Practice Test 1

Question 1

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems are commonly referred to as:

Adware
Malware
Ransomware
Spyware

Answer 1

Malware

Question 2

Which of the following statements apply to the definition of a computer virus? (Select 3 answers)

A self-replicating computer program containing malicious segment.
Requires its host application to be run to make the virus active.
A standalone malicious computer program that replicates itself over a computer network.
Can run by itself without any interaction.
Attaches itself to an application program or other executable component.
A self-contained malicious program or code that does need a host to propagate itself.

Answer 2

A self-replicating computer program containing malicious segment.
Requires its host application to be run to make the virus active.
Attaches itself to an application program or other executable component.

Question 3

Which of the terms listed below refers to an example of a crypto-malware?

Backdoor
Ransomware
Keylogger
Rootkit

Answer 3

Ransomware

Question 4

Malware that restricts access to a computer system by encrypting files or locking the entire system down until the user performs requested action is known as:

Grayware
Adware
Ransomware
Spyware

Answer 4

Ransomware

Question 5

A standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth is called:

Spyware
Worm
Trojan
Spam

Answer 5

Worm

Question 6

A type of software that performs unwanted and harmful actions in disguise of a legitimate and useful program is known as a Trojan horse. This type of malware may act like a legitimate program and have all the expected functionalities, but apart from that it will also contain a portion of malicious code that the user is unaware of.

True
False

Answer 6

True

Question 7

A collection of software tools used by a hacker to mask intrusion and obtain administrator-level access to a computer or computer network is known as:

Rootkit
Spyware
Backdoor
Trojan

Answer 7

Rootkit

Question 8

Which of the following answers lists an example of spyware?

Keylogger
Vulnerability scanner
Computer worm
Packet sniffer

Answer 8

Keylogger

Akeyloggeris a technology that tracks and records consecutive key strokes on a keyboard. Because sensitive information such as usernames and passwords are often entered on a keyboard, akeyloggercan be a very dangerous technology.Keyloggersare often part of malware, spyware or an external virus.

Question 9

What is adware?

Unsolicited or undesired electronic messages.
Malicious program that sends copies of itself to other computers on the network.
Software that displays advertisements.
Malicious software that collects information about users without their knowledge.

Answer 9

Software that displays advertisements.

Question 10

Malicious software collecting information about users without their knowledge/consent is known as:

Crypto-malware
Adware
Ransomware
Spyware

Answer 10

Spyware

Question 11

A malware-infected networked host under remote control of a hacker is commonly referred to as:

Trojan
Worm
Bot
Honeypot

Answer 11

Bot

Question 12

Which of the terms listed below applies to a collection of intermediary compromised systems that are used as a platform for a DDoS attack?

Honeynet
Botnet
Quarantine network
Malware

Answer 12

Botnet

Question 13

Which type of Trojan enables unauthorized remote access to a compromised system?

pcap
RAT
MaaS
pfSense

Answer 13

RAT

A remote access Trojan (RAT) is a malware program that includes a back door for administrative control over the target computer.RATsare usually downloaded invisibly with a user-requested program – such as a game – or sent as an email attachment.

Question 14

Malicious code activated by a specific event is called:

Backdoor
Logic bomb
Dropper
Retrovirus

Answer 14

Logic bomb

Question 15

Which of the following answers refers to an undocumented (and often legitimate) way of gaining access to a program, online service, or an entire computer system?

Logic bomb
Trojan horse
Rootkit
Backdoor

Answer 15

Backdoor

Question 16

An unauthorized practice of obtaining confidential information by manipulating people into disclosing sensitive data is referred to as:

Shoulder surfing
Privilege escalation
Social engineering
Penetration testing

Answer 16

Social engineering

Question 17

A fraudulent email requesting its recipient to reveal sensitive information (e.g. user name and password) used later by an attacker for the purpose of identity theft is an example of: (Select all that apply)
Phishing
Watering hole attack
Social engineering
Bluejacking
Vishing

Answer 17

Phishing

Social engineering

Question 18

A social engineering technique whereby attackers under disguise of legitimate request attempt to gain access to confidential information they shouldn’t have access to is commonly referred to as:

Phishing
Privilege escalation
Backdoor access
Shoulder surfing

Answer 18

Phishing

Question 19

Phishing scams targeting a specific group of people are referred to as:

Vishing
Spear phishing
Spoofing
Whaling

Answer 19

Spear phishing

Question 20

Phishing scams targeting people holding high positions in an organization or business are known as:

Vishing
Bluesnarfing
Whaling 
Bluejacking
Pharming

Answer 20

Whaling

Question 21

The practice of using a telephone system to manipulate user into disclosing confidential information is called:

Whaling
Spear phishing
Vishing
Pharming

Answer 21

Vishing

Question 22

What is tailgating?
Acquiring unauthorized access to confidential data.
Looking over someone’s shoulder to get information.
Gaining unauthorized access to restricted areas by following another person.
Manipulating a user into disclosing confidential information.

Answer 22

Gaining unauthorized access to restricted areas by following another person.

Question 23

Which social engineering attack relies on identity theft?

Impersonation
Dumpster diving
Watering hole attack
Shoulder surfing

Answer 23

Impersonation

Question 24

“In computer security, the term ““Dumpster diving”” is used to describe a practice of sifting through trash for discarded documents containing sensitive data. Found documents containing names and surnames of the employees along with the information about positions held in the company and other data can be used to facilitate social engineering attacks. Having the documents shredded or incinerated before disposal makes dumpster diving less effective and mitigates the risk of social engineering attacks.”

True
False

Answer 24

True

Question 25

A situation in which an unauthorized person can view another user's display or keyboard to learn their password or other confidential information is referred to as:
Spear phishing
Tailgating
Shoulder surfing
Spoofing

Answer 25

Shoulder surfing