Font size
WorksheetsCybersecurity I: Unit 1 - Foundations & Threats Exam Review
Total questions: 37
Worksheet time: 19mins
In the CIA Triad the "C" stands for:
Continuation
Confidentiality
Congressional
Communication
In the CIA Triad the "A" stands for:
Authority
Authentication
Availability
Accountability
Which of the following is a breach of integrity in the CIA Triad?
A DDoS attack that shuts down a website
A student getting a teacher password and changing the grades for the quiz
Your co-worker reading your emails without your permission
A hacker convinces elderly person to send money to get a friend out of jail
__________ is proving who you are, so trust can be established between you and another party.
Access
Authority
Authentication
Accounting
A school ID is an example of _____ to prove who you are.
something you have
something you know
something you are
none of the above
A password is an example of ______ to prove who you are.
something you have
something you know
something you are
none of the above
A software program that automates the process of trying all possible combinations of characters to determine a password.
Guess & Check
Stealing
Hackathon
Brute Force
What type of attack will test a weak password against a large number of accounts?
Password Spraying
Dictionary
Wildfire
Brute Force
What type of attack will try a lot of known passwords against just one account?
Password Spraying
Dictionary
Brute Force
Wildfire
When a database is exposed or stolen, it is said to be a ___________.
Takedown
Hit
Heist
Breach
Which of these is NOT good practice to create a secure password?
Make it long
Use words found in the dictionary
Use symbols
Use lowercase and uppercase
What are two reasons a passphrase is recommended instead of a password? (Pick Two)
it is easier for the user to remember
It is harder to break since it is longer than most passwords
It is easier for the hacker to break since it won't have symbols
The computer can process letters faster than symbols
"Root" on a Linux machine is a(n):
Administrative account with the most access to the machine
Cable that connects the machine to the Internet
Location in memory where passwords are stored
Path on the motherboard that connects different components of the computer
What is a one-way algorithm used to encrypt a password for secure storage or transfer?
Single Sign-On (SSO)
Hash
SAM registry
Encoding
Which of the following is NOT true about a rainbow table?
It is a file of pre-computed hash values
There needs to be a different rainbow table for each hash algorithm
It is used by hackers to find passwords based on a given hash value
There is no way to prevent hackers from effectively using rainbow tables
What is "salt"?
Method used to create a rainbow table
Way to corrupt files so that they can not be used again
Technique that helps to convert a hash back to the original password
Addition to a password to ensure hashing a password gives different results
What is used to authenticate a document or website by a 3rd party to ensure it is coming from the intended source?
Proximity reader
Certificate
License
Identity Card
Which of the following CANNOT be used for biometric authentication?
Fingerprint
Heart rate
Retina scan
All of the above can be used
What is the biggest security weakness in any organization?
Passwords not long enough
Not using strong enough filters
Human factors
Not using two factor authentication
A program that reproduces itself and can transport from system to system without attaching to a file.
Virus
Worm
Trojan
Backdoor
A file that appears to be a legitimate program but actually contains malicious code.
Virus
Worm
Trojan
Backdoor
What is an attack that takes advantage of code flaws that have VERY recently been discovered?
Logic bomb
Rootkit
Zero Day
Backdoor
A group of programs installed by an attacker to gain complete control of a computer.
Logic bomb
Rootkit
Zero Day
Backdoor
What is Polymorphic code?
Code that changes on a regular basis to make it harder to detect
Code that has many ways to get into it (ie backdoors)
Code that is used to stop Trojan malware
Code that is also known as Zero Day Code
A program that blocks access to files or use of the device until a ransom is paid.
Spyware
Logic Bomb
Rootkit
Ransomware
Software that gathers data and forwards it to a third party without the consent or knowledge of the user.
Spyware
Logic bomb
Rootkit
Ransomware
What is the process of making sure the host and the virtual machine are separated for optimization and safety?
Isolation
Sandbox
Firewalls
Moat
A virtual machine allows a computer to have:
Better 3D graphics
More than one operating system
Additional hard drive space
Additional RAM
The Windows operating system is an example of a(n) ________________.
Command Line Interface (CLI)
Shell
Terminal
Graphical User Interface (GUI)
The place that text-based commands are entered can be called any of the following EXCEPT:
Terminal
Command prompt
GUI
Shell
In Linux, if you don't know what a command is or how it works, you can type in which of the following?
help
man
info
what
In Linux, to find which path you are currently in you can type which of the following?
pwd
cd
ls
help
In Linux, which of the following commands will take you up one level in the path to your parent directory?
cd ..
cd ~
cd /parent
cd parent
Which command line is case sensitive?
LInux only
Windows only
Both Linux and Windows
Neither Linux nor Windows
In Linux, which of the following will rename file1 as file2?
cp file1 file2
mkdir file1 file2
rm file1 file2
mv file1 file2
In Windows you use the command "edit" to create an empty file. What is the equivalent command in Linux?
new
touch
edit
cp
Which OS would this be an appropriate path for? /home/labuser/Documents/secrets.txt?
Windows only
Linux only
Both Linux and Windows
Neither Linux nor Windows
