WorksheetsSecurity Fundamentals Chap 1
Total questions: 20
Worksheet time: 7mins
Name
Class
Date
1.
What do you call the scope that hacker can use to break into a system?
a)
attack surface
b)
defence in depth
c)
principle of least privilege
d)
risk mitigation
2.
What is a physical or logical device used to capture keystrokes?
a)
USB flash drive
b)
Keylogger
c)
PDA
d)
Smartphone
3.
What is needed to highly secure a system?
a)
lots of time
b)
system update
c)
more money
d)
disabled administrator account
4.
What is the best way to protect against social engineering?
a)
stronger encryption
b)
stronger authentication
c)
risk mitigation
d)
employee awareness
5.
What is the first line of defence when setting up a network?
a)
physically secure the network
b)
configure authentication
c)
configure encryption
d)
configure an ACL
6.
What is used to provide protection when one line of defence is breached?
a)
attack surface
b)
principle of least privilege
c)
risk mitigation
d)
defence in depth
7.
What method used by a hacker relies on the trusting nature of the person being attacked?
a)
attack surface
b)
social engineering
c)
risk avoidance
d)
principle of least privilege
8.
What technology is not used to implement confidentiality?
a)
auditing
b)
access controls
c)
authentication
d)
encryption
9.
What type of device can be easily lost or stolen or can be used for espionage?
a)
processors
b)
RAM chips
c)
removable devices
d)
servers
10.
Which concept determines what resources users can access after they log on?
a)
authentication
b)
auditing
c)
access control
d)
defence in depth
11.
A spoofed email is a message:
a)
Received from a sender on the blacklist
b)
That has a false sender address
c)
Received from a sender on the whitelist
d)
That will always be detected and blocked by antispam filters
12.
The acronym CIA stands for which of the following?
a)
Confidentiality, integrity, availability
b)
Confidentiality, integrity, access control
c)
Confidentiality, identity, access control
d)
Control, identity, access control
13.
Which is an example of biometric security?
a)
Strong password
b)
Locked room
c)
Fingerprint scan
d)
Smart card
14.
Which is the best way to prevent security compromises through social engineering?
a)
Increased password complexity
b)
User training
c)
Internal email servers
d)
Employee ID badges
15.
One thing you should do to implement security measures to provide max protection for client PC?
a)
Close all ports on the firewall
b)
Ensure that all computers have the most recent updates
c)
Implement a read only domain controller
d)
Create a perimeter network
16.
You set Complex Passwords to Enabled. Min password length set to 8. Which is a valid password?
a)
$%^&^
b)
p1a2s3s4
c)
$$Pwd##!99
d)
dow$$aP
17.
Which of the following is not a response when dealing with a risk?
a)
avoidance
b)
transfer
c)
mitigation
d)
patching
18.
Which of the following makes sure that data is not changed when it not supposed to be?
a)
integrity
b)
availability
c)
accounting
d)
confidentiality
19.
What is used to identify a person before giving access?
a)
authentication
b)
encryption
c)
access control
d)
auditing
20.
What is used to verify that an administrator is not accessing data that he should not be?
a)
authentication
b)
encryption
c)
access control
d)
auditing
100 %
