Principles of Cybersecurity Mock
Exam
Course Introduction
Principles of Cybersecurity introduces students to the foundational concepts, practices, and technologies essential for securing information systems. The course explores the core principles of confidentiality, integrity, and availability, and examines threats, vulnerabilities, and risk management strategies in both technical and organizational contexts. Topics include cryptography, security policies, network defense, ethical and legal considerations, and incident response. Through lectures, case studies, and practical exercises, students gain an understanding of the evolving cybersecurity landscape and develop skills to identify and mitigate potential security risks in real-world scenarios.
Recommended Textbook
CompTIA Security Guide to Network Security Fundamentals 6th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/2311 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45966
Sample Questions
Q1) What term refers to an action that provides an immediate solution to a problem by cutting through the complexity that surrounds it?
A)unicorn
B)approved action
C)secure solution
D)silver bullet
Answer: D
Q2) What term best describes any premeditated,politically motivated attack against information,computer systems,computer programs,and data which results in violence against noncombatant targets by subnational groups or clandestine agents?
A)cybercriminal
B)cracking
C)cyberterrorism
D)hacking
Answer: C
Q3) To mitigate risk is the attempt to address risk by making the risk less serious.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45967
Sample Questions
Q1) A virus that infects an executable program file is known as?
A)macro virus
B)program virus
C)companion virus
D)boot sector virus
Answer: B
Q2) What specific type of phishing attack uses the telephone to target a victim?
A)target phishing
B)whaling
C)vishing
D)spear phishing
Answer: C
Q3) What type of ransomware displays a screen and prevents the user from accessing the computer's resources?
A)crypto-malware
B)standard ransomware
C)blocker ransomware
D)locking-malware
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45968
Sample Questions
Q1) Which hash algorithm's primary design feature is two different and independent parallel chains of computation,the results of which are then combined at the end of the process?
A)SHA-384
B)HMAC
C)RIPEMD
D)MD5
Answer: C
Q2) What is a pseudorandom number generator?
Answer: A pseudorandom number generator is an algorithm for creating a sequence of numbers whose properties approximate those of a random number.
Q3) What alternative term can be used to describe asymmetric cryptographic algorithms?
A)user key cryptography
B)public key cryptography
C)private key cryptography
D)cipher-text cryptography
Answer: B
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Advanced Cryptography and PKI
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45969
Sample Questions
Q1) Which of the following certificates verifies the identity of the entity that has control over the domain name?
A)validation digital certificate
B)root digital certificates
C)domain validation digital certificate
D)web digital certificates
Q2) What is a value that can be used to ensure that plaintext,when hashed,will not consistently result in the same digest?
A)salt
B)initialization vector
C)counter
D)nonce
Q3) What common method is used to ensure the security and integrity of a root CA?
A)Keep it in an offline state from the network.
B)Only use the root CA infrequently.
C)Password protect the root CA
D)Keep it in an online state and encrypt it.
Q4) Explain how digital certificates are managed.
Q5) What is the S/MIME protocol used for?
Q6) What is a cipher suite?
6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Networking and Server Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45970
Sample Questions
Q1) Securing web applications is easier than protecting other systems.
A)True
B)False
Q2) How does a cross-site request forgery (XSRF)attack work?
Q3) XSS is like a phishing attack but without needing to trick the user into visiting a malicious website.
A)True
B)False
Q4) When TCP/IP was developed,the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:
A)HTTP
B)NSDB
C)URNS
D)DNS
Q5) What type of additional attack does ARP spoofing rely on?
A)DNS Poisoning
B)replay
C)MITB
D)MAC spoofing
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Network Security Devices, Design, and Technology
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45971
Sample Questions
Q1) Describe how Internet content filters are used.
Q2) Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
A)True
B)False
Q3) If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?
A)physical network segregation
B)complete network segregation
C)network isolation
D)logical network segregation
Q4) What is the difference between anomaly based monitoring and signature based monitoring?
Q5) List and describe two advantages of a proxy server.
Q6) One use of data loss prevention (DLP)is blocking the copying of files to a USB flash drive.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45972
Sample Questions
Q1) Which layer of the OSI model contains the TCP protocol,which is used for establishing connections and reliable data transport between devices?
A)Application Layer
B)Presentation Layer
C)Network Layer
D)Transport Layer
Q2) Select the TCP/IP protocol that resolves a symbolic name to its corresponding IP address using a database consisting of an organized hierarchy tree.
A)WINS
B)NIS
C)TACACS+
D)DNS
Q3) What secure protocol is recommended for time synchronization?
A)SRTP
B)S/MIME
C)NTP
D)POP
Q4) Discuss the Infrastructure as a Service (IaaS)model used in cloud computing.
Q5) Discuss the Software as a Service (SaaS)model used in cloud computing.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45973
Sample Questions
Q1) Which of the following choices is not one of the four types of packets used by EAP?
A)Request
B)Response
C)Success
D)Error
Q2) What encryption protocol is used for WPA2?
A)TKIP
B)TKIP MIC
C)CCMP
D)CBC-MAC
Q3) Describe a piconet.
Q4) What is the maximum range of most Bluetooth 5 devices?
A)200 ft
B)60 meters
C)150 meters
D)800 ft
Q5) What are the four types of packets used by EAP?
Q6) List and describe the major parts of an access point.
Q7) What is the most common type of wireless access control?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Client and Application Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45974
Sample Questions
Q1) Which of the following are considered to be part of a typical OS security configuration? (Choose all that apply. )
A)Disabling unnecessary ports and services
B)Employing least functionality
C)Password auditing
D)Disabling default accounts/passwords
Q2) The BIOS was software that was integrated into the computer's motherboard.
A)True
B)False
Q3) A Wi-Fi enabled microSD card is an example of what type of device?
A)PCIe
B)mobile card
C)SDIO
D)Secure Digital
Q4) Explain the security advantages of "code signing" and "stored procedure"?
Q5) Describe a mantrap.
Q6) In the production stage the application is released to be used in its actual setting. A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Mobile and Embedded Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45975
Sample Questions
Q1) Select the option that represents a wearable technology.
A)Android
B)iPhone
C)Google Chromebook
D)Google Glass
Q2) Which of the following is NOT an Android Smart Lock configuration option?
A)Trusted places detection
B)On-body detection
C)User device detection
D)Trusted face
Q3) A QR code can't contain which of the following items directly?
A)A URL.
B)A phone number.
C)An e-mail address.
D)A video.
Q4) The greatest asset of a mobile device-its security.
A)True
B)False
Q5) Describe a notebook computer in relation to a laptop computer.
Q6) How does BYOD increase employee performance?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45976
Sample Questions
Q1) Keystroke dynamics uses two unique typing variables.
A)True
B)False
Q2) Passwords provide strong protection.
A)True
B)False
Q3) Why do passwords place a heavy load on human memory?
Q4) What type of card contains an integrated circuit chip that can hold information,which then can be used as part of the authentication process?
A)smart card
B)SIM card
C)E-card
D)BioCard
Q5) Which term below describes the time it takes for a key to be pressed and then released?
A)dwell time
B)lead time
C)sync time
D)react time
Q6) What smartcard standard is used to cover all U.S.government employees?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Access Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45977
Sample Questions
Q1) What is an entry in an ACL known as?
A)DACL
B)ACE
C)SQL
D)flag
Q2) Rule-Based Access Control can be changed by users.
A)True
B)False
Q3) Authentication,authorization,and accounting are sometimes called AAA.
A)True
B)False
Q4) A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
A)ACE
B)DAC
C)entity
D)ACL
Q5) What is the purpose of an ACL?
Q6) Describe the MAC lattice model.
Q7) Describe the Bell-LaPadula model.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Vulnerability Assessment and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45978
Sample Questions
Q1) Determining vulnerabilities often depends on the background and experience of the assessor.
A)True
B)False
Q2) What type of penetration testing technique is used if the tester has no prior knowledge of the network infrastructure that is being tested?
A)white box
B)gray box
C)black box
D)sealed box
Q3) When a security hardware device fails or a program aborts,which state should it go into?
Q4) If a penetration tester has gained access to a network and then tries to move around inside the network to other resources,what procedure is the tester performing?
A)pivot
B)spinning
C)persistence
D)secondary exploitation
To view all questions and flashcards with answers, click on the resource link above.
Page 15
Chapter 14: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45979
Sample Questions
Q1) Which of the following is the sudden flow of electric current between two objects?
A)electromagnetic interference
B)Faraday interference
C)electrostatic discharge
D)electromagnetic pulse
Q2) An incident response plan is a set of written instructions for reacting to a security incident.
A)True
B)False
Q3) Resumption planning is used for the recovery of critical business functions separate from IT,such as resuming a critical manufacturing process.
A)True
B)False
Q4) Forensics is the application of science to questions that are of interest to the technology professions.
A)True
B)False
Q5) Explain how to best secure volatile data.
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45980
Sample Questions
Q1) Which of the following is a basic measure of reliability for systems that cannot be repaired?
A)mean time to recovery
B)mean time to failure
C)mean time to operate
D)failure in time
Q2) Risk avoidance involves identifying the risk and making the decision to engage in the activity.
A)True
B)False
Q3) Which of the following refers to the start-up relationship between partners?
A)partner on-boarding
B)partner trust
C)partner beginning
D)starting partner agreement
Q4) What are the two risk calculation formulas commonly used to calculate expected losses?
Q5) The FIT calculation is another way of reporting MTTF.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 17