect computer systems against viruses and malware

Host-Based Security Systems (HBSS) are a _ measure hosted on an individual_ designed to provide_ security against cyber_

Protection, Workstation, Local, Threats

Attacks that utilize multiple systems to disrupt the traffic of a system

What is Network security?

Measures for protecting a computer network from intruders

What are the elements of cybersecurity?

Information, network, operations, critical infrasrcture, physical, end user

Advanced Persistent Threats (APTs)

Prolonged targeted attacks in which an attacker infiltrates a network

What is information security?

The practice policies and principles to protect digital data and other info

What is a Host-Based Intrusion Detection System (HIDS)?

A system that monitors the computer on which it is installed

Key Backup And Recovery

A means to restore lost or damaged certificates.

A type of attack that has an intended target user, organization or business

What does Virus Scan Enterprise (VSE) do?

It is an antivirus product that detects and protects from multiple threats

Certificate Repository

A Storage repository for certificates.

Why is cybersecurity important?

It allows us to protect sensitive or confidential material.

The principle that information is consistent, accurate and trustworthy.

Man-in-the-Middle (MitM) attacks

Eavesdropping attacks that involve an attacker relaying between two parties

Security breaches or losses caused by humans due to negligence.

What is Data Loss Prevention (DLP)?

A set of tools and processes used to ensure that sensitive data is not lost

An attack that relies on human interaction to trick users into giving info

The three primary principles of Information Security are __, __and __. (In order of the acronym, select all that apply)

Confidentiality, Integrity and Availability

studbud

Annex F

68 termsStudBud Administration92 plays

Annex F gimkit from the goat translated into Quiz

Flashcards68 cardsFPractice quizPHost liveL

Questions 68

Answers

1
PII is also known as
Personal Information Id
Personally Identifiable Information
Pt In India
Physical Identification Id
2
What unit is responsible for executing DODIN and DCO operations?
Marine Corps Cyber Comand (MCCC)
Marine Corps Communications Operations Group (MCCOG)
Marine Corps Cyberspace Operations Group (MCCOG)
Communications Training Battalion (CTB)
3
Generally speaking, security functions by pairing one public with another to authenticate the users credentials.
True
False
4
Certificate Authority
An entity that issues and signs digital certificates with id and a key
A means to restore lost or damaged certificates.
A Storage repository for certificates.
After a time specific certificate expiration, keys automatically recertify
5
Why is PKI important?
It authenticates user signatures and encryption/decryption protocols
It is a critical part that allows key-based cryptography to authenticate
It allows certificate-based technology to establish certificate authority
It is a critical part that allows certificate-based technology to establish
6
PKI is a __ that consists of hardware, __, people, processes, and __, that together helps identify info security __
software, security systems, firewalls, problems
tool, software, programs, problems
tool, security systems, firewalls, problems
framework, software, policies, problems
7
What order dictates the usage of HBSS within the DoD?
MCCES Order One
DoD Order 17-2M
Cyber Tasking Order (CTO) 07-1
Marine Corps Order 1734C
8
Reports are generated at the MCCOG and DISA from data collected by a NEXUS server.
True
False
9
What are some other types of countermeasures?
Conventional firewalls, Encryption/decryption programs
Antivirus programs, spyware detection/removal programs
Anti-Terrorist defenses, security cards, face ID
biometric authentication systems
10
What is a SuperAgent?
Agents with elevated permissions capable of modifying security protocols.
James Bond (007)
Agents that are designated to act as a source of content updates
Administrative profiles that can be enabled to monitor network threats.
11
What is another name for asymmetric-key cryptography?
Private-key cryptography
Public-key cryptography
Hash functions
Certificate Authority
12
Malware
Prolonged targeted attacks in which an attacker infiltrates a network
Attacks that utilize multiple systems to disrupt the traffic of a system
A program or file intentionally designed to be harmful to a computer or net
Security breaches or losses caused by humans due to negligence
13
What is the Security Center?
The system that monitors all connected Nessus Scanners.
The primary Nessus Scanner used for security logs and login authentication.
The server that stores backups for all connected Nessus Scanners.
The system that controls all connected Nessus Scanners.
14
What is Key History?
The history of keys.
A list of certificates that unlocks an archive of previously used keys.
Certificate info stored in an archive that allows older keys to be used.
A program that enables certificates to access key infomation.
15
Phishing
A form of social engineering where fraudulent emails are sent to steal data
Eavesdropping attacks that involve an attacker relaying between two parties
A type of attack that has an intended target user, organization or business
A type of malware that involves an attacker locking the victim's computer
16
Cyber Threats are attack that are mounted against users or digital devices by means of cyberspace.
True
False
17
What is Availability?
The principle that information is easily accessible by those authorized
The principle that information is consistent, accurate and trustworthy.
The principle that information should only be available to those authorized
18
The three methods for IP phone configuration are static, dynamic and Bulk Administration (BAT).
False
True
19
SCAP files are generated in _____ format.
.txt
.xmpp
.xccdf
.pdf
20
HBSS is a type of HIPS solution.
True
False
21
Cybersecurity works by safeguarding against threats to protect computers, servers, mobile devices, electronic system etc
True
False
22
What are voice features within IP technology, such as voice calls and voicemail?
Voice Mail
Video Call
All of the above
Voice Over Internet Protocol (VoIP)
23
What is the primary responsibility of Information Security?
Establishing processes that will protect information that are critical
Establishing orders and directives as an SOP to protect against insiders
Establishing a set of processes that will protect information assets
Establishing orders and directives as an SOP to protect against outsiders
24
What are the benefits of cybersecurity?
asset protection, personal info protection
protection against cyber threats, security assurance
Unit effeciveness,
25
What are the different types of cybersecurity threats?
Malware, Ransomware, Man-in-the-middle attacks
Adware, Outsider threats
Social engineering, Phishing and spear phishing
Insider threats, DDos Attacks, advance persistent threats
26
What USMC unit is staffed by government employees and contractors that mandate support and sustain DoD Cyber Exchange?
CTB
DISA
7th Comm
MCGO2
27
What is End User security?
The protection of personnel, hardware, software, networks and data
Measures taken to ensure that users are protected against threats
The physical and cyber systems that are vital to the United States.
Protection and risk management process that classifies information
28
What is Application Security?
Actions taken to ensure application security.
The use of software hardware and procedural methods to protect applications
The practice policies and principles to protect digital data and other info
The practice of safeguarding against threats to protect devices and data
29
What is a Host Intrusion Prevention System (HIPS)?
A system employed to protect critical computer systems against threats
A system employed to protect computer systems against viruses and malware
A system activated when outside attacks threat security protocol
A system employed to protect computer systems against outsider threats
30
Host-Based Security Systems (HBSS) are a _ measure hosted on an individual_ designed to provide_ security against cyber_
Security, Server, Social, Attacks
Security, Workstation, Local, Attacks
Protection, Computer, Cyber, Warfare
Protection, Workstation, Local, Threats
31
DDoS attacks
An attack that relies on human interaction to trick users into giving info
Attacks that utilize multiple systems to disrupt the traffic of a system
Security breaches or losses caused by humans due to negligence.
Prolonged targeted attacks in which an attacker infiltrates a network
32
Cyberspace is a virtual space that doesn’t exist in physicality, but across servers, routers and switches.
True
False
33
What is Network security?
The physical and cyber systems that are vital to the United States.
Protection and risk management process that classifies information
Measures taken to ensure that users are protected against threats
Measures for protecting a computer network from intruders
34
What are the elements of cybersecurity?
Information, network, operations, critical infrasrcture, physical, end user
Network, operations, critical infrasrcture, physical, end user
Information, network, operations, critical infrasrcture, end user
Information, network, critical infrasrcture, physical, end user
35
Advanced Persistent Threats (APTs)
Security breaches or losses caused by humans due to negligence.
An attack that relies on human interaction to trick users into giving info
Prolonged targeted attacks in which an attacker infiltrates a network
Attacks that utilize multiple systems to disrupt the traffic of a system
36
What is information security?
Actions taken to ensure application security.
The practice policies and principles to protect digital data and other info
The use of software, hardware, and procedural methods
The practice of safeguarding against threats to protect devices and data
37
The technique that criminals use to attack users with targeted emails and fraudulent links is known as sphere fishing.
True
False
38
What is a Host-Based Intrusion Detection System (HIDS)?
A system that monitors the computer on which it is installed
A set of tools and processes used to ensure that sensitive data is not lost
It is an antivirus product that detects and protects computers
A system or program employed to protect critical computer systems
39
Key Backup And Recovery
A means to restore lost or damaged certificates.
After a time specific certificate expiration, keys automatically recertify
An entity that issues and signs digital certificates with id and a key
A Storage repository for certificates.
40
Spear Phishing
A form of social engineering where fraudulent emails are sent to steal data
A type of attack that has an intended target user, organization or business
A type of malware that involves an attacker locking the victim's computer
Security breaches or losses caused by humans due to negligence.
41
What does Virus Scan Enterprise (VSE) do?
It is an antivirus product that detects and logs computers threats
It is an antivirus product that detects and protects from multiple threats
It is an antivirus program that defends against outside computers attacks
It is an antivirus program that defends against inside computers threats
42
Certificate Repository
An entity that issues and signs digital certificates with id and a key
After a time specific certificate expiration, keys automatically recertify
A Storage repository for certificates.
A means to restore lost or damaged certificates.
43
Cybersecurity is important because it protects all categories of data from theft and damage.
False
True
44
Why is cybersecurity important?
To protect against unauthorized access to data centers and other systems.
It allows us to protect sensitive or confidential material.
45
What is Integrity?
The principle that information should only be available to those authorized
The principle that information is easily accessible by those authorized
The principle that information is consistent, accurate and trustworthy.
46
Man-in-the-Middle (MitM) attacks
Attacks that utilize multiple systems to disrupt the traffic of a system
A type of attack that has an intended target user, organization or business
Eavesdropping attacks that involve an attacker relaying between two parties
An attack that relies on human interaction to trick users into giving info
47
Insider Threats
An attack that relies on human interaction to trick users into giving info
Prolonged targeted attacks in which an attacker infiltrates a network
Attacks that utilize multiple systems to disrupt the traffic of a system
Security breaches or losses caused by humans due to negligence.
48
What is Data Loss Prevention (DLP)?
A set of tools and processes used to recover sensitive data that is lost
A process that helps the end-user recover data that is lost.
An installable tool that prevents data loss or security breaches.
A set of tools and processes used to ensure that sensitive data is not lost
49
What does Cisco Extended Functions Service support?
Quality Report Tool (QRT)
Voice Over Internet Protocol (VoIP)
Cisco Services
Publisher/Adminstration Tool
50
Social Engineering
A form of social engineering where fraudulent emails are sent to steal data
Security breaches or losses caused by humans due to negligence
An attack that relies on human interaction to trick users into giving info
A type of attack that has an intended target user, organization or business
51
The three primary principles of Information Security are __, __and __. (In order of the acronym, select all that apply)
Integrity, Confidentiality, and Availability
Availability, Confidentiality, and Integrity
Integrity, Availability, and Confidentiality
Confidentiality, Integrity and Availability
52
HIPS can be implemented on servers workstations and computers.
False
True
53
What type of IP address do Cisco phones use?
VoIP
Static, Dynamic
HTTP, DHCP
Static, User-Facing
54
How can application security be enhanced?
Creating approved application lists.
Administratively locking application installation.
By utilizing threat modeling.
Active Directory based application authorization
55
What are the top cybersecurity challenges?
One of the most problematic elements of cybersecurity is the insider threat
the evolving nature of hacker attacks as new technologies emerge
the evolving nature of security risks as new technologies emerge
outside threats penetrating the network to steal corporate and personal inf
56
Cisco is the only company authorized to modify, control and monitor IP telephony, as it is their proprietary software.
False
True
57
What is Cybersecurity?
The protection of all systems on a given network.
The protection of internet-connected systems such as hardware, software
The protection of cyber systems on DOD domains.
Security provided for internet-connected systems via software.
58
What is Critical Infrastructure security?
The physical and cyber systems that are vital to the United States.
The protection of personnel, hardware, software, networks and data
Measures for protecting a computer network from intruders
Protection and risk management process that classifies information
59
Automatic Key Recertification
After a time specific certificate expiration, keys automatically recertify
A Storage repository for certificates.
A means to restore lost or damaged certificates.
An entity that issues and signs digital certificates with id and a key
60
What is PKI most commonly used for?
Typically, it is used to sign and/or encrypt data.
Typically, it is used to assign certificates to certain security standards.
Typically, it is used to edit and receive data.
Typically, it is used to retrieve and send .xccdf documents.
61
What is Physical security?
The protection of personnel, hardware, software, networks and data
Protection and risk management process that classifies information
Measures for protecting a computer network from intruders
The physical and cyber systems that are vital to the United States.
62
Why is cybersecurity implemented by users and enterprises?
To protect against unauthorized access to data centers and other systems.
It allows us to protect sensitive or confidential material.
63
What is Operations Security?
The physical and cyber systems that are vital to the United States.
Measures for protecting a computer network from intruders
The protection of personnel, hardware, software, networks and data
Protection and risk management process that classifies information
64
The _ component responsible for providing a _ comms channel to the ePO and manage all of the other modules is known as _
PIBB, secure, The McAfee Agent
DHCP, secure, The McAfee Agent
HBSS, secure, The McAfee Agent
Cyberspace, secure, The McAfee Agent
65
Ransomware
Security breaches or losses caused by humans due to negligence.
A type of malware that involves an attacker locking the victim's computer
A form of social engineering where fraudulent emails are sent to steal data
A type of attack that has an intended target user, organization or business
66
What are the major components of HBSS? (Select all that apply)
The McAfee Agent, The distributed repositories
the registered servers
The protected end-user, Host Intrusion Prevention Systems (HIPS)
The Server, the Orchestrator Server
67
What is Confidentiality?
The principle that information is consistent, accurate and trustworthy.
The principle that information should only be available to those authorized
The principle that information is easily accessible by those authorized
68
What are countermeasures?
Actions taken to ensure application security.
The practice of safeguarding against threats to protect devices and data
The practice policies and principles to protect digital data and other info
The use of software, hardware, and procedural methods

Annex F Flashcards | StudBud