WorksheetsCyber Midterm Questions
Total questions: 87
Worksheet time: 44mins
Name
Class
Date
1.
Which two of the following step of hacking are most likely to involve the use of social engineering? (pick 2)
a)
Recon / footprinting
b)
Gaining Access
c)
Scanning / Probing
d)
Escalating Privileges
e)
Exploiting
2.
What is the goal of social engineering?
a)
To make people behave better
b)
To help people make more friends
c)
To get an authorized user to give information to an unauthorized person
d)
To have an unauthorized user to determine a user's password using brute force
3.
A single on/off or 0/1 in a computer's transistor is known as a
a)
bit
b)
byte
c)
nibble
d)
hex
4.
Scrambling data so that it is unreadable to anyone except those who know the trick to decoding it is...
a)
Cybersecurity
b)
Coding
c)
Cryptography
d)
Hieroglyphics
5.
The data that has been encrypted is called...
a)
Algorithm
b)
Ciphertext
c)
Plaintext
d)
Code
6.
This is a method of encryption in when the order of the letters is changed. Scytale cipher, in which a ribbon is wrapped around a cylinder is an example.
a)
Transposition
b)
Substitution
c)
Hieroglyphics
d)
Graphics
7.
A historic cipher in which the alphabet is shifted left or right a given number of spaces.
a)
Julius Cipher
b)
Caesar Cipher
c)
Vigenere Cipher
d)
Enigma Cipher
8.
A substitution cipher based on multiple alphabets and a system to switch between the them using a password. A table or chart is often used.
a)
Julius Cipher
b)
Caesar Cipher
c)
Vigenere Cipher
d)
Enigma Cipher
9.
This is a technique used to solve substitution ciphers based on commonly used letters and words.
a)
frequency analysis
b)
guess and check
c)
polyalphabetic analysis
d)
encryption analysis
10.
Using the simplest Caesar cipher, decode the following ciphertext. DZCFS
a)
STOCK
b)
BRAIN
c)
CYBER
d)
TESLA
11.
One-time Pad uses a pre-shared key only once which makes this encryption method..
a)
Impractical
b)
Unbreakable
c)
Both A and B
d)
None of the above
12.
The practice of hiding messages in an image or text is called...
a)
Bibliography
b)
Photography
c)
Chirography
d)
Steganography
13.
The information about a file that is embedded in the file, such as date, location, size, etc
a)
metadata
b)
gigadata
c)
imagedata
d)
versiondata
14.
Which of the following is NOT a tool for steganography?
a)
Exif Viewer Tool
b)
Vigenere Table
c)
Hex Editor
d)
Photo Editing Software
15.
Which of the following is not a measure of the number of bytes in a computer?
a)
Kilobyte
b)
Megabyte
c)
Zilobyte
d)
Terabyte
16.
The system which represents alpha-numeric data in a computers, such as A = 65 = 01000001 is called:
a)
Translator
b)
ASCII
c)
AARP
d)
NROTC
17.
Which of the following is the base 16 number system?
a)
Binary
b)
Decimal
c)
Octal
d)
Hexadecimal
18.
Which of the following is NOT a hexadecimal number?
a)
0
b)
9A
c)
G79
d)
E4B
19.
Convert the binary number 01010011 to decimal
(a)
20.
Convert the binary number 00100100 to decimal
(a)
21.
Convert the decimal number 140 to binary.
(a)
22.
Convert the hexadecimal number A2 to decimal
(a)
23.
Convert the decimal number 42 to hexadecimal
(a)
24.
Representing a range of characters by some kind of conversion system, like ASCII, is called:
a)
Encrochment
b)
Encoding
c)
Encryption
d)
Translation
25.
Scrambling data so that it is unreadable to anyone except those who know the trick to decoding it is...
a)
Cybersecurity
b)
Coding
c)
Cryptography
d)
Hieroglyphics
26.
The data that has been encrypted is called...
a)
Algorithm
b)
Ciphertext
c)
Plaintext
d)
Code
27.
This is a method of encryption in when the order of the letters is changed. Scytale cipher, in which a ribbon is wrapped around a cylinder is an example.
a)
Transposition
b)
Substitution
c)
Hieroglyphics
d)
Graphics
28.
A historic cipher in which the alphabet is shifted left or right a given number of spaces.
a)
Julius Cipher
b)
Caesar Cipher
c)
Vigenere Cipher
d)
Enigma Cipher
29.
A substitution cipher based on multiple alphabets and a system to switch between the them using a password. A table or chart is often used.
a)
Julius Cipher
b)
Caesar Cipher
c)
Vigenere Cipher
d)
Enigma Cipher
30.
This is a technique used to solve substitution ciphers based on commonly used letters and words.
a)
frequency analysis
b)
guess and check
c)
polyalphabetic analysis
d)
encryption analysis
31.
Using the simplest Caesar cipher, decode the following ciphertext. DZCFS
a)
STOCK
b)
BRAIN
c)
CYBER
d)
TESLA
32.
One-time Pad uses a pre-shared key only once which makes this encryption method..
a)
Impractical
b)
Unbreakable
c)
Both A and B
d)
None of the above
33.
The practice of hiding messages in an image or text is called...
a)
Bibliography
b)
Photography
c)
Chirography
d)
Steganography
34.
The information about a file that is embedded in the file, such as date, location, size, etc
a)
metadata
b)
gigadata
c)
imagedata
d)
versiondata
35.
Which of the following is NOT a tool for steganography?
a)
Exif Viewer Tool
b)
Vigenere Table
c)
Hex Editor
d)
Photo Editing Software
36.
What is the main method used in social engineering?
a)
Brute Force
b)
Deception
c)
Complex Algorithms
d)
Ransom attacks
37.
Which is NOT a reason that Social Engineering is so successful?
a)
Humans want to be helpful
b)
Humans make sloppy mistakes
c)
Humans want to avoid confrontation
d)
Humans are good at problem solving
38.
This is considered the single biggest threat in the digital world and was used in 67% of cyber attacks last year?
a)
Dumpster Diving
b)
Piggybacking
c)
Shoulder Surfing
d)
Phishing
39.
Which of the following is NOT an indication that the email might be a phishing email?
a)
Misspellings
b)
Email was sent in the middle of the night
c)
Sender and email address don't match
d)
URL doesn't match the text
40.
Which of the following is a phishing attack that targets a specific individual or organization?
a)
Smishing
b)
Vishing
c)
Spear-phishing
d)
Wishing
41.
In order for data to be considered OSINT, it must satisfy which of the two conditions below? (Pick two)
a)
Free
b)
Recent
c)
Accurate
d)
Public
42.
Which of the following would NOT be considered OSINT?
a)
Google Maps
b)
YouTube
c)
Twitter
d)
Google Classroom
43.
Which of the following is NOT part of the steps in mitigating human risk when pertaining to cybersecurity?
a)
Developing Procedures
b)
User Training
c)
Developing Policies
d)
Faster Computers
44.
Which of the following is NOT a type of phishing?
a)
Whaling
b)
Spear-fishing
c)
Trout farming
d)
Smishing
e)
Vishing
45.
Definition: To minimize the risk; lessening the force or intensity of something unpleasant.
a)
Mitigate
b)
Exploit
c)
Application
d)
Vulnerablity
46.
A security flaw, glitch, or weakness found in software code that could be exploited by an attacker is called a
a)
Feature
b)
Patch
c)
Vulnerability
d)
Service
47.
The most important step to hardening a system is...
a)
Create Backups
b)
Turn on Firewall
c)
Remove guest accounts
d)
Update OS and applications
48.
A database of known vulnerabilities in all types of digital products.
a)
Google V-Data
b)
CIA
c)
CVE
d)
MI6
49.
What does UAC stand for in a computer system?
a)
Unauthorized Access Containment
b)
Universal Abstract Containment
c)
User Account Control
d)
Useful Action Contract
50.
Which of the following is an example of creating user account policies.
a)
Update OS and applications
b)
Setting a minimum number of characters in a password
c)
Disabling Unnecessary Services
d)
Covering the webcam
51.
A tweak to the OS code that will fix an issue in how it runs or compatibility with devices and applications.
a)
Patch
b)
Vulnerability
c)
Hotspot
d)
Service
52.
The best practice is to provide each user with
the minimum system access needed to perform their necessary tasks.
a)
Limit Usage Policy
b)
No Guest Account Policy (NGAP)
c)
Least Privilege Principle
d)
Turn off your computer when not using
53.
The 3-2-1 policy is in reference to ...
a)
Firewalls
b)
Data backup
c)
System log in
d)
Admin users
54.
Vulnerabilities can be found in technology products including operating systems, software applications and hardware devices.
a)
True
b)
False
55.
Updates are the least important thing you can do to secure a system.
a)
True
b)
False
56.
You can help to secure your system by removing unneeded or unnecessary services.
a)
True
b)
False
57.
Best practice is to strictly limit how many users are in the Administrators Group.
a)
True
b)
False
58.
For back ups the 3‐2‐1 rule is the best practice
a)
True
b)
False
59.
IOT attacks usually do not target a specific person.
a)
True
b)
False
60.
You should never change the default username for the admin account.
a)
True
b)
False
61.
Administrator privileges on a system provide the user with _________ .
a)
Full access - on the device
b)
Patial access - on the device
c)
Access to just admistrator tasks
62.
The best way to survive a Ransomware attack is _______ .
a)
having at least 3 copies of data stored on multiple devices, with one being the cloud.
b)
to have an onsite backup
c)
to purchase unencrypting software
63.
Actions we should take to secure devices like computers or smartphones are referred to as _________________________.
a)
Best Practices
b)
System Rules
c)
System Polices
d)
Perfect Policies
64.
You are visiting a website and accidentally click on a link to accept free software. Which tool will keep the software from installing on your PC?
a)
UAC (User Account Control)
b)
Windows Defender
c)
AppLocker
d)
Avast Antivirus
65.
Which of the following is the MOST effective way for an administrator to determine what security holes reside on a network?
a)
Perform a vulnerability scan
b)
Run a port scan
c)
Install and monitor an IDS (Intrusion Detection System)
d)
Run a sniffer
66.
Which of the following is a breach of Integrity in the CIA Triad?
a)
A DDos Attack that shuts down a website
b)
Your co-worker reading your emails without your permission
c)
A student getting a teacher password and changing the grades for the last quiz.
d)
A hacker convincing an elderly person to send money to get a friend out of jail.
67.
In the CIA Triad - the "A" stands for:
a)
Authority
b)
Authentication
c)
Availablity
d)
Accountability
68.
In the CIA Triad - the "C" stands for:
a)
Continuation
b)
Congressional
c)
Confidentiality
d)
Communication
69.
In the CIA Triad - the "I" stands for:
a)
Integrity
b)
Intelligence
c)
Iterative
d)
Incognito
70.
Which of the following is NOT part of the model of Computer Security where Protection = ___+___+___
a)
Dectection
b)
Prevention
c)
Prosecution
d)
Response
71.
The code of ethics agreement applies: (select all that are true)
a)
On school grounds
b)
Off school grounds
c)
Until graduation from HS
d)
After graduation from HS
e)
Only while enrolled in cybersecurity class in HS
72.
Which of the following is NOT in the ethics agreement you signed?
a)
I will not alter program or data or any files belonging to another person without the express consent of that person.
b)
I will not gain access to any computer system that I am not authorized, by the administration of the system, to access.
c)
I will not intercept or otherwise monitor any network communications not explicitly intended for me.
d)
I will not execute any digital hoax or prank, no matter how harmless the effects of the action.
e)
I will not use any computer system to purchase products that are harmful to my developmental or emotional growth.
73.
__________ is proving who you are so trust can be established between you and another party.
a)
Authority
b)
Access
c)
Authentication
d)
Accounting
74.
What is the MOST important thing to help ensure a secure password?
a)
make it long
b)
use symbols
c)
use uppercase
d)
make it hard to remember
75.
What are two reasons that a passphrase is recommended instead of a password?
a)
It is easier for the hacker to break since it won't have symbols
b)
It is easier for the user to remember
c)
It is harder to break since it doesn't have symbols
d)
It is harder to break since it is longer than most passwords
e)
The computer can process letters faster than symbols
76.
A password is an example of ___________ to prove who you are.
a)
Something you know
b)
Something you have
c)
Something you are
d)
None of the above
77.
A school ID is an example of ___________ to prove who you are.
a)
Something you know
b)
Something you have
c)
Something you are
d)
None of the above
78.
Which of the following cannot be used for biometric authentication?
a)
Fingerprint
b)
Retina Scan
c)
Typing Speed
d)
Heart Rate
e)
All of the above can be used
79.
What is the biggest security weakness in any organization?
a)
Passwords not long enough
b)
Not using strong enough filters
c)
Human factors
d)
Not using two factor authentication
80.
A one-way algorithm used to encrypt a password for secure storage or transfer is called a:
a)
Single SIgn-On
b)
Hash
c)
SAM registry
d)
Encoding
81.
Which of the following it NOT true about a rainbow table?
a)
It is a file of pre-computed hash values
b)
It is used by hackers to find passwords based on a given hash value
c)
There needs to be a different rainbow table for each hash algorithm
d)
There is no known way to prevent hackers from effectively using rainbow tables
82.
What is a "salt"?
a)
A technique that helps to convert a hash back to the original password
b)
A way to corrupt files so that they can not be used again
c)
A method used to create a rainbow table
d)
An addition to a password to ensure that hashing two of the same passwords will result in different hashes.
83.
What is used to authenticate a document or website by a 3rd party to ensure it is coming from the intended source?
a)
Proximity Reader
b)
Certificate
c)
License
d)
Identity Card
84.
Automating the process of trying all possible combinations of characters to determine a password is called:
a)
Guess and check
b)
Stealing
c)
Brute Force
d)
Hackathon
85.
Testing a weak password against a large number of accounts is called:
a)
Brute Force
b)
Wildfire
c)
Dictionary Attack
d)
Password spraying
86.
Attacking one account using a database of words people are likely to use in passwords is called:
a)
Brute Force
b)
Wildfire
c)
Dictionary Attack
d)
Password Spraying
87.
When a database is exposed or stolen, it is said to be a :
a)
Hit
b)
Heist
c)
Breach
d)
Takedown
100 %
