You have just taken over as network security administrator for a small community college. You want to take steps to secure your network. Before you can formulate a defense for a network, what do you need?

Mary is teaching an introductory cybersecurity course to freshmen. She is explaining to them the major threats. Which of the following is not one of the three major classes of threats?

Being able to define attack terms is an important skill for a cybersecurity professional. What is a computer virus?

Being able to define attack terms is an important skill for a cybersecurity professional. What is spyware?

What is a penetration tester?

Elizabeth is explaining various hacking terms to a class. She is in the process of discussing the history of phone system hacking. What is the term for hacking a phone system?

What is malware?

What is war-driving?

What is the name for the hacking technique that involves using persuasion and deception to get a person to provide information to help compromise security?

There are many threats on the Internet. Which one is currently the most common may change over time, but certain threats have always been more common than others. Which of the following is the most common threat on the Internet?

What are the three approaches to security?

Defining your security strategy is an important step in securing a network. You are trying to classify devices based on the approach they take to security. An intrusion detection system is an example of which of the following?

Which of the following is the most basic security activity?

The most desirable approach to security is one that is which of the following?

As of 2022, which of the following is the fastest-growing target for cyber attacks?

Which of the following types of privacy law affects computer security?

The first computer incident-response team is affiliated with what university?

Which of the following is the best definition of the term sensitive information?

Which of the following is the best description of doxing?

Malek is purchasing cable to use in setting up small office networks. He wants to stock up on commonly used cable. What type of cable do most networks use?

You are assigned to attach connectors to segments of cable. What type of connector is used with network cables?

What type of cable is used in most networks?

John is trying to simply connect three computers in a small network. He does not need any sort of routing capability and is not concerned about network traffic. What is the simplest device for connecting computers?

Sharice is trying to teach a new technician basic networking terms. What should she tell this new technician NIC stands for?

Which of the following is a device used to connect two or more networks?

Juan has just installed a new T1 line in a medical office. The front desk receptionist has asked what speed they can expect. A T1 line sends data at what speed?

Which of the following best describes polycloud?

What protocol translates web addresses into IP addresses?

What protocol is used to send email, and on what port does it work?

Gunther is setting up encrypted remote communications so that the server administrators can remotely access servers. What protocol is used for remotely logging on to a computer in a secure manner?

Mohammed needs to open a firewall port so that web traffic can be passed through the firewall. What protocol is used for web pages, and on which port does it work?

What is the name for the point where the backbones of the Internet connect?

You are examining a list of IP addresses. Some are internal, some are external, and some are not valid. Which of the following is not a valid IP address?

What class of address is the IP address 193.44.34.122?

The IP address 127.0.0.1 always refers to your what?

Internet addresses of the form www.chuckeasttom.com are called what?

Which U.S. government agency created the distributed network that formed the basis for the Internet?

Which of the following was one of the three universities involved in the original distributed network set up by a government agency?

You are explaining the history of networking to a group of first-year students. What did Vint Cerf invent?

You are explaining the history of networking to a group of first-year students. What did Tim Berners-Lee invent?

John is working with command-line utilities to gather diagnostic information about a computer that cannot connect to the network. Which utility provides information about a machine’s network configuration?

Sheryl is explaining the OSI model to new technicians at her company. She is trying to explain what protocols operate at the various layers of the OSI model. At what layer of the OSI model does TCP operate?

Which layer of the OSI model is divided into two sublayers?

Which of the following is a unique hexadecimal number that identifies your network card?

Candice is discussing Internet fraud with a colleague. She is trying to explain the most common types of fraud. What is the term for the most common type of Internet investment fraud?

You have become quite active in online investing. You want to get some advice but are concerned about the veracity of the advice you receive. What is the most likely problem with unsolicited investment advice?

Juan is a security officer for an investment firm. He is explaining various scams to the brokers. What is the term for artificially inflating a stock in order to sell it at a higher value?

What is the top rule for avoiding Internet fraud?

Which of the following is not one of the Security and Exchange Commission’s tips for avoiding investment fraud?

Aliya is active on online auctions but wants to avoid auction fraud. What are the four categories of auction fraud?

What is the term for a seller bidding on her own item to drive up the price?

What is the term for submitting a fake but very high bid to deter other bidders?

What is typically the goal of identity theft?

According to the U.S. Department of Justice, identity theft is generally motivated by what?

Clarence is a police detective with a small-town police department. He is trying to consider how seriously to take reports of cyber stalking. Why is cyber stalking a serious crime?

What is cyber stalking?

What do law enforcement officials usually require of a victim in order to pursue harassment allegations?

If you are posting anonymously in a chat room and another anonymous poster threatens you with assault or even death, is this person’s post harassment?

What must exist for cyber stalking to be illegal in a state or territory?

What is the first step in protecting yourself against identity theft?

What can you do on your local computer to protect your privacy?

What is a cookie?

Which of the following is not an efficient method of protecting yourself from auction fraud?

What is the top rule for chat room safety?

Why is it useful to have a separate credit card dedicated to online purchases?

What percentage of cyber stalking cases escalate to real-world violence?

If you are a victim of cyber stalking, what should you do to assist the police?

What is the top way to protect yourself from cyber stalking?

When considering the various attacks that can be executed on your system, it is important to understand which attacks are most common. Of the following, which is one of the most common and simplest attacks on a system?

All DoS attacks are predicated on overwhelming a system’s workload capacity. Therefore, measuring the workload of a system is critical. Which of the following is not a valid way to define a computer’s workload?

What do you call a DoS attack launched from several machines simultaneously?

It is important to understand the different types of DoS attacks and the symptoms of those attacks. Leaving a connection half open is a symptom of which type of attack?

While there are a wide range of different ways to execute a DoS attack, they all are predicated on the same idea. What is the basic concept behind a DoS attack?

What is the most significant weakness in a DoS attack from the attacker’s viewpoint?

What is the most common class of DoS attacks?

A range of countermeasures can help defend against DoS attacks. What are three methods for protecting against SYN flood attacks?

Juan is explaining various DoS attacks to security operators at his company. Which attack mentioned in this chapter causes a network to perform a DoS attack on one of its own servers?

What is the name for a defense that depends on a hash being sent back to the requesting client?

What type of defense depends on sending the client an incorrect SYN/ACK?

You are attempting to explain various DoS attacks to a new security technician. You want to make sure she can differentiate between these different attacks and notice the signs of a specific attack. What type of defense depends on changing the server so that unfinished handshaking times out sooner?

What type of attack is dependent on sending packets that are too large for the server to handle?

You want to make sure your team can identify the various DoS attack vectors. What type of attack uses the victim’s own network routers to perform a DoS attack on the target?

If you are a website developer and concerned about DoS attacks, what is one mitigation technique you can implement in the website itself?

How can securing internal routers help protect against DoS attacks?

What can your do to your internal network routers to help defend against DoS attacks?

Dorothy is a network administrator. Her system has been experiencing an attack that is using bots to send fake requests to the cloud resources her company uses. This is causing disruption of the availability of these resources. How is this attack best described?

No attack mitigation strategy is perfect, and you need to allow at least some traffic into and out of your network, or else your network is of no use. What can you do with your firewall to defend against at least some DoS attacks?

You are trying to identify all potential DoS attack vectors. In doing so, you hope to provide mitigation for each of these attack vectors. Why will protecting against Trojan horse attacks reduce DoS attacks?

John is a network security administrator for a midsized college. He is trying to explain to a new hire what a virus is. Which of the following is the best definition of virus?

Isabelle is responsible for cybersecurity at her company. She is concerned that a virus would cause damage to the IT systems. What is the most common damage caused by virus attacks?

You are trying to form policies for your organization to mitigate the threat of viruses. You want to ensure that you address the most common way for a virus to spread. What is the most common way for a virus to spread?

Which of the following is the primary reason that Microsoft Outlook is so often a target for virus attacks?

Juan is a network administrator for a small graphic design company. In April 2021 his company was hit by a virus that specifically targeted macOS and was a first-stage downloader for other malware components. What attack was this?

What factor about the WannaCry virus is especially interesting to security practitioners?

What is the name of the very first virus ever detected?

Elizabeth has found malware on a system in her company. The malware blocks about 600 Windows processes, and demands ransom. What has Elizabeth found?

Mohaned has found malware on his network. This malware encrypts files demanding ransom and also blocks approximately 600 Windows processes. What malware has Mohaned found?

Which of the following is a method that any person can use to protect against virus attacks?

You are trying to develop methods to mitigate the threat of viruses in your company. Which of the following is the safest way to send and receive attachments?

Shelly is trying to teach new employees how to handle emailed security alerts. Which of the following is true regarding emailed security alerts?

Which of the following is something a Trojan horse might do?

Jared is explaining various attacks to students in an introduction to cybersecurity class. He wants to make certain they fully understand the different attacks. What does a buffer-overflow attack do?

What virus exploited buffer overflows?

What can you do with a firewall to help protect against virus attacks?

Malek is explaining various malware types to new technical support personnel. He is explaining to them the various types of malware so that they can recognized them. What type of malware is a key logger?

Which of the following is a step that all computer users should take to protect against virus attacks?

What is the primary way a virus scanner works?

In addition to the primary way a virus scanner works, what other way can a virus scanner work?

Elizabeth is describing web-based attacks to a group of students in a computer security course. What does an SQL injection attack require?

Juan is using a rainbow table to circumvent passwords on a Windows computer. What is the best description of a rainbow table?

You are responsible for security on an e-commerce system. You want to mitigate as many attacks as you can. How can you prevent cross-site scripting?

What is an advantage of using Shodan.io?

Perez is exploring different password cracking tools. A friend has told him about ophcrack. ophcrack depends on the attacker doing what?

If you wish to view items that have been removed from a website, what is the best way to do so?

Malek needs a port scanner so he can scan open ports on his own network. Which of the following is a popular port scanner?

Jane wants to mitigate as many attacks as she can. A colleague suggested that she block ICMP packets. Blocking incoming ICMP packets will prevent what type of scan?

It is important that you understand cybersecurity terminology, including terms for different actors in cybersecurity. What is the correct term for a person who uses hacking techniques for illegal activities?

What is the term for a person who hacks into phone systems?

Penelope is teaching an introductory cybersecurity course and is trying to explain the terminology to students. What is the term for a person who uses tools to hack without understanding the underlying technology?

What is the name for the process of trying to list all the servers on a network?

Terrance is performing a scan. What response will a Windows machine give to a FIN scan?

Jaron is trying to do a port scan of his own company. He wants to test to see if the company’s security systems will be able to detect his scan. Which of the following is considered the stealthiest port scan?

What is the stealthiest way to find out what type of server a website is running?

Terrance is trying to explain industrial espionage to a group of new security techs. What is the ultimate goal of espionage?

In order to truly understand industrial espionage, you need to understand the mindset of the spy. What is the best outcome for a spy attempting an espionage activity?

What is the usual motivating factor for corporate/industrial espionage?

Which of the following types of information would be a likely target for industrial espionage?

Accurate statistics on corporate espionage are difficult to obtain. One reason is that the victims don’t always report the crime, as they often don’t want the incidents to become public. Which of the following is a likely reason that an organization might be reluctant to admit it has been a victim of corporate espionage?

What is the difference between corporate and industrial espionage?

Information is a valuable asset. It can be useful to calculate that value in order to determine how much effort should be put into protecting it. What formula can you use to calculate the value of information?

If a company purchases a high-end UNIX server to use for its research and development department, what is probably the most valuable part of the system?

Information is an asset to your company if it

What is the greatest security risk to any company?

Which of the following is the best definition for spyware?

What is the highest level of security you can expect to obtain?

In the context of preventing industrial espionage, why might you wish to limit the number of company CD burners and control access to them in your organization?

Why would you want to scan an employee’s computer when he leaves the organization?

What is the reason for encrypting hard drives on laptop computers?