WorksheetsCSF Practice - Chapter 4 to 7
Total questions: 29
Worksheet time: 1hrs 27mins
Match the terms to their correction explanation. (Chapter 5)
Random string of characters added to two similar passwords
before hashing resulting in the two passwords having a different
hash result.
Salting
It is relatively easy to compute but significantly harder to reverse.
Hashing
Combines a cryptographic hash function with a secret key.
HMAC
There are many hashing algorithms widely used today. Identify two that are most popular. (Chapter 5)
Message Digest 5 or MD5
Secure Hash Algorithm or SHA
AES (Advanced Encryption Standard)
RSA (Rivest-Shamir-Adleman)
Hashing is a tool that ensures data integrity by using a one-way mathematical function to produce a hash value. Identify all properties of a cryptographic hash function. (Chapter 5)
Input can be any length.
Output has a fixed length.
It is one way and is not reversible.
Two different input values will always result in different hash values.
Salting is a type of data integrity control use to make hashing more secure. Describe the situation in which salting is used. When two users have the (a) password. (Chapter 5)
Digital signatures provide the same functionality as handwritten signatures for electronic documents. Describe all the functionalities of a digital signature. (Chapter 5)
To determine if it is edited.
To check authenticity.
To check integrity.
Cannot be repudiated.
Identify the standard used for the construction of digital certificates. (Chapter 5)
(a)
Which one of the three principles of security does a digital certificate provides for the receiver? (Chapter 5)
(a)
Database validation rule helps to ensure the completeness, accuracy and consistency of data. State all criteria used in a validation rule. (Chapter 5)
Size of data.
Format of data.
Consistency of codes.
Range of data.
Check digit for error detection.
Explain the Five Nine? Mean that ____________________. It also means that _________________. (Chapter 6).
systems and services are available 99.999% of the time
both planned and unplanned downtime is less than 5.26 minutes per year.
systems and services are available 100% of the time
both planned and unplanned downtime is more than 5.26 minutes per year.
Identify all the industries or services that that requires five nine. (Chapter 6)
Finance industry
Healthcare facilities
Public safety industry
Retail industry
Food & Beverage Industry
In designing a high availability system, what are the 3 major principles to achieve the goal of uninterrupted access to data and services? (Chapter 6)
Elimination or reduction of singles points of failure.
System resiliency.
Fault tolerance.
Multiple backups.
Identify all measures to improve availability. (Chapter 6)
Asset management
Defense in depth
Redundancy
System Resilience
To improve availability for asset management. Identify the process that requires a user to perform an asset identification to help determine which assets to protect. (Chapter 6)
____ ________
(a)
Identify any 2 phases involved during an incident reponse that an organisation should follow for an event that occurs outside the normal range. (Chapter 6)
In disaster recovery planning, it is critical to keep an organisation functioning when a disaster occur. Identify 2 types of disasters, _______ disasters, _____-______ (Chapter 6)
(a)
Explain the use of logout timers in physical protection on workstations. (Chapter 7)
List 3 types of physical protection for Workstations. (Chapter 7)
Physical lock.
Idle Timeout.
Screen Lock.
Software Updates
Explain the use of Secure Shell (SSH) in managing Remote Access. SSH is a _______ that provides an _______ _________ ________ to a remove device. (Chapter 7)
protocol, encrypted management connection
authorization, decrypted management connection
authentication, decrypted management continuation
accounting, encrypted management continuation
What tool is use for securely transfer file between two remote systems? ______ ____ (SCP) (Chapter 7)
(a)
Describe how the above tool works. SCP include the ____________ element, ensuring _________ and ___________ of the data in transit. (Chapter 7)
authentication, authenticity, confidentiality
Integrity, Authorization, Availability
Non-repudiation, Anonymity, Replication
Identification, Scalability, Accountability
A new company wanted to setup their own IT infrastructure. What device(s) are required for their perimeter defence and how do these device(s) prevent cyberattacks? Device : _______, Function : ___________, Function : _______________________ (Chapter 7)
What are the potential threats when using wireless communications? (Chapter 7)
Identify countermeasures to reduce potential threats such as Sniffing and Man-in-the-middle(MitM) attacks.
____________ and ___________
(a)
Explain how Authentication and Encryption countermeasures reduce potential threats. (Chapter 7)
A security engineer is deployed to harden an external DNS server. Develop a hardening guide for external DNS server. Select all the correct options. (Chapter 7)
Update DNS server.
Prevent version string from revealing information.
Enable logging and analyse logs.
Use Domain Name System Security Extensions.
Identify the most effective way of protecting data from Ransomware. (Chapter 7)
F_______ D___ B______
(a)
-
Modify "Frequent Data Backups" to better the protection from Ransomware.
________ the frequency of ________. (Chapter 7)
Increase, data backups
Decrease, data backups
Increase, data deletions
Decrease, data deletions
Identify the drawbacks of Increase the frequency of data backups. (Chapter 7)
(a)
Identify a secure method for employee to connect back office from remote areas. What does (a) stand for?
