stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity Essentials: Chapter 5 Review Flashcards | StudBud
Explore
/
Cybersecurity Essentials: Chapter 5 Review
Cybersecurity Essentials: Chapter 5 Review
50 terms
·
StudBud Administration
·
130 plays
A Quiz! Review for Chapter 5 of Cybersecurity Essentials
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
What is established when an examiner knows that one set of bits is identical to the original?
A restore point
Similarity
Validity
Fixity
2
True or False: A hash value for two different sets of data will never be the same.
TRUE
FALSE
3
Which database integrity rule is a set of user rules and does not relate to other rules?
Referential Integrity
Domain Integrity
User-Defined Integrity
Entity Integrity
4
What is the name for the rules required to create, manage, use, etc. digital certificates?
X.509
Asymmetric Infrastructure
Priority Kernel Internet (PKI)
Public Key Infrastructure (PKI)
5
Which database integrity rule relates to foreign keys?
Domain Integrity
User-Defined Integrity
Entity Integrity
Referential Integrity
6
What is the name for organizations that give out digital certificates to people?
Internet Engineering Task Force (IETF)
Government-licensing Agency
Certificate Authority (CA)
Internet Assigned Numbers Authority (IANA)
7
Which type of algorithm adds a secret key into a hash to add authentication to hashing?
SHA-2
ECDSA
Salting
HMAC
8
What is used to generate random salts?
Elliptic Curves
Cryptographic Secure Pseudo-Random Number Generators (CSPRNGs)
Cryptographic Safety Perfectly Random Name Generators (CSPRNGs)
Lava Lamps
9
What is an example of how digital signatures are used in Internet communication?
Code Signing
Pretty Good Privacy (PGP) encryption
VPNs
Digital certificates
10
How should passwords be stored in password databases?
In plaintext
Using cryptographic hash functions
Using RSA encryption
Passwords should never be stored
11
What is NOT a type of attack used to crack hashed passwords?
Dictionary attack
Regex attack
Rainbow Table
Lookup Table
12
What is NOT a way to ensure database integrity?
Validation rules
Anomaly verification
Hashing
Data entry controls
13
What is NOT an application that uses hash functions?
IP Security (IPsec)
Challenge Handshake Authentication Protocol (CHAP)
Pretty Good Privacy (PGP)
Public Key Infrastructure (PKI) certificates
14
To which type of attack is hashing vulnerable?
Denial of Service (DoS)
Worms
Man-in-the-middle
Social Engineering
15
Which of the following is NOT a practical use of HMACs?
Authenticating a web user
Digital signatures
Cisco routing protocol updates
IPsec VPNs
16
What makes brute-force attacks more time-consuming using repeated hashing?
Salting
Key stretching
Key Secrecy
Key logging
17
What is the name for seeing if data falls within a set to ensure completeness of data?
Data Type Validation
Data Field Validation Controls
Validation Rules
Drop Down Master Controls
18
What is NOT one of the processes that occurs when a certificate is received and validated?
Chain of Trust Sequencing
Path Validation
Revocation
Certificate Discovery
19
What is a term that means that a user cannot deny having sent or received a message?
Authenticity
Trust
Integrity
Non-repudiation
20
Which of the following hash algorithms have been shown to be insecure?
MD5
AES
SHA-1
SHA-256
21
When downloading files from the Internet, how can you check if the file downloaded is correct?
Compare the hash value provided by the website to the value from your file
Check that the website is the correct website
The Internet is a safe place so I don't have to worry
Use HTTPS
22
What is the term for verifying data modifications when a system detects unusual patterns?
Hashing
Anomaly verification
Data entry controls
Validation rules
23
What is the name for the chain of certificates that lead to a specific certificate?
Chain of Trust
Chain of Authentication
Chain of Integrity
Chain of Certificates
24
What password attack stores pre-computed hashes beside the related passwords in a dictionary?
Dictionary attack
Lookup Table
Reverse Lookup Table
Brute-force attack
25
What is used to authenticate and verify that users are who they claim to be over the Internet?
Digital Certificates
HMACs
Encryption/Decryption
Hashing
26
What is NOT something hash functions can do?
Protect against accidental changes or corruption
Encrypt and decrypt data
Prove that data has not been changed
Prove that data is authentic (from a specific sender)
27
What is the name for setting up rules for basic checks on user input?
Validation Rules
Drop Down Master Controls
Data Field Validation Controls
Data Type Validation
28
What is NOT a proper way to use a salt?
Salts are never reused
Hash on the server in a web application
The length of the salt is between 4 and 8 digits
The salt is unique for every user password
29
What is a method used to check the authenticity and integrity of digital documents?
Digital signatures
HMAC
ElGamal encryption and decryption
Digital certificates
30
What password attack provides a list of users that match a guessed password?
Dictionary attack
Reverse Lookup Table
Rainbow Table
Lookup Table
31
What password attack guesses passwords by using a file of common words, phrases, and passwords?
Rainbow Table
Brute-force attack
Dictionary attack
Lookup Table
32
Which database integrity rule relates to databases needing a primary key for every entry?
Referential Integrity
Entity Integrity
Domain Integrity
User-Defined Integrity
33
What is the fixed-length representation of data (the result of a hash function) called?
Hash value
MD5
Cipher text
Message digest
34
Which database integrity rule means that table relationships should not be changed?
Domain Integrity
Referential Integrity
Entity Integrity
User-Defined Integrity
35
What is a tool that takes data and produces a fixed-length representation of the data?
Hashing
Encryption
Data Masking
Obfuscation
36
True or False: A password database will store the password hash and the salt.
TRUE
FALSE
37
What is the name for using a list of choices instead of making users type their choice?
Data Field Validation Controls
Validation Rules
Data Type Validation
Drop Down Master Controls
38
Which is NOT a property of cryptographic hash functions?
The input must be a certain length
The function is one-way and is very difficult to reverse
Two different inputs will almost never give the same hash values
The output has a fixed length
39
What password attack guesses all possible combinations of characters up to a given length?
Brute-force attack
Dictionary attack
Lookup Table
Rainbow Table
40
What is NOT a common digital signature algorithm?
Rivest-Shamir-Adleman (RSA)
Skipjack
Digital Signature Algorithm (DSA)
Elliptic Curve Digital Signature Algorithm (ECDSA)
41
Which database integrity rule makes sure that all data in a column have proper values?
Domain Integrity
Entity Integrity
Referential Integrity
User-Defined Integrity
42
What is the name for checking whether a user is inputting the type of characters expected?
Validation Rules
Data Type Validation
Drop Down Master Controls
Data Field Validation Controls
43
Which type of cryptography is used with digital signatures?
Symmetric Encryption
Stream Encryption
Block Encryption
Asymmetric Encryption
44
What is typically added to passwords to make password hashing more secure?
Randomly-generated cumin
Randomly-generated salt
Randomly-generated pepper
A hashed secret key
45
What is NOT a common validation rule criteria?
Check Digit
Format
Size
Randomness
46
What password attack uses a smaller table with a large amount of solutions to hashes?
Brute-force attack
Dictionary attack
Reverse Lookup Table
Rainbow Table
47
What is the standard used to define the common structure of all PKI certificates?
X.509
RFC 1881
802.11
T2202
48
What is NOT a popular hash function?
Message Digest 5 (MD5)
SHA-256
Secure Hash Algorithm 1 (SHA-1)
Rivest-Shamir-Adleman (RSA)
49
True or False: The salt should be added to the end of the password.
FALSE
TRUE
50
What field uses hashing to verify that a digital clone has all the data from an original drive?
Penetration Testing
Digital Forensics
Software Development
Steganography
