PNETSEC Final Examination (II-BINS)

What is frequently used to describe the tasks of securing information that is in a digital format?

• network security

• information security

• data security

• security guard

It ensures that data is accessible to authorized users.

• Confidentiality

• Integrity

• Availability

• Authentication

It ensures that the information is correct and no unauthorized person or malicious software has altered the data.

• Confidentiality

• Integrity

• Availability

• Authentication

individuals who want to attack computers yet they lack the knowledge of computers and networks needed to do so.

• script kiddies

• identity theft

• cyber terrorism.

• malicious program

Locks up files until the user pays a “ransom” to have them released

• script kiddies

• identity theft

• cyber terrorism.

• malicious program

Type of of defense against attack which approach has the advantage of creating a barrier of multiple defenses that can be coordinated to thwart a variety of attacks.

• Limiting

• Layering

• Diversity

• Obscurity

What is another server-side web application attack that manipulates user responses?

• XML Injection

• Cross-Site Scripting

• SQL Injection

• Directory Traversal

What is results in a user’s computer becoming compromised just by viewing a webpage and not even clicking on any content?

• client-side attack

• Cross-Site Scripting

• SQL Injection

• Directory Traversal

It uses the web server as a platform to launch attacks on other computers that access it

• client-side attack

• Cross-Site Scripting

• SQL Injection

• Directory Traversal

Defined as a relation with a property so that if a relation exists between A and B, and there is also a relation between B and C, then there is a relation between A and C.

• Access rights

• Horizontal privilege escalation

• Transitive Access

• Directory Traversal