CS - D1 - Essential Security Principles

A collection of software tools attackers use to obtain admin-level access to a computer

Which password policy should you review/modify to protect the Windows system?

What creates/manages digital validation for websites within the public key infrastructure (PKI)

Which type of encryption algorithm uses a pre-shared key to encrypt and decrypt data?

The combined sum of all potential threat vectors in defense-in-depth security?

Worker gives credentials to attacker in fishing attack. They use credentials for other attacks

Something you are

Answer the question in the picture.

For each authentication factor determine if it is "something you have": EMAIL TOKEN

_____ take(s) advantage of a computer vulnerability and may not always be malicious.

Answer the question in the picture.

Virus

For each authentication factor determine if it is "something you have": SECRET QUESTION ANSWER

Answer the question in the picture.

Please answer the question on the picture.

Malware that redirects the browser on target computers to various predetermined websites chosen by threat actors.

Threat actors use voice calls to manipulate an individual into releasing confidential data.

A pathway or method used by a hacker to illegally access a network or computer.

Weakness found in computer system that could potentially be accessed and compromise system.

Something you know

For each authentication factor determine if it is "something you have": SMARTCARD

Which algorithm is a one-way mathematical function that is used to provide data integrity?

Which part of the CIA Triad is exploited when should surfing occurs?

Which attack method requires the use of a phone to obtain personal or sensitive information?

Type of malware used by threat actors on target computers to take over computer resources for the purposes of mining.

What are the three components of the AAA concept in cybersecurity?

Which occurs when threat actors use botnets on several computers to overwhelm a web server?

The possibility of exposure, loss of asset/information, harm to reputation from cyber attack.

For each authentication factor determine if it is "something you have": FINGERPRINT

This is a type of malware used to secretly gather data on a target computer and send it back to threat actors.

For each authentication factor determine if it is "something you have": RETINAL SCAN

For each authentication factor determine if it is "something you have": KEY

A(n) _____ is the possibility of an attack on a computer system or network.

Which type of attacker mostly uses existing computer code to launch cyber attacks?

What is spyware?

Something you have

Which term describes a pathway that is used to illegally access a computer system?

Weakness in a computer device, system, or network?

Which type of physical attack involves enrty into a restricted building or area?

Which symmetric encryption algorith would provide the strongest data protection?

An attack designed to find/take advantage of computer weakness, usually maliciously

Which statement is TRUE about advanced persistent threat (APT) attacks?

Answer the question in the picture.

An employee steals confidential technical specifications for a product for personal gain.

Which communication protocols use encryption to secure data in transit?

Collection of malware tools that can be used by threat actors to remotely access and control target computers.

What are classes of encryption algorithms?

Type of attacks that collects data over a long period of time and sends to another location.

What is the key characteristics of a cybersecurity defense-in-depth definition?

Which server component should you install and configure to support a centralized AAA solution?

An app that appears legit installs malware/keylogger. Which CIA Triad was compromised?

Potential malicious attack trying to access data/disrupt digital operations/damage information

Worker takes home a storage drive without authorization, which is stolen from worker's car.

What is used to authenticate and verify the identity of a website?

Trojan Horse

Which part of the CIA Triad was preserved?

When the front desk requires you to verify your identification.

Which option is a common type of attack launched against IoT devices?

Type of malware used by threat actors to encrypt the hard drive content of a target computer.

An attack directed at a specific group to trick them into visiting an infected website?

Which states of data domains would require encryption and hashing to secure the data?

Which part of the CIA Triad was compromised?

Which kind of attack intercepts and alters data sent between two hosts?

Which type of cyber attack includes phising, tailgating, and shoulder surfing?

Which authentication factor is the bank using?

A "clear screen" policy is keeping your computer locked when you are away from your desk.

Which social engineering attack targets high-ranking people to compromise data?

During a security breach, cybercriminals exposed corporate data. Which CIA Triad was violated?

Worm