WorksheetsQuiz: Tech+ Chapter 4 Exam
Total questions: 63
Worksheet time: 32mins
What does Integrity in the CIA Triad guarantee?
Information cannot be denied by its creator
Information is readily available to all users
Information is stored and transferred as intended
Information is only accessible to authorized users
What should you do first if a virus is spreading over a network?
Shut down your computer immediately
Install a second antivirus program quickly
Wait for the next scheduled scan
Disconnect the network to stop spread
You receive an email that looks like it is from a friend but seems suspicious. What is the safest step?
Delete the email without checking
Forward the email to everyone at once
Call your friend to confirm they sent it
Click on all links in the email to verify
Why should you be careful with friend requests on social media?
They could be trying to sell cheap items
They might not like your recent posts
They could be fake profiles made by hackers
You might get too many notifications
Where are hardware firewalls typically installed in a network?
At the edge of the organization network
Between each of the internal servers
Hosted remotely in the cloud
On individual desktop computers
Which option is an example of Something You Know for authentication?
Passphrase remembered by user
Hardware token carried daily
Facial recognition scan
Fingerprint used to unlock
What is a pattern lock on a mobile device?
A traditional text-based password
A predefined design drawn on touchscreen
A physical hardware token for login
A type of biometric authentication
Why are computers considered high-value targets for attackers?
They are easy to physically steal
They are constantly connected to internet
They are used by many different people
They are expensive and store valuable data
What does defense in depth mean in cybersecurity?
A single device combining many features
A layered security approach with overlap
Software used to segment the network
A method to simplify network security
What is the most basic part of cybersecurity?
Controlling physical access to computers and network devices
Installing antivirus software
Using strong passwords
Encrypting data
What type of firewall is typically used to protect a single workstation or server?
Network firewall
Hardware firewall
Software firewall
Cloud firewall
What is the purpose of the NIST Cybersecurity Framework?
To monitor social media
To develop security policies and capabilities
To design websites
To create user accounts
Why is it important to keep the operating system and application software current on patches?
To improve compatibility with older hardware
To improve security and functionality
To help speed up the network
To help reduce costs
What is the main advantage of using a passphrase over a traditional password?
Easier to forget
Shorter in length
Easier to remember and more secure
More difficult to type
What criteria does a simple firewall use besides source and destination?
Speed
Type of data
Defense in depth level
Protocol
What is the main focus of the "Identify" function in the NIST Cybersecurity Framework?
To develop and operate IT assets securely
To restore systems and data
To monitor the effectiveness of controls
To evaluate risks and recommend security controls
What is the main reason for testing patches before deploying them?
To ensure they do not cause problems
To scan all of the files with an antivirus program
To make sure the network runs faster
To make sure they don't leave extra files
What can happen if security tools are used incorrectly?
They can make administrators depend on them
They can create more weaknesses
They can make the network faster
They just don't work
What is spear phishing?
A type of phishing that targets specific individuals
A method to gather general information
A way to send emails to large groups
A technique to spread malware
What technology is used for location tracking?
ISP
GPS
USB
Modem
What does the "C" in the CIA Triad stand for?
Compliance
Cybersecurity
Control
Confidentiality
What is the primary goal of the "Protect" function in the NIST Cybersecurity Framework?
To monitor the effectiveness of controls
To develop and operate IT assets securely
To identify risks and threats
To restore systems and data
What should you avoid doing with firewall applications on your computer?
Configuring firewall settings
Using a firewall on public networks
Updating the firewall software
Running two firewall applications at the same time
What is smishing?
A method to send bulk emails
A type of phishing done through SMS/text messages
A way to encrypt messages
A technique to secure emails
What is a lunchtime attack?
A method of hacking into food-ordering apps
A type of cyber attack that occurs at noon
An attack that happens during lunch breaks when devices are left unattended
A type of cyber attack that targets lunch delivery services
Which permission allows a user to run a program or script from a file?
Execute
Write
Read
Delete
What is a Kensington lock used for?
Encrypting data
Locking a laptop to prevent theft
Monitoring network traffic
Installing software updates
What is a web application firewall used for?
Preventing unauthorized access to a network
Filtering and monitoring traffic between a web application and the Internet
Protecting email servers
Storing web application data
What is social engineering?
A technique used to improve social skills.
A method of deceiving others to share personal or sensitive information.
A type of cyberattack that uses complex software to hack systems.
A way to build social networks online.
What is the purpose of creating separate network segments?
To allow separation of duties
To increase the number of users
To isolate sensitive information and systems
To simplify network administration
What is the main purpose of setting permissions on files and folders?
To control who can access and modify them
To reduce the size of files
To allow everyone to access all files
To make files look more organized
What is a zero-day attack?
An attack that happens on the first day of the month
An attack that exploits an unknown vulnerability
A harmless attack that generates annoying pop-ups
An attack that occurred every Patch Tuesday
What does "implicit denial" mean in the context of authorization?
Administrators only
Everyone gets access unless specifically denied
All users have full access
No one gets access unless specifically allowed
What is the purpose of a security vestibule in preventing tailgating?
To provide a place for employees to sign in
To allow only one person to enter at a time with proper credentials
To store security equipment
To provide a location for a security guard to view everyone entering
What is authorization?
The process of securing physical hardware
The process of ensuring the account is only used by the correct user
The process of determining what rights and privileges a particular entity has
The process of creating new files
If you want suggestions about local restaurants, what needs to be enabled in your browser?
Browser Cache
Incognito Mode
Browser Extensions
Location Tracking
What type of permission allows a user to modify or edit a file?
Read
Write
Execute
Delete
What does the "Detect" function in the NIST Cybersecurity Framework involve?
Developing security policies
Monitoring to ensure controls are effective
Restoring systems and data
Eliminating threats
Which type of user account can do anything they want on the entire computer system?
Limited User
Administrator
Guest User
Standard User
Why is it dangerous if someone gets access to your primary email account?
They can delete your emails
They can send emails to your contacts
They can change passwords for other accounts
They can read your emails
What is a false positive in antivirus software?
When the software fails to detect a virus
When the software detects a virus that isn't actually harmful
When the software deletes a necessary system file
When the software slows down your computer
What is the purpose of two-factor authentication (2FA)?
To make logging in faster
To add an extra step to logging in for increased security
To replace passwords entirely
To simplify the login process
What does the term "standard user" refer to?
A user who can install new software
A user with full control over the system
A user who can delete any file
A user with limited permissions to perform job tasks
What is real-time scanning in antivirus software?
Scanning the system during the system startup
Scanning all files when manually started
Constantly watching your computer for threats
Scanning when the computer is not being used
What should companies do to ensure physical security of servers?
Install antivirus software
Use strong passwords
Keep servers in a locked room
Store them in a central area where they can be watched
What is ransomware?
Malware that sends messages to collect personal information
Malware that targets specific computer components
Software that protects against malware
Malware that locks up a computer and demands money
What is "separation of duties"?
Distributing the work evenly between employees
Splitting important multi-step tasks among different people
Using security tools in different parts of the network
Using various tools for location tracking
Which of the following is a potential security concern of Single Sign-On (SSO)?
Users have to remember multiple passwords
It is more expensive to implement
If a hacker gets into one account, they could access everything
It is slower to log in
What is patch management?
A way for users to install their own patches
A process of installing new patches as soon as they are released
A policy of updating only critical systems
A process to ensure computers run reliably and securely
What is the primary function of antivirus software?
To prevent unauthorized users
To keep the operating system patched
To monitor network traffic on a desktop
To identify and stop harmful attacks on your computer or network
Which security measure tracks assets using a virtual boundary?
Encryption
Antivirus software
Geofencing
VPN
What is authentication?
The process of updating account information
The process of deleting an account
The process of ensuring that each account is only operated by its proper user
The process of creating a new account
Who has a role in cybersecurity within a company?
Only the managers
All employees
Only the security team
Only the IT department
What can happen if people rely too much on automated security tools?
They will always catch every security threat
They might miss subtle signs of a security breach
The network will become less secure
The tools will stop working
What is heuristic identification in antivirus software?
Using a list of known virus patterns
Scanning files only when you manually start it
Constantly updating virus definitions
Looking for actions or behaviors similar to what viruses do
Which system lets a user authenticate once to access multiple services?
Multifactor Authentication (MFA)
Biometric Authentication
Hardware Tokens
Single Sign-On (SSO)
What is the main goal of phishing and smishing attacks?
To access unattended devices
To infect a computer with a virus
To steal confidential information
To gain physical access to a secure area
Which NIST Cybersecurity Framework function focuses on restoring systems and data after an incident?
Recover
Respond
Protect
Identify
What is the primary function of a firewall?
To create network connections
To increase internet speed
To filter network traffic
To store data
What does Availability in the CIA Triad ensure?
Information is readily available to authorized users
Information is stored and transferred as intended
Information is only accessible to authorized users
Information cannot be denied by its creator
Which feature most likely indicates a counterfeit website?
Accurate company information across pages
Consistent contact details and policies
Misspelled URLs and mismatched branding
Secure domain with a valid certificate
Which method is an example of biometric authentication?
Smart card inserted into a slot
Fingerprint scan on a reader
One-time code sent by SMS
PIN entered on a keypad
You receive a suspicious text message claiming account issues. What is the safest first response?
Ignore the message and contact the company using official channels
Tap the link to verify immediately
Forward it to friends to warn them
Reply requesting more information
