NEW
Font size
WorksheetsCybersecurity II
Total questions: 40
Worksheet time: 21mins
Security questions should be answered with a fictious answer instead of the accurate answer.
True
False
Virtually anyone could type in a person's username and pretend to be that person.
True
False
Passwords are still considered a strong defense against attackers.
True
False
FACTA grants consumers the right to request one free credit report from each of the three national credit-reporting firms every 12 months.
True
False
The weakness of passwords centers on human memory.
True
False
When creating passwords, the most important principle is that length is more important than complexity.
True
False
Impersonation is a technique used in social engineering.
True
False
What is it called if a user misspells the URL or uses the incorrect domain and is sent to a fake look-alike site?
pharming
phishing
polling
typo squatting
Which security technique requires an authorization by what the user knows and what the user has?
special email account
two-factor authorization
biometrics
social networking
What type of attack continuously enters different passwords against the same account?
man in the middle
brute force
dictionary
hash
What popular online activity involves allowing users to stay connected with friends, family, and peers?
affiliate marketing
affiliate networking
social networking
social marketing
With which type of social engineering attack are users asked to respond to an email or are directed to a website where they are requested to update personal information, such as passwords or credit card numbers?
pharming
typo squatting
phishing
pretexting
The built-in security function of all password managers is known as ____________________?
two-factor authentication
biometrics
vault
random password generator
Using which social engineering principle might an attacker impersonate a CEO of a company?
scarcity
authority
urgency
trust
What law contains rules regarding consumer privacy?
Credit and Transactions Act
Fair and Accurate Credit Transactions Act
Fair Credit Reporting Act
Accurate Transactions Act
In the United States, if a consumer finds a problem on their credit report, they must first send a letter to the creditreporting agency. Under federal law, how many days does the agency have to investigate and respond to the alleged inaccuracy and issue a corrected report?
15
30
45
60
What type of attack is when a small number of common passwords are used to attempt to log in to multiple user accounts?
password cracking
typo squatting
password spraying
social networking
Which of the following is an alternate method instead of passwords for authentication?
biometrics
special email account
anonymous user id
fictious security answer
What type of program lets a user create and store multiple strong passwords in a single user database file that is protected by one strong master password?
password manager
password generator
password fault program
password vault program
What type of attack is a false warning, often contained in an email message claiming to come from the information technology (IT) department?
impersonation
authentication
hoax
revalidation
What is the special algorithm that creates a scrambled password from a user entered password?
modification
brute force
scrambled
hash
The "Consensus" principle of social engineering is exemplified by which of the following examples?
"I'm the CEO calling"
"You know who I am"
"If you don't reset my password, I'll call your supervisor"
"I called last week and your colleague reset my password"
How often does FACTA grant consumers the right to request one free credit report from each of the three national credit-reporting firms?
every 2 months
every 6 months
every 12 months
every 18 months
What is the best approach to establishing strong security with passwords?
Keep passwords short so you can remember them.
Use the same password for many sites.
Keep a written log of your passwords.
Use technology for managing passwords.
What type of attacker is most likely to use information you have posted about yourself on a social networking site?
identity thief
phisher
cracker
hoaxer
Which of the following involves using someone's personal information, such as a Social Security number, to fraudulently establish bank or credit card accounts?
identity borrowing
identity theft
information theft
property theft
The most frequently attacked sector of the market by phishing schemes and attacks is ____________________?
financial
manufacturing
retail
marketing
Technically speaking, the process for creating a password digital representation is based on a hash algorithm, which creates a(n) ____________________.
Username
Password
Digest
Asset
____________________ may involve the use of a PC and smartphone to login to a secure system.
Password
Hoax
Two-Factor Authorization
Authorization
A(n) ____________________ is a false warning, often contained in an email message claiming to come from the IT department.
Hoax
Scam
Vishing
Smishing
One of the best tools to put people at ease for social engineering and obtaining information is ___________________.
Questions
Extortion
Deflection
Humor
A(n) ____________________ is a unique name used for identification.
Password
Digest
Hash
Username
The steps that ensure that the individual is who they claim to be
Authentication
Credential harvesting
Password
Username
A password attack in which every possible combination of letters, numbers, and characters is used to match passwords in a stolen password file
Password cracking
Typo squatting
Brute force attack
Credential harvesting
A password attack that uses a small number of commonly used passwords and then uses the same password when trying to log in to several user accounts
Password spraying
Brute force attack
Identity fraud
Password cracking
A secret combination of letters, numbers, and/or symbols that serves to authenticate a user by what they know
Digest
Security Question
Username
Password
Software designed to find passwords based on digests known as ‘candidates’
Brute force attack
Password cracking
Password spraying
Typo squatting
Once your identity is stolen, thieves can use it to...
Spend all your money
Obtain a driver's license
Get arrested
All of the above
The "s" in https:// stands for
safe
secure
sound
strengthen
