ITF+ 6.5 to 6.7 Security Concerns

Which of the following is NOT a method that a malicious person can use to masquerade as someone else when using email or Instant Messaging?

• Overwhelm the server with a Denial of Service (DoS)
• Stealing a user's login information
• Using an unattended computer that is still logged in
• Using malware such as a Trojan

What type of access mechanism is MOST vulnerable to a replay attack?

• Use of multi-factor authentication

• Use of a complex password

• Use of a token generated by software

• Use of biometrics

In considering availability concerns, what use might a lockable faceplate on a server-class computer be?

• It may prevent a natural disaster from damaging the hardware and corrupting the data.

• It may prevent the computer or server from overheating and shutting down.

• It may prevent a hacker from obtaining remote unauthorized network access.

• It may prevent the user from switching the machine on/off or accessing removable drives and ports.

What security concern is snooping most affected by?

• Confidentiality

• Integrity

• Availability

• Authentication

What impact is presented when users reveal their passwords to technical support staff?

• It exposes the passwords to brute-force attacks from malicious hackers.

• It provides technical support staff with access to the user's personal files stored on the network.

• It exposes users to social engineering attacks that try to gather login credentials for malicious use.

• It prevents the user from needing to change a password following the password history component of the policy.

Which specific attack uses a botnet to threaten availability?

• Replay

• Power outage

• Man-in-the-Middle (MitM)

• Distributed Denial of Service (DDoS)

What is the main difference between virus and worm malware?

• A virus has to infect a file whereas a worm propagates in memory and over computer networks.

• A virus propagates in memory and over computer networks whereas a worm has to infect a file

• A virus uses sequences of code that insert themselves into an executable whereas a worm uses document macros.

• A virus uses a macro programming language to automate tasks where as a worm executes when the application is executed.

Malware encrypts the user's documents folder and any attached removable disks then extorts the user for money to release the encryption key. What type of malware is being described?

• Spyware

• Ransomware

• Trojans

• Worm

What is the main means by which anti-virus software identifies infected files?

• Using heuristics to detect suspicious behavior

• Using definitions or signatures of known virus code

• Using signatures of zero-day exploits

• Using AutoRun to execute files of unknown provenance

  
  

What is it called when antivirus software remediates a system by blocking access to an infected file but not actually deleting it.

• Quarantining the file

  
  

• Cleaning the infection

• Erasing the file

• Updating the signatures