Font size
WorksheetsIT Security
Total questions: 40
Worksheet time: 13mins
Controlling who has access to a computer or online service and the information it stores is..
Access Control
DMZ
Business Continuity Management
Encryption
Hardware or software designed to prevent unauthorized access to a computer or network.
Malware
Personal Firewall
Proxy Software
Firewall
The process of identifying, analyzing, and evaluating risk
Risk
Risk Assessment
Asset
Backing Up
Method used by criminals to try to obtain financial or other confidential information by email.
Risk
Keyboard Logger
Phishing
Spyware
A person who performs cyber attack or causes an accident
Hacker
Threat Actor
Spy
Worm
Malware that passes information about a computer user's activities to an external party.
Access Control
Spyware
Cloud Computing
Screen Scraper
A representation of the system threats that are expected to be reasonable
Threat Vector
Overload
Threat Model
Authentication
Protocol for mapping an address to a physical machine address that is recognized
Reverse Address Protocol
Asymmetric Warfare
Auditing
Address Resolution Protocol (ARP)
Intended to specify an unclassified, publicly-disclosed, symmetric encryption algorithm.
Advanced Encryption Standard (AES)
Algorithm
Temporary Key Integrity Protocol
Bandwidth
The process of confirming the correctness of the claimed identity
Authorization
Authentication
Auditing
Availability
BIND stands for Berkeley Internet Network Domain and is it an implementation of DNS.
True
False
The process of encrypting all the data on the hard disk drive used to boot a computer.
Full Disk Encryption
Encryption
Bit Locker
File System
What is brute force?
A cryptanalysis technique or other kind of attack method involving an exhaustive procedure that tries all possibilities, one-by-one.
The mathematical science that deals with analysis of a cryptographic system in order to gain knowledge needed to break or circumvent the protection that the system is designed to provide.
An algorithm that employs the science of cryptography, including encryption algorithms, cryptographic hash algorithms, digital signature algorithms, and key agreement algorithms.
An asymmetric cryptographic algorithm that produces a digital signature in the form of a pair of large numbers
What must a company have to help after a disaster happens towards the information they withhold?
Have a team to send out warnings to customers.
Have a set business continuity plan.
Hold a business impact analysis meeting.
Incorporate digital signature algorithm.
Business Impact Analysis means...
It determines what kind of analysis needs to be used.
It determines what kind of business can use certain types of analysis.
It determines what levels of impact to a system are tolerable.
It determines if impact will create damage to analysis ideas.
What type of caching is commonly used in personal computers?
Memory caching
Disk caching
Neither
Both
Chain of Custody enforces a
Federal rule
State rule
Corporation rule
Global rule
Harvesting key strokes is an example of using...
Adware
Rootkit
Malware
Crimeware
The Cookie Law legally requires websites to warn visitors about cookies that websites may use.
False
True
Fill in the blanks of the definition: "The ______ science that deals with analysis of a _____ system in order to gain knowledge needed to break of circumvent the protection that the system is designed to provide."
Basic; Cryptographic
Mathematical; Basic Graph
Mathematical; Cryptographic
Basic; Basic Graph
What kind of algorithm employs the science of cryptography, including encryption algorithms, digital signature algorithms, and key agreement algorithms.
Blowfish
Twofish
Hash
Triple DES
DSA stands for
Digital Signature Alignment
Digital Signature Algorithm
Digital Signature Accident
Digital Signature Advertisement
The process on the router that is running the routing protocol, communicating with its neighbor routers, is usually called
Routing demo
Routing breech
Routing signature
Routing daemon
Are escrow passwords usually stored online?
Yes
No
What are escrow passwords?
Passwords that are written down and stored in a public location so anyone can gain access to information when privileged personnel is not available.
Passwords that are written down and stored in a secure location
that are used by emergency personnel when privileged personnel are unavailable.
Passwords that are written down online and are stores in privileged personals email draft in order to access it at any time.
Passwords that are written down in emails and shared around a company in order to ensure that everyone has the information.
Ethernet is the most widely-installed LAN technology
True
False
Used to adjust TCP timeout values on the fly so that network devices don't continue to timeout sending data over saturated links.
Extended ACLs
Cryptographic Algorithm
Hash
Exponential Backoff Algorithm
Extended ACLs is
Making filtering decisions based on IP addresses, ports, protocols, and whether a session is established.
Making filtering decisions based on regions, ports, protocols, and whether a session has ended.
Making filtering decisions based on countries, ports, protocols, and whether a session is defected.
Making filtering decisions based on IP addresses, ports, protocols, and whether a system is installed.
A TCP/IP protocol specifying the transfer of text or binary files across the network
Point to Point Protocol
Address Resolution Protocol
File Transfer Protocol (FTP)
Password Authentication Protocol (PAP)
Filtering routers cannot be part of a firewall or be the complete firewall.
False
True
Programs that simulate one or more network services that you designate on your computer's ports
Spyware
Honey Pot
Keystrokes
Filtering Program
A form of active wiretapping in which the attacker seizes control of a previously established communication association.
Man in the middle attack
Broad Attack
Communications Attack
Hijack Attack
Why is patching important in MBFS?
It fixes problems that may have been brought up since the last update.
It lets MBFS create new apps to implement for finance
It fixes problems that may have been brought up before a new website launch
It lets MBFS fix clothing items with materials from other clothes.
Only backup the files that have been modified since the last backup
Full backups
Incremental-forever
Differential backups
Incremental backups
An attack that sends an improperly large ICMP echo request packet with the intent of overflowing the input buffers of the destination machine and causing it to crash.
Threat Vector
Hijack Attack
Ping of Death
Pharming
A user’s session is redirected to a masquerading website. This can be achieved by corrupting a DNS server on the Internet and pointing a URL to the masquerading website’s IP.
Man-in-middle attack
Pharming
Threat vector
Overload
What is the acronym for threat modeling?
STRIPE
SPRIDE
SIDE
STRIDE
Attempt by an unauthorized entity to gain access to a system by posing as an authorized user
Spoofing
Elevation of privilege
Tampering with information
Denial of service
A way of letting an anonymous user retrieve information without authentication
Anonymous Venturing
Null Session
Public Session
Anonymous Logon
A protocol developed for credit card transactions in which all parties are authenticated using digital signatures, encryption protects the message and provides integrity, and provides end-to-end security for credit card transactions online.
Point to Pay Protocol
Secure Electronic Transactions
Dynamic Transactions Protocol
Transactions Resolution Protocol
