Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

ITN260 > Short Answer: 1-10 > Flashcards

Short Answer: 1-10 Flashcards

1
Q

What are the causes for widesperad vulnerabilites?

A

+ large number of vulnerabilities

+ end of life systems

+ lack of vendor support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name 3 configuration issues.

A

+ default configuration

+ week configuration

+ misconfigurations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Name 3 reasons why it is difficult to defend against today’s attacks.

A

+ delay in security updates

+ increased speed of attacks

+ simplicity of attack tools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Name 3 ideas about the nature of security.

A

+ security is a goal

+ security includes the necessary steps to protect from harm

+ security is a process

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Name the successive layers that information secutiy is achieved.

A

+ products

+ people

+ procedures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Name 3 types of risk response techniques.

A

+ transfer risk

+ mitigate risk

+ avoid risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Name 4 security principles

A

+ obscurity

+ diversity

+ limiting

+ layering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Name 3 traits that can be applied to malware.

A

+ circulation

+ infection

+ concealment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Name the types of malware.

A

+ worms

+ rootkits

+ adware

+ viruses

+ ransomware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Name the types of mutations that viruses can undergo

A

+ betamorphic

+ oligimorphic

+ polymorphic

+ metamorphic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Define logic bomb.

A

+ used to delete data

+ computer code that is added to legitimate applications but lies dormant until a specific logical event triggers it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Name characteristics of a rootkit.

A

+ rootkit is able to hide its prescence and the prescence of other malware

+ rootkit accesses “lower layers” of the operating system

+ the risk of a rootkit is less today than previously

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Name 3 facts about keylogger.

A

+ keylogger can be used to capture passwords, credit card number, or personal information

+ hardware keylogger are installed between the keylogger connector and computer keyboard USB port

+ software keylogger can be desigend to send captured information back to the attacker through the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Name the psychological approaches used by attackers in social engineering.

A

+ familiarity + urgency

+ scarcity + familiarity

+ intimidation + trust

+ consensus

+ impersonation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Name items that would be helpful to find when dumpster diving.

A

+ calendars

+ organizational charts

+ memos

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Why is adware hated by people?

A

+ it displays objectionable content

+ it can intefer with a user’s productivity

+ it can cause a computer to crash or slow down

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Explain how a hash algorithm works and how it is primarily used.

A

A hash alogrithm creates a unique “digital fingerprint” of a set of data. This process is called hasing. It produces a resulting fingerprint called a digest that represents the contents. It is primarily used for comparision purposes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Name the basic security protections for information using cryptography

A

+ authenticity

+ integrity

+ ciphertext

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which areas of a file can be used by stenography to hide date?

A

+ areas that contain content data itself

+ in teh file header fields that describe a file

+ in data that is used to describe the content or structure of the actual data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which characteristics are applicable to secure hash algorithm?

A

+ collisions happen often

+ a message cannot be produced from a predfined hash

+ the results of a hash function should not be reversed

+ hash should always be the same fixed size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Name 4 protections that can be used in protecting data.

A

+ diffusion

+ confusion

+integrity

+ chaos

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Name the benefits htat a digital signature provides.

A

+ verify the sender

+ prove the integrity of the message

+ enforce non-repudiation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Name 6 key exchanges/systems.

A

+ Diffe-Hellman-RSA (DHRSA)

+ Diffe-Hellman Ephemeral (DHE)

+ Diffe-Hellman (DH)

+ Elliptic-Curve Diffe-Helman (ECDH)

+ Public Key Exchange (PKE)

+ Perfect Forward Secrecy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Name 4 symmetric crypotographic algorithms.

A

+ data encryption standard

+ triple data encryption standard

+ advanced encryption standard

+ RCI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Name 4 asymmetric cryptographic algorithms.
+ SHA-2 + ME-312 + BTC-2 + RSA
26
List the four stages of a certificate life cycle.
1) creation 2) suspension 3) revocation 4) expiration
27
Name the methods used to strengthen a key.
+ randomness + cryptoperiod + length
28
Name 4 clock ciphers.
+ Electronic Code Block (ECB) + Galois/Counter (GCM) + Counter (CTR) + Cipher Block Chaining (CBC)
29
Digital certificates can be used in which situations.
+ to encrypt channels to provide secure communication betweeen clients and servers + to verfiy the idtenty of clients and servers on the web + to encrypt messages for secure email communication
30
Name 4 trust models.
+ bridge + hierarchical + distributed + third-party trust
31
Name 4 facts about hierachical trust models.
+ designed for use on a small scale + root signals all digital certificate authorities with a signal key + it assigns a single hierarchy with one master CA + the master CA is called the root
32
Name 4 common attacks used by hackers.
+ Man-In-Middel (MITM) + Man-In-The-Browswer (MITB) + Replay + ARP poisoning
33
Name 3 actions that can be done in a SQL injection attack
+ erase a database table + display a list of customer telelphones numbers + discover the names of different fields in a table
34
Name 3 types of DoS attacks.
+ SYN flood + DOVS amplication + smurf attack
35
Name 3 characteristics that describe Replay attack
+ cannot be prevented by patching the web browser + is not considered to be a type of DoS attack + makes a copy of transmission for use at later time + does not replay attack over and over to food server
36
Describe DNS poisoning.
+ doesnt flood a DNS server with requests until it can no longer respond + host tables do not slow it down + substitues DNS addres so that the computer is automatically redirected to another device + is not the same as ARP poisoning.
37
Which standard network device is good for adding new technology for security purposes?
+ router
38
Name 4 standard networking devices.
+ router + hub + virtual private network + SIEM device
39
What is found in a firewall ACL rule?
+ source address + direction + protocol
40
Which functions does Internet content filter perform?
+ URL filtering + Malware inspection + content inspection
41
What does NAT stand for?
+ network address translation
42
What security action can a flood guard do when a MAC flooding attack occurs?
+ ignore the new MAC addresses while allowing normal traffic from the single preaproved MAC address + record new MAC addresses up to a specific limit + block the port entirely
43
What are 3 facts about demilitarized zone (DMZ) ?
+ it can be configured to have one or two firewalls + it typically includes an email or web server + provides an extra degree of security
44
What is used in scheduling a load balancer?
+ data within the application message itself + affinity +round robin
45
Which configurations are all load balances inactive at some point?
+ active-passive + passive-active-passive + active-load-passive-load
46
What can be used to hide information about the internal network?
+ NAT + subnetter + proxy server
47
What is the basis for domain name resolution of names-to-IP addresses?
In order for domain name resolution of names-to-IP addresses to happen, a DNS server must be present to translate a domain name into an IP address.
48
Explain how attacker can use priviliges escalation to gain access to a resources that are restricted?
Vertical privilege escalation requries the attacker to grant himself higher priviliges. This is typically achieved by performing kernel-level operations that allow the attacker to run unauthorized code. Horizontal privilege escalation requires the attacker to use the same level of priviliges he already has been granted, but assume the identity of another user with similar priviliges. For example, someone gaining access to another person's online banking account would constitute horizontal privilige escalation.
49
Discuss at least two security advantages of a host running visualization?
One advantage of a host running virtualization is that security updates can be downloaded and run in a virtual machine to determine compatibility or the impact on other software or even hardware. This prevents administrators from having to roll back updatess, on a production machine, when issues arise from the updates. A second advantage of a host running virtualization is that a snapshot of a state of a virtual machine can be saved for later use. If something happens that adversely affects a user's physical computer, a backup can be used to restore a user's virtual environment on another machine. This drastically decreases the down time a user may face when confronted with a technical issue.
50
What TCP/IP protocols relate to security?
+ SNMP + HTTPS + FTP
51
Name 3 facts about Domain Name Systems Extensions (DNSSEC).
+ it is fully supported in BIND9 + it adds additional resource records + ti adds message header information
52
Name 3 facts about SSL accelarator.
+ it can be separate hardward card that inserts into a web server + it can be a separate hardware module + it should reside between the user's device and the web servers
53
Name 3 source models for cloud computing.
+ Software as a Service (SaaS) + Platform as a Service (PaaS) + Infrastructure as a Service (IaaS)
54
Which entries in a log file for firewall must be looked at?
+ suspicious outbound connections IP address that are being rejected and dropped
55
Which type of hypervision runs on underlying operating system?
+ Type II + Type III + Type IV
56
Name 4 models for computing in enterprises environment.
+ virtual service + off-premises + on-premises + hosted services
57
Name 3 concerns of virtualized environments.
+ virtual machines must be protected from teh outside world and from other virtual machines on the same physical computer + physical security appliances are not always designed to protect virtual systems + live migration can immediately move from one virtualized server to another hypervisor
58
Which email protocols are secure?
+ S/MIME + TLS
59
Name 4 bluetooth attacks.
+ bluesnarfing + bluecreeping + bluejacking + bluestealing
60
Which tech is found in wireless router?
+ router + Dynamic host configuration protocol (DHCP) + firewall
61
What are 3 risks associated with a wireless router that is not secured?
+ data can be stolen from one filder that is being the shared + financial info can be stolen if its sent over WLAN + malware can be injected into computer connected to WLAN
62
What does WPS mean?
+ WiFi protected setup
63
Name 4 types of access points.
+ captive portal + web based portal + rouge portal + authenicated portal
64
Name 3 options to protect wireless peripherals.
+ update/replace vulernable device + switch to move fu lly tested bluetooth model + substitute a wired device
65
Name 3 limitations of turning off SSID broadcast from an AP?
+ frequency band + channel selection + channel width
66
Name 3 types of AP probes.
+ wireless device probe + AP probe + dedicated probe
67
Name 3 reasons why supply chain infections are considedred especially dangerous.
+ malware planted in the ROM firmware of device makes it hard to clean device + users gets infected devices at the point of purchase with no knowledge + impossible to watch every step in the supply chain
68
Name 3 motion detection methods.
+ magnetism + moisture + infrared
69
Name 4 types of residential locks.
+ encrypted key lock + keyed entry lock + privacy lock + passage lock
70
Name 3 typical OS security configurations.
+ employing least functionality + disability default accounts/password + disabling unnecessary ports and services
71
Name 3 characteristics of alarmed carrier PDS.
+ uses continuous monitoring + eliminate need to seal connetions
72
Name 3 memory vulnerabilities.
+ DLL injection + pointer deference + buffer overthrow
73
Name stages of code development.
1) development 2) testing 3) staging 4) production
74
Name 4 models of design.
+ waterfall + rigid + agile + secure
75
Name 4 types of testing.
+ stress testing + static analysis + dynamic analyzer + runtime testing
76
Describe how content management is used.
Content management is used to support the creation and subsequent edting and modifciation of digital content by multiple employees. It can included tracking ediiting history, version control, indexing, and searching. It can also provide app security support. This includeds application whitelisting and geofencing.
77
Name the type of USB connections you will find on a laptop.
+ mini + micro + standard
78
Name types of enterprise development deployjment models.
+ BYOD (Bring Your Own Device) + CYOD (Chose Your Own Device) + COPE (Corporate Owned Personally Enabled) + corporate owned
79
Name 3 reasons why Android doesn't push alot of updates for its its operating system.
+ prevent OEM to differentiate between differnt models of phones with Android + Android has lots of modified versions and updates may cause them to fail + prevent users from keeping one phone forever
80
Name 3 reasons why mobile phones are at risk on public networks.
+ public networks are beyond control of employee's organization control + replay attacks occur on public networks + MITM attacks are possible on public networks
81
Name 3 security features for lost/stolen mobile devices.
+ remote lockout + alarm + thief picture
82
Name 4 types of paswords for mobile devices
+ password + pin + fingerprint + connecting dots
83
Name 3 benefits of CYOD.
+ less oversight + increased employee performance + management flexibilty

ITN260 (17 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions