Font size
WorksheetsCyber I - 1.1 Quiz 2 - CIA Triad & Authentication
Total questions: 22
Worksheet time: 12mins
Which of the following is NOT in the ethics agreement you signed?
I will not use any computer system to purchase products that are harmful to my developmental or emotional growth.
I will not intercept or otherwise monitor any network communications not explicitly intended for me.
I will not alter program or data or any files belonging to another person without the express consent of that person.
I will not execute any digital hoax or prank, no matter how harmless the effects of the action.
I will not gain access to any computer system that I am not authorized, by the administration of the system, to access
The code of ethics agreement applies: (select all that are true)
On school grounds
Until graduation from HS
Only while enrolled in cybersecurity class in HS
Off school grounds
After graduation from HS
Which of the following is NOT part of the model of Computer Security where Protection = ___+___+___.
Prosecution
Prevention
Detection
Response
In the CIA Triad - the "C" stands for:
Confidentiality
Congressional
Continuation
Communication
In the CIA Triad - the "A" stands for:
Availability
Authentication
Authority
Accountability
Which of the following is a breach of integrity in the CIA Triad?
A student getting a teacher password and changing the grades for the last quiz.
Your co-worker reading your emails without your permission
A DDoS Attack that shuts down a website
A hacker convincing an elderly person to send money to get a friend out of jail.
__________ is proving who you are so trust can be established between you and another party.
Authentication
Access
Authority
Accounting
A school ID is an example of ___________ to prove who you are.
Something you have
Something you are
Something you know
None of the above
A password is an example of ___________ to prove who you are.
Something you know
Something you are
Something you have
None of the above
A software program that automates the process of trying all possible combinations of characters to determine a password.
Brute Force
Stealing
Guess & Check
Guess & Check
What type of attack will test a weak password against a large number of accounts?
Password spraying
Dictionary
Brute Force
Wildfire
What type of attack will try a lot of known passwords against just one account?
Dictionary
Password Spraying
Brute Force
Wildfire
When a database is exposed or stolen, it is said to be a :
Breach
Heist
Takedown
Hit
Which of these is NOT good practice to create a secure password?
use words found in the dictionary
use symbols
make it long
use lowercase and uppercase
What are two reasons that a passphrase is recommended instead of a password? (SELECT TWO CHOICES)
It is easier for the user to remember
It is easier for the hacker to break since it won't have symbols
The computer can process letters faster than symbols
It is harder to break since it is longer than most passwords
"Root" on a Linux machine is:
The administrative account with the most access to the machine
The location in memory where passwords are stored
The cable that connects the machine to the Internet
The path on the motherboard that connects different components of the computer
divider
A one-way algorithm used to encrypt a password for secure storage or transfer.
Hash
SAM registry Encoding divider
Single Sign-On
Encoding
Which of the following it NOT true about a rainbow table?
There needs to be a different rainbow table for each hash algorithm
It is used by hackers to find passwords based on a given hash value
It is a file of pre-computed hash values
There is no known way to prevent hackers from effectively using rainbow tables
What is "salt"?
An addition to a password to ensure that hashing two of the same passwords will result in different hashes.
A way to corrupt files so that they can not be used again
A method used to create a rainbow table
A technique that helps to convert a hash back to the original password
What is used to authenticate a document or website by a 3rd party to ensure
it is coming from the intended source?
Certificate
License
Proximity Reader
Identity Card
Which of the following CANNOT be used for biometric authentication?
All of the above can be used
Retina Scan
Heart Rate
Fingerprint
Typing Speed
What is the biggest security weakness in any organization?
Human factors
Not using strong enough filters
Passwords not long enough
Not using two factor authentication
divider
