A+ 902 Test 15

Question 1

Phishing scams targeting a specific group of people are generally referred to as:

Answer 1

Spear phishing

Question 2

An email sent from an unknown source disguised as the source known to the message receiver is an example of:

Answer 2

Spoofing

Social engineering

Question 3

Which of the answers listed below refers to a network protocol used in the most common types of spoofing attacks?

Answer 3

SMTP

Question 4

An unauthorized practice of obtaining confidential information by manipulating people into disclosing sensitive data is known as:

Answer 4

Social engineering

Question 5

Which of the following fall(s) into the category of social engineering attacks?

Answer 5

Spear phishing
Shoulder surfing
Tailgating

Question 6

In computer security, a situation in which an unauthorized person is able to view another user’s display or keyboard to learn their password or other confidential information is known as:

Answer 6

Shoulder surfing

Question 7

A zero-day attack exploits:

Answer 7

Vulnerability that is present in already released software but unknown to the software developer

Question 8

A computer that has been compromised by a virus or Trojan horse that puts it under the remote control of an online hijacker is called:

Answer 8

Zombie

Question 9

Which of the following terms is used to describe a collection of intermediary compromised systems under control of a hacker?

Answer 9

Botnet

Question 10

An attack against encrypted data that relies heavily on computing power in order to check all possible keys and passwords until the correct one is found is known as a brute-force attack.

Answer 10

True

Question 11

Which of the password attacks listed below takes advantage of a predefined list of words?

Answer 11

Dictionary attack

Question 12

What type of security measure is in place when a client is denied access to the network due to an outdated antivirus software?

Answer 12

NAC

Question 13

Which of the following answers refer(s) to the implementation of best security practices in a corporate environment?

Answer 13

User education
Strong authentication
Principle of least privilege
Patch/update management
Appropriate data destruction and disposal methods

Question 14

What is tailgating?

Answer 14

Gaining unauthorized access to restricted areas by following another person

Question 15

Which of the following is an example of active eavesdropping?

Answer 15

MITM

Question 16

The term “Mantrap” refers to a physical security access control system used to prevent unauthorized users from gaining access to restricted areas by following another person. An example mantrap could be a two-door entrance point connected to a guard station wherein a person entering mantrap from the outside remains locked inside until he/she provides authentication token required to unlock the inner door.

Answer 16

True

Question 17

Which of the security controls listed below is used to prevent tailgating?

Answer 17

Mantraps

Question 18

Which of the following provides physical security measure against laptop theft?

Answer 18

Cable locks

Question 19

Which of the tools listed below allows for secure disposal of physical documents?

Answer 19

Shredder

Question 20

A type of identification badge that can be held within a certain distance of the reader to authenticate the holder is called:

Answer 20

RFID badge

Question 21

Privacy filter (aka privacy screen) is a protective overlay placed on the computer screen that narrows the viewing angle so data is only visible directly in front of the monitor and cannot be seen by others nearby. Privacy filter is one of the countermeasures against shoulder surfing.

Answer 21

True

Question 22

Which of the following prevention methods fall(s) into the category of physical security controls?

Answer 22

Key fob
Door lock
Biometrics
RFID badge

Question 23

The two factors that are considered important for creating strong passwords are:

Answer 23

Password length

Password complexity

Question 24

Authentication process can be based on different categories of authentication factors, including unique physical traits of each individual such as fingerprints (“something you are”), physical tokens such as smart cards (“something you have”), or user names and passwords (“something you know”). Additional factors might include geolocation (“somewhere you are”), or user-specific activity patterns, such as for example keyboard typing style (“something you do”). Multifactor authentication systems require implementation of authentication factors from two or more different categories.

Answer 24

True

Question 25

Which of the following examples meets the requirement of multifactor authentication?

Answer 25

Password and biometric scan