Cybersecurity Essentials 1.1 Final Quiz Online

1. Question

1 points

A cybersecurity specialist is asked to identify the potential criminals known to attack the organization. Which type of hackers would the cybersecurity specialist be least concerned with?

gray hat hackers
black hat hackers
script kiddies
white hat hackers

2. Question

1 points

What is an example of early warning systems that can be used to thwart cybercriminals?

Honeynet project
Infragard
CVE database
ISO/IEC 27000 program

3. Question

3 points

A specialist in the HR department is invited to promote the cybersecurity program in community schools. Which three topics would the specialist emphasize in the presentation to draw students to this field? (Choose three.)

high earning potential
a career-field in high-demand
the CompTIA A+ certification provides an adequate knowledge base for the field
a job with routine, day-to-day tasks
service to the public
a field requiring a PhD degree

4. Question

3 points

What are three states of data during which data is vulnerable? (Choose three.)

stored data
data encrypted
data decrypted
purged data
data in-transit
data in-process

5. Question

1 points

Which framework should be recommended for establishing a comprehensive information security management system in an organization?

CIA Triad
ISO OSI model
NIST/NICE framework
ISO/IEC 27000

6. Question

1 points

Which technology can be used to ensure data confidentiality?

hashing
identity management
encryption
RAID

7. Question

1 points

Which data state is maintained in NAS and SAN services?

stored data
data in-transit
encrypted data
data in-process

8. Question

1 points

A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?

Implement RAID.
Implement a firewall.
Implement intrusion detection systems.
Implement a VLAN.

9. Question

1 points

A penetration testing service hired by the company has reported that a backdoor was identified on the network. What action should the organization take to find out if systems have been compromised?

Look for policy changes in Event Viewer.
Scan the systems for viruses.
Look for unauthorized accounts.
Look for usernames that do not have passwords.

10. Question

1 points

What type of attack has an organization experienced when an employee installs an unauthorized device on the network to view network traffic?

spoofing
spamming
sniffing
phishing

11. Question

2 points

What are the two most effective ways to defend against malware? (Choose two.)

Update the operating system and other application software.
Implement RAID.
Implement network firewalls.
Implement strong passwords.
Install and update antivirus software.
Implement a VPN.

12. Question

1 points

The employees in a company receive an email stating that the account password will expire immediately and requires a password reset within 5 minutes. Which statement would classify this email?

It is a DDoS attack.
It is a hoax.
It is an impersonation attack.
It is a piggy-back attack.

13. Question

3 points

What three best practices can help defend against social engineering attacks? (Choose three.)

Enable a policy that states that the IT department should supply information over the phone only to managers.
Educate employees regarding policies.
Add more security guards.
Do not provide password resets in a chat window.
Deploy well-designed firewall appliances.
Resist the urge to click on enticing web links.

14. Question

1 points

Which statement describes a distributed denial of service attack?”

An attacker builds a botnet comprised of zombies.
An attacker sends an enormous quantity of data that a server cannot handle.
An attacker views network traffic to learn authentication credentials.
One computer accepts data packets based on the MAC address of another computer.

15. Question

1 points

What is an impersonation attack that takes advantage of a trusted relationship between two systems?

sniffing
spamming
man-in-the-middle
spoofing

16. Question

1 points

Smart cards and biometrics are considered to be what type of access control?

technological
logical
physical
administrative

17. Question

1 points

Which statement describes a characteristics of block ciphers?

Block ciphers are faster than stream ciphers.
Block ciphers result in compressed output.
Block ciphers encrypt plaintext one bit at a time to form a block.
Block ciphers result in output data that is larger than the input data most of the time.

18. Question

1 points

Before data is sent out for analysis, which technique can be used to replace sensitive data in nonproduction environments to protect the underlying information?

steganalysis
software obfuscation
steganography
data masking substitution

19. Question

1 points

Which access control should the IT department use to restore a system back to its normal state?

preventive
detective
corrective
compensative

20. Question

1 points

In which situation would a detective control be warranted?

when the organization cannot use a guard dog, so it is necessary to consider an alternative
after the organization has experienced a breach in order to restore everything back to a normal state
when the organization needs to repair damage
when the organization needs to look for prohibited activity

21. Question

1 points

An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?

administrative
logical
physical
technological

22. Question

1 points

A user has a large amount of data that needs to be kept confidential. Which algorithm would best meet this requirement?

ECC
Diffie-Hellman
RSA
3DES

23. Question

1 points

Alice and Bob are using public key encryption to exchange a message. Which key should Alice use to encrypt a message to Bob?

the private key of Alice
the public key of Bob
the public key of Alice
the private key of Bob

24. Question

1 points

Which hashing technology requires keys to be exchanged?

MD5
HMAC
salting
AES

25. Question

1 points

What kind of integrity does a database have when all its rows have a unique identifier called a primary key?

user-defined integrity
referential integrity
entity integrity
domain integrity

26. Question

1 points

What technology should be implemented to verify the identity of an organization, to authenticate its website, and to provide an encrypted connection between a client and the website?

digital signature
salting
asymmetric encryption
digital certificate

27. Question

1 points

You have been asked to work with the data collection and entry staff in your organization in order to improve data integrity during initial data entry and data modification operations. Several staff members ask you to explain why the new data entry screens limit the types and size of data able to be entered in specific fields. What is an example of a new data integrity control?

a limitation rule which has been implemented to prevent unauthorized staff from entering sensitive data
a validation rule which has been implemented to ensure completeness, accuracy, and consistency of data
data encryption operations that prevent any unauthorized users from accessing sensitive data
data entry controls which only allow entry staff to view current data

28. Question

1 points

You have been asked to describe data validation to the data entry clerks in accounts receivable. Which of the following are good examples of strings, integers, and decimals?

male, $25.25, veteran
yes/no 345-60-8745, TRF562
800-900-4560, 4040-2020-8978-0090, 01/21/2013
female, 9866, $125.50

29. Question

1 points

Which hashing algorithm is recommended for the protection of sensitive, unclassified information?

SHA-256
3DES
MD5
AES-256

30. Question

1 points

What technology should you implement to ensure that an individual cannot later claim that he or she did not sign a given document?

asymmetric encryption
HMAC
digital certificate
digital signature

31. Question

1 points

A VPN will be used within the organization to give remote users secure access to the corporate network. What does IPsec use to authenticate the origin of every packet to provide data integrity checking?

password
HMAC
CRC
salting

32. Question

1 points

There are many environments that require five nines, but a five nines environment may be cost prohibitive. What is one example of where the five nines environment might be cost prohibitive?

the U.S. Department of Education
the front office of a major league sports team
department stores at the local mall
the New York Stock Exchange

33. Question

1 points

Which technology would you implement to provide high availability for data storage?

software updates
RAID
hot standby
N+1

34. Question

1 points

An organization wants to adopt a labeling system based on the value, sensitivity, and criticality of the information. What element of risk management is recommended?

asset classification
asset availability
asset identification
asset standardization

35. Question

1 points

Keeping data backups offsite is an example of which type of disaster recovery control?

detective
management
preventive
corrective

36. Question

1 points

What approach to availability involves using file permissions?

obscurity
layering
simplicity
limiting

37. Question

1 points

Being able to maintain availability during disruptive events describes which of the principles of high availability?

single point of failure
uninterruptible services
fault tolerance
system resiliency

38. Question

1 points

What approach to availability provides the most comprehensive protection because multiple defenses coordinate together to prevent attacks?

layering
obscurity
limiting
diversity

39. Question

2 points

What are two incident response phases? (Choose two.)

detection and analysis
prevention and containment
confidentiality and eradication
risk analysis and high availability
mitigation and acceptance
containment and recovery

40. Question

1 points

What is it called when an organization only installs applications that meet its guidelines, and administrators increase security by eliminating all other applications?

asset availability
asset standardization
asset classification
asset identification

41. Question

1 points

Which of the following products or technologies would you use to establish a baseline for an operating system?

MS Baseliner
Microsoft Security Baseline Analyzer
CVE Baseline Analyzer
SANS Baselining System (SBS)

42. Question

1 points

Which protocol would be used to provide security for employees that access systems remotely from home?

WPA
Telnet
SCP
SSH

43. Question

1 points

Which wireless standard made AES and CCM mandatory?

WPA2
WEP2
WPA
WEP

44. Question

1 points

Which utility uses the Internet Control Messaging Protocol (ICMP)?

NTP
ping
DNS
RIP

45. Question

1 points

Mutual authentication can prevent which type of attack?

wireless sniffing
man-in-the-middle
wireless IP spoofing
wireless poisoning

46. Question

1 points

What Windows utility should be used to configure password rules and account lockout policies on a system that is not part of a domain?

Active Directory Security tool
Local Security Policy tool
Event Viewer security log
Computer Management

47. Question

3 points

Which three protocols can use Advanced Encryption Standard (AES)? (Choose three.)

WPA2
WEP
WPA
TKIP
802.11q
802.11i

48. Question

1 points

Which website offers guidance on putting together a checklist to provide guidance on configuring and hardening operating systems?

The National Vulnerability Database website
Internet Storm Center
The Advanced Cyber Security Center
CERT

49. Question

1 points

Which threat is mitigated through user awareness training and tying security awareness to performance reviews?

cloud-related threats
device-related threats
user-related threats
physical threats

50. Question

1 points

Which law was enacted to prevent corporate accounting-related crimes?

The Federal Information Security Management Act
Import/Export Encryption Act
Gramm-Leach-Bliley Act
Sarbanes-Oxley Act

Average score
Your score