Cybersecurity Fundamentals Week 5 Quiz

Which method tries all possible passwords until a match is found?

• birthday

• dictionary

• brute force

• rainbow tables

A user downloads an updated driver for a video card from a website. A warning message pops up saying the driver is not approved. What does this piece of software lack?

• valid ID

• source code

• digital signature

• code recognition

Write down one criteria used for validation rule.

A user wants to ensure that when new users downloaded his newly created program, the program is not changed while in transit. What can the user do to ensure that the program is not changed when downloaded?

• Distribute the program on a thumb drive.

• Install the program on individual computers.

• Encrypt the program and require a password after it is downloaded.

• Create a hash of the program file and use it to verify the integrity of the file after download

What is the standard for a public key infrastructure to manage digital certificates?

• x.509

• NIST-SP800

• x.503

• PKI

A recent breach at a company due to the ability of a hacker to access the corporate database through the company website by using malformed data in the login form. What is the problem with the company website?

• weak encryption

• bad usernames

• poor input validation

• lack of operating system patching

What is a strength of using a hashing function?

• It has a variable length output.

• It can take only a fixed length message.

• It is a one-way function and not reversible.

• Two different files can be created that have the same output.

For integrity rule that states every table must have a primary key and that the column or columns chosen to be the primary key must be unique and not null. Which integrity requirement is this?

Alice and Bob use the same codeword to login into a website. This means both would have the exact same hash for their codewords.What could be implemented to prevent both codeword hashes from being the same?

A user plans to use SHA-1 as part of an IPSec implementation for inbound external connections. The user wants to ensure the integrity and authenticity of the connection. What security tool can the user use?

• MD5

• HMAC

• ISAKMP

• SHA256