NEW
Font size
WorksheetsCybersecurity 4 Final semester One
Total questions: 20
Worksheet time: 10mins
The Cybersecurity Information Sharing Act (CISA) of 2015 _____.
spreads the news about how Cybersecurity operates in the private sector.
allows for the sharing of information between government and private agencies.
gives rights to all Cybersecurity Administrators.
gives information on how to prevent viruses from one network to another..
The five pillars of Defense of Homeland Security Cybersecurity goals are:
Authentication, Auditing, Authorization, Security, and Identification
Freedom of information, Control, Defense, Offence, and Identification.
Risk ID, Vulnerability Reduction, Threat Reduction, Mitigation and Cyber outcomes
____ is the verification of a user through a password, PIN, and biometric.
Authorization
Authentication
Identification
Auditing
______ is the process of collecting and analyzing information.
Authentication
Authorization
Identification
Auditing
_______ is the discipline that embodies Confidentiality, Integrity, Nonrepudiation, and Authentication.
Authorization
Cryptography
Biometrics
Artificial Intelligence
______ uses the same key to encrypt and decrypt.
Asymmetric Encryption
Symmetric Encryption
Cypher Encryption
Auto-injection Encryption
______ are a set of data that uniquely identifies an entity.
Digital signatures
Message digests
Digital Certificates
Public Key Infrastructures (PKI)
_____ limits each user so that they can only write up or at the current security level.
Clark-Wilson Model
Bell-LaPadula Model
Brewer and Nash Model
Biba Model
____ is an example of Compliance.
HIPAA (Health Insurance Portability and Accountably Act of 1996
Gramm-Leach-Bliley Act (GLBA) of 1999
Federal Information security Management Act (fisMA), of 2002
Federal Exchange Data Branch Notification Act of 2015.
What is the purpose of penetration testing?
To test the networks availability and quality of data flow.
To activate the security alarm systems when intruders infiltrate.
To ensure defensive measures are put into place to test network security.
To examine the hackers' motives by anticipating what they intend on doing.
______ is an unauthorized user who is motivated by a closely held cause.
Stranger
Hacktivist
Range finders
Infidytes
A Pen Tester will need to think like an _____.
CEO
Editor
Auditor
Adversary
What is the difference between a pen tester and an adversary?
Adversary's goal is disruption or destruction.
Pen testers get paid extra, while adversaries get paid by the hour.
Adversary's goal is to possibly get hired by the company they attack.
Pen testers are more experienced.
Complex systems are more resilient than other, simpler systems because___.
they confuse the attackers.
they are more expensive to develop.
they are more accurate.
of the use of redundant components.
What are the four step process to digital forensics?
Collection, Extraction, Security, Reporting
Capturing, Transporting, Analysis, Returning
Capturing, Examination, Data Collection, Refining
Collection, Examination, Analysis, Reporting
_____ is a process that tracks the movement of evidence.
Line of Defense
Chain of custody
Lifecycle
Cord Collection
_____ is the first step in a crime scene.
Prioritize evidence collection.
Access
Limit interference
Secure the area.
Which is NOT an example of a data source from a digital crime scene.
Cell Phone Data
Newspaper articles
Computer Hard Drives
Data from cell towers or in the Cloud
Why is it important to encrypt the data during collection?
To preserve power.
To secure the resources.
To protect data from unauthorized access.
To hide the evidence from potential intruders.
What are the two most common methods of data collection?
Digital image software or image duplicator.
Data collection device or Handwritten notes.
CD's and DVD's
Discs and Hard Drives
