Font size
Worksheets1002 A + Ch 04 & 05 Security Principles & Security Technologies
Total questions: 33
Worksheet time: 17mins
Ann, an end user, receives a call from someone claiming to be from the help desk and asking for her username and password to prevent her email box from being deleted immediately. Which of the following BEST describes this type of attack?
Social engineering
Ransomware
Man-in-the-middle
Shoulder surfing
Which of the following is a type of security threat where a collection of infected computers is used together to deliver spam, spread malware, or other attacks?
Phishing
Botnet
Logic bomb
Man-in-the-middle
Joe, a user, just downloaded a game onto his company phone. When he is not using the device, it unexpectedly dials unrecognized numbers and downloads new content. Joe is the victim of which of the following?
Trojan horse
Spyware
Social engineering
Worms
A human-based or software-based attack where the goal is to pretend to be someone else for the purpose of identity concealment is ________.
Social engineering
Spoofing
Zero-day
Man-in-the-middle
A user in the accounting department is not able to access a file on the network accounting folder. What is the likely reason?
The workstation is victim of a denial-of-service attack
The username is not authenticating on the network
The user does not have file level permissions
The administrator has not applied appropriate security patches
A technician has been tasked with limiting the users who can connect to a network printer located centrally within an office environment. Which of the following tools would be the BEST to utilize to achieve this goal?
VPN
ACL
RDP
DLP
What is the process of setting practices and procedures that govern how an organization will respond to a data security breach?
Incident Management
Disaster Recovery Plan
Business Impact Analysis
Group Security Policy Settings
What controls the overall security behavior of a Windows system?
User training
Administrators
Windows Security Policy Settings
Computer Management Console
Which of the following will help to protect an organization from unauthorized access to their network? (Click all that apply)
Multi-factor authentication
Strong passwords
Physical security
What is a software suite that helps protect data from being stolen while the data is moving across the network?
Firewall
Encryption
Port Filtering
DLP
A turnstile is an example of which of the following forms of physical security?
Mantrap
Entry control roster
Biometrics
Cipher lock
Disabling this function prevents malware and other viruses from being loaded automatically off removeable media, such as a USB flash drive.
Timeout
Account lockout
User permissions
AutoRun
__________are tactical documents that specify a process to follow to meet policy requirements.
Procedures
Standards
Security Profile
Security Controls
A comprehensive document that includes all of an organization’s security policies and procedures is called a _________
Security profile
Security Standards
Security Control Document
Security System
A CEO of a company received an email from a bank indicating that it was imperative that the CEO respond to the email by clicking on a link. This link then downloaded malware on to their computer. What is this an example of?
Worm
Whaling
Spyware
Backdoor
Implementing strategies to follow statutory laws regarding the handling of personally identifiable information is an example of what type of security control?
Compliance controls
Administrative controls
Digital security
Physical security
An industry standard that sets rules to protect credit card payment processes?
SOX
HIPA
GDPR
PCI-DSS
A method of maintaining the integrity of data transmitted over a network that ensures the receiver that the data has not been tampered with?
BitLocker
Hashing
VPN
EFS
A hardware token is what type of multifactor authentication?
Something you know
Something you are
Something you have
Something you do
Providing no access to any services on a network is an example of?
Least privilege
ACL
General permissions
Implicit deny
An overarching security principle that provides multiple layers of security in case on layer fails the other can catch the threat.
Defense in depth
Hardening
Backup security
Multi-factor defense
How many subtrees are there in the Windows Registry?
2
4
5
6
Which of the following is an equivalent to Registry used on Windows servers and can manage things such as domains, network accounts, security policies, and more?
SQL
Security policy editor
Active Directory
Windows server 2010
You are wanting to configure your network’s router to only allow certain devices to connect. Which of the following would allow this?
Port forwarding
MAC filtering
NAT
DMZ
Intrusion detection/Intrusion protection devices base their ability to track anomalies based on ____or____ . (Select two)
Attack signatures
Rules
Behavior patterns
Stateful context
A legacy authentication protocol that provides limited accounting capabilities?
TACACS+
Diameter
RADIUS
AAA
Which of the following network security devices acts as an intermediary content filter?
Proxy
Firewall
IDS/IPS
UTM
Which of the following are common threats to digital security? Select all that apply.
Power failure
Malware
Intrusions
Stolen devices
Zero-day attacks
Which of the following is a network-based attack which uses botnets to overwhelm a system?
Phishing
Smishing
DDOS
Man-in-the-middle
Implementing a user name and password along with a pin code and thumb print is an example of ________.
Multi-factor authentication
Single factor authentication
Two factor authentications
SSO
What Regulatory Compliance Policy governs health insurance coverage and protects the privacy of patient records?
SOX
GDPR
HIPAA
PCI DSS
This biometric Authentication device scans blood vessels in the retina portion of the eye and requires the device to be very close to the eye to work accurately?
Retinal Scanner
Iris Scanner
Facial Recognition Device
Fingerprint Scanner
Which of the security methods is not a "Physical Security" method?
Mantraps
Video Surveillance
Domain Policies
Electronic Door Locks
