stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec Fund 1-5 Flashcards | StudBud
Explore
/
Sec Fund 1-5
Sec Fund 1-5
100 terms
·
StudBud Administration
·
1,328 plays
Imported from external platform
Flashcards
100 cards
F
Practice quiz
P
Host live
L
Questions
100
Answers
1
One of the four traits that malware possesses is concealment. What are the other traits? (Select all that apply)
PAYLOAD CAPABILITIES
INFECTION
CIRCULATION
ELASTICITY
2
Rachel calls her boss to ensure that the message she received is unaltered. What type of protection is she enforcing?
Confidentiality
Integrity
Authentication
Availability
3
What type of attack occurs when the user is tricked into clicking a link that is other than what it appears to be?
URL Hijacking
Clickjacking
Session Hijacking
Domain Hijacking
4
If a hacker changes the amount of their purchase from $5,000 to $5, they have violated which protection?
CONFIDENTIALITY
AVAILABILITY
INTEGRITY
AUTHENTICATION
5
They are attackers who attack for ideological reasons that are generally not well-defined.
CYBER-THREAT
HACKER
CYBER-TERRORISTS
HACTIVISTS
6
A trust model that uses an outside person between two individuals?
Third Party Trust
Public Trust
Private Trust
Direct Trust
7
This type of attack takes advantage of web applications that accept user input without validating it.
XSRF
XSS
SQL Injection
PKI
8
Mario downloaded a free wallpaper on his computer; started to encounter banners, popup ads, and new web browsers opened.
ZOMBIE ATTACK
MAN-IN-THE-MIDDLE
SPYWARE
ADWARE
9
When your company uses security products from different manufacturers, they are using?
LAYERING
DIVERSITY
LIMITING
SIMPLICITY
10
Joan gets a message on her computer that says her key can no longer be used. What part of the certificate life cycle?
Revocation
Expiration
Suspension
Allocation
11
Matthew is hired to break into YAHOO.com and found a vulnerability. Instead of reporting this vulnerability he sells it.
BROKER
HACTIVISTS
GRAY HAT HACKER
CYBER-CRIMINAL
12
What basic protection does Hashing give you?
Integrity
Security
Non-repudiation
Peace of Mind
13
Which of the following are cryptographic transport algorithms? (Select all that apply)
Hypertext Transport Protocol (HTTP)
Hypertext Transport Protocol Secure (HTTPS)
Secure/ Multipurpose Internet Mail Extensions (S/ MIME)
Post Office Protocol (POP)
14
Due to the fact that extensions act as part of the browser itself they generally have wider access privileges.
True
False
15
An attacker tries to take down a water plant. He chose this target because it will cause panic. What type of attacker?
HACKER
GREY HAT HACKER
CYBER TERRORIST
CYBER CRIMINAL
16
An employee has recently been terminated from their position prior to their contract end date. Whats this an example of?
Revocation
Key Escrow
Destruction
Expiration
17
Michael has been using Telnet to access remote computers but learned that it is unsecure. Protocol used to secure it?
SSH
TLS
S/MIME
HTTPS
18
What is the image an example of?
Government Trust Model
Hierarchical Trust Model
Bridge Trust Model
Distributed Trust Model
19
What is a private key cryptography?
Security
Symmetric Cryptography
Hashing
Asymmetric Cryptography
20
What is this image an example of?
Symmetric Cryptography
Hashing
Steganography
Digital Signature
21
Google dorking is an electronic variation of dumpster diving.
True
False
22
Which security attack will send all stored electricity to the computer in a single burst resulting in PC destruction?
USB KILLER
UNITED AIRLINES
YAHOO
AVS WINVote
23
Ericka is looking into a software encryption that uses NTFS. It uses cryptography for windows. What is this called?
GNuPG
FAT32
FDE
EFS
24
Vanessa uses her credit card at Burger King to buy cheesecake. What legal protections are in place to protect her?
GLBA
PCI-DSS
HIPAA
SARBOX
25
Select the term used to describe tracking software that is deployed without the consent or control of the user.
TROJAN
BOTNET
SPYWARE
SPAM
26
An administrator can configure a wired connection to automatically shut off if it detects what type of device?
Bridge
Switch
Router
Computer
27
Draco has overflowed the switch with frames that have been spoofed so each frame contains a different source MAC-Add so?
MAC Guard
Flood Guard
SYN Guard
Load Guard
28
Which of the following are reasons for successful attacks?
ALL OF THE ABOVE
HARDWARE LIMITATIONS
POORLY DESIGNED SOFTWARE
WIDESPREAD VULNERABILITIES
29
David trusts his wife. Maria trusts her brother, Chris. Because he trusts her, and she trusts Chris, He trusts him.
Third Party Trust
Distributed Trust
Direct Trust
Hierarchical Trust
30
Script Kiddies lack the knowledge of computers and networks. So they download freely available attack software called?
CLOSED-SOURCE INTELLIGENCE
OPEN-SOURCE INTELLIGENCE
SOPHISTICATED INTELLIGENCE
EXTERNAL INTELLIGENCE
31
A Fortune 500 company uses__as a framework to manage digital certificates. This allows the company to C, S, D, and R.
ACE
Distributed Trust
Certificate Trust
PKI
32
A _Inserts itself into a file or program and then looks to reproduce itself on the same computer and unload a payload.
RAT
Virus
Worm
Trojan
33
Which of the following is not true about a worm?
A worm needs a user to infect a file
Uses a computer network to replicate
Can leave behind a payload on the system infected and cause harm, aka virus
Take advantage of a vulnerability in an application or an operating system
34
What is the image an example of?
Key Destruction
Key Cloning
Public Key Infrastructure
Key Exchange
35
When an employee gains security's approval and opens the door, the attacker asks that the employee to hold the door is?
Tailgating
Man-In-The-Middle
Hoaxes
Shoulder Surfing
36
What basic protections does Symmetric Cryptography give you? (Select all that apply)
Integrity
Confidentiality
Authentication
Diversity
37
Attacker enters this command: whatever or a=a into a forgot your password field and it lets you view all of the emails
PKI
XSRF
SQL Injection
XSS
38
Sue knows that her credit card information used on Amazon.com will be kept secure. Which protection is she trusting in?
INTEGRITY
AUTHENTICATION
AVAILABLILITY
CONFIDENTIALITY
39
Which of the following are not actions in key handling procedures
Destruction
Recovery
Suspension
Cloning
40
Malware installs itself as part of some other download, backdoor, or worm and takes steps to prevent the detection.
SPYWARE
LOGIC BOMB
ROOTKIT
RESIDENT VIRUS
41
A user's keys were encrypted and divided among 3 parts. Parts were then distributed to multiple people. Is example of?
A, B, C Plan
M-of-N Control
Key Escrow
Distribution Control
42
While Juliet entered her code to enter the secret room, Romeo was able to observe and get Juliet's code. Type of action?
Shoulder surfing
Vishing
Tailgating
Keylogging
43
Joe decided to download a calendar that was advertised online, but it also executed malware that scanned his system.
TROJAN
CRYPTO-MALWARE
BACKDOOR
RAT
44
Which interception attack intercepts a communication between two computers and sends a fictitious response to sender?
Replay Attack
Man-In-The-Browser
Man-In-The-Middle
ARP Replay Attack
45
What is the image an example of?
Symmetric Cryptography
Asymmetric Cryptography
Steganography
Hashing
46
an employee created malicious code that would destroy data. It would remain dormant as long as it existed in the payroll
TROJAN
POISONING ATTACK
LOGIC BOMB
DDOS
47
SGT Billings's poor attempt to deny that he sent digitally signed email for all of 1st platoon to report to PT at 0700.
Diffusion
Non-repudiation
Authentication
Obfuscation
48
What characteristics make up a secure hashing algorithm
All of the above
Original
Secure
Unique
49
Vanessa knows Dwayne goes to Amazon.com often. Its well known and used. V uses this and puts an AD w/ malware on it.
Plug-Ins
Malvertising
Extensions
Ad Fraud
50
Performs a real-time lookup of a certificate's status and called request-response protocol is which of the following?
Certificate Practice Statement (CPS)
Certificate Authority (CA)
Online Certificate Status Protocol (OCSP)
Public Key Infrastructure (PKI)
51
Software encryption uses which of the following? (Select all that apply)
Full Disk Encryption (FDE)
File and File system Cryptography
Security
Hardware Security Module (HSM)
52
Which of the following is not true?
Virus inserts malicious code into a program or data file
A virus needs another user for it to spread
A worm uses a network to travel from one computer to another
A worm infects a file
53
Mike is a human resources Administrator at Unicorn Sprinkles Company. Steve wants to access the human resources computer
Vertical Privilege Escalation
Horizontal Privilege Escalation
Denial of Service
DNS Poisoning
54
Which of the following browser additions work with a specific browser and adds functionality to the browser itself?
Scripting Code
Add-On
Plug-In
Extension
55
Use of an attacker to get information from employees by going through physical copies of old calendars and charts is?
Watering hole attack
Google Dorking
Social Engineering
Dumpster Diving
56
A __________ is a type of mutation virus that completely changes from its original form when executed.
OLIGOMORPHIC VIRUS
MALWARE VIRUS
POLYMORPHIC VIRUS
METAMORPHIC VIRUS
57
Which attack can be done in two different locations: on the local host table or on the external DNS server?
MAC Spoofing
ARP Poisoning
Privilege Escalation
DNS Poisoning
58
What is the best social engineering technique that a threat actor can use in order to target only the major executives.
Impersonate an IT department employee and use phishing and vishing
Impersonate an executive and call the help desk to have a password reset
Use a watering hole attack
Claim to be the IT department and send out a hoax to the entire company
59
A series of irregular accounting procedures caused Enron Corporation to declare bankruptcy. What law protection is this?
SARBANES-OXLEY ACT
PCI-DSS
HIPPA
GRAMM-LEACH-BLILEY ACT
60
Joe uses an XSS attack on Sarah's computer and steals her session token cookie for mybank.com. He tries to impersonate.
Domain Hijacking
URL Hijacking
Clickjacking
Session Hijacking
61
David knows and trusts his wife, Maria. What type of trust is this?
Bridge Trust
Hierarchical Trust
Third Party Trust
Direct Trust
62
All the following are ways to deal with risk except:
TRANSFER
AVOID
IGNORE
MITIGATE
63
A technical document that describes in detail how the CA uses and manages certificates.
Key Escrow
Digital Certificate
Certificate Practice Statement (CPS)
Bridge Trust
64
Nation state actors are well-resourced and highly trained attackers.
False
True
65
This threat actor sells their knowledge of a vulnerability to other attackers or governments?
HACKTIVISTS
NATION STATE ACTOR
BROKERS
ORGANIZED CRIME
66
Sonya is looking into different solutions for a key exchange within normal communications of cryptography. (Multiple)
Cryptography
Courier
Diffie-Hellman (DH)
Elliptic Curve Diffie-Hellman (ECDH)
67
A technician has realized that he needs to replace his Symmetric algorithm keys. Which is not a method he could use?
Elliptic Curve Diffie-Hellman
Hellman Secrecy
Diffie-Hellman Ephemeral
Diffie-Hellman
68
A__in software occurs when two concurrent threads of execution access shared resources and results in consequences.
RESOURCE EXHAUSTION
MISCONFIGURATION
RACE CONDITION
DEFAULT CONFIGURATION
69
Which security principle uses a defense-in-depth approach?
SIMPLICITY
LAYERING
OBSCURITY
LIMITING
70
Upon opening an Excel worksheet, a script is executed. What type of virus was activated?
TROJAN
ROOTKIT
LOGIC BOMB
MACRO
71
Which DOS attack uses IP spoofing to change the address where a ping request came from, so the computer is overwhelmed?
SYN Flood Attack
ACK Flood Attack
DNS Amplication Attack
Smurf Attack
72
Which of the following are cryptographic transport algorithms? (Select all that apply)
Simple Mail Transfer Protocol (SMTP)
Secure Shell (SSH)
Digital Certificate
Secure Socket Layer (SSL)
73
What is the image an example of?
Hashing
Steganography
Cryptography
Digital Signature
74
What basic protections does Asymmetric Cryptography give you? (Select all that apply)
Confidentiality
Non-repudiation
Authentication
Integrity
75
A screen appears on A-Aron's computer that his files are now encrypted, and must pay a fee to receive a key to unlock.
KEYLOGGER
TROJAN
CRYPTO-MALWARE
SPYWARE
76
Which of the following is not a widely used plug-in for web browsers?
Java
Adobe Flash Player
Apple Quick Time
Android Play
77
What is the image an example of?
Bridge Trust Model
Parental Trust Model
Hierarchical Trust Model
Distributed Trust Model
78
Chakhala, can not only monitor Janet's computer activity but can change her computer settings, browse files, etc. Type?
TROJAN
RAT
ROGUE ACCESS
MACRO
79
What is this image an example of?
Steganography
DES
AES
Hashing
80
A published set of rules that govern the operation of PKI and has baseline security requirements for use is known as?
Certificate Authority (CA)
Public Trust
Certificate Policy (CP)
Certificate Revocation List (CRL)
81
Which of the following are characteristics that determine the resiliency of a key?
Certificate Authority & Trusted Third Party
Digital Certificate
Aggressiveness, Latency, & Strength
Randomness, Length, & Cryptoperiod
82
Which interception attack starts with a Trojan infecting a computer and installing an "extension"?
Replay Attack
Man-In-The-Middle
Man-In-The-Browser
ARP Replay Attack
83
Jorge hacks Lisa's computer. He uses her web browser to log onto mybank.com and impersonates Lisa to log onto her acct.
XSRF
SQL Injection
XSS
PKI
84
What is this image an example of?
Steganography
Symmetric Cryptography
Hashing
Asymmetric Cryptography
85
Patrick climbs through a hole in the fence and steals the scooter. In this scenario what does the scooter represent?
ASSET
VULNERABILITY
RISK
THREAT ACTOR
86
Which of the following can a Digital Signature perform?
None of the above
Prevent the sender from sending the message
Verify the receiver
Provide Confidentiality of the message
87
A virus and malware are interchangeable terms.
False
True
88
What is a public key cryptography?
Asymmetric Cryptography
Steganography
Symmetric Cryptography
Hasing
89
What is the image an example of?
Hierarchical Trust Model
Distributed Trust Model
Bridge Trust Model
Sibling Trust Model
90
Mary creates a company called BobisFun. She had to register a large # of sites that are a variant of the domain name.
URL Hijacking
Web Hijacking
Session Hijacking
Clickjacking
91
Daenerys is an admin for google.com. She uses proxy servers and NAT to hide her IP address. This protection falls under?
LAYERING
SIMPLICITY
OBSCURITY
LIMITING
92
Jack executes a program on Steve's computer to store data on RAM beyond the boundaries of the storage buffer on PC. How?
Replay Attack
Integer Overflow Attack
Buffer Overflow Attack
Denial of Service Attack
93
Which of the following is not an information security layer?
POLICIES AND PROCEDURES
PEOPLE
PROCESSES
PRODUCTS
94
Hacker A intercepts a transmission. Hacker makes a copy of the transmission and saves it for later. What type of attack?
Replay Attack
Man-In-The-Browser
ARP Replay Attack
Man-In-The-Middle
95
ARP poisoning relies on MAC spoofing.
False
True
96
A__is a technology used to associate a user's identity to a public key and has been signed by a trusted third party.
Digital Key
Digital Certificate
Electronic Key
Electronic Fingerprint
97
This type of armored virus will scramble it's code in order to make it more difficult to detect. This type of virus is?
POLYMORPHIC
OLIGOMORPHIC
SWISS CHEESE INFECTION
LOGIC BOMB
98
Industry-standard frameworks provide a resource of how to create a secure IT environment.
False
True
99
Hardware encryption uses which of the following? (Select all that apply)
Pretty Good Privacy (PGP)
Asymmetric Cryptography
USB Device encryption
Trusted Platform Module
100
If properly configured, what device will provide loop prevention?
Computer
Switch
Bridge
Hub