IT Security Essentials Exam
Bank
Course Introduction
IT Security Essentials introduces students to the fundamental principles and practices of securing information technology systems. The course covers core topics such as risk management, access control, authentication methods, cryptography, network security, and incident response. Students learn about common threats and vulnerabilities, security policies, legal and ethical issues, and the importance of security best practices in both organizational and personal contexts. Through practical examples and hands-on activities, learners develop the foundational skills needed to identify security risks and apply protective measures, preparing them for further study or entry-level roles in the cybersecurity field.
Recommended Textbook
Security+ Guide to Network Security Fundamentals 4th Edition by Mark Ciampa
Available Study Resources on Quizplus
14 Chapters
588 Verified Questions
588 Flashcards
Source URL: https://quizplus.com/study-set/1054 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20875
Sample Questions
Q1) Security ____________________ have both technical knowledge and managerial skills and analyze and design security solutions within a specific entity.
Answer: administrators
Q2) ____ involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain.
A) Cyberterrorism
B) Identity theft
C) Phishing
D) Scam
Answer: B
Q3) ____ ensures that information is correct and that no unauthorized person or malicious software has altered that data.
A) Availability
B) Confidentiality
C) Integrity
D) Identity
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20876
Sample Questions
Q1) How does a rootkit work?
Answer: One approach used by rootkits is to alter or replace operating system files with modified versions that are specifically designed to ignore malicious activity. For example, on a computer the anti-malware software may be instructed to scan all files in a specific directory and in order to do this, the software will receive a list of those files from the operating system. A rootkit will replace the operating system's ability to retrieve a list of files with its own modified version that ignores specific malicious files. The anti-malware software assumes that the computer will willingly carry out those instructions and retrieve all files; it does not know that the computer is only displaying files that the rootkit has approved.
Q2) What is a worm?
Answer: A worm is a malicious program designed to take advantage of a vulnerability in an application or an operating system in order to enter a computer. Once the worm has exploited the vulnerability on one system, it immediately searches for another computer that has the same vulnerability. A worm uses a network to send copies of itself to other devices also connected to the network.
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Application and Network Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20877
Sample Questions
Q1) Describe how to harden a Web server.
Answer: Enhancing the security of the Web server operating system and system services, although important for defending against other types of attacks, may not prevent attacks to Web applications. This is because, by design, the user's input through the Web browser using HTTP must be processed by Web applications at the application level.
Q2) Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.
A)True
B)False
Answer: True
Q3) The expression ____ up one directory level.
A) ;/traverses
B)./traverses
C) %20/traverses
D)../ traverses
Answer: D
Q4) All Web traffic is based on the ____________________ protocol.
Answer: HTTP
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Vulnerability Assessment and Mitigating Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20878
Sample Questions
Q1) A ____ is a network set up with intentional vulnerabilities.
A) honeynet
B) honeypot
C) honeycomb
D) honey hole
Q2) If port 20 is available, then an attacker can assume that FTP is being used.
A)True
B)False
Q3) Discuss one type of asset that an organization might have.
Q4) Vulnerability scans are usually performed from outside the security perimeter.
A)True
B)False
Q5) In an empty box test, the tester has no prior knowledge of the network infrastructure that is being tested.
A)True
B)False
Q6) When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.
Q7) Discuss the purpose of OVAL.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20879
Sample Questions
Q1) ____ use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.
A) Lockout sensors
B) Engineering sensors
C) Tailgate sensors
D) Proximity sensors
Q2) A ____ is designed to separate a nonsecured area from a secured area.
A) lockout
B) mantrap
C) closet
D) pit
Q3) Keyed entry locks are much more difficult to defeat than deadbolt locks.
A)True
B)False
Q4) Securing the host involves protecting the physical device itself, securing the operating system software on the system, using security-based software applications, and monitoring logs.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20880
Sample Questions
Q1) ____ keeps a record of the state of a connection between an internal computer and an external device and then makes decisions based on the connection as well as the conditions.
A) Stateful frame filtering
B) Stateless frame filtering
C) Stateful packet filtering.
D) Stateless packet filtering
Q2) Describe all-in-one network security appliances.
Q3) A ____ is a standard network device for connecting multiple Ethernet devices together by using twisted-pair copper or fiber-optic cables in order to make them function as a single network segment.
A) switch
B) router
C) firewall
D) hub
Q4) Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
A)True
B)False
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20881
Sample Questions
Q1) List and describe the three fields that each ICMP message contains.
Q2) The ____ is a database, organized as a hierarchy or tree, of the name of each site on the Internet and its corresponding IP number.
A) WINS
B) NIS
C) TACACS+
D) DNS
Q3) List the steps in an 802.1x authentication procedure.
Q4) Why is the Physical Layer omitted in the TCP/IP model?
Q5) IEEE 802.1x is commonly used on wireless networks.
A)True
B)False
Q6) IP telephony and Voice over IP (VoIP) are identical.
A)True
B)False
Q7) TCP port ____ is the FTP control port used for passing FTP commands.
A) 19
B) 20
C) 21
D) 22
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20882
Sample Questions
Q1) When a device receives a beacon frame from an AP, the device then sends a frame known as a(n) ____ frame to the AP.
A) broadcast SSID
B) association request
C) disassociation request
D) connect request
Q2) Bluetooth devices are not backward compatible with previous versions.
A)True
B)False
Q3) ____ is a framework for transporting authentication protocols instead of the authentication protocol itself.
A) PEAP
B) TKIP
C) SSL
D) EAP
Q4) A(n) ____ acts as the "base station" for the wireless network.
A) AP
B) endpoint
C) WMM
D) ad-hoc peer
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20883
Sample Questions
Q1) List two major access control models.
Q2) ____ is often used for managing user access to one or more systems.
A) Role Based Access Control
B) Mandatory Access Control
C) Rule Based Access Control
D) Discretionary Access Control
Q3) Describe the Bell-LaPadula model.
Q4) ____ is suitable for what are called "high-volume service control applications" such as dial-in access to a corporate network.
A) RADIUS
B) ICMP
C) FTP
D) Telnet
Q5) ____ is an authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.
A) TACACS
B) RADIUS
C) Kerberos
D) FTP
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20884
Sample Questions
Q1) Using a rainbow table to crack a password requires three steps.
A)True
B)False
Q2) Describe how rainbow tables work.
Q3) Windows Live ID was originally designed as a ____ system that would be used by a wide variety of Web servers.
A) federated identity management
B) liberated identity management
C) central identity management
D) distributed identity management
Q4) ____________________ is a decentralized open source FIM that does not require specific software to be installed on the desktop.
Q5) ____ can use fingerprints or other unique characteristics of a person's face, hands, or eyes (irises and retinas) to authenticate a user.
A) Cognitive biometrics
B) Reactive biometrics
C) Standard biometrics
D) Affective biometrics
Q6) What are the three advantages of a rainbow table over other password attacks?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20885
Sample Questions
Q1) The____ is a symmetric cipher that was approved by the NIST in late 2000 as a replacement for DES.
A) AES
B) 3DES
C) RSA
D) Twofish
Q2) Describe the purpose and composition of Suite B.
Q3) List and describe the characteristics a hashing algorithm must have to be considered secure.
Q4) The algorithm ____ is a block cipher that operates on 64-bit blocks and can have a key length from 32 to 448 bits.
A) RSA
B) AES
C) Blowfish
D) 3DES
Q5) The original cryptographic algorithms for encrypting and decrypting documents are ____________________ cryptographic algorithms.
Q6) Describe the RIPEMD hash.
Q7) Describe the origins of cryptography.
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20886
Sample Questions
Q1) ____ can be used to ensure the integrity of a file by guaranteeing that no one has tampered with it.
A) Blocking
B) Hashing
C) Encrypting
D) Cloning
Q2) ____ certificates are frequently used to secure e-mail transmissions and typically only require the user's name and e-mail address in order to receive this certificate.
A) Private digital
B) Personal digital
C) Public digital
D) Server digital
Q3) List the four stages of a certificate life cycle.
Q4) The ____ provides recommended baseline security requirements for the use and operation of CA, RA, and other PKI components.
A) DP
B) CP
C) LP
D) AP
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20887
Sample Questions
Q1) ____ could contain remnants of previously deleted files or data from the format pattern associated with disk storage space that has yet to be used by the computer.
A) RAM slack
B) Edge slack
C) Drive file slack
D) Sector slack
Q2) Discuss the purpose and importance of the chain of custody.
Q3) A ____ is a snapshot of the current state of the computer that contains all current settings and data.
A) system standard
B) system view
C) system image
D) system baseline
Q4) Describe the purpose of a disaster recovery plan.
Q5) In a(n) ____ cluster, every server in the cluster performs useful work.
A) symmetric network
B) asymmetric network,
C) symmetric server
D) symmetric network.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20888
Sample Questions
Q1) What is a general security tip for using a social networking site?
Q2) ____ is the planning, coordination, communications, and planning functions that are needed in order to resolve an incident in an efficient manner.
A) Incident reporting
B) Incident management
C) Incident planning
D) Incident handling
Q3) Most organizations follow a three-phase cycle in the development and maintenance of a security policy.
A)True
B)False
Q4) ____ are generally considered to be the most important information security policies.
A) Acceptable use policies
B) Encryption policies
C) Data loss policies
D) VPN policies
Q5) List and describe two risk categories.
Q6) What are the typical classification designations of government documents?
Page 16
To view all questions and flashcards with answers, click on the resource link above.