CCST Cyber Quiz Test #1

What are the objectives of ensuring data integrity? (Choose two correct answers)

• Data is unaltered during transit

• Data is not changed by unauthorized entities

• Data is encrypted while in transit and when stored on disks

• Access to the data is authenticated

• Data is available all the time

Answer explanation

Explanation: The objectives for data integrity include data not being altered during transit and not being changed by unauthorized entities. Authentication and encryption are methods to ensure confidentiality. Data being available all the time is the goal of availability.

A medical office employee sends emails to patients about their recent visits to the facility. What information would put the privacy of the patients at risk if it was included in the email?

• Contact information

• Next appointment

• Patient records

• First and last name

Answer explanation

Explanation: An email message is transmitted in plain text and can be read by anyone who has access to the data while it is en route to a destination. Patient records include confidential or sensitive information that should be transmitted in a secure manner.

What is the best way to avoid getting spyware on a machine?

• Install the latest antivirus updates

• Install the latest web browser updates

• Install software only from trusted websites

• Install the latest operating system updates

Which of the following certifications meets the U.S. Department of Defense Directive 8570.01-M requirements, which is important for anyone looking to work in IT security for the federal government?

• ISC2 Certified Information Systems Security Professional

• ISACA CSX Cybersecurity Fundamentals

• Microsoft Technology Associate Security Fundamentals

• EC Council Certified Ethical Hacker

• CompTIA Security+

Answer explanation

Explanation: This is an entry-level security certification that meets the U.S. Department of Defense Directive 8570.01-M requirements, which is an important item for anyone looking to work in IT security for the federal government.

Which of the following certifications tests your understanding and knowledge in how to look for weaknesses and vulnerabilities in target systems using the same knowledge and tools as a malicious hacker, but in a lawful and legitimate manner?

• EC Council Certified Ethical Hacker

• Palo Alto Networks Certified Cybersecurity Associate

• ISC2 Certified Information Systems Security Professional

• Microsoft Technology Associate Security Fundamentals

• CompTIA Security+

Answer explanation

Explanation: This certification tests your understanding and knowledge of how to look for weaknesses and vulnerabilities in target systems using the same knowledge and tools as a malicious hacker but in a lawful and legitimate manne

If developers attempt to create their own security algorithms, it will likely introduce what type of vulnerabilities?

• Buffer overflow

• Race conditions

• Weaknesses in security practices

• Non-validated input

• Access control problems

Answer explanation

Explanation: Systems and sensitive data can be protected through techniques such as authentication, authorization and encryption. Developers should stick to using security techniques and libraries that have already been created, tested and verified and should not attempt to create their own security algorithms. These will only likely introduce new vulnerabilities.

Which of the following security implementations use biometrics? (Choose two correct answers)

• Fingerprint

• Phone

• Credit card

• Voice recognition

• Fob

Which of the following firewalls filters traffic based on source and destination IP addresses?

• Network layer firewall

• Proxy server

• Application layer firewall

Which of the following firewalls filters web content requests such as URLs and domain names?

• Application layer firewall

• Proxy server

• Reverse proxy server

• Network layer firewall

• Network address translation firewall

When describing malware, what is a difference between a virus and a worm?

• A virus focuses on gaining privileged access to a device, whereas a worm does not.

• A virus replicates itself by attaching to another file, whereas a worm can replicate itself independently.

• A virus can be used to launch a DoS attack (but not a DDoS), but a worm can be used to launch both DoS and DDoS attacks.

• A virus can be used to deliver advertisements without user consent, whereas a worm cannot.

Answer explanation

Explanation: Malware can be classified as follows:

Virus (self-replicates by attaching to another program or file)

Worm (replicates independently of another program)

Trojan horse (masquerades as a legitimate file or program)

Rootkit (gains privileged access to a machine while concealing itself)

Spyware (collects information from a target system)

Adware (delivers advertisements with or without consent)

Bot (waits for commands from the hacker)

Ransomware (holds a computer system or data captive until payment is received)