NEW
Font size
WorksheetsSecurity Fundamental
Total questions: 20
Worksheet time: 21mins
If David wishes to digitally sign the message that he is sending Mike, what key would he use to create the digital signature?
David's public key
Mike's public key
David's private key
Mike's private key
David would like to send Mike a message using an asymmetric encryption algorithm. What key should he use to encrypt the message?
David's public key
Mike's public key
Mike's private key
David's private key
Which one of the following certificate formats is closely associated with Windows binary certificate files?
DER
PFX
P7B
PEM
Which one of the following servers is almost always an offline CA in a large PKI deployment?
Root CA
RA
Intermediate CA
Internal CA
Davi recently obtained a wildcard certificate for *.mydomain.com. Which one of the following domains would not be covered by this certificate?
Elizabeth is choosing a symmetric encryption algorithm for use in her organization. She would like to choose the strongest algorithm from these choices. What algorithm should she choose?
RSA
DES
3DES
AES
What type of cipher operates on one character of text at a time?
Stream cipher
Bit cipher
Block cipher
Balanced cipher
Which one of the following statements about cryptographic keys is incorrect?
Asymmetric algorithms generally use longer keys than symmetric algorithms
Digital certificates are designed to share public keys.
Longer keys are better than shorter keys when the same algorithm is used.
All cryptographic keys should be kept secret
Shahla recently discovered an attack where the attacker managed to force a network user to use weak encryption and was then able to decrypt that content. What term best describes this attack?
Downgrade
Homomorphic encryption
Collision
Birthday attack
A person's name, age, location, or job title are all examples of what?
Biometric factors
Attributes
Identity factors
Account permissions
Nicole accidentally types www.smazon.com into her browser and discovers that she is directed to a different site loaded with ads and pop-ups. Which of the following is the most accurate description of the attack she has experienced?
DNS hijacking
Typosquatting
Redirection
Pharming
Jack's organization wants to prevent typosquatting. What option should he select to address this issue?
copyright the domain name
Trademark the domain name
Purchase the most common typos for his organization's domain
Disable typo resolution for the domain
Melissa receives a call and the caller informs her a senior manager in her organization needs her to buy gift cards for an event that starts in an hour. The caller says that the senior leader forgot to get the cards, and that the event is critical to her organization. Melissa buys the cards and sends them to the Gmail address the caller says that the senior leader needs them sent to. What type of attack has Melissa fallen for?
Phishing
Pretexting
Smishing
Phishing
Ben wants to determine if brute-force password attacks are being used against his company. What log information is least likely to be useful when working to detect brute-force attacks?
The geographic location of system being logged into
The password that was used for each attempt
Source IP address or hostname
Failed login logs
One of the staff at Susan's organization has reported that a critical vendor has contacted them about an unpaid invoice. After Susan investigates, she discovers that the invoice was sent from an email account that was not typically a contact and that the invoice requested payment to a PayPal account. What type of social engineering attack has Susan most likely discovered?
Smishing
Pharming
Whaling
Business email compromise
Randy believes that a system that he is responsible for was infected after a user picked up a USB drive and plugged it in. The user claims that they only opened one file on the drive to see who might own it. What type of malware is most likely involved?
A virus
A trojan
A spyware too
A worm
Hui's organization recently purchased new Windows computers from an office supply store. The systems have a number of unwanted programs on them that load at startup that were installed by the manufacturer. What type of software is this?
Spyware
Viruses
Bloatware
Trojans
Jason's security team reports that a recent WordPress vulnerability seems to have been exploited by malware and that their organization's entire WordPress service cluster has been infected. What type of malware is most likely involved if a vulnerability in the software was exploited over the network?
A logic bomb
A worm
Virus
A Trojan
Selah wants to ensure that malware is completely removed from a system. What should she do to ensure this?
Run multiple antimalware tools and use them to remove all detections
Use the delete setting in her antimalware software rather than the quarantine settin
There is no way to ensure the system is safe and it should be destroyed.
Wipe the drive and reinstall from known good media
Matt uploads a malware sample to a third-party malware scanning site that uses multiple antimalware and antivirus engines to scan the sample. He receives multiple different answers for what the malware package is. What has occurred?
Different vendors use different names for malware packages
The package contains more than one piece of malware
The malware is polymorphic and changed while being tested
The service is misconfigured.
