Cybersecurity & Intellectual Property Review

Which of the following is not a form of biometrics? (biological attributes) (a)  

• Fingerprint
• Retina Scan
• Smart Card
• Face Recognition

After entering a user ID and password, an online banking user must enter a PIN that was sent as a text message to the user's mobile phone.

Which of the following digital security methods is being used?

• Firewall

• Smart Card

• DLP

• Multifactor Authentication

Your company wants to use multifactor authentication. Which of the following would you most likely suggest? (think of two DIFFERENT options)

• Fingerprint and retinal scan

• PIN and smart card

• Password and passphrase

• Token and smartphone

Which password attack takes advantage of people who use short, common words or combinations of words as their passwords. The hacker will try a long list of common words to figure it out?

• Brute Force Attack

• Traffic Interruption Attack

• Keylogger Attack

• Dictionary Attack

Which password attack takes place where an attacker tries to use every possible combination of letters and numbers?

• Dictionary Attack

• Brute Force Attack

• Traffic Interruption Attack

• Keylogger Attack

Is an application or string of code attached to a file that’s designed to spread from file to file.

• Worms

• Viruses

• Trojans

• Spyware

Can propagate (spread) itself without a file. A malicious software that travels across computer networks, automatically replicating itself.

• Virus

• Worm

• Trojan

• Adware

A method that allows you to log into one system and have access to other related systems. Ex: Google Services allows a one time authentication and you can then gain access to youtube, gmail, google drive

• Discretionary Access Control (DAC)

• Single Sign-On

• Role-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

Emphasizes the important of the owner: only person with full access rights to the resource, can modify and allow others to edit, view, or copy, and can transfer ownership. Ex: Google Docs

• Single Sign-On

• Discretionary Access Control

• Role-Based Access Control

• Mandatory Access Control

Type of access control that restricts access based on the user’s ROLE in an organization

• Mandatory Access Control

• Role-Based Access Control

• Single Sign-On

• Discretionary Access Control