Lesson 16

Confidentiality and integrity are two important properties of information stored in a secure retrieval system. What is the third property?

• Information

• Accessibility

• Authorization

• Availability

True or false? The level of risk from zero-day attacks is only significant with respect to EOL systems.

• True

• False

A threat actor crafts an email addressed to a senior support technician inviting him to register for free football coaching advice. The website contains password-stealing malware. What is the name of this type of attack?

• Phishing

• Tailgating

• Impersonation

• Spear phishing

You are assisting with the development of end-user security awareness documentation. Covertly observing someone type a PIN or password or other confidential data is called what?

• Social engineering

• Shoulder surfing

• Piggybacking

• Tailgating

You discover that a threat actor has been able to harvest credentials from some visitors connecting to the company’s wireless network from the lobby. The visitors had connected to a network named “Internet” and were presented with a web page requesting an email address and password to enable guest access. The company’s access point had been disconnected from the cabled network. What type of attack has been perpetrated?

• Evil twin

• On-path attack

• MITM

• SQL injection

A threat actor recovers some documents via dumpster diving and learns that the system policy causes passwords to be configured with a random mix of different characters that are only five characters in length. To what type of password cracking attack is this vulnerable?

• Social engineering

• Human-hacking

• Brute force

• Dictionary

What type of cryptographic key is delivered in a digital certificate?

• Digital key

• Public key

• Private key

• Decrypt key

True or false. TKIP represents the best available wireless encryption and should be configured in place of AES if supported.

• True

• False

True or false? WPA3 personal mode is configured by selecting a passphrase shared between all users who are permitted to connect to the network.

• True

• False

In AAA architecture, what type of device might a RADIUS client be?

• Authentication, Authorization, and Accounting

• Remote Access Dial-in User Service

• Access Point

• Supplicant