stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CompTIA ITF+ (Cyber.org) Module 6 Flashcards | StudBud
Explore
/
CompTIA ITF+ (Cyber.org) Module 6
CompTIA ITF+ (Cyber.org) Module 6
97 terms
·
StudBud Administration
·
48 plays
Imported from external platform
Flashcards
97 cards
F
Practice quiz
P
Host live
L
Questions
97
Answers
1
What does IDS stand for?
Identity Data Standards
Intrusion Detection System
Intrusion Data System
Identifying Data Standards
2
What is the concern called where system(s) providing power are shut down?
Service Down
Power Down
Service Outage
Power Outage
3
What does TACACS stand for?
Terminal Access Controller Access-Control System
Technical Authorization Controller and Control System
Triad Authority Collective and Continuous Server
Trick question, it's named after Daniel Tacac
4
A ______ disaster recovery site is simply an empty building.
Hot
Cold
Warm
Tepid
5
The most critical systems need to be restored first.
False
True
6
What is the purpose of Authentication?
Who can access the network?
None of the above
What all can a person access on the network?
What all did the person access while on the network?
7
Which of the following is NOT an AAA protocol?
RADIUS
Diameter
B-AAA
TACACS
8
What is Carbonite?
An internal computing component
chemical element
chemical element
An online backup tool
9
What does CIA stand for?
Confidentiality, Integration, and Access
Confidentiality, Integrity, and Availability
Confidentiality, Integrity, and Access
Confidentiality, Integration, and Availability
10
What is private data in transit?
Data sent within a private network
Data sent via SMS
Data transferred from one computer to another via USB
Data sent via email
11
What is non-repudiation?
Repeated computations provide unique log files
Log files can't repeat, unless they are the same log file
The owner of a private key cannot deny having sent a digital signature
Tracking can not be used to verify the user of a system
12
When an exploit is found, what is used to secure it?
Anti-virus
Patches
Firewall
Drivers
13
What is policy enforcement?
Ensuring that users only gain access to authorized rights
Determining what applications can run at the same time
Removing unauthorized files from a system
Determining what authorized rights are for users
14
______ information is how a company does their business and all the data that goes along with it.
Personal
Customer
Company Confidential
Company Public
15
What is responsible for identifying when a file is ready for archiving?
Archive bit
Clearby
Time stamp
. File readiness
16
How can you limit unauthorized information alteration?
Adversary-in-the-middle
Audit Log
SSL/TLS
Social Engineering
17
How do you prevent Adversary-in-the-middle Attacks?
Use devices that have a certificate award of honor
Use devices that have certification-based authentication
Use devices that have a certificate of authenticity
Use any device
18
What is one method that does not ensure privacy for Desktop Software?
Lock computer screen when not in use
Black and White Lists
IDS
Social Engineering
19
How is DOS and DDOS different?
DOS is caused by multiple machines
DOS is caused by robots
DDOS is caused by robots
DDOS is caused by multiple machines
20
What are the five confidentiality concerns?
Snooping, Eavesdropping, Recycle Swimming, Wiretapping, and
Snooping, Eavesdropping, Dumpster Diving, Wiretapping, & Social Engineering
Snooping, Social Engineering, Dumpster Diving, Tapping, and Impersonation
Snooping, Eavesdropping, Dumpster Diving, Wiretapping, and Socializing
21
What is the term used to describe data that is in transit through networks?
Data in transit
Data in motion
All of the above
Data in flight
22
What does the word kryptos mean?
To teach
A secret
To study
Disguise
23
A ______ restricts data from entering a system and/or leaving a system.
Cryptosystem
Anti-malware program
Anti-virus program
Firewall
24
What is replication?
Opening and closing an application to test for errors
Having the same person work on multiple projects
All of the above
Running multiple versions of identical systems
25
Which of the following is an example of a biometric reading?
Iris scan
PIN
Password
SMS token
26
What is policy definition?
Determining what applications can run at the same time
Determining what authorized rights are for users
Removing unauthorized files from a system
Ensuring that users only gain access to authorized rights
27
Which encryption extension is used for email?
STARTTLS
HTTP
HTTPS
AES
28
Confidential information can be broken into all of the following catergories EXCEPT...?
Company confidential information
Company public information
Customer information
Personal information
29
______ refers to a website or company that tracks the pages you visit and searches you perform.
Cache
Tracking
Log file
Cookie
30
______ is the steps to get everything back to running smoothly.
Prioritization
Restoring Process
Data restoration
None of the above
31
What is availability?
Freedom
The protection of information
he presence of information and systems that are always ready to be used
presence of info & systems are always ready to be used authorized persons
32
______ information includes phone numbers, social security numbers, and photos.
Company Public
Personal
Customer
Company Confidential
33
How should passwords be stored?
As SALTED hashes
Encrypted
In the shadow directory
On a remote server
34
What does the word graphein mean?
Disguise
A secret
To study
To teach
35
When sharing information, you should always ________?
Not share PII
Both a and b
Limit what is shared
Neither a or b
36
Which of the following is a password best practice?
Keep the passwords simple and not complex
Never have a password expiration date
Do not use a password manager
Never reuse passwords
37
What is phishing?
The sending of emails that contain malicious data
Vishing
Sending of emails contain malicious links or ask for information/money
Fishing
38
What is authentication?
None of the above
Any method a computer uses to determine who or what can access it
Any method a computer uses to determine what a verified user can do
The record-keeping and tracking of user activities on a computer network
39
Which of the following is NOT a way to secure sensitive data?
VGA
All of the above
RSA
AES
40
Which of the following is a way to protect your privacy while using an instant messaging application?
Communicate only with people you know and trust
Never share PII
Encrypt all messages that are being sent
All of the above
41
______ is the duplication of nodes in the case of failure.
Mimicing
Cloning
Redundancy
Replication
42
What does OEM stand for?
Other Equipment Manual
Original Equipment Manufacturer
Organically Engineered Machine
Organic Equivalent Machine
43
Which device will an SMS token be sent to/stored on?
Smart card
USB flash drive
Fingerprint
Cell phone
44
Which of the following is a password best practice?
Password expirations
Use Password Managers
Longer passwords
All of the above
45
What does PIN stand for?
Public Integration Network
Personal Identification Number
Password Integrated Network
Private Identity Network
46
What is the purpose of Accounting?
What all did the person access while on the network?
Who can access the network?
What all can a person access on the network?
None of the above
47
When emailing, what should you be aware of?
VPN
Fishing
HTTPS and HTTP
Phishing
48
What can happen when there is lack of availability?
Data Loss
None of the above
All of the above
Business Failure
Physical Harm
Data Corruption
49
What is authorization?
The record-keeping and tracking of user activities on a computer network
Any method a computer uses to determine what a verified user can do
None of the above
Any method a computer uses to determine who or what can access it
50
______ is deciding what needs to be recovered first.
None of the above
Restoring Process
Data restoration
Prioritization
51
What is one example of impersonation?
Dress up for graduation
Dress as a clown for a job as a party clown
Login using a friends account and hack another computer
Login using your own account and hack another computer
52
A company's operations would be considered _________ .
Company Confidential Information
Customer Information
Personal Information
Company Private Information
53
Why should a user not use the same password across multiple websites?
It makes it easier to remember passwords if you do not reuse passwords
You can never trust any banking website
In case a website is compromised and that password is captured
This is wrong, it is safe to reuse passwords across websites
54
What does MAC stand for? (Not hardware MAC)
Mandatory Access Control
Media Access Control
Mechanism Accessory Console
Massively Awesome Computer
55
How do you prevent Replay Attacks?
Use a website that has TLS or SSL
Use a website that has www
Use a website that has TLS
Use a website that has SSL
56
A ()records events that occur in an OS or other software, or messages between diff users of a communication software
Log file
Cache
Tracking
Cookie
57
What is accounting?
Any method a computer uses to determine what a verified user can do
The record-keeping and tracking of user activities on a computer network
Any method a computer uses to determine who or what can access it
None of the above
58
What does the CIA triad stand for?
Confidentiality, Integration, and Access
Confidentiality, Integrity, and Availability
Confidentiality, Integrity, and Access
Confidentiality, Integration, and Availability
59
When using the internet, what should be used to help keep your privacy?
Both a and b
HTTP
HTTPS
Neither a or b
60
A ______ is a place that a company can temporarily relocate to following a security breach or natural disaster.
None of the above
Disaster recovery site
Contigency area
Temp storage
61
Which of the following can be used to find a user's location?
Serial Number
MAC address
IP address
All of the above
62
Which of the following is the most secure password?
starwarsyoda
123456
password
5T+lee@aCS4
63
Which of the following is NOT one of the "A"s of AAA?
Accounting
Authentication
Assymetry
Authorization
64
______ information is all the data about any people that have (or are) customers with an organization.
Personal
Company confidential
Company public
Customer
65
______ is the ability of a system to continue to operate without interruption when one or more of its components fail.
Backup recovery
Fault tolerance
Contingency
Resistance
66
Which of the following is an example of a security question?
What is the name of your elementary school?
What is the name of your first pet?
All of the above
What is your mother's maiden name?
67
What is the message to be sent which has not been encrypted?
Cybertext
Plaintext
Ciphertext
Cleartext
68
What is data that is physically stored in a digital form such as databases, spreadsheets, or external storage drives?
Data in use
Data in transit
Data at rest
Data in motion
69
Which type of user has the highest/most privileges?
Privileged User
Executive User
Master User
User
70
What does TLS stand for?
Transfer Layer Security
Transport Layer Security
Transport Layer Socket
Transport Lock Socket
71
Which of the following is an example of using an SSO?
Microsoft account
Adobe account
Google account
All of the above
72
What does encrypt mean?
Convert into a code
Hide in plain sight
Recover file from deletion
Revert a code to the original
73
Which of the following is NOT true regarding strong passwords?
Contains numbers
Contains upper and lower case letters
Contains a minimum of 4 characters
Contains symbols
74
What does TLS stand for?
Technology Level Security
Technical Logistics Service
Transport Layer Security
Transferral Level Security
75
At what level is encryption for data at rest done?
All of the above
Individual files/folders
The whole disk
The database
76
A social security number would be considered _________ .
Company Confidential Information
Personal Information
None of the above
Company Private Information
77
What does decrypt mean?
Recover file from deletion
Hide in plain sight
Convert into a code
Revert a code to the original
78
Which of the following helps secure a device when browing the internet?
Never clicking on untrusted links
Antivirus software
Firewalls
All of the above
79
Which of the following would be considered the most secure password?
G@nd0lf
G@nd0lf&L0tR!7
GaNdOlFtHeWiZaRd
GandolfTheGrey
80
What is the main concern for business software?
Security camera footage
Customer and Employee Personally Identifying Information
Profits Information
Blueprints of the factory
81
What is a contingency plan?
A plan for building a computer or application
A plan for how to distribute and allocate resources
None of the above
A plan devised for an outcome other than the usual
82
Default passwords are considered safe and do not need to be changed.
False
True
83
What is the benefit of using a SSO?
This method is secure since it requires a fingerprint to log-in
This secures all applications since they have to log into each application
A user only has to log in once to access a lot of applications
It is more secure since it is a form of two factor authentication
84
Which of the following is a protection of availability?
Network Packet Creation
Antivirus
Router
Switch
85
A ______ is computer software, firmware, or hardware that creates and runs virtual machines.
Supervisor
Hypervisor
Firewall
FireWire
86
What is one way to protect against Denial of Service attacks?
Watch the network traffic
Anti-firewall
Identify network irregularities
Phishing
87
Which of the following is part of the password reset process?
Ask security questions
All of the above
Allow the user to change the password
Send a token via side-channel
88
Commonly used passwords are stored in what is commonly known as a ______.
Dictionary
Encyclopedia
Collection
Library
89
What does DAC stand for?
Direct Access Control
Digital Accessory Console
Discretionary Access Control
Decryption Activity Console
90
A(n) ______ is the state of a system at a particular point in time.
Snapshot
Screenshot
Freeze frame
Image capture
91
Which of the following is NOT part of the disaster recovery process?
Prioritization
Restoring process
Data restoration
Snapshot
92
What sort of information should keep its integrity?
Locker Numbers
Nicknames
Social Security Numbers
Phone Numbers
93
As long as a file doesn't appear malicious, you should keep it if you are not using it.
True
False
94
What is the purpose of Authorization?
What all did the person access while on the network?
None of the above
What all can a person access on the network?
Who can access the network?
95
What is the difference between a black and white list?
There is no difference between a black list and a white list
A black list is blocked websites while a white list is allowed websites
A black list is allowed websites while a white list is blocked websites
The color
96
What can be used to guarantee non-deniability?
Physical signature
Receipt
All of the above
Biometrics
97
What is confidentiality?
Ensuring identity
Integrity
Protection of information
Sharing of information
