Cloud and Wireless Security

Question 1

What is it called when someone in an organization looks at the data they have in their organization, and start to classify it based on its privacy and confidentiality level?

Answer 1

Data classification

Question 2

Which data classification includes data about people that must be kept private, organizations must use proper security controls to be in compliance?

Answer 2

Private Data

Question 3

What data classification involves information or data owned by the organization including intellectual property, customer lists, pricing information, and patents?

Answer 3

Confidential

Question 4

What data classification involves information or data shared internally by an organization, although confidential information and/or data may not be included, communications are not intended to leave the organization?

Answer 4

Internal use only

Question 5

What data classification involves information or data shared with the public, such as website content, white papers, and the like?

Answer 5

Public domain data

Question 6

What type of access control has each individual owner of a resource manage their own access control policy?

Answer 6

Discretionary access control (DAC)

Question 7

What type of access control groups users into common categories and applies permissions to those categories and refer to them as roles?

Answer 7

Role-based Access Control (RBAC)

Question 8

What type of access control have permissions based on attributes such as location, time, or device?

Answer 8

Attribute-based access control (ABAC)

Question 9

What type of access control has access allowed or denied based on fixed rules?

Answer 9

Rule-based Access Control (RuBAC)

Question 10

What type of access control is based on the context or state of the transaction and evaluates the situation or environment in which the access request is being made?

Answer 10

Context-based Access Control (CBAC)

Question 11

What do you call stored, inactive data?

Answer 11

Data at rest

Question 12

What do you call data being transmitted over a network?

Answer 12

Data in Transit

Question 13

What are the four aspects of access control?

Answer 13

Identification, Authentication, Authorization, and Accountability

Question 14

Which aspect of access control are assertions made by users about who they are?

Answer 14

Identification

Question 15

Which aspect of access control is proving identification?

Answer 15

Authentication

Question 16

Which aspect of access control are the permissions of a legitimate user or process has on the system?

Answer 16

Authorization

Question 17

Which aspect of access control is tracking or logging what users do while accessing the system?

Answer 17

Accountability

Question 18

What is the weakest wireless encryption standard?

Answer 18

Wired Equivalent Privacy (WEP)

Question 19

What is the second weakest wireless encryption standard?

Answer 19

Wi-Fi Protected Access (WPA)

Question 20

What wireless encryption standard is most commonly used today?

Answer 20

WPA2

Question 21

What is the strongest wireless encryption standard?

Answer 21

WPA3

Question 22

Which wireless network infrastructure mode a type of network where devices communicate directly with each other without a central access point?

Answer 22

Ad-hoc

Question 23

Which wireless network infrastructure mode is network type that involves devices connecting through a central access point, like a router, which facilitates a more stable and organized network structure?

Answer 23

Infrastructure

Question 24

What type of attack involves an attacker providing malicious SQL statements to access unauthorized data or carry out unauthorized commands?

Answer 24

SQL injection attack

Question 25

What attack involves setting up a rouge AP for the legitimate users to sniff data?

Answer 25

Evil twin or rogue access point attack

Question 26

What attack involves an attacker fooling the network into addressing packets to his or her computer by supplying its MAC address to the network in response to ARP requests, once the ARP information is set, packets are routed through the attacker’s computer, captured, and then forwarded to the legitimate recipient?

Answer 26

Arp poisoning or arp spoofing attack

Question 27

What attack forces a wireless client (or all wireless clients) off of the wireless network?

Answer 27

Deauthentication attack