NEW
Font size
WorksheetsSTC - Cyber Security and Forensics
Total questions: 30
Worksheet time: 30mins
Which of the following is not a security parameter according to CIA Triad?
Confidentiality
Integrity
Availability
Authenticity
Same keys are used for encryption and decryption in _______________ cryptography scheme
Symmetric
Asymmetric
Hash-based
All
Data Encryption Standard (DES) algorithms use ___________ bit key to provide security
56
64
128
256
The command that is used to check your internet connection is __________
pwd
ping
hostname
whatis
A networking device that connects a LAN to another LAN is _________
Adaptor
Bridge
Router
Gateway
_____________ are the network points that acts as an entrance to another network
Bridge
Router
Gateway
Switch
A change of one input or key bit results in changing approx half output bits is called _______
Avalanche Effect
Belady’s Effect
Zener Effect
Crypto Effect
The following command that is used to get the route of a packet is _________
ping
ifconfig
traceroute
arp
The command that is used to find the IP address associated with domain name is __________
host
netstat
ipconfig
traceroute
The command that is used to display routing table, connection information, the status of ports, etc. is ______
host
netstat
ipconfig
traceroute
What port does Telnet use?
22
80
20
23
Which phase of hacking performs actual attack on a network or system?
Reconnaissance
Maintaining Access
Scanning
Gaining Access
What is the purpose of a Denial of Service attack?
Exploit a weakness in the TCP/IP stack
To execute a Trojan on a system
To overload a system so it is no longer operational
To shutdown services by turning them off
The first phase of hacking an IT system is compromise of which foundation of security?
Availability
Confidentiality
Integrity
Authentication
Services running on a system are determined by ___
The port assigned
The system’s IP address
The Active Directory
The system’s network name
What is the best statement for taking advantage of a weakness in the security of an IT system?
Threat
Attack
Exploit
Vulnerability
Having individuals provide personal information to obtain a free offer provided through the Internet is considered what type of social engineering?
Web-based
Computer-based
Human-based
User-based
To hide information inside a picture, the technology used is _____
Rootkits
Bitmapping
Steganography
Image Render
What is the most important activity in system hacking?
Information Gathering
Cracking Password
Escalating Privileges
Covering Tracks
Phishing is a form of ______
Impersonation
Spamming
Identity Theft
Scanning
What is the goal of forensic Science?
To determine the evidential value of the crime scene and related evidence
Mitigate the effects of the information security breach
Save the good will of the investigating organization
It is a disciple to deal with the legal processes
Cyber crime happening by E-Mail is called as_________
Email attack
Smishing
Vishing
Phishing
How do you define forensic computing?
It is the science of capturing, processing, and investigating data security incidents and making it Acceptable to a court of law
It is a methodology of guidelines that deals with the process of cyber investigation
It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking
It is the administrative and legal proceeding in the process of forensic investigation
Where do you look for windows logs for investigation?
Event logs
Audit logs
Firewall logs
IDS logs
Criminals access someone’s computer and encrypt the user’s personal files and data. The user is unable to access this data unless they pay the criminals to decrypt the files. This Attack is called __________
Botnet
Ransomware
Driving
Spam
Getting back deleted data is what kind of technique?
Slacking
Data carving
Disk recovery
Header manipulation
What is the abbreviation for CIA ?
Confidentiality Interrogative Available
Compromise Investigation Archive
Confidentiality Integrity Availability
None of the above
Which are the attack surface for IoT ?
Firmware
Network Communication
Hardware
All the above
Which is the search engine for IoT ?
Shodan
DuckDuckGo
Bing
How Can I keep my IoT device safe from Attacks
Conduct Secure Code Checks
Conduct Security Testing
Review Third Party Libraries for security
All the above
