CSS150 Midterm Exam Review

What protocol is embedded in a computer's operating system or communication hardware to secure Internet communications?

Pen testing unocvers & exploits deep vulnerabilities, vulnerability scanning can only discover surface vulnerabilities.

What type of attack relies on someone accidentally misspelling the name of a website?

Software that a user did not mean to install that gets installed along with another software is referred to as what?

Checking the health of a device before allowing it to connect to a network is a service of which of the following?

Missing patches, lack of OS & app hardening, & weak passwords are all examples of surface vulnerabilities.

What type of attack uses specialized communication protocols?

The dark web cannot be used to search for and find new information on network vulnerabilities.

Which of the following command interface protocols allows you to remotely & securely gain access to network devices?

Phishing that is performed over the phone is referred to as which of the following?

What is used by domains on the Internet to prove authenticity of their organization?

Which of the following is a standard format for digital certificates?

When examining the results of a vulnerability scan, what can you do to ensure the accuracy of the result?

Which of the following best describes bash shell?

Which function in cryptography takes a string of any length as input & returns a string of any requested variable length

What protocol prevents switching loops?

A threat actor called a company asking for info about the CEO. What phishing attack is the actor most likely to perform?

Which network mgmt tool can allow an administrator to remotely wipe a mobile device in the event it is left behind?

Which of the following allows an admin to prioritize network traffic?

A network that is set up with intentional vulnerabilities is referred to as which of the following?

What type of digital certificate can be self-signed because they do not depend on a higher-level CA for authentication?

What encryption algorithm type is used to be able to store passwords without having to store them in plaintext?

Which type of cybersecurity threat uses instant messaging as a vector to launch attacks?

When running application code, the program that converts the program into machine language at the same time is called?

Brokers is the term used to describe threat actors who sell their knowledge to other attackers or governments.

War driving is the most efficient means of discovering wireless signals.

What refers to making data obscure or unclear to make the data difficult to be determined?

A cookie that is placed on your computer by the website that you visited is known as which of the following?

Hacktivists are sponsored by governments to attack its foes; nation state actors hack for social/ political reasons.

What type of malware can hide its agenda and provide to an attacker full root access to the system?

Which of the following types of platforms is known for its vulnerabilities due to age?

When 2 identical plaintext blocks are encrypted into 2 identical ciphertext blocks, what is this known as?

Which algorithim uses two keys, a public and a private key, to encrypt and decrypt data?

A security attack that occurs when a user's PC gets encrypted and must pay to decrypt is known as...

What attack takes advantage of a session token that websites send a user's browser to imitate the identity of a victim?

Which of the following compliance standards provides a minimum degree of security for handling credit card information?

Which of the following can create a more secure network configuration by isolating servers to the outside of a LAN?

Which of the following pre-dated TLS?

What type of attack involves a threat actor intercepting data and imperonsating a user?

Which of the following tools can ensure data security on external drives such as flash drives?

Which trust model describes when one certificate authority acts as a facilitator to interconnect all other CAs?

What is the management of the public keys that are used in digital certificates referred to as?

An attack on a website that is frequently visited by many people in a company is known as which of the following?

Which type of attack looks for data by exploiting the communication between an app(s) and a database?

Which mobile device connectivity method has transmitters connected through a mobile telecommunication switching office?

Which of the following refers to state where data is currently being transmitted across a network?

If you find that a network is using an outdated OS that is EOL, what type of vulnerability can this be considered?

Software firewalls are locally installed on a device, virtual firewalls run in the cloud.

Which of the following describes a faraday cage?