Cybersecurity Essentials 1.1 Final Quiz Online Form B

1. Question

1 points

What is an example of early warning systems that can be used to thwart cybercriminals?

CVE database
Infragard
ISO/IEC 27000 program
Honeynet project

2. Question

2 points

Technologies like GIS and IoE contribute to the growth of large data stores. What are two reasons that these technologies increase the need for cybersecurity specialists? (Choose two.)

They require 24-hour monitoring.
They collect sensitive information.
They contain personal information.
They increase processing requirements.
They require more equipment.
They make systems more complicated.

3. Question

2 points

Which two groups of people are considered internal attackers? (Choose two.)

ex-employees
amateurs
black hat hackers
hacktivists
trusted partners

4. Question

1 points

Which methods can be used to implement multifactor authentication?

IDS and IPS
tokens and hashes
VPNs and VLANs
passwords and fingerprints

5. Question

1 points

Which technology should be used to enforce the security policy that a computing device must be checked against the latest antivirus update before the device is allowed to connect to the campus network?

NAC
VPN
SAN
NAS

6. Question

1 points

A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?

Implement a firewall.
Implement intrusion detection systems.
Implement a VLAN.
Implement RAID.

7. Question

1 points

Which technology can be used to ensure data confidentiality?

hashing
identity management
RAID
encryption

8. Question

1 points

An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?

VPN
VLANS
RAID
SHS

9. Question

2 points

What are the two most effective ways to defend against malware? (Choose two.)

Implement a VPN.
Implement strong passwords.
Install and update antivirus software.
Implement RAID.
Implement network firewalls.
Update the operating system and other application software.

10. Question

1 points

An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?

familiarity
intimidation
trusted partners
urgency

11. Question

1 points

Which statement describes a distributed denial of service attack?”

An attacker sends an enormous quantity of data that a server cannot handle.
An attacker views network traffic to learn authentication credentials.
An attacker builds a botnet comprised of zombies.
One computer accepts data packets based on the MAC address of another computer.

12. Question

1 points

What type of attack will make illegitimate websites higher in a web search result list?

DNS poisoning
browser hijacker
spam
SEO poisoning

13. Question

1 points

What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?

man-in-the-middle
social engineering
pharming
ransomeware

14. Question

1 points

A penetration testing service hired by the company has reported that a backdoor was identified on the network. What action should the organization take to find out if systems have been compromised?

Look for usernames that do not have passwords.
Look for unauthorized accounts.
Look for policy changes in Event Viewer.
Scan the systems for viruses.

15. Question

1 points

Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?

DoS attack
Trojan horse
ransomeware
man-in-the-middle attack

16. Question

1 points

A user has a large amount of data that needs to be kept confidential. Which algorithm would best meet this requirement?

RSA
Diffie-Hellman
3DES
ECC

17. Question

1 points

What happens as the key length increases in an encryption application?

Keyspace decreases exponentially.
Keyspace increases exponentially.
Keyspace decreases proportionally.
Keyspace increases proportionally.

18. Question

1 points

Which algorithm will Windows use by default when a user intends to encrypt files and folders in an NTFS volume?

RSA
DES
AES
3DES

19. Question

1 points

Before data is sent out for analysis, which technique can be used to replace sensitive data in nonproduction environments to protect the underlying information?

data masking substitution
steganography
software obfuscation
steganalysis

20. Question

1 points

In which situation would a detective control be warranted?

when the organization needs to repair damage
after the organization has experienced a breach in order to restore everything back to a normal state
when the organization needs to look for prohibited activity
when the organization cannot use a guard dog, so it is necessary to consider an alternative

21. Question

1 points

An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?

administrative
technological
physical
logical

22. Question

1 points

An organization has implemented antivirus software. What type of security control did the company implement?

deterrent control
detective control
recovery control
compensative control

23. Question

1 points

Passwords, passphrases, and PINs are examples of which security term?

authorization
access
authentication
identification

24. Question

3 points

An organization has determined that an employee has been cracking passwords on administrative accounts in order to access very sensitive payroll information. Which tools would you look for on the system of the employee? (Choose three)

password digest
reverse lookup tables
lookup tables
rouge access points
algorithm tables
rainbow tables

25. Question

1 points

What technique creates different hashes for the same password?

SHA-256
HMAC
CRC
salting

26. Question

1 points

Which hashing technology requires keys to be exchanged?

HMAC
salting
MD5
AES

27. Question

1 points

You have been asked to implement a data integrity program to protect data files that need to be electronically downloaded by the sales staff. You have decided to use the strongest hashing algorithm available on your systems. Which hash algorithm would you select?

SHA-1
AES
MD5
SHA-256

28. Question

1 points

What kind of integrity does a database have when all its rows have a unique identifier called a primary key?

entity integrity
referential integrity
domain integrity
user-defined integrity

29. Question

2 points

Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are two causes of this situation? (Choose two.)

The systems use different hashing algorithms.
Both systems use MD5.
Both systems scramble the passwords before hashing.
One system uses hashing and the other uses hashing and salting.
One system uses symmetrical hashing and the other uses asymmetrical hashing.

30. Question

1 points

Alice and Bob are using a digital signature to sign a document. What key should Alice use to sign the document so that Bob can make sure that the document came from Alice?

public key from Bob
private key from Alice
private key from Bob
username and password from Alice

31. Question

1 points

The X.509 standards defines which security technology?

digital certificates
security tokens
strong passwords
biometrics

32. Question

1 points

What is it called when an organization only installs applications that meet its guidelines, and administrators increase security by eliminating all other applications?

asset standardization
asset identification
asset classification
asset availability

33. Question

1 points

Being able to maintain availability during disruptive events describes which of the principles of high availability?

single point of failure
system resiliency
fault tolerance
uninterruptible services

34. Question

1 points

An organization has recently adopted a five nines program for two critical database servers. What type of controls will this involve?

stronger encryption systems
remote access to thousands of external users
limiting access to the data on these systems
improving reliability and uptime of the servers

35. Question

1 points

What approach to availability provides the most comprehensive protection because multiple defenses coordinate together to prevent attacks?

layering
obscurity
diversity
limiting

36. Question

1 points

The team is in the process of performing a risk analysis on the database services. The information collected includes the initial value of these assets, the threats to the assets and the impact of the threats. What type of risk analysis is the team performing by calculating the annual loss expectancy?

qualitative analysis
loss analysis
protection analysis
quantitative analysis

37. Question

2 points

Which two values are required to calculate annual loss expectancy? (Choose two.)

asset value
exposure factor
frequency factor
annual rate of occurrence
single loss expectancy
quantitative loss value

38. Question

1 points

An organization wants to adopt a labeling system based on the value, sensitivity, and criticality of the information. What element of risk management is recommended?

asset identification
asset availability
asset standardization
asset classification

39. Question

1 points

What approach to availability involves using file permissions?

layering
simplicity
obscurity
limiting

40. Question

2 points

What are two incident response phases? (Choose two.)

prevention and containment
containment and recovery
mitigation and acceptance
detection and analysis
risk analysis and high availability
confidentiality and eradication

41. Question

1 points

What Windows utility should be used to configure password rules and account lockout policies on a system that is not part of a domain?

Local Security Policy tool
Event Viewer security log
Active Directory Security tool
Computer Management

42. Question

1 points

In a comparison of biometric systems, what is the crossover error rate?

rate of false negatives and rate of false positives
rate of false positives and rate of acceptability
rate of rejection and rate of false negatives
rate of acceptability and rate of false negatives

43. Question

1 points

What describes the protection provided by a fence that is 1 meter in height?

It deters casual trespassers only.
The fence deters determined intruders.
It offers limited delay to a determined intruder.
It prevents casual trespassers because of its height.

44. Question

1 points

Mutual authentication can prevent which type of attack?

wireless poisoning
man-in-the-middle
wireless sniffing
wireless IP spoofing

45. Question

1 points

Which protocol would be used to provide security for employees that access systems remotely from home?

SSH
WPA
Telnet
SCP

46. Question

1 points

Which technology can be used to protect VoIP against eavesdropping?

encrypted voice messages
strong authentication
SSH
ARP

47. Question

3 points

Which three protocols can use Advanced Encryption Standard (AES)? (Choose three.)

WPA
802.11q
802.11i
TKIP
WPA2
WEP

48. Question

1 points

HVAC, water system, and fire systems fall under which of the cybersecurity domains?

network
user
device
physical facilities

49. Question

1 points

Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?

ISO OSI model
NIST Framework
ISO/IEC 27000
the National Vulnerability Database (NVD)

50. Question

1 points

Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?

packet sniffers
vulnerability scanners
password crackers
packet analyzers

Average score
Your score