Cyberecurity Ess 2

Which method tries all possible passwords until a match is found?

• brute force

• rainbow tables

• dictionary

• birth date

Answer explanation

Two common methods of cracking hashes are dictionary and brute force. Given time, the brute force method will always crack a password.

What is the standard for a public key infrastructure to manage digital certificates?

• x.509

• x.503

• PKI

• NIST-SP800

Answer explanation

The x.509 standard is for a PKI infrastructure and x.500 if for directory structures.​

What is a strength of using a hashing function?

• It is a one-way function and not reversible.

• It can take only a fixed length message.

• Two different files can be created that have the same output.

• It has a variable length output.

Answer explanation

Understanding the properties of a hash function shows its applicability such as one-way function, arbitrary input length, and fixed output.

Alice and Bob use the same codeword to login into a website. This means both would have the exact same hash for their codewords. What could be implemented to prevent both codeword hashes from being the same?

• peppering

• RSA

• salting

• pseudo-random generator

Answer explanation

A password is stored as a combination of both a hash and a salt.

A company is concerned with malicious traffic from malware that flows through the network. What technology can be put in place to detect potential malware traffic on the network?

• IPS

• IDS

• Firewall

• NAC

Why should WEP not be used in wireless networks today?

• easily cracked

• its age

• its lack of encryption

• its use of clear text passwords

Answer explanation

Despite improvements, WEP is still vulnerable to various security issues including the ability to be cracked.

The manager of a department suspects someone is trying to break into computers at night. You are asked to find out if this is the case. What logging would you enable?

• OS

• syslog

• Windows

• audit

Answer explanation

Audit logs can track user authentication attempts on workstations and can reveal if any attempts at break-in were made.

What are three types of power issues that a technician should be concerned about? (Choose Three)

• spike

• blackout

• brownout

• spark

Answer explanation

Power issues include increases, decreases, or sudden changes in power and include the following:

Spike

Surge

Fault

Blackout

Sag/dip

Brownout

Inrush Current

Which service will resolve a specific web address into an IP address of the destination web server?

• ICMP

• DNS

• DHCP

• NTP

Answer explanation

DNS resolves a website address to the actual IP address of that destination.

A new PC is taken out of the box, started up and connected to the Internet. Patches were downloaded and installed. Antivirus was updated. In order to further harden the operating system what can be done?

• Install a hardware firewall

• Remove the administrator account.

• Disconnect the computer from the network.

• Remove unnecessary programs and services.

Answer explanation

When hardening an operating system, patching and antivirus are part of the process. Many extra components are added by the manufacturer that are not necessarily needed.