Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20875
Sample Questions
Q1) List three of the federal and state laws that have been enacted to protect the privacy of electronic data.
Answer: 1. The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
2. The Sarbanes-Oxley Act of 2002 (Sarbox)
3. The Gramm-Leach-Bliley Act (GLBA)
4. The California Database Security Breach Act (2003)
Q2) ____________________ provides tracking of events.
Answer: Accounting
Q3) A study by Foote Partners showed that security certifications earn employees ____ percent more pay than their uncertified counterparts.
A) 10 to 14
B) 12 to 15
C) 13 to 14
D) 14 to 16
Answer: A
Q4) Security ____________________ have both technical knowledge and managerial skills and analyze and design security solutions within a specific entity.
Answer: administrators
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20876
Sample Questions
Q1) ____ is a software program that delivers advertising content in a manner that is unexpected and unwanted by the user.
A) Adware
B) Keylogger
C) Spam
D) Trojan
Answer: A
Q2) A(n) ____ refers to an undocumented, yet benign, hidden feature, that launches by entering a set of special commands, key combinations, or mouse clicks.
A) Trojan horse
B) virus
C) bug
D) Easter egg
Answer: D
Q3) Software keyloggers are programs that silently capture all keystrokes, including passwords and sensitive information.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 4: Vulnerability Assessment and Mitigating Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20878
Sample Questions
Q1) ____________________ for organizations are intended to identify vulnerabilities and alert network administrators to these problems.
Q2) A ____ is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, yet they are actually imitations of real data files.
A) port scanner
B) write blocker
C) honeypot
D) honeycomb
Q3) When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.
Q4) Discuss one type of asset that an organization might have.
Q5) A(n) ____ indicates that no process is listening at this port.
A) open port
B) open address
C) closed address
D) closed port
Q6) A(n) ____________________ scan uses various techniques to avoid detection.
Q7) Discuss the purpose of OVAL.
6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20879
Sample Questions
Q1) In ____, a virtualized environment is created that simulates the central processing unit (CPU) and memory of the computer.
A) heuristic detection
B) pattern detection
C) hybrid detection
D) combination detection
Q2) Data, once restricted to papers in the office filing cabinet, now flows freely both in and out of organizations, among employees, customers, contractors, and business partners.
A)True
B)False
Q3) What are the three most important elements to secure in any information technology setting?
Q4) Identify one of the capabilities of DLP agents.
Q5) Describe RFID tags.
Q6) Describe how a DLP can be configured.
Q7) Identify the five steps in the process to secure operating system software.
Q8) ____________________ paint is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20880
Sample Questions
Q1) A(n) ____ does not serve clients, but instead routes incoming requests to the correct server.
A) forward proxy
B) application proxy
C) system proxy
D) reverse proxy
Q2) A ____ is a computer or an application program that intercepts a user request from the internal secure network and then processes that request on behalf of the user.
A) proxy server
B) DNS server
C) VPN server
D) telnet server
Q3) Each operation in a computing environment starts with a ____.
A) system call
B) unit call
C) hardware instruction
D) system exception
Q4) Networks are usually segmented by using ____________________ to divide the network into a hierarchy.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20881
Sample Questions
Q1) ____ provides a greater degree of security by implementing port-based authentication.
A) IEEE 802.3ad
B) IEEE 802.11n
C) IEEE 802.1x
D) IEEE 802.1z
Q2) It is possible to segment a network by physical devices grouped into logical units through a(n) ____.
A) VLAN
B) subnets
C) IP address
D) MAC address
Q3) TCP port ____ is the FTP control port used for passing FTP commands.
A) 19
B) 20
C) 21
D) 22
Q4) IP telephony and Voice over IP (VoIP) are identical.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20882
Sample Questions
Q1) ____ is considered a more flexible EAP scheme because it creates an encrypted channel between the client and the authentication server.
A) TKIP
B) LEAP
C) PEAP
D) ICMP
Q2) A ____ access point is an unauthorized AP that allows an attacker to bypass many of the network security configurations and opens the network and its users to attacks.
A) random
B) sanctioned
C) rogue
D) legitimate
Q3) The SSID can generally be any alphanumeric string from 2 to ___ characters.
A) 23
B) 28
C) 32
D) 34
Q4) Describe how wireless VLANs can be configured.
Q5) What are the four types of packets used by EAP?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20883
Sample Questions
Q1) List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.
Q2) ____ is considered a more "real world" access control than the other models because the access is based on a user's job function within an organization.
A) Role Based Access Control
B) Rule Based Access Control
C) Discretionary Access Control
D) Mandatory Access Control
Q3) A shield icon warns users if they attempt to access any feature that requires UAC permission.
A)True
B)False
Q4) The action that is taken by the subject over the object is called a(n) ____.
A) authorization
B) access
C) control
D) operation
Q5) ____________________ is granting or denying approval to use specific resources.
Q6) Describe the MAC lattice model.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20884
Sample Questions
Q1) To create a rainbow table, each ____ begins with an initial password that is encrypted.
A) link
B) chain
C) pass
D) block
Q2) ____ is related to the perception, thought process, and understanding of the user.
A) Standard biometrics
B) Reactive biometrics
C) Cognitive biometrics
D) Affective biometrics
Q3) The most common type of authentication today is a(n) ____________________.
Q4) In most systems, a user logging in would be asked to ____________________ herself.
Q5) Identify two basic flows that operating systems can have.
Q6) Explain how an attacker can use a resetting attack.
Q7) Describe how rainbow tables work.
Page 12
Q8) Why do passwords place a heavy load on human memory?
Q9) Discuss the weaknesses of OpenID.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 11: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20885
Sample Questions
Q1) Discuss how HMAC works.
Q2) In MD5, the length of a message is padded to ____ bits.
A) 32
B) 64
C) 128
D) 512
Q3) ____ attempts to use the unusual and unique behavior of microscopic objects to enable users to securely develop and share keys as well as to detect eavesdropping.
A) Reactive cryptography
B) Symmetric cryptography
C) Analog cryptography
D) Quantum cryptography
Q4) Discuss how cryptography can help ensure the availability of the data.
Q5) ____ is designed to replace DES.
A) AES
B) Twofish
C) 3DES
D) RSA
Q6) Cleartext data that is to be encrypted is called ____________________.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20886
Sample Questions
Q1) Discuss the three areas of protection that are provided by IPsec.
Q2) ____ can protect the confidentiality of an e-mail message by ensuring that no one has read it.
A) Public encryption
B) Standard encryption
C) Asymmetric encryption
D) Symmetric encryption
Q3) The ____ function is a subordinate entity designed to handle specific CA tasks such as processing certificate requests and authenticating users.
A) Registration Authority
B) Certificate Authority
C) Repudiation Authority
D) Intermediate Authority
Q4) List the four stages of a certificate life cycle.
Q5) ____________________ may be defined as confidence in or reliance on another person or entity.
Q6) A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20887
Sample Questions
Q1) Windows stores files on a hard drive in 512-byte blocks called ____________________.
Q2) Describe the Windows page file and discuss why it can be important for evidence recovery.
Q3) Generally, ____________________ focuses on restoring computing and technology resources to their former state.
Q4) What are the steps in damage control?
Q5) A subset of business continuity planning and testing is disaster recovery, also known as IT recovery planning.
A)True
B)False
Q6) ____ is a form of eavesdropping in which special equipment is used to pick up telecommunication signals or data within a computer device by monitoring the electromagnetic fields.
A) Newton phreaking
B) Van Eck phreaking
C) Van Zek hacking
D) EMF phreaking
Q7) What is required upon completion of an evidence examination?
Page 16
To view all questions and flashcards with answers, click on the resource link above.
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20888
Sample Questions
Q1) Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.
A)True
B)False
Q2) ____ are values that are attributed to a system of beliefs that help the individual distinguish right from wrong.
A) Morals
B) Ethics
C) Standards
D) Morays
Q3) List two characteristics of a policy.
Q4) ____ can be defined as the "framework" and functions required to enable incident response and incident handling within an organization.
A) Incident reporting
B) Incident management
C) Incident handling
D) Incident planning
Q5) What is a general security tip for using a social networking site?
To view all questions and flashcards with answers, click on the resource link above. Page 17