Font size
WorksheetsIntroduction to Cybersecurity Final Exam Units 1-8
Total questions: 85
Worksheet time: 43mins
Vulnerabilities can be found in technology products including operating systems, software applications and hardware devices.
False
True
Anyone can access the Common Vulnerabilities and Exposures (CVE)?
False
True
Should you install updates?
Yes
No
The data that has been encrypted is called...
Algorithm
Code
Plaintext
Ciphertext
In the CIA Triad - the "C" stands for:
Confidentiality
Congressional
Continuation
Communication
A one-way algorithm used to encrypt a password for secure storage or transfer.
SAM registry
Encoding
Hash
Single Sign-On
Which of the following is a phishing attack that targets a specific individual or organization?
Smishing
Wishing
Vishing
Spear-phishing
In Windows you use the command edit to create an empty file. What is the equivalent command in Linux?
touch
edit
cp
new
How many bits are there in a byte?
4
8
6
2
When a database is exposed or stolen, it is said to be a
Heist
Breach
Takedown
Hit
What is used to authenticate a document or website by a 3rd party to ensure it is coming from the intended source?
Proximity Reader
Certificate
License
Identity Card
The Windows operating system is an example of
Specialized Operating System
Linux
Graphical User Interface
Command Line
The single most important thing you can do to secure a system is:
install antivirus
remove all services
install updates
remove all users
A single on/off or 0/1 in a computer's transistor is known as a
hex
nibble
byte
bit
Which of the following is the base 16 number system?
Hexadecimal
Binary
Decimal
Octal
Which of the following would NOT be considered OSINT?
YouTube
Google Maps
Google Classroom
This is considered the single biggest threat in the digital world and was used in 67% of cyber attacks last year?
Dumpster Diving
Piggybacking
Shoulder Surfing
Phishing
A program that blocks access to files or use of the device until a ransom is paid.
Logic Bomb
Ransomware
Rootkit
Spyware
What is the goal of social engineering?
To make people behave better
To help people make more friends
To have an unauthorized user to determine a user's password using brute force
To get an authorized user to give information to an unauthorized person
Administrator privileges on a system provide the user with _________.
Partial access - on the device
Full access - on the device
Access to just administrator tasks
In Linux, to find which path I am currently in you can type which of the following?
help
ls
cd
pwd
Which of the following is a breach of integrity in the CIA Triad?
Your co-worker reading your emails without your permission
A student getting a teacher password and changing the grades for the last quiz.
A hacker convincing an elderly person to send money to get a friend out of jail.
A DDoS Attack that shuts down a website.
Which of the following Social Engineering techniques are best protected against by use of a security guard or turnstile?
Dumpster Diving
Baiting
Piggybacking
Shoulder Surfing
In Linux, which of the following commands will take you up one level in the path to your parent directory?
cd /parent
cd ..
cd ~
cd parent
Applications are _____ .
part of the operating system
created solely by the user
third party programs that add functions for the user
never come with vulnerabilities
An attack that takes advantage of code flaws that have VERY recently been discovered.
Rootkit
Backdoor
Zero Day
Logic Bomb
A __________ is a tweak to the OS code that will fix an issue in how it runs or compatibility with devices and applications.
Hotfix
Service Pack
Patch
Service Update
__________ is proving who you are so trust can be established between you and another party.
Authentication
Access
Accounting
Authority
Software that gathers data and forwards it to a third party without the consent or knowledge of the user.
Logic Bomb
Spyware
Rootkit
Ransomware
A historic cipher in which the alphabet is shifted left or right a given number of spaces.
Julius Cipher
Caesar Cipher
Enigma Cipher
Vigenere Cipher
A files that appear to be legitimate programs, but really contain malicious code.
Virus
Worm
Backdoor
Trojan
Scrambling data so that it is unreadable to anyone except those who know the trick to decoding it is...
Cryptography
Hieroglyphics
Coding
Cybersecurity
A software program that automates the process of trying all possible combinations of characters to determine a password.
Stealing
Brute Force
Hackathon
Guess & Check
Which of the following is the MOST effective way for an administrator to determine what security holes reside on a network?
Perform a vulnerability scan
Install and monitor an IDS
Run a sniffer
Run a port scan
A program that reproduces itself and can transport from system to system without attaching to a file.
Worm
Backdoor
Virus
Trojan
A program that attaches itself to a host file and replicates itself on a system.
Trojan
Virus
Worm
Backdoor
What is the biggest security weakness in any organization?
Not using two factor authentication
Not using strong enough filters
Passwords not long enough
Human factors
A virtual machine allows the computer to have...
more than one operating system
additional harddrive space
better 3D graphics
additional RAM
The place that text based commands are entered can be called any of the following EXCEPT
Shell
GUI
Command Prompt
Terminal
Which of the following CANNOT be used for biometric authentication?
All of these can be used
Fingerprint
Retina Scan
Heart Rate
"Root" on a Linux machine is:
The administrative account with the most access to the machine
The path on the motherboard that connects different components of the computer
The location in memory where passwords are stored
The cable that connects the machine to the Internet
In Linux, if you don't know what a command is or how it works, you can type in which of the following?
man
what
help
info
You are visiting a website and accidentally click on a link to accept free software. Which tool will keep the software from installing on your PC?
UAC
Avast Antivirus
AppLocker
Windows Defender
A substitution cipher based on multiple alphabets and a system to switch between them using a password. A table or chart is often used.
Julius Cipher
Enigma Cipher
Vigenere Cipher
Caesar Cipher
This is a technique used to solve substitution ciphers based on commonly used letters and words.
guess and check
polyalphabetic analysis
encryption analysis
frequency analysis
The practice of hiding messages in an image or text is called...
Steganography
Photography
Bibliography
Chirography
The information about a file that is embedded in the file, such as date, location, size, etc
gigadata
metadata
versiondata
imagedata
Linux CLI is case sensitive
True
False
To use autocomplete when typing in a command in Linux you can use which key
return
Left arrow
Tab
CTRL
Which of the following commands is used for searching for a word or phrase in a file in Linux
grep
touch
pwd
ls
What does the following command do? sort -r animals.txt
Sorts all the items in animal.txt from biggest to smallest
Sorts all the items in animals.txt in reverse alphabetical order
Sorts all the items in animal.txt in alphabetical order
Creates a file called animals.txt to be used for sorting
A small program of Linux commands that can perform tasks on a computer is called
games
executables
plays
scripts
Which of the following is NOT a requirement to run a computer?
Power Supply
CPU
Hard Drive
RAM
Which of the following is an output device?
Microphone
Mouse
Keyboard
Monitor
What is used to convert from a computer language, like Java or Python, to Machine Language?
Bootkit
Compiler
Translator
Converter
A group of computers in a building or small geographic area connected together is called a
WAN
BAN
LAN
hub
Which device is needed to connect two networks together?
Gateway
Router/Switch
Wireless Access Point
Hub
Which of the following can change when you change networks?
IP Address
Mailing Address
ARP address
MAC address
Number assigned to a communication pathway
Protocol
3-way Handshake
Packet
Port
The largest, most important set of protocols used in network communication
UDP
TCP
TCP/IP
DHCP
A small segment of a larger message which is set over a network or between networks
packet
protocol
virtual port
physical port
Rules that govern network communication
3-way Handshake
Port
Packet
Protocol
Protocol which uses port 80 to connect to an unsecure website
DHCP
NAT
UDP
HTTP
Select the Google advanced operator used to represent "any word".
+
*
|
" "
I want to find any websites that include the word PUPPIES written on the page. Which Google advanced operator should be used?
site:
inurl:
intext:
related:
I really love Pixar.com and want to find other websites like it. Which Google advanced operator should I use?
related:
site:
ext:
inurl:
Instead of OR which Google advanced search operator can you use?
+
" "
|
&
Which Google advanced operator restricts a search to a specific web site or domain?
inurl:
domain:
site:
intext:
Select the Google advanced operator used to exclude a search term
less
-
I have a domain name and I need to find out their IP address. I should use:
nslookup
whois
TLD
Google Dorking
To find the email address of the domain administrator, I should use:
Google Dorking
whois
AAAA
nslookup with type
.com is an example of a:
nslookup
FQDN
whois
TLD
The subnet mask identifies the ____________ part of the IP address
Network
Class
Host
Routing
If an IP address starts with 10, what is the default subnet mask?
255.0.0.0
255.255.255.0
255.255.255.0
If an IP address starts with 172, what is the default subnet mask?
255.255.0.0
255.0.0.0
255.255.255.0
If an IP address starts with 192, what is the default subnet mask?
255.255.0.0
255.255.255.0
255.0.0.0
Which OS uses the ipconfig command?
Android
Linux
Microsoft
Mac
How many packets are sent using the following command? ping 10.15.3.5 -c 4
15
Infinite
4
10
What does the first D stand for in DDoS?
Distributed
Delineated
Dedicated
Drastic
What do we call computers that are used in Botnets?
Zombies
Werewolves
Vampires
Ghosts
A SYN Flood is created by mis-using a 3-way handshake
True
False
DoS Attacks are always intentional
True
False
Which company helped develop Project Shield?
Microsoft
Apple
What is IP spoofing?
A type of attack where the attacker sends fake packets with a false IP address to deceive the recipient.
A type of attack where the attacker sends fake packets with a false MAC address to deceive the recipient.
A type of attack where the attacker sends fake packets with a false ARP address to deceive the recipient.
A type of attack where the attacker sends fake packets with a false IP address and MAC address to deceive the recipient.
Which of the following is another name for ARP spoofing?
ARP reduction
ARP spying
ARP jamming
ARP poisoning
