Cybersecurity Fundamentals
Question Bank
Course Introduction
Cybersecurity Fundamentals provides an introduction to the essential concepts, principles, and practices used to protect computer systems, networks, and data from digital threats and attacks. This course covers the basics of information security, including confidentiality, integrity, and availability, as well as types of threats such as malware, phishing, and social engineering. Students will learn about authentication methods, encryption, network security, risk management, and security policies. Through case studies and hands-on exercises, learners develop foundational skills in identifying vulnerabilities and implementing basic defenses, preparing them for more advanced studies or entry-level roles in cybersecurity.
Recommended Textbook
Security+ Guide to Network Security Fundamentals 4th Edition by Mark Ciampa
Available Study Resources on Quizplus
14 Chapters
588 Verified Questions
588 Flashcards
Source URL: https://quizplus.com/study-set/1054 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20875
Sample Questions
Q1) Information security is achieved through a combination of what three entities? Provide at least one example of each entity.
Answer: 1. Products (physical security): The physical security around the data. May be as basic as door locks or as complicated as intrusion-detection systems and firewalls.
2. People (personnel security): Those who implement and properly use security products to protect data.
3. Procedures (organizational security): Plans and policies established by an organization to ensure that people correctly use the products.
Q2) In a general sense, assurance may be defined as the necessary steps to protect a person or property from harm.
A)True
B)False
Answer: False
Q3) Security ____________________ have both technical knowledge and managerial skills and analyze and design security solutions within a specific entity. Answer: administrators
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20876
Sample Questions
Q1) Viruses and worms are said to be self-____.
A) duplicating
B) updating
C) copying
D) replicating
Answer: D
Q2) In a(n) ____ infection, a virus injects itself into the program's executable code instead of at the end of the file.
A) stealth
B) appender
C) Swiss cheese
D) split
Answer: C
Q3) ____ involves horizontally separating words, although it is still readable by the human eye.
A) Word splitting
B) GIF layering
C) Geometric variance
D) Layer variance
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Application and Network Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20877
Sample Questions
Q1) Describe the two types of privilege escalation.
Answer: There are two types of privilege escalation. The first is when a user with a lower privilege uses privilege escalation to access functions reserved for higher-privilege users. The second type of privilege escalation is when a user with restricted privileges accesses the different restricted functions of a similar user.
Q2) A client-side attack that results in a user's computer becoming compromised just by viewing a Web page and not even clicking any content is known as a ____.
A) buffer overflow
B) drive-by-download
C) denial of service
D) stack underflow
Answer: B
Q3) The SQL injection statement ____ erases the database table.
A) whatever'; DROP TABLE members; --
B) whatever'; DELETE TABLE members; --
C) whatever'; UPDATE TABLE members; --
D) whatever'; RENAME TABLE members; --
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Vulnerability Assessment and Mitigating Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20878
Sample Questions
Q1) A ____ in effect takes a snapshot of the current security of the organization.
A) threat analysis
B) vulnerability appraisal
C) risk assessment
D) threat assessment
Q2) List four things that a vulnerability scanner can do.
Q3) List and describe two common uses for a protocol analyzer.
Q4) Describe a penetration testing report.
Q5) Discuss one type of asset that an organization might have.
Q6) List two types of hardening techniques.
Q7) Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.
Q8) If port 20 is available, then an attacker can assume that FTP is being used.
A)True
B)False
Q9) A security weakness is known as a(n) ____.
A) threat
B) vulnerability
C) risk
D) opportunity
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Page 7
Chapter 5: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20879
Sample Questions
Q1) ID badges that can be detected by a proximity reader are often fitted with tiny radio ____ tags.
A) wave
B) pulse
C) AFID
D) RFID
Q2) Data, once restricted to papers in the office filing cabinet, now flows freely both in and out of organizations, among employees, customers, contractors, and business partners.
A)True
B)False
Q3) Each host (desktop, wireless laptop, smartphone, gateway server) runs a local application called a ____, which is sent over the network to the devices and runs as an OS service.
A) DLP manager
B) DLP control
C) DLP agent
D) DLP cipher
Q4) Describe RFID tags.
Q5) Explain remote wipe/sanitation.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 6: Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20880
Sample Questions
Q1) ____ is a technology that can help to evenly distribute work across a network.
A) Stateful packet filtering
B) Load balancing
C) DNS caching
D) DNS poisoning
Q2) A basic level of security can be achieved through using the security features found in network hardware.
A)True
B)False
Q3) NAT replaces a private IP address with a(n) ____________________ IP address.
Q4) Examining network traffic, activity, transactions, or behavior and looking for well-known patterns is known as ____-based monitoring
A) application
B) protocol
C) packet
D) signature
Q5) List and describe three features of Internet content filters.
Q6) Describe the difference between subnetting and VLANs.
Q7) Describe how NAC works.
Q8) Describe how VLAN communication takes place.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20881
Sample Questions
Q1) DNS poisoning can be prevented by using the latest editions of the DNS software known as ____.
A) BIND
B) DHCP
C) WINS
D) finger
Q2) ____ is used to relay query messages.
A) ICMP
B) FTP
C) UDP
D) TCP
Q3) ____ can be used to determine whether new IP addresses are attempting to probe the network.
A) DNS logs
B) Firewall logs
C) DHCP logs
D) Proxy logs
Q4) IEEE 802.1x is commonly used on wireless networks.
A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20882
Sample Questions
Q1) ____ is an attack that sends unsolicited messages to Bluetooth-enabled devices.
A) Bluesnarfing
B) Bluejacking
C) Bluecracking
D) Bluetalking
Q2) A group of piconets in which connections exist between different piconets is called a
A) broadnet
B) honeynet
C) boundnet
D) scatternet
Q3) ____ is considered a more flexible EAP scheme because it creates an encrypted channel between the client and the authentication server.
A) TKIP
B) LEAP
C) PEAP
D) ICMP
Q4) Describe a piconet.
Q5) Describe how wireless VLANs can be configured.
Q6) List and describe the major parts of an access point.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 9: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20883
Sample Questions
Q1) Describe how Kerberos works.
Q2) TACACS+ and RADIUS are designed to support hundreds of remote connections.
A)True
B)False
Q3) List two major access control models.
Q4) List two of the most common types of authentication and AA servers.
Q5) Describe the two key elements of the MAC model.
Q6) The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.
A)True
B)False
Q7) The most restrictive access control model is ____.
A) Mandatory Access Control
B) Role Based Access Control
C) Discretionary Access Control
D) Rule Based Access Control
Q8) The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.
Q10) Describe LDAP injection attacks. Page 12
Q9) Discuss the differences between DAP and LDAP.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 10: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20884
Sample Questions
Q1) Explain how an attacker can use a resetting attack.
Q2) The weakness of passwords centers on ____.
A) human memory
B) encryption technology
C) handshake technology
D) human reliability
Q3) ____ permits users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site.
A) OpenAuth
B) OAuth
C) SAML
D) Kerberos
Q4) ____ attack is where every possible combination of letters, numbers, and characters is used to create encrypted passwords.
A) Space division
B) Brute force
C) Known ciphertext
D) Known plaintext
Q5) What are the three advantages of a rainbow table over other password attacks?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 11: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20885
Sample Questions
Q1) The____ is a symmetric cipher that was approved by the NIST in late 2000 as a replacement for DES.
A) AES
B) 3DES
C) RSA
D) Twofish
Q2) Describe the origins of cryptography.
Q3) ____ ensures that the information is correct and no unauthorized person or malicious software has altered that data.
A) Confidentiality
B) Availability
C) Encryption
D) Integrity
Q4) Describe hard disk drive encryption.
Q5) A ____ is a number divisible only by itself and 1.
A) prime number
B) prime decimal
C) compound number
D) neutral number
Q6) Cleartext data that is to be encrypted is called
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 12: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20886
Sample Questions
Q1) Explain how digital certificates are managed.
Q2) List and describe the entities for which IPsec is transparent.
Q3) List three general duties of a CA.
Q4) In SSH, the ____________________ command allows a user to log on to a remote computer.
Q5) List the four stages of a certificate life cycle.
Q6) Discuss the three areas of protection that are provided by IPsec.
Q7) The ____ model is the basis for digital certificates issued to Internet users.
A) third-party trust
B) related trust
C) managed trust
D) distributed trust
Q8) ____ certificates enable clients connecting to the Web server to examine the identity of the server's owner.
A) Personal digital
B) Public digital
C) Private digital
D) Server digital
Q10) List the three PKI trust models that use a CA. Page 16
Q9) List three pieces of information a digital certificate typically contains.
To view all questions and flashcards with answers, click on the resource link above.
Page 17
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20887
Sample Questions
Q1) What are the steps in damage control?
Q2) Most metadata about a file is generated and recorded automatically without the user's knowledge.
A)True
B)False
Q3) A ____ is a snapshot of the current state of the computer that contains all current settings and data.
A) system standard
B) system view
C) system image
D) system baseline
Q4) The air-handling space above drop ceilings (and sometimes even between the walls and under structural floors) used to circulate and otherwise handle air in a building are called ____________________.
Q5) Describe the purpose of a disaster recovery plan.
Q6) What does Windows do if a file being saved is not long enough to fill up the last sector on the disk?
Q7) Windows stores files on a hard drive in 512-byte blocks called
To view all questions and flashcards with answers, click on the resource link above.
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20888
Sample Questions
Q1) List one reason why social networking sites are popular with attackers.
Q2) ____ may be defined as the components required to identify, analyze, and contain that incident.
A) Vulnerability response
B) Incident response
C) Risk response
D) Threat response
Q3) ____ learners learn through taking notes, being at the front of the class, and watching presentations.
A) Kinesthetic
B) Auditory
C) Spatial
D) Visual
Q4) Identify two opportunities for security education and training.
Q5) Most organizations follow a three-phase cycle in the development and maintenance of a security policy.
A)True
B)False
Q6) When designing a security policy, many organizations follow a standard set of
Page 19
To view all questions and flashcards with answers, click on the resource link above.