Chapter 10 ITF

In which of the following should you expect some privacy?

• Sharing a photo through a mobile phone app
• Metadata stored by a web browser
• Emailing an important document to a friend using an employer email system
• Personally identifiable information entered into a human resource database

Which software is Microsoft's anti-malware product that is preinstalled on most new computers?

• McAfee VirusScan
• Norton Antivirus
• Windows Defender
• ESET NOD32

Your company wants to use multifactor authentication. Which of the following would you most likely suggest?

• Fingerprint and retinal scan
• PIN and smart card
• Password and passphrase
• Token and smartphone

What do biometrics use to perform authentication of identity?

• Biological attributes
• Knowledge of passwords
• Ability to perform tasks
• Possession of a device

A technician assists Jack, an employee in the Accounting department, who needs access to the client database by granting Jack administrator privileges. Later, Jack discovers he has access to the salaries in the payroll database

• Entry control roster
• Multifactor authentication
• Principle of least privilege
• Strong password policy

Which Internet protocol is used to transmit encrypted data?

• HTTPS
• FTP
• DNS
• HTTP

What is a disadvantage of using the cloud for data storage?

• Cloud storage allows you to save files to the internet.
• Cloud storage can fulfill the requirements for offsite backups.
• Cloud storage backups require a reliable internet connection.
• You can access files from any computer with an internet connection.

Unwanted, unsolicited emails containing advertisements, political rhetoric, hoaxes, or scams are collectively known as _________.

• Illegal messages
• Cookies
• Bloatware
• Spam

Which of the following would best prevent an unauthorized person from remotely accessing your computer?

• Firewall
• Anti-spam software
• Lockdown device
• Anti-malware software

Which of the following is a common form of social engineering attack?

• Distributing false information about your organization's financial status.
• Hoax virus information emails.
• Using a sniffer to capture network traffic.
• Stealing the key card of an employee and using that to enter a secured building.