Cybersecurity chapter 10

What is the best countermeasure against social engineering?

• User awareness training

• Access auditing

• Strong passwords

• Acceptable use policy

Which of the following is a common form of social engineering attack?

• Distributing false information about your organization's financial status.

• Hoax virus information emails.

• Using a sniffer to capture network traffic.

• Stealing the key card of an employee and using that to enter a secured building.

Mark received an email from a software company claiming his account will be disabled soon. The emailcontains several spelling errors, an attachment, and states he should open the attachment for further instructions.What should Mark do?

• Delete the email without opening the attachment.

• Reply to the sender and ask if the attachment is safe

• Open the attachment because he has anti-virus software installed.

• Forward the email to a friend and ask for advice.

Which of the following describes a Man-in-the-Middle attack?

• A person over the phone convinces an employee to reveal their logon credentials

• An attacker intercepts communications between two network hosts by impersonating each host

• Malicious code is planted on a system where it waits for a triggering event before activating

• An IP packet is constructed which is larger than the valid size.

A technician walks into the office with a UPS. What sort of threat will this device prepare a system for?

• Data redundancy

• Denial-of-service

• Wiretapping

• Power outage

Which of the following security measures is a form of biometrics?

• BIOS password

• Chassis intrusion detection

• Fingerprint scanner

• TPM

What do biometrics use to perform authentication of identity?

• Knowledge of passwords

• Biological attributes

• Ability to perform tasks

• Possession of a device

Which of the following is not a form of biometrics?

• Face recognition

• Smart card

• Fingerprint

• Retina scan

Your company wants to use multifactor authentication. Which of the following would you most likely suggest?

• Password and passphrase

• Token and smartphone

• PIN and smart card

• Fingerprint and retinal scan

After entering a user ID and password, an online banking user must enter a PIN that was sent as a

text message to the user's mobile phone.

Which of the following digital security methods is being used?

• DLP

• Firewall

• Smart card

• Multifactor authentication