CIS2350 Week 2

Question 1

PKI is the underlying infrastructure used for controlling which of the following entities? Select two.

Accepted Answer

Digital certificates, Public keys

Question 2

I feel prepared for today's quiz & read the assigned Modules.

Accepted Answer

True

Question 3

What is the purpose of threat maps in the context of cybersecurity?

Accepted Answer

To display real-time data about attack origins and frequencies

Question 4

In a vulnerability scan, beginning with the high vulnerabilities and working through to the low-the best plan of action

Accepted Answer

False

Question 5

Which statement describes the Common Vulnerability Scoring System (CVSS)?

Accepted Answer

It is a risk assessment system.

Question 6

In a public key infrastructure setting, which of the following could be used to describe this type of trust? Select two.

Accepted Answer

Web of trust, Direct trust

Question 7

A rootkit is virus that infects a computer before the operating system loads?

Accepted Answer

True

Question 8

Which of the following is the most comprehensive secure communication and transport protocol?

Accepted Answer

IPSec

Question 9

Which of the following establishments is best suited for implementing a distributed trust model?

Accepted Answer

A blockchain-based organization

Question 10

What does blocking ransomware do?

Accepted Answer

Blocks normal access

Question 11

Passive Reconnaissance takes an entirely different approach; the tester uses tools that do not raise any alarms.

Accepted Answer

True

Question 12

Revocation status of certificates can checked using...

Accepted Answer

OCSP

Question 13

A false negative is much more severe than a false positive.

Accepted Answer

True

Question 14

Penetration Test

Accepted Answer

An authorized attempt to break into an organization's system

Question 15

Passive Reconnaissance takes an entirely different approach; the tester uses tools that do not raise any alarms.

Accepted Answer

True

Question 16

How is a digital signature different, or similar, to a digital certificate? Select two.

Accepted Answer

A digital certificate is more trustworthy than a digital signature., A digital certificate helps confirm its owner's identity

Question 17

A less secure trust model that uses no third party is called the "web of trust model" and is based on direct trust.

Accepted Answer

True

Question 18

What does the Common Vulnerability Scoring System (CVSS) framework assess?

Accepted Answer

Severity of vulnerabilities

Question 19

In Key Management, what is the process in which keys are managed by a third party such as a trusted CA?

Accepted Answer

Escrow

Questions 19