Intro to Cybersecurity Midterm Review

Question 1

Hardware address unique to an individual machine, the media access control, also know as the ?

Accepted Answer

MAC address

Question 2

Secret combination of letters and numbers that along with a username authenticates a user

Accepted Answer

password

Question 3

This term doesn't have the usual definition when it comes to fundamental security principles

Accepted Answer

diversity

Question 4

A thing or entity of value

Accepted Answer

asset

Question 5

Difficulty in defending against attacks - that attackers from anywhere in the world can attack

Accepted Answer

universally connected devices

Question 6

This act is an attempt to fight corporate corruption, covering publicly traded companies

Accepted Answer

SOX/Sarbox

Question 7

Wants to break into computers to create damage, lacks advanced knowledge, copies & uses scripts

Accepted Answer

script kiddies

Question 8

One of 5 fundamental security principles dealing with who gets access to what resources:

Accepted Answer

limiting

Question 9

Layers security approach, multiple layers of protection is also known as:

Accepted Answer

defense-in-depth

Question 10

Sending fraudulent information via text message trying to get information from user is known as

Accepted Answer

smishing

Question 11

This type of attack essentially breaks the connection between the IP address & the MAC address

Accepted Answer

TCP/IP Hijacking

Question 12

Attack that targets high-profile employees to steal sensitive information from a company

Accepted Answer

Whaling

Question 13

From Greek words-Science of transforming info so it's secure while being transmitted or stored

Accepted Answer

cryptography

Question 14

Telephone phishing-scammer calls a user to get info for identity theft.

Accepted Answer

vishing

Question 15

Device for fractionating plaintext characters so they are represented by smaller set of symbols

Accepted Answer

Polybius square

Question 16

This act requires healthcare to protect information about patients and their treatment

Accepted Answer

HIPAA

Question 17

The likelihood that an asset will be stolen or damaged is known as ________.

Accepted Answer

risk

Question 18

An event or object which might defeat the security measures you have to protect your assets.

Accepted Answer

threat

Question 19

Apparent source of these email messages is individual of authority in comp./personally known

Accepted Answer

Spear Phishing

Question 20

Communication are intercepted from originator to their destination & responses are forged

Accepted Answer

man-in-the-middle attack

Question 21

Limited resources (CPU, memory, etc/ attacker intentionally consumes more resources than needed

Accepted Answer

hardware limitations

Question 22

Person who violates system security w/malicious intent. Has advanced knowledge to destroy data

Accepted Answer

Cracker (also known as black hat hacker)

Question 23

Requires banks/financial institutions to alert customers of policies disclosing customer info

Accepted Answer

GLBA

Question 24

Three categories of password guessing attacks are dictionary attacks, software exploitations, ?

Accepted Answer

brute force

Question 25

This attack only captures the message and sends it again later instead of changing the message

Accepted Answer

replay attack

Question 26

Keeping the type of computer, version of OS, brand of software secret are part of this defense

Accepted Answer

obscurity

Question 27

Fraudulent practice of sending emails from "reputable company" to get user to reveal info

Accepted Answer

phishing

Question 28

Taking advantage of a known weakness or vulnerability is known as ____________.

Accepted Answer

exploiting

Question 29

This relies on tricking/deceiving someone to access a system via phone, dumpster diving, etc.

Accepted Answer

Social Engineering

Question 30

General term for malicious code- programs designed to break into computers to create havoc

Accepted Answer

malware

Question 31

Person who uses his/her advanced computer skills to attack computers & expose security flaws

Accepted Answer

hacker

Question 32

Governments that use state-sponsored attackers for launching computer attacks against foes

Accepted Answer

nation state actors

Question 33

The process of attempting to break an encrypted message

Accepted Answer

Cryptanalysis

Question 34

A handler sends zombie computers instructions to flood specific server with requests(pings)

Accepted Answer

Distributed Denial of Service (DDOS)

Question 35

A greeting message from one computer to another using Internet control Message Protocol (ICMP).

Accepted Answer

Ping

Question 36

Attackers send message to multiple computer causing response to server which overwhelms server

Accepted Answer

smurf attack

Question 37

a geometric substitution cipher, which exchange letters for symbols which are fragments of grid

Accepted Answer

PigPen Cipher

Question 38

This cryptography algorithm uses a simple key value that substitutes one letter for another.

Accepted Answer

Caesar Cipher

Question 39

Enterprises having difficult providing security for a wide array of personal devices, this is

Accepted Answer

use of personal devices

Question 40

When hardware device gets no support from company that made the device, this vulnerability is:

Accepted Answer

lack of vendor support

Question 41

Motivation is defined by ideology & whose goals are defacing web sites to spread propaganda

Accepted Answer

cyberterrorists

Question 42

A person or thing that has the power to carry out a threat.

Accepted Answer

Threat agent

Question 43

When accounts are improperly configured or accounts are provided more access than necessary

Accepted Answer

misconfiguration

Intro to Cybersecurity Midterm Review

Questions 43

Intro to Cybersecurity Midterm Review

Questions 43