CH 2 COVERS OBJ 2.1, 2.3, 3.1, 3.2, 4.2, 4.3

Question 1

WHAT IS A BOTNET

Answer 1

GROUP OF COMPROMISED COMPUTERS USUALLY WORKING TOGETHER WITH MALWARE THAT WAS INSTALLED BY A WORM OR A TROJAN HORSE

Question 2

AN INDIVIDUAL COMPUTER WITHIN A BOTNET IS REFERRED TO AS WHAT

Answer 2

ZOMBIE

Question 3

WHAT IS A VIRUS

Answer 3

CODE THAT CAN INFECT A COMPUTER’S FILES

Question 4

WHAT IS A HONEYPOT

Answer 4

COMPUTER THAT IS USED TO LURE ATTACKERS AND QUARANTINE THEIR ATTACK SO IT CAN BE ANALYZED, AND DOES NOT SPREAD TO THE REST OF THE NETWORK

Question 5

WHAT ARE SOME DRAWBACKS TO USING HIDS INSTEAD OF NIDS

Answer 5

HIDS MAY USE A LOT OF RESOURCES, WHICH CAN SLOW SERVER PERFORMANCE AND HIDS CANNOT DETECT NETWORK ATTACKS

Question 6

WHAT ATTACKS CAN HIDS DETECT

Answer 6

OPERATING SYSTEM ATTACKS AND WILL HAVE A HIGH LEVEL OF DETECTION FOR THOSE ATTACKS

Question 7

WHAT IS A ZOMBIE

Answer 7

SYSTEMS THAT HAVE BEEN COMPROMISED WITHOUT THE KNOWLEDGE OF THE OWNER

Question 8

WHAT COMPUTER SECURITY THREATS CAN BE UPDATED AUTOMATICALLY AND REMOTELY

Answer 8

ZOMBIE

Question 9

HOW DOES YOUR COMPUTER BECOME A ZOMBIE

Answer 9

COMPUTER MUST BE CONNECTED TO THE INTERNET SO THAT THE HACKER OR MALICIOUS ATTACK CAN MAKE ITS WAY TO THE COMPUTER AND BE CONTROLLED REMOTELY

Question 10

WHAT IS THE BEST MODE TO USE WHEN SCANNING FOR VIRUSES

Answer 10

SAFE MODE

Question 11

WHAT IS A COMMON SYMPTOM OF SPYWARE

Answer 11

POP-UP WINDOWS

Question 12

WHAT ARE COMMON SYMPTOMS OF VIRUSES

Answer 12

INFECTED FILES, COMPUTER SHUTS DOWN, APPLICATIONS FREEZE

Question 13

WHAT ARE TWO WAYS TO SECURE THE COMPUTER WITHIN THE BIOS

Answer 13

CONFIGURE A SUPERVISOR PASSWORD AND SET THE HARD DRIVE FIRST IN THE BOOT ORDER

Question 14

DAN IS A NETWORK ADMINISTRATOR. ONE DAY HE NOTICES THAT HIS DHCP SERVER IS FLOODED WITH INFORMATION. HE ANALYZES IT AND FINDS THAT THE INFORMATION IS COMING FORM MORE THAN 50 COMPUTERS ON THE NETWORK. WHICH OF THE FOLLOWING IS THE MOST LIKELY REASON

Answer 14

A WORM IS MOSTLY LIKELY THE REASON THAT THE SERVER IS BEING BOMBARDED WITH INFORMATION BY THE CLIENTS

Question 15

NAME 3 EXAMPLES OF MALICIOUS SOFTWARE

Answer 15

ROOTKITS, SPYWARE, AND VIRUSES

Question 16

WHAT TYPE OF ATTACK USES MORE THAN ONE COMPUTER

Answer 16

DDOS-DISTRIBUTED DENIAL OF SERVICE

Question 17

WHAT ARE 2 WAYS IN WHICH YOU CAN STOP EMPLOYEES FROM USING USB FLASH DRIVES

Answer 17

DISABLE USB IN BIOS AND DISABLE THE USB ROOT HUB IN THE OPERATING SYSTEM

Question 18

NAME 2 BLUETOOTH THREATS

Answer 18

BLUESNARFING AND BLUEJACKING

Question 19

WHAT IS A MALICIOUS ATTACK THAT EXECUTES AT THE SAME TIME EVERY WEEK

Answer 19

A LOGIC BOMB

Question 20

TIM BELIEVES THAT HIS COMPUTER HAS A WORM. THAT IS THE BEST TOOL TO USE TO REMOVE THAT WORM

Answer 20

ANTIVIRUS SOFTWARE

Question 21

ACTIVE INTERCEPTION INCLUDES WHAT

Answer 21

A COMPUTER PLACED BETWEEN THE SENDER AND THE RECEIVER TO CAPTURE INFORMATION

Question 22

WHAT TYPE OF SCANNER CAN LOCATE A ROOTKIT ON A COMPUTER

Answer 22

MALWARE SCANNER

Question 23

WHAT TYPE OF MALWARE DOES NOT REQUIRE A USER TO EXECUTE A PROGRAM TO DISTRIBUTE THE SOFTWARE

Answer 23

WORM

Question 24

WHAT IS A WORM

Answer 24

SAME AS A VIRUS BUT IT SELF REPLICATES

Question 25

WHAT IS A ROOTKIT

Answer 25

TYPE OF SOFTWARE DESIGNED TO GAIN ADMINISTRATOR LEVEL CONTROL OVER A COMPUTER SYSTEM WITHOUT BEING DETECTED

Question 26

IS HIDS CONSIDER AN INLINE DEVICE

Answer 26

NO BECAUSE THEY RUN ON AN INDIVIDUAL COMPUTER

Question 27

NAME 3 INLINE DEVICES

Answer 27

FIREWALLS, ROUTERS, AND CSU/DSU

Question 28

WHAT IS BLUEJACKING

Answer 28

SENDING OF UNSOLICITED MESSAGES TO BLUETOOTH ENABLED DEVICES SUCH AS MOBILE PHONES

Question 29

WHAT IS BLUESNARFING

Answer 29

UNAUTHORIZED ACCESS OF INFORMATION FROM A WIRELESS DEVICE THROUGH A BLUETOOTH CONNECTION

Question 30

WHITELISTING, BLACKLISTING, AND CLOSING OPEN RELAYS ARE ALL MITIGATION TECHNIQUES ADDRESSING WHAT KIND OF THREAT

Answer 30

SPAM

Question 31

HOW DO MOST NETWORK VIRUSES SPREAD

Answer 31

THROUGH EMAIL

Question 32

WHAT IS THE DIFFERANCE BETWEEN A TROJAN HOUSE AND A WORM

Answer 32

A WORMS SELF REPLICATES WITHOUT USER INTERVENTION AND TROJAN HORSES DO NOT SELF REPLICATE

Question 33

WHAT TYPE OF VIRUS HIDES ITS CODE TO MASK ITSELF

Answer 33

ARMORED VIRUS

Question 34

NAME THE TYPES OF VIRUSES

Answer 34

BOOT SECTOR, MACRO, PROGRAM, POLYMORPHIC, STEALTH, ARMORED, MULTIPARTITE

Question 35

NAME THE TYPES OF VIRUSES

Answer 35

BOOT SECTOR, MACRO, PROGRAM, POLYMORPHIC, STEALTH, ARMORED, MULTIPARTITE

Question 36

WHAT TYPE OF MALWARE APPEARS TO THE USER AS LEGITIMATE BUT ACTUALLY ENABLES UNAUTHORIZED ACCESS TO THE USERS COMPUTER

Answer 36

TROJAN

Question 37

WHAT WOULD BE CONSIDERED DETRIMENTAL EFFECTS OF A VIRUS

Answer 37

TECHNICAL SUPPORT RESOURCES ARE CONSUMED BY INCREASED USER CALLS AND USERS ARE TRICKED INTO CHANGING THE SYSTEM CONFIGURATION

Question 38

TO MITIGATE RISKS WHEN USERS ACCESS COMPANY EMAIL WITH THEIR SMARTPHONE, WHAT SECURITY POLICY SHOULD BE IMPLEMENTED

Answer 38

A PASSWORD SHOULD BE SET ON THE SMARTPHONE AND THE PHONE SHOULD LOCK AFTER A CERTAIN TIME PERIOD

Question 39

YOUR MANAGER WANTS YOU TO IMPLEMENT A TYPE OF INTRUSION DETECTION SYSTEM (IDS) THAT CAN BE MATCHED TO CERTAIN TYPES OF TRAFFIC PATTERNS. WHAT KIND OF IDS IS THIS

Answer 39

SIGNATURE BASED IDS

Question 40

YOU ARE THE SECURITY ADMINISTRATOR FOR YOUR ORGANIZATION. YOU WANT TO ENSURE THE CONFIDENTIALITY OF DATA ON MOBILE DEVICES. WHAT IS THE BEST SOLUTION?

Answer 40

DEVICE ENCRYPTION IS THE BEST SOLUTION TO PROTECT THE CONFIDENTIALITY OF DATA.

Question 41

YOU ARE TASK WITH IMPLEMENTING A SOLUTION THAT ENCRYPTS THE CEO'S LAPTOP. HOWEVER YOU AR NOT ALLOWED TO PURCHASE ADDITIONAL HARDWARE OR SOFTWARE. WHICH OF THE FOLLOWING SOLUTIONS SHOULD YOU IMPLEMENT

Answer 41

TPM OR TRUSTED PLATFORM MODULE IS A CHIP THAT RESIDES ON THE MOTHERBOARD OF THE LAPTOP. IT GENERATE CRYPTOGRAPHIC KEYS THAT ALLOW THE ENTIRE DISK TO BE ENCRYPTED AS IN FULL DISK ENCRYPTION

Question 42

ONE OF YOUR CO-WORKERS COMPLAINS OF VERY SLOW SYSTEM PERFORMANCE AND SAYS THAT A LOT OF ANTIVIRUS MESSAGES ARE BEING DISPLAYED. THE USER ADMITS TO RECENTLY INSTALLING PIRATED SOFTWARE AND DOWNLOADING AND INSTALLING AN ILLEGAL KEYGEN TO ACTIVATE THE SOFTWARE. WHAT TYPE OF MALWARE HAS AFFECTED THE USER'S COMPUTER

Answer 42

A TROJAN WAS PROBABLY INSTALLED AS PART OF THE KEYGEN PACKAGE

Question 43

A SMARTPHONE HAS BEEN LOST. YOU NEED TO ENSURE 100% THAT NO DATA CAN BE RETRIEVED FROM IT. WHAT SHOULD YOU DO?

Answer 43

REMOTE WIPE