Cybersecurity Fundamentals
Exam Solutions
Course Introduction
Cybersecurity Fundamentals introduces students to the essential principles and practices necessary to protect digital information and systems from security threats. This course covers foundational topics such as network security, cryptography, threat identification and mitigation, authentication, risk management, security policies, and ethical considerations in the cybersecurity domain. Through theoretical knowledge and practical scenarios, students learn how to assess vulnerabilities, defend against cyber-attacks, and understand the legal and social impacts of digital security, preparing them for further study or entry-level roles in the cybersecurity field.
Recommended Textbook
Information Security and IT Risk Management 1st Edition by Manish Agrawal
Available Study Resources on Quizplus
14 Chapters
349 Verified Questions
349 Flashcards
Source URL: https://quizplus.com/study-set/3541
Page 2
Chapter 1: Introduction
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70324
Sample Questions
Q1) Many users are vulnerable to
A) Attacks on ATM machines
B) Stolen usernames and passwords from a compromised site being used to compromise their bank accounts
C) Hackers compromising the IT systems at large financial institutions
D) Demands for usernames and passwords at gun-point
Answer: B
Q2) The Sarbanes-Oxley act is important to information security for
A) Compelling investments in specified information security procedures
B) Stealing commercial information by exploiting weakness is wireless networks
C) Exposing the implications of international differences in cyber-law
D) Popularizing computers among the masses
Answer: A
Q3) Information security professional report spending a lot of time on
A) Researching new technologies
B) Political issues
C) Developing internal security policies, standards and procedures
D) Fixing software bugs
Answer: D
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: System Administration
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70325
Sample Questions
Q1) Common functions of Linux System Administration utilities include
A) Automated customer service
B) Automated business processing
C) Automated installation
D) Automated marketing
Answer: C
Q2) Active Directory
A) Encourages computer users to perform physical activities throughout the day
B) Adds icons to directories in Windows Explorer
C) Improves search features in Windows computers
D) Provides centralized user management and access control for computers
Answer: D
Q3) Listening and/or recording the activities of a system to maintain performance and security is called
A) Access control
B) User management
C) Monitoring
D) Configuration
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: System Administration 2
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70326
Sample Questions
Q1) To navigate to a specific folder, we can use the command
A) grep
B) ls
C) pwd
D) cd
Answer: D
Q2) When using a shell program, command options also called flags or switches are
A) Debates between users on which command to use
B) Data provided to a command to use as input
C) Single letters of full words that modify the behavior of the command in a pre-determined way
D) Debates among system administrators on which commands to use
Answer: C
Q3) Common shell programs include
A) Bourne shell, C shell, D shell
B) Born shell, C shell, Born again shell
C) Korn shell, Born shell, C shell
D) Bourne shell, C shell, Bourne-again shell
Answer: D
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Basic Information Security Model
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70327
Sample Questions
Q1) The CVE list is
A) A list of all likely impacts of vulnerabilities
B) A list of all known viruses
C) A list of all known information security firms
D) An inventory of known software vulnerabilities
Q2) Models are useful because
A) They highlight resource or information that is to be protected
B) They highlight weaknesses in information systems that can be compromised
C) They draw attention to the essential details of a problem
D) They describe safeguards used to minimize the impact of threats
Q3) A SQL injection vulnerability is an example of a
A) Unrestricted uploads vulnerability
B) Cross-site scripting vulnerability
C) Buffer overflow vulnerability
D) Lack of input validation vulnerability
Q4) A buffer overflow vulnerability refers to a situation where
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Asset Identification and Characterization
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70328
Sample Questions
Q1) The majority of information security incidents are identified by
A) Organizations other than the affected organization
B) Investigators
C) The affected organizations
D) Law enforcement
Q2) Asset criticality refers to
A) A measure of the importance of an asset to the immediate survival of an organization
B) Contractual arrangements that guide the use of hardware and software assets within the organization
C) Adverse consequences for the organization upon disclosure of information
D) Damage caused to the organization from a breach of confidentiality or violation of integrity of an asset
Q3) Checklist based approaches can be used to identify
A) Asset priorities
B) Idiosyncratic assets
C) General assets
D) Assets
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Threats and Vulnerabilities
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70329
Sample Questions
Q1) In the context of information security, bots are
A) Activities performed by agents to compromise assets
B) Malicious software that uses operating system or application vulnerabilities for propagation
C) Software that performs simple tasks automatically and repetitively, usually at the direction of another software
D) Malicious content entered by an end user on a web-based system
Q2) Internal threat agents include
A) Partners and suppliers
B) Activist groups and competitors
C) Help desk and janitorial services
D) Auditors and hurricanes
Q3) As a threat action, social engineering is
A) An activity performed by agents to compromise assets
B) Convincing users to do something they would not ordinarily do
C) Software that performs simple tasks automatically and repetitively, usually at the direction of another software
D) Malicious content entered by an end user on a web-based system
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Encryption Controls
Available Study Resources on Quizplus for this Chatper
24 Verified Questions
24 Flashcards
Source URL: https://quizplus.com/quiz/70330
Sample Questions
Q1) Public Key cryptography refers to
A) The use of the same key for both encryption and decryption
B) The use of a secret algorithm for encryption and decryption
C) The use of a secret key only decryption
D) The use of a secret key for encryption
Q2) For any given input, the length of its hash out is
A) Always shorter than the input
B) Depends upon the length of the input
C) Always the same
D) Always longer than the input
Q3) Block encryption uses both
A) Relational and Procedural operations
B) Substitution and permutation
C) Keys and hashes
D) Data and storage
Q4) Cryptanalysis is
A) The art of breaking ciphertext
B) The transformation of data to produce ciphertext
C) The science of creating superior encryption algorithms
D) Text that is unintelligible to the reader
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Identity and Access Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70331
Sample Questions
Q1) Identity enrichment involves
A) Locating all new and updated identities in the organization
B) Comparing each discovered identity to a master record of all individuals in the organization
C) Collecting data about each individual's relationship to the organization
D) Making decisions about granting users access to resources
Q2) Identity reconciliation involves
A) Locating all new and updated identities in the organization
B) Comparing each discovered identity to a master record of all individuals in the organization
C) Collecting data about each individual's relationship to the organization
D) Making decisions about granting users access to resources
Q3) Kerberos has been very useful in securing corporate desktop infrastructures
A)True
B)False
Q4) OpenID uses an
A) Insecure model of authentication
B) Centralized model for authentication
C) Federated model for authentication
D) Distributed model for authentication
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Hardware and Software Controls
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70332
Sample Questions
Q1) Threats to passwords include
A) Password guessing
B) Password capturing
C) Password replacing
D) All of the above
Q2) End-point protection defends against attacks on
A) Firewalls
B) Offices
C) Vehicles
D) Desktops
Q3) A PIN is
A) A short numerical password
B) A sequences of words used as a password
C) An alpha-numeric phrase used for authentication
D) None of the above
Q4) Password cracking is
A) Passwords on the system known to unauthorized users
B) Acquiring passwords from storage, network transmission or user knowledge
C) Repeated attempts to authenticate using possible passwords
D) Generating character strings to match existing passwords
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Shell Scripting
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70333
Sample Questions
Q1) The first line of an executable script needs to be #!/bin/bash, in order to
A) Inform the shell which shell interpreter to use to execute the script
B) Remind the user of the shell interpreter to use when executing the script
C) Remind the user of the shell interpreter used to create the script
D) Serve as a comment for the shell interpreter when executing the script
Q2) The difference between break and continue while processing loop input is that
A) break exits the loop, but continue only exits the current iteration of the loop
B) break only exits the current iteration of the loop, but continue exits the loop
C) break and continue exit the loop
D) break and continue both exit only the current iteration of the loop
Q3) A user needs the following permissions to be able to use a script as a command
A) Read and write
B) Write
C) Read
D) Execute
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Incident Handling
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70334
Sample Questions
Q1) Files appropriate to monitor using file integrity monitoring tools include
A) End user data
B) Configuration files
C) Operating system files
D) Database contents
Q2) An incident is
A) A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices
B) The part of the incident response policy that specifies the targets of the policy
C) The act of following applicable laws, regulations, rules, industry codes and contractual obligations
D) Staff designated to respond to incidents
Q3) In the context of monitoring, a false negative is
A) An undetected problem
B) A component that is working intermittently
C) A component that is likely to fail soon
D) An alert that upon further investigation turns out to be not a problem
To view all questions and flashcards with answers, click on the resource link above.
13
Chapter 12: Incident Analysis
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70335
Sample Questions
Q1) Syslog facilities include all of the following except
A) auth
B) cron
C) kern
D) debug
Q2) The application log in Windows will contain logging information from all of the following except
A) Internet Information Services
B) Microsoft Office
C) Video games
D) Databases
Q3) Windows logs are also known as
A) Microsoft logs
B) Application logs
C) Operating system logs
D) Event logs
Q4) Cloud storage adds complexity to the work of security administrators
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Policies, Standards and Guidelines
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70336
Sample Questions
Q1) The first section of a policy generally specifies
A) Who or what is covered by the policy
B) Any definitions used in the policy
C) The statement of the policy
D) The need for the policy
Q2) Acceptable use policies describe
A) Procedures that tell units when it would be nice if things were operated a certain way, but it is not a requirement to do so
B) A defined set of rules, accepted and adopted by several organizations
C) Guidelines to users and customers on what is appropriate and what is not appropriate to do with information technology resources
D) A document that records a high-level principle or course of action that has been decided on
Q3) The sections of a policy are generally written in the sequence
A) Overview, scope, definitions, statement, enforcement
B) Definitions, overview, scope, statement, enforcement
C) Overview, definitions, statement, scope, enforcement
D) Overview, enforcement, scope, definitions, statement
To view all questions and flashcards with answers, click on the resource link above.
15
Chapter 14: It Risk Analysis and Risk Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70337
Sample Questions
Q1) A certain risk has a 1% likelihood of occurrence in the coming year. If the risk is observed, the organization estimates a loss of $1million. The risk is then assessed as A) 1%
B) $1,000,000
C) 1,000
D) $10,000
Q2) Section 404 of the Sarbanes-Oxley act of 2002 specifies that
A) The signing officer has reviewed financial statements
B) Penalties for non-compliance with the law
C) Privacy requirements for healthcare records have been followed
D) Attestations are made in accordance with PCAOB standards
Q3) The motivation for the passage of the Sarbanes-Oxley act was
A) Failure of Internet technologies
B) Denial of culpability by senior executives for falsification of records
C) To prevent stock market crashes
D) To recover retiree savings
Q4) A given threat is usually associated with one risk
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 16