Chapter 9 Review Questions

Question 1

Which of the following are activities that a hacker might attempt?

A. Stealing usernames and passwords 
B. Modifying website content 
C. Disrupting network communications 
D. Analyzing network traffic 
E. All of the above

Answer 1

All of the above

Question 2

You have invented a new toy that will be the most popular toy for children this year. What type of intellectual property protection should you get?

A. Trademark
B. Copyright
C. Patent
D. Receipt

Answer 2

Patent

Question 3

Which of the following are threats to data availability? (Choose two.)

A. Service outage
B. Replay attack
C. Wiretapping
D. Destruction

Answer 3

Service outage

Destruction

Question 4

What is the name of an application that appears to look like a helpful application but instead does harm to your computer?

A. Virus
B. Worm
C. Malware
D. Trojan horse

Answer 4

Trojan Horse

Question 5

Someone was recently caught sifting through your company’s trash looking for confidential information. What is this an example of?

A. Trash snooping
B. Dumpster diving
C. Phishing
D. Social engineering

Answer 5

Dumpster diving

Question 6

You are implementing multifactor security on a computer. Which of the following is not a valid factor?

A. Receipt
B. Password
C. Hardware token
D. Specific location

Answer 6

Receipt

Question 7

You have been asked to lead a class on preventing social engineering. What two topics should you be sure to cover? (Choose two.)

A. Viruses and worms
B. Shoulder surfing
C. Hardware theft
D. Phishing

Answer 7

Shoulder surfing

Phishing

Question 8

On a network, a user needs to access three different types of systems. However, they are required to enter their username and password only when they initially log in. Which term best explains this?

A. Authentication
B. Single sign-on
C. Authorization
D. Nonrepudiation

Answer 8

Single sign-on

Question 9

You receive an email from your bank telling you that your account has been compromised and you need to validate your account details or else your account will be closed. You are supposed to click a link to validate your information. What is this an example of?

A. A security breach at your bank that needs to be resolved
B. Spam
C. Ransomware
D. Phishing

Answer 9

Phishing

Question 10

If you are concerned about confidentiality of client records, which of the following should you be on the lookout for? (Choose two.)

A. Eavesdropping
B. Denial of service
C. Social engineering
D. Replay attack

Answer 10

Eavesdropping

Social engineering

Question 11

What is it called when a co-worker sitting next to you always seems to look your way when you try to enter your user ID and password to log onto the network?

A. Phishing
B. Social engineering
C. Shoulder surfing
D. Coincidence

Answer 11

Shoulder surfing

Question 12

Which of the following security terms best describes the process of determining what a user can do with a resource?

A. Authentication
B. Authorization
C. Accounting
D. Nonrepudiation

Answer 12

Authorization

Question 13

Which of the following operating systems are susceptible to viruses?

A. Windows
B. Windows and macOS
C. Windows, macOS, and Linux
D. Windows, macOS, Linux, and Android

Answer 13

Windows, macOS, Linux, and Android

Question 14

A network administrator wants to enable accounting on her network. Which options should she use? (Choose two.)

A. Biometrics
B. Transaction logs
C. Software tokens
D. Web browser history

Answer 14

Transaction logs

Web browser history

Question 15

Which of the following can be used as an authentication factor and for nonrepudiation?

A. Password
B. One-time password
C. Biometrics
D. Security question

Answer 15

Biometrics

Question 16

Your manager is concerned about potential wiretapping on the wireless network. What type of concern is this?

A. Availability
B. Authorization
C. Integrity
D. Confidentiality

Answer 16

Confidentiality

Question 17

To log into a network, you must use a password and answer a security question. What is this an example of?

A. Multifactor authentication
B. Single sign-on
C. Authorization
D. Nonrepudiation

Answer 17

Multifactor authentication

Question 18

Which of the following threats can directly impact data integrity on a network? (Choose two.)

A. Snooping
B. Man-in-the-middle
C. Impersonation
D. Denial of service

Answer 18

Man-in-the-middle

Impersonation

Question 19

Your network’s security model requires that the administrator configure permissions based on a user’s job within the company. What does this describe?

A. Rule-based access control
B. Role-based access control
C. Discretionary access control
D. Mandatory access control

Answer 19

Role-based access control

Question 20

Esther has just written a new book, and she wants to ensure that she owns the intellectual property. Which type of protection should she get?

A. Digital product
B. Trademark
C. Patent
D. Copyright

Answer 20

Copyright