Chapt 9

Question 1

what type of bio-metric sensor is on newer mobile devices?

Answer 1

fingerprint scanner

Question 2

when someone goes through the trash to obtain sensitive info, that is called ?

Answer 2

dumpster diving

Question 3

asking users to reveal sensitive or personal info over the phone is referred to as ______ _______?

Answer 3

social engineering

Question 4

looking at someone’s computer to see sensitive info they type in or display is called what?

Answer 4

shoulder surfing

Question 5

a problem in the coding of software that is used by an attacker is called what?

Answer 5

exploit

Question 6

malware that attaches itself to an executable program and does damage to your computer is called what?

Answer 6

virus

Question 7

malware that self-replicates and carries a payload of other malware is called what?

Answer 7

worm

Question 8

a program that appears to be beneficial but is actually malware is called what?

Answer 8

trojan horse

Question 9

malware that tracks your internet activity and sells that info to marketers is called what?

Answer 9

spyware

Question 10

malware that extorts those infected to pay a fee to remove the malware is called what?

Answer 10

ransomware

Question 11

excessive, unwanted email is referred to as what?

Answer 11

spam

Question 12

if you forget a password, what type of software can help you recover it?

Answer 12

password cracker

Question 13

the three types of intellectual property protection are what?

Answer 13

copyright, trade mark, patents

Question 14

a(n) _____ is used for intellectual property protection of a logo, word or words

Answer 14

trademark

Question 15

a(n) ____ is used for intellectual property protection of a book or a song.

Answer 15

copyright

Question 16

a(n) ______ is used for intellectual property protection of an invention.

Answer 16

patent

Question 17

what are five examples of confidentiality concerns?

Answer 17

snooping, eavesdropping, wiretapping, social engineering, and dumpster diving

Question 18

what are four examples of integrity concerns?

Answer 18

man in the middle, replay attack, impersonation, unauthorized information alteration

Question 19

what are five examples of availability concerns?

Answer 19

denial of service, power outage, hardware failure, destruction, service outage

Question 20

in information security, a(n) __________ concern is one that involves maintaining privacy of data.

Answer 20

confidentiality

Question 21

in information security, a(n) _______ concern is one that involves ensuring the data in true and accurate.

Answer 21

integrity

Question 22

in information security, a(n) _______ concern is one that involves ensuring the data is accessible when users need it

Answer 22

availability

Question 23

requiring another form of identification in addition to a password in order to log in is know as what?

Answer 23

multi factor authentication

Question 24

list examples of authentication factors.

Answer 24

password, pin, one-time password, software token, hardware token, bio-metrics, specific location, security questions

Question 25

when a user types a password once and is given access to multiple systems, what is that called?

Answer 25

single sign on

Question 26

what security concept asks the question, 'who are you'?

Answer 26

authentication

Question 27

what security concept determines what you can do on a network?

Answer 27

authorization

Question 28

when assigning security permissions, always follow the _______ _______ model.

Answer 28

least privilege

Question 29

when users are allowed to assign their own permissions, that is known as a _____ access control model.

Answer 29

discretionary

Question 30

when users are assigned permissions based on job function and can't be assigned permissions based on their user account, that is known as a _______ access control model.

Answer 30

role-based

Question 31

which access control model uses security labels, classifications, and categories?

Answer 31

mandatory access control

Question 32

which security concept is responsible for tracking user actions on a system?

Answer 32

accounting

Question 33

which security concept ensures that users can't deny that an event took place?

Answer 33

nonrepudiation

Question 34

two ways to track user actions on a system are what?

Answer 34

logs and web browser history

Question 35

what are four examples of non-repudiation factors?

Answer 35

video, bio-metrics, signature, receipt

Question 36

needing to provide a password and present a smart card to log in is an example of __________ __________.

Answer 36

multifactor authentication

Question 37

three types of info used in multi-factor authentication are what?

Answer 37

something you know, something you have, something you are

Question 38

the ability to enter login information once and have it transfer to other systems is called what?

Answer 38

single sign on

Question 39

you have been asked to lead a class on preventing social engineering. what two topics should you be sure to cover. choose two. viruses and worms shoulder surfing hardware theft phishing

Answer 39

shoulder surfing and phishing

Question 40

what is the name of an app that appears to look like a helpful app but instead does harm to your computer? worm, virus, trojan horse, malware

Answer 40

trojan horse

Question 41

you recieve an email from your bank telling you that your account has been compromised and you need to validate your account details or else your account will be closed. you are supposed to click a link to validate your information. this is an example of? phishing security breach at the bank spam ransomware

Answer 41

phishing

Question 42

which of the following security terms best describes the process of determining what a user can do with a resource? accounting, authorization, authentication, nonrepudiation

Answer 42

authorization

Question 43

your network's security model requires that the admin configure permissions based on a user's job within the company. what 'access control' does this describe? discretionary, mandatory, rule-based, role-based

Answer 43

role based

Question 44

which of the following can be used as an authentication factor and for nonrepudiation? bio-metrics, one-time password, password, security question

Answer 44

biometrics

Question 45

which of the following OS's are susceptible to viruses? win, mac, linux win and mac win win, mac, linux, android

Answer 45

win, mac, linux, android

Question 46

esther has just written a new book, and she wants to ensure that she owns the intellectual property. which type of protection should she get? patent, copyright, digital product, trademark

Answer 46

copyright

Question 47

which of the following are threats to data availability? choose two: wiretapping, replay attack, service outage, destruction

Answer 47

service outage and destruction

Question 48

to log into a network you must use a password and answer a security question. what is this an example of? multifactor authentication, single sign on, authorization, nonrepudiation

Answer 48

multifactor authentication

Question 49

you are implementing multi factor security on a computer. which of the following is not a valid factor? hardware token, specific location, receipt, password

Answer 49

receipt

Question 50

what is it called when a co-worker sitting next to you always seems to look your way when you try to enter your user id and password to log onto the network? phishing, coincidence, shoulder surfing, social engineering

Answer 50

shoulder surfing

Question 51

which of the following statements are true of social engineering? choose two: a) the attacker attempts to acquire info about your network or system by public means b) the attack may occur over the phone, by email or even in person. c) the attacker goes through the dumpster to steal info d) the attacker keeps an eye when someone enter their sensitive info or data

Answer 51

a) the attacker attempts to acquire info about your network or system by public means b) the attack may occur over the phone, by email or even in person.

Question 52

on a network, a user needs to access three different types of systems. however, they are required to enter their username and password only when they initially login. this is? authentication, nonrepudiation, authorization, single sign on

Answer 52

single sign on

Question 53

you are concerned about confidentiality of client records, which of the following should you be on the lookout for? choose two: replay attack, social engineering, denial of service, eavesdropping

Answer 53

social engineering and eaves dropping

Question 54

you have invented a toy, what type of intellectual protection should you get? trademark, receipt, patent, copyright

Answer 54

patent

Question 55

your manager is concerned about potential wiretapping on the wireless network. what type of concern is this? authorization, integrity, confidentiality, availability

Answer 55

confidentiality

Question 56

which of the following are activities that a hacker might attempt? stealing usernames and passwords modifying website content disrupting network comms analyzing network traffic all of these

Answer 56

all

Question 57

which of the following threats can directly impact data integrity on a network? choose two: denial of service, impersonation, man in the middle, snooping

Answer 57

impersonation, man in the middle

Question 58

a network admin wants to enable accounting on her network. which options should she use? choose two: bio-metrics, web browser history, software tokens, transaction logs

Answer 58

web browser history, transaction logs

Question 59

protect intellectual property that is a word or words or a symbol trademark, copyright, or patent

Answer 59

trademark

Question 60

protect intellectual property that is an original work of authorship trademark, copyright, or patent

Answer 60

copyright

Question 61

protect intellectual property that is an invention trademark, copyright, or patent

Answer 61

patent

Question 62

the attacker captures network traffic and then looks for key pieces of info. eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 62

snooping

Question 63

the attacker simply listens (with ears) to a conversation to glean key info eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 63

eavesdropping

Question 64

the attacker monitors the communication between two parties over network cables or wireless connections without authorization. eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 64

wiretapping

Question 65

the attacker attempts to acquire info about your network or system by public means. eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 65

social engineering

Question 66

the attacker uses info that the target would be less likely to question because it appears to be coming from a trusted source. eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 66

phishing

Question 67

the attacker keeps an eye when someone enter their sensitive info or data eavesdropping, shoulder surfing, snooping, social engineering, phishing, wiretapping

Answer 67

shoulder surfing

Question 68

ensures that private data stays that way integrity, availability, confidentiality

Answer 68

confidentiality

Question 69

means that the data is accurate and consistent integrity, availability, confidentiality

Answer 69

integrity

Question 70

means that the data is accessible by the user. integrity, availability, confidentiality

Answer 70

availability

Question 71

intercepting data then sending the data back and forth as if nothing is wrong. unauthorized info alteration man in the middle attack replay attack impersonation

Answer 71

man in the middle attack

Question 72

pretending to be something or someone that you are not to seek the information unauthorized info alteration man in the middle attack replay attack impersonation

Answer 72

impersonation

Question 73

changing data within a database to damage the company unauthorized info alteration man in the middle attack replay attack impersonation

Answer 73

unauthorized info alteration

Question 74

capturing information from a sender with the intent of using it later unauthorized info alteration man in the middle attack replay attack impersonation

Answer 74

replay attack

Question 75

used to cause damage and or disruption to the system virus, worm, adware, spyware, ransomware

Answer 75

virus

Question 76

used to transmit malware to harm other computers virus, worm, adware, spyware, ransomware

Answer 76

worm

Question 77

used to display unwanted ads on a screen virus, worm, adware, spyware, ransomware

Answer 77

adware

Question 78

used to report on you computer and possibly steal data virus, worm, adware, spyware, ransomware

Answer 78

spyware

Question 79

used to extract payments from the infected user virus, worm, adware, spyware, ransomware

Answer 79

ransomware

Question 80

seeks to keep a record of who accessed what and when, and the actions they performed accounting, authentication, authorization

Answer 80

accounting

Question 81

provides assurance and verification about the identity of a user accounting, authentication, authorization

Answer 81

authenication

Question 82

determines certain level of access for each user on the basis of policies, rules and attributes accounting, authentication, authorization

Answer 82

authorization

Question 83

considered as a visual proof that no one can deny video, bio-metrics, signature, receipt

Answer 83

video

Question 84

requires a fingerprint or facial scan for system access video, bio-metrics, signature, receipt

Answer 84

bio-metrics

Question 85

authorizes a cheque or document that has been agreed by you video, bio-metrics, signature, receipt

Answer 85

signature

Question 86

considered as a digital or paper proof of any purchase transaction video, bio-metrics, signature, receipt

Answer 86

receipt

Question 87

_________ concerns include snooping, eavesdropping, wiretapping, social engineering and dumpster diving

Answer 87

confidentiality

Question 88

_________ concerns include man in the middle attack, replay attack, impersonation and unauthorized info alteration

Answer 88

integrity

Question 89

________ concerns include denial of service, service outages, power outages, hardware failure, and hardware destruction

Answer 89

availability