Font size
WorksheetsUnit 8 Security
Total questions: 131
Worksheet time: 1hrs 6mins
What does CIA stand for?
Confidentiality, Integrity, and Access
Confidentiality, Integrity, and Availability
Confidentiality, Integration, and Access
Confidentiality, Integration, and Availability
What is confidentiality?
Ensuring identity
Integrity
Protection of information
Sharing of information
What are the five confidentiality concerns?
Snooping, Social Engineering, Dumpster Diving, Tapping, and Impersonation
Snooping, Eavesdropping, Dumpster Diving, Wiretapping, and Social Engineering
Snooping, Eavesdropping, Dumpster Diving, Wiretapping, and Socializing
Snooping, Eavesdropping, Recycle Swimming, Wiretapping, and Socializing
What should you do if you find an email to be suspicious?
Validate the identity of the sender
Troll the sender
Sweep the leg
Call the internet police
What does PII stand for?
Personally Identifying Information
Publicly Identifying Information
Personal Incognito Information
Private Identity Information
What is the method called where one searches trash for information?
Wiretapping
Dumpster Diving
Recycle Swimming
Dumpster Swimming
What is the method called where someone manipulates a person in order to gain information?
Kayaking
Social Engineering
Dumpster Diving
Wiretapping
What is Wiretapping?
Searching trash for information
Putting a listener on the phone line so as to listen to the conversation
Listening in on someone else's conversation
Searching for unauthorized information
Which of the following is not an example of PII?
Social Security Number
Home Address
A Company's Financial Records
Driver's License Number
What is one method of protecting information?
Dumpster Diving
Fishing
Eavesdropping
File Encryption
What does the CIA triad stand for?
Confidentiality, Integrity, and Access
Confidentiality, Integrity, and Availability
Confidentiality, Integration, and Access
Confidentiality, Integration, and Availability
What is availability?
The presence of information and systems that are always ready to be used by authorized persons
The presence of information and systems that are always ready to be used
The protection of information
What are the five availability concerns?
Denial of Service, Power Outage, Hardware Failure, DDOS, and Service Outage
Denial of Service, Power Outage, Hardware Failure, Destruction, and Service Outage
DOS, Power Outage, Hardware Failure, DDOS, and Service Outage
DOS, Power Outage, Hardware Failure, Destruction, and Service Disruption
Which of the following is a protection of availability?
Antivirus
Router
Switch
Network Packet Creation
How is DOS and DDOS different?
DDOS is caused by multiple machines
DOS is caused by multiple machines
DOS is caused by robots
DDOS is caused by robots
What is the concern called where system(s) providing power are shut down?
Power Down
Power Outage
Service Outage
Service Down
What can happen when there is lack of availability?
Data Loss/Corruption
Business Failure
Physical Harm
All of the above
None of the above
What is the difference between backup and redundancy?
There is no difference
Backup is the replication of data while redundancy is when data is stored across multiple storage units
Listening in on someone elses conversation
Redundancy is the replication of data while backup is when data is stored across multiple storage units
What is one way to protect against Denial of Service attacks?
Watch the network traffic
Phishing
Identify network irregularities
Anti-firewall
What is Integrity?
Maintenance of data so as for it to remain constant unless authorized changes are made
Maintenance of data so as for it to change constantly unless authorized changes are made
Maintenance of data so as for it to remain constant unless unauthorized changes are made
What are the four Integrity concerns?
Replay Attack, Adversary-in-the-middle Attack, Impersonation, and Unauthorized Information Alteration
Replay Attack, Impersonation, Authorized Information Alteration, and Adversary-in-the-middle Attack
Replay Attack, Adversary Attack, Impersonation, and Unauthorized Information Alteration
Replay Attack, Impersonation, Adversary Attack, and Authorized Information Alteration
What is the difference between an Adversary-in-the-middle Attack and a Replay Attack?
Replay Attack is a type of Adversary-in-the-middle Attack. It steals and sells information transmitted.
Replay Attack is a type of Adversary-in-the-middle Attack. It can only delay information transmitted.
Replay Attack is a type of Adversary-in-the-middle Attack. It repeats or delays information transmitted.
Replay Attack is a type of Adversary-in-the-middle Attack. It can only repeat information transmitted.
How can you limit unauthorized information alteration?
Adversary-in-the-middle
Audit Log
Social Engineering
SSL/TLS
What is one example of impersonation?
Dress as a clown for a job as a party clown
Login using a friends account and hack another computer
Dress up for graduation
Login using your own account and hack another computer
How do you prevent Adversary-in-the-middle Attacks?
Use devices that have certification-based authentication
Use devices that have a certificate of authenticity
Use any device
Use devices that have a certificate award of honor
How do you prevent Replay Attacks?
Use a website that has www
Use a website that has TLS
Use a website that has SSL
Use a website that has TLS or SSL
What does TLS stand for?
Transport Layer Socket
Transport Lock Socket
Transfer Layer Security
Transport Layer Security
What sort of information should keep its integrity?
Locker Numbers
Phone Numbers
Nicknames
Social Security Numbers
A ______ restricts data from entering a system and/or leaving a system.
Anti-virus program
Firewall
Anti-malware program
Cryptosystem
Which of the following is the most secure password?
123456
password
starwarsyoda
5T+lee@aC$4
When an exploit is found, what is used to secure it?
Patches
Anti-virus
Firewalle
Drivers
What does OEM stand for?
Organically Engineered Machine
Original Equipment Manufacturer
Other Equipment Manual
Organic Equivalent Machine
As long as a file doesn't appear malicious, you should keep it if you are not using it.
True
False
Default passwords are considered safe and do not need to be changed.
True
False
Which of the following helps secure a device when browsing the internet?
Firewalls
Never clicking on untrusted links
Antivirus software
All of the above
When using the internet, what should be used to help keep your privacy?
A. HTTP
B. HTTPS
C. Both a and b
D. Neither a or b
When sharing information, you should always ________?
A. Limit what is shared
B. Not share PII
C. Both a and b
D. Neither a or b
When emailing, what should you be aware of?
A. Phishing
B. Fishing
C. HTTPS and HTTP
D. VPN
What is phishing?
A. The sending of emails that contain malicious links/attachments or ask for information/money
B. The sending of emails that contain malicious data
C. Fishing
D. Vishing
What is the main concern for business software?
A. Profits Information
B. Customer and Employee Personally Identifying Information
C. Blueprints of the factory
D. Security camera footage
Which of the following is a way to protect your privacy while using an instant messaging application?
A. Never share PII
B. Communicate only with people you know and trust
C. Encrypt all messages that are being sent
D. All of the above
What is the difference between a black and white list?
The color
A black list is allowed websites while a white list is blocked websites
A black list is blocked websites while a white list is allowed websites
There is no difference between a black list and a white list
What does IDS stand for?
Identifying Data Standards
Intrusion Detection System
Identity Data Standards
Intrusion Data System
What is one method that does not ensure privacy for Desktop Software?
IDS
Black and White Lists
Social Engineering
Lock computer screen when not in use
Confidential information can be broken into all of the following categories EXCEPT...?
Personal information
Customer information
Company public information
Company confidential information
______ information includes phone numbers, social security numbers, and photos.
Personal
Customer
Company public
Company confidential
______ information is all the data about any people that have (or are) customers with an organization.
Personal
Customer
Company public
Company confidential
______ information is how a company does their business and all the data that goes along with it.
Personal
Customer
Company public
Company confidential
How should passwords be stored?
As hashes
In the shadow directory
Encrypted
On a remote server
A social security number would be considered _________.
Personal Information
Company Confidential Information
Company Private Information
None of the above
A company's operations would be considered _________.
Customer Information
Company Confidential Information
Company Private Information
Personal Information
Which of the following is NOT an AAA protocol?
RADIUS
Diameter
TACACS
B-AAA
Which of the following servers communicates via radio network controllers?
AN-AAA
TACACS
B-AAA
H-AAA
Which of the following is NOT one of the "A"s of AAA?
Authentication
Authorization
Assymetry
Accounting
What does TACACS stand for?
Technical Authorization Controller and Control System
Terminal Access Controller Access-Control System
Triad Authority Collective and Continuous Server
Trick question, it's named after Daniel Tacac
What is the purpose of Authorization?
Who can access the network?
What all can a person access on the network?
What all did the person access while on the network?
None of the above
What is the purpose of Authentication?
Who can access the network?
What all can a person access on the network?
What all did the person access while on the network?
None of the above
What is the purpose of Accounting?
Who can access the network?
What all can a person access on the network?
What all did the person access while on the network?
None of the above
What is authentication?
Any method a computer uses to determine who or what can access it
Any method a computer uses to determine what a verified user can do
The record-keeping and tracking of user activities on a computer network
None of the above
Which of the following is an example of a biometric reading?
Password
Iris scan
PIN
SMS token
What does PIN stand for?
Password Integrated Network
Private Identity Network
Personal Identification Number
Public Integration Network
Which device will an SMS token be sent to/stored on?
Smart card
Cell phone
USB flash drive
Fingerprint
Which of the following can be used to find a user's location?
IP address
MAC address
Serial Number
All of the above
Which of the following is an example of using an SSO?
Google account
Microsoft account
Adobe account
All of the above
What is the benefit of using a SSO?
It is more secure since it is a form of two factor authentication
It allows multiple users to access the same account
It provides unlimited access to all network resources
It eliminates the need for passwords
Which of the following is not an example of a factor?
Location
Password
PIN
A web browser's background
Which of the following is an example of a security question?
What is the name of your first pet?
What is the name of your elementary school?
What is your mother's maiden name?
All of the above
What is authentication?
Any method a computer uses to determine who or what can access it
Any method a computer uses to determine what a verified user can do
The record-keeping and tracking of user activities on a computer network
None of the above
Which of the following is an example of a biometric reading?
Password
Iris scan
PIN
SMS token
What does PIN stand for?
Password Integrated Network
Private Identity Network
Personal Identification Number
Public Integration Network
Which device will an SMS token be sent to/stored on?
Smart card
Cell phone
USB flash drive
Fingerprint
Which of the following can be used to find a user's location?
IP address
MAC address
Serial Number
All of the above
Which of the following is an example of using an SSO?
Google account
Microsoft account
Adobe account
All of the above
What is the benefit of using a SSO?
It is more secure since it is a form of two factor authentication
It allows multiple users to access the same account
It provides unlimited access to all network resources
It eliminates the need for passwords
Which of the following is not an example of a factor?
Location
Password
PIN
A web browser's background
Which of the following is an example of a security question?
What is the name of your first pet?
What is the name of your elementary school?
What is your mother's maiden name?
All of the above
What is authorization?
Any method a computer uses to determine who or what can access it
Any method a computer uses to determine what a verified user can do
The record-keeping and tracking of user activities on a computer network
None of the above
What is policy enforcement?
Determining what authorized rights are for users
Determining what applications can run at the same time
Ensuring that users only gain access to authorized rights
Removing unauthorized files from a system
What is policy definition?
Determining what authorized rights are for users
Determining what applications can run at the same time
Ensuring that users only gain access to authorized rights
Removing unauthorized files from a system
Which type of user has the highest/most privileges?
User
Privileged User
Executive User
Master User
What does MAC stand for?
Massively Awesome Computer
Mandatory Access Control
Mechanism Accessory Console
Migration Activity Console
What does DAC stand for?
Direct Access Control
Discretionary Access Control
Digital Accessory Console
Decryption Activity Console
As the owner of a spreadsheet, you can determine who in your environment has read only access and who has read/write access, what is this known as?
Access Control
User Management
Permission Setting
Authorization
What is the correct answer for AAA Authorization?
MAC
RBAC
DAC
TAC
What is non-repudiation?
Log files can't repeat, unless they are the same log file
The owner of a private key cannot deny having sent a digital signature
Tracking cannot be used to verify the user of a system
Repeated computations provide unique log files
What can be used to guarantee non-deniability?
Biometrics
Receipt
Physical signature
All of the above
CIA in Information Security stands for -
Confidentiality, Integration and Availability
Continuity, Integration and Availability
Continuity, Integrity and Accessibility
Confidentiality, Integrity and Availability
Which of the following is a key component of ensuring data integrity?
Authorization
Authentication
Hashing
Encryption
What is the primary purpose of a digital signature?
To encrypt data
To verify the identity of the sender
To compress data
To provide a backup
Which of the following best describes the concept of availability in information security?
Ensuring data is accurate and reliable
Protecting data from unauthorized access
Verifying the identity of users accessing the system
Ensuring data is accessible to authorized users when needed
Which of the following is NOT true regarding strong passwords?
Contains a minimum of 4 characters
Contains symbols
Contains numbers
Contains upper and lower case letters
Commonly used passwords are stored in what is commonly known as a ______.
Library
Dictionary
Encyclopedia
Collection
Which of the following is part of the password reset process?
Ask security questions
Send a token via side-channel
Allow the user to change the password
All of the above
Which of the following is a password best practice?
Longer passwords
Password expirations
Use Password Managers
All of the above
Which of the following is a password best practice?
Do not use a password manager
Never reuse passwords
Keep the passwords simple and not complex
Never have a password expiration date
Which of the following would be considered the most secure password?
G@nd0lf
G@nd0lf&L0tR!7
GandolfTheGrey
GaNdOlFtHeWiZaRd
Why should a user not use the same password across multiple websites?
In case a website is compromised and that password is captured
True
False
What does the word kryptos mean?
A secret
To study
Disguise
To teach
What does the word graphein mean?
A secret
To study
Disguise
To teach
What does encrypt mean?
Hide in plain sight
Convert into a code
Revert a code to the original
Recover file from deletion
What does decrypt mean?
Hide in plain sight
Convert into a code
Revert a code to the original
Recover file from deletion
What is the message to be sent which has not been encrypted?
Cleartext
Ciphertext
Plaintext
Cybertext
What is data that is physically stored in a digital form such as databases, spreadsheets, archives, or external storage drives?
Data in transit
Data at rest
Data in motion
Data in use
Which of the following is NOT a way to secure sensitive data?
AES
RSA
VGA
All of the above
At what level is encryption for data at rest done?
The whole disk
The database
Individual files/folders
All of the above
What is the term used to describe data that is in transit through networks?
Data in transit
Data in motion
Data in flight
All of the above
What is private data in transit?
Data sent via email
Data sent within a private network
Data sent via SMS
Data transferred from one computer to another via USB
What does TLS stand for?
Technical Logistics Service
Transport Layer Security
Technology Level Security
Transferral Level Security
Which encryption extension is used for email?
HTTPS
HTTP
STARTTLS
AES
What is a contingency plan?
A plan devised for an outcome other than the one stipulated in the usual plan
A plan to improve system performance
A plan to increase company profits
A plan to expand business operations
What are some situations that warrant a contingency plan?
Hard drive failure, Power loss, Physical facility damage, Malicious attack
System upgrade, Software installation, Employee training, Marketing campaign
Product launch, Customer feedback, Market research, Sales meeting
Team building, Office renovation, Holiday planning, Budget review
What is fault tolerance?
The ability of a system to continue to operate uninterrupted when one or more of its components fail
The ability of a system to increase speed under heavy load
The ability of a system to reduce costs during operation
The ability of a system to expand storage capacity
How do fault tolerance systems work?
They use backup components that automatically activate when a component fails
They increase the speed of existing components
They reduce the number of components needed
They rely on manual intervention to fix issues
What is replication?
Running multiple versions of identical systems
Creating a backup of data
Developing new software
Deleting old files
Give an example of replication.
Server having an identical server running in parallel
Installing a new operating system
Updating software to the latest version
Deleting duplicate files
What is redundancy?
The inclusion of extra hardware in case of failure which does not run in parallel to the original hardware
Running multiple versions of identical systems
Creating a backup of data
Developing new software
What are redundancy and replication when defined within the context of nodes?
Redundancy is the duplication of nodes in the case of failure while replication is synchronizing the state between redundant nodes
Redundancy is creating a backup while replication is deleting old files
Redundancy is updating software while replication is installing new hardware
Redundancy is developing new software while replication is running multiple systems
What is Carbonite?
An online backup tool
A chemical element
A chemical compound composed of Carbon and Graphite
An internal computing component
A(n) ______ is the state of a system at a particular point in time.
Snapshot
Image
Photograph
Recording
A ______ is computer software, firmware, or hardware that creates and runs virtual machines.
Supervisor
Hypervisor
Firewall
FireWire
What is responsible for identifying when a file is ready for archiving?
Archive bit
File readiness
Time stamp
Clearby
A ______ is a place that a company can temporarily relocate to following a security breach or natural disaster.
Contingency area
Disaster recovery site
Temp storage
None of the above
A ______ disaster recovery site is simply an empty building.
Hot
Warm
Cold
Tepid
Which of the following is NOT part of the disaster recovery process?
Data restoration
Prioritization
Restoring process
Snapshot
Which of the following is NOT part of the disaster recovery process?
Data restoration
Prioritization
Restoring process
Snapshot
The most critical systems need to be restored first.
True
False
The most critical systems need to be restored first.
True
False
______ is deciding what needs to be recovered first.
Data restoration
Prioritization
Restoring Process
None of the above
______ is deciding what needs to be recovered first.
Data restoration
Prioritization
Restoring Process
None of the above
______ is the steps to get everything back to running smoothly.
Data restoration
Prioritization
Restoring Process
None of the above
______ is the steps to get everything back to running smoothly.
Data restoration
Prioritization
Restoring Process
None of the above
