stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security Plus Review Flashcards | StudBud
Explore
/
Security Plus Review
Security Plus Review
50 terms
·
StudBud Administration
·
956 plays
Review
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
The Simplest type of stream cipher is a _____ cipher?
Hashing
Blocking
Encrypting
Cloning
2
A markup language that is designed to carry data is ___________.
HTML
ICMP
XML
HTTP
3
Which of the following is not an attack against a switch?
ARP address impersonation
MAC address impersonation
MAC Flooding
ARP Poisoning
4
A(n) _____ requires a user to transport it from one computer to another.
Trojan
worm
virus
rootkit
5
what policy defines actions users may perform while accessing systems and networking equipment
End user policy
Acceptable use policy
User permission policy
Internet use policy
6
______is designed to replace DES.
AES
RSA
3DES
TwoFish
7
Due to limitations of online guessing, most password attacks today use _____.
Online Cracking
Token Replay
Hash Replay
Offline Cracking
8
designed to display data, with the primary focus on how the data looks.
SGML
HTML
ISL
XML
9
a secret combination of letter, numbers, and characters that only the user should know.
biometric detail
challenge
token
password
10
Which is another name for a packet filter?
firewall
proxy server
DMZ
reverse proxy server
11
searches incoming web content to match keywords
Content Inspection
Malware inspection
Signature based monitoring
Network access control
12
_____ sends phishing messages only to wealthy individuals.
Microing
Target Phishing
Spear Phishing
Whaling
13
Which of the following is the most secure protocol for transferring files?
FTPS
FTP
SFTP
SCP
14
AES-CCMP is the encryption protocol standard used in ________.
WPA
Bluetooth
IEEE 802.11
WPA2
15
________refers to a situation in which keys are managed by a third party, such as a trusted CA
Key Escrow
Remote Key Administration
Key Authorization
Trusted Key Authority
16
__serves as the trusted third party agency that is responsible for issuing digital certificates
RA
DA
PA
CA
17
_____ encrypts a hash with a shared secret key.
MDRIPE
WEP
Key_hash
Hashed Message Authentication Code (HMAC)
18
A virtual LAN (VLAN) allows devices to be grouped _____________.
directly to hubs
only around core switches
logically
based on subnets
19
Which of the following cookies only lasts for the duration of visiting the Web site?
Session
Ram
Temporary
Persistent
20
A(n) _____ is a set of permissions that is attached to an object.
object modifier
Subject Access Entity (SAE)
security entry designator
access control list (ACL)
21
Each of the following is a type of a network security hardware log except _______.
local host anti-virus log
proxy server log
firewall log
NIDS and NIPS logs
22
A _____ is a collection of suggestions that should be implemented.
Security Policy
Baseline
Guideline
Security Procedure
23
Which of the following should not serve on a security policy development team?
Senior level administrator
Member of management who can enforce the policy
Member of the legal staff
Representative from a hardware vendor
24
Which of the following human characteristics cannot be used for biometric identification?
face
fingerprint
retina
weight
25
Which single sign-on (SSO) technology depends upon tokens?
OAuth
CardSpace
All SSO Technologies use tokens
OpenID
26
A _____virus infects goes to great lengths to avoid detection
Metamorphic
Polymorphic
Oligomorphic
Armored
27
when an attacker tricks users into giving out information of performing a compromising action
phreaking
reverse engineering
hacking
social engineering
28
The address space in an IPv6 header is ___bits in length.
128
32
64
256
29
Position that focuses on that administration and management of plans, policies, and people.
Engineer
Manager
Inspector
Administrator
30
The TCP/IP architecture uses how many layers?
4
6
7
3
31
A disadvantage of biometric readers is _______.
speed
not accurate
cost
size
32
DNS Poisoning can be prevented by using the latest editions of DNS Software known as ________.
ARP
BIND
WINS
DHCP
33
_______uses lattice-based cryptography and may be more resistant to quantum computing attacks
NTRUEncrypt
ECC
SHA-512
RC4
34
The primary design of a(n) _____ is to capture the transmissions from legitimate users.
WEP
rogue access point
Bluetooth grabber
evil twin
35
Public-Key Cryptography Standards (PKCS) ________.
have been replaced by PKI
define how hashing algorithms are created
are widely accepted in the industry
are used to create public keys only
36
_____ management covers the procedures of managing object authorizations.
Threat
Task
Asset
Privilege
37
The term _____is sometimes used to identify anyone who illegally breaks into a computer system.
cyberterrorist
hacker
cyberrogue
Internet Exploiter
38
Each of the following can be used in an XSS attack except _____________.
ICMP
Adobe Flash
JavaScript
HTML
39
The IEEE _____ standard specifies a maximum rated speed of 54 Mbps using the 5 GHz spectrum.
802.11a
802.11g
802.11b
802.11
40
Each of the following is a successive layer in which information security is achieved except
products
purposes
people
procedures
41
ensures that info is correct and that no malicious software or person has altered data
Confideniality
Identity
Integrity
Availability
42
___ in access control means that if a condition is not explicitly met access is to be rejected.
Explicit rejection
prevention control
Denial of Duties
Implicit Deny
43
Which of the following asymmetric cryptographic algorithms is the most secure?
MEC-2
SHA-2
RSA
MD-17
44
____are combination locks that use buttons which must be pushed in the proper sequence.
Deadbolt
Reaction
Biometric
Cipher
45
The most flexible approach for a wireless VLAN is to have which device separate the packets?
router
firewall
NIC
AP
46
Each of the following is a type of authentication credential except _______.
what you discover
what you know
what you are
what you have
47
_____is a set of permission that are attached to an object.
ACL
ACE
Entity
DAC
48
Each of the following can be classified as an “insider” except _______.
business partners
contractors
employees
cybercriminals
49
What is the security risk of a P2P network?
A virus can be transmitted
allows law enforcement agencies to monitor the user actions
It is issued to spread spam
It consumes bandwidth
50
Each of the following is a goal of information security except _______.
Foil cyberterrorism
Decrease user productivity
Avoid legal consequences
Prevent data theft