IS5403 Week 5 All Quizezz

2

Question

Which of the following is usually bundled as a hidden component of a freeware?

Botnet

Spyware

Armored virus

Polymorphic malware

Logic bomb

Correct

 

2 of 6

3

Question

Which of the following are characteristics of spyware? (Choose all that apply.)

Negatively affects integrity

Secretly collects information about users

Negatively affects confidentiality

Negatively affects availably

Tracking cookies and browser history can be used by spyware

It is greyware

Correct

 

3 of 6

4

Question

Flash cookies are a type of spyware. What are ways to clean Flash cookies? (Choose all that apply.)

Anti-malware programs

Use a browser add-on

Disable Adobe Flash

Clear browser cache

Correct

 

4 of 6

5

Question

Viruses, botnets, social engineering, and drive-by-downloads and other methods used to attack a target are best described as which of the following?

Exploits

Malware

Grayware

Threat vectors

Correct

 

5 of 6

6

Question

Which of the following is a form of delayed-execution virus?

Ransomware

Botnet

Backdoor

Rootkit

Logic bomb

Correct 

3

Question

Which of the following are zombie armies formed by a number of innocent hosts set up to perform malicious operations?

Rootkits

Rootnets

Botnets

Backdoors

Backnets

Correct

 

3 of 8

4

Question

Many botnets were controlled through using what protocol?

SNMP

IRC

ICMP

FTP

SFTP

Correct

 

4 of 8

5

Question

Which of the following involves deploying a large number of compromised hosts to flood a target system?

Spim

DDoS

MITM

Smurf

DoS

Correct

 

5 of 8

6

Question

DoS attacks are for gaining unauthorized access or control of a system.

False

True

Correct

 

6 of 8

7

Question

Which of the following MAINLY applies to email that appears to be sent from a legitimate business?

Squatting

Spearing

Vishing

Phishing

Spimming

Correct

 

7 of 8

8

Question

An attacker has targeted Corp.com's employees with voicemails that attempt to acquire sensitive information by masquerading as a trustworthy entity. Which type of attack is this?

Vishing

Spear phishing

Phishing

Whaling

Correct

4

Question

Which of the following is NOT a valid physical security measure?

System patching

Proper lighting

Signs and guards

Alarms and motion detection

Protected distribution of cabling

Barricades and biometrics

Correct

 

4 of 6

5

Question

Which of the following statement regarding proper patch management is true?

Applying the correct patch, following the correct procedure, at the correct time.

Using SNMP to perform patch management.

Implementing version control.

Subscribing to the vendor's patch program.

Correct

 

5 of 6

6

Question

Secure Sockets Layer (SSL) is the predecessor of:

TLS

IPSec

SSH

DES

Correct

Which model uses a sequential design process?

• Waterfall model
• Rigid model
• Secure model
• Agile model

CORRECT

Which type of residential lock is most often used for keeping out intruders?

• Passage lock
• Keyed entry lock
• Privacy lock
• Encrypted key lock

CORRECT

A lock that extends a solid metal bar into the door frame for extra security is the _____.

• triple bar lock
• deadman's lock
• deadbolt lock
• full bar lock

CORRECT

Which of the following is a cumulative package of all patches?

• Service pack
• Rollup
• Patch
• Hotfix

CORRECT

Which stage is a "quality assurance" test that verifies the code functions as intended?

• Production stage
• Development stage
• Testing stage
• Staging stage

CORRECT

Which of these is a list of approved email senders?

• Blacklist
• Yellowlist
• Whitelist
• Bluelist

CORRECT

Which statement about a mantrap is true?

• It requires the use of a cipher lock.
• It is a special keyed lock.
• It is illegal in the United States.
• It monitors and controls two interlocking doors to a room.

CORRECT

Which type of operating system runs on a firewall, router, or switch?

• Device OS
• Resource OS
• Network OS
• Server OS

CORRECT

Which of the following is NOT a characteristic of an alarmed carrier PDS?

• Eliminates the need to seal connections
• Carrier can be hidden above the ceiling
• Uses continuous monitoring
• Requires periodic visual inspections

CORRECT

How can an SDIO card be made secure?

• Requiring a username before accessing the SDIO card.
• Using the security mechanisms on a standard Wi-Fi network.
• SDIO cards are natively secure and no security settings are needed.
• Turning on patch updates to the SDIO card.

CORRECT

Which of the following is NOT a motion detection method?

• Infrared
• Magnetism
• Radio frequency
• Moisture

CORRECT

Which of the following is NOT a reason why supply chain infections are considered especially dangerous?

• Users are receiving infected devices at the point of purchase and are completely unaware that a brand new device may be infected.
• If the malware is planted in the ROM firmware of the device this can make it 5 or sometimes even impossible to clean an infected device.
• Supply chains take advantage of the trusted "chain of trust" concept.
• It is virtually impossible to closely monitor every step in the supply chain.

CORRECT

How does heuristic detection detect a virus?

• A string of bytes from the virus is compared against the suspected file.
• The virus signature file is placed in a suspended chamber before streaming to the CPU.
• A virtualized environment is created and the code is executed in it.
• The bytes of a virus are placed in different "piles" and then used to create a profile.

INCORRECT

What allows for a single configuration to be set and then deployed to many or all users?

• Command Configuration
• Active Directory
• Snap-In Replication (SIR)
• Group Policy

CORRECT

Which of the following is NOT designed to prevent individuals from entering sensitive areas but instead is intended to direct traffic flow?

• Roller barrier
• Type V controls
• Barricade
• Fencing

CORRECT

Which of the following types of testing uses unexpected or invalid inputs?

• Dynamic analysis
• Stress testing
• Static analysis
• Runtime testing

CORRECT

Which of the following can be used to secure a laptop or mobile device?

• Security tab
• Mobile connector
• Mobile chain
• Cable lock

CORRECT

Which of the following is NOT an advantage to an automated patch update service?

• Administrators can approve or decline updates for client systems, force updates to install by a specific date, and obtain reports on what updates each computer needs.
• Specific types of updates that the organization does not test, such as hotfixes, can be automatically installed whenever they become available.
• Downloading patches from a local server instead of using the vendor's online update service can save bandwidth and time because each computer does not have to connect to an external server.
• Users can disable or circumvent updates just as they can if their computer is configured to use the vendor's online update service.

CORRECT

Which of the following is NOT a typical OS security configuration?

• Employing least functionality
• Restricting patch management
• Disabling default accounts/passwords
• Disabling unnecessary ports and services

CORRECT

Which of the following is NOT a memory vulnerability?

• Buffer overflow
• Pointer deference
• Variable overflow
• DLL injection

CORRECT

Pakpao has been asked to provide research regarding a new company initiative to add Android smartphones to a list of approved devices. One of the considerations is how frequently the smartphones receive firmware OTA updates. Which of the following reasons would Pakpao NOT list in his report as a factor in the frequency of Android firmware OTA updates?

• Because OEMs and wireless carriers want to sell as many devices as possible, they have no financial incentive to update mobile devices that users would then continue to use indefinitely.
• Both OEMs and wireless carriers are hesitant to distribute Google updates because it limits their ability to differentiate themselves from competitors if all versions of Android start to look the same through updates.
• Because many of the OEMs had modified Android, they are reluctant to distribute updates that could potentially conflict with their changes.
• Wireless carriers are reluctant to provide firmware OTA updates because of the bandwidth it consumes on their wireless networks.

CORRECT

Which tool manages the distribution and control of apps?

• MCM
• MDM
• MFM
• MAM

CORRECT

What does containerization do?

• It places all keys in a special vault.
• It slows down a mobile device to half speed.
• It splits operating system functions only on specific brands of mobile devices.
• It separates personal data from corporate data.

CORRECT

Jabez needs to alert through an SMS text message those corporate users who have a specific brand and type of mobile device regarding a serious malware incident. What technology will she use?

• COPE
• MCM
• MAM
• push notification services

CORRECT

Which technology is NOT a core feature of a mobile device?

• physical keyboard
• data synchronization capabilities
• small form factor
• local non-removable data storage

CORRECT

Which of these is considered the strongest type of passcode to use on a mobile device?

• password
• draw connecting dots pattern
• PIN
• fingerprint swipe

CORRECT

Which of the following technologies provides for pictures, video, or audio to be included in text messages?

• ANT
• QR
• MMS
• SMS

CORRECT

Paavo was reviewing a request by an executive for a new subnotebook computer. The executive said that he wanted USB OTG support and asked Paavo's opinion regarding its security. What would Paavo tell him about USB OTG security?

• Connecting a mobile device as a peripheral to an infected computer could allow malware to be sent to that device.
• USB OTG uses strong security and the executive should have no concerns.
• An unsecured mobile device could infect other tethered mobile devices or the corporate network.
• Subnotebooks do not support USB OTG.

CORRECT

What prevents a mobile device from being used until the user enters the correct passcode?

• screen lock
• swipe identifier (SW-ID)
• screen timeout
• touch swipe

CORRECT

Which type of OS is typically found on an embedded system?

• OTG
• RTOS
• SoC
• COPE

CORRECT

What allows a device to be managed remotely?

• mobile application management (MAM)
• mobile resource management (MRM)
• mobile device management (MDM)
• mobile wrapper management (MWM)

CORRECT

Which of these is NOT a risk of connecting a mobile device to a public network?

• Public networks are beyond the control of the employee's organization.
• Public networks are faster than local networks and can spread malware more quickly to mobile devices.
• Public networks may be susceptible to man-in-the-middle attacks.
• Replay attacks can occur on public networks.

CORRECT

What enforces the location in which an app can function by tracking the location of the mobile device?

• geofencing
• location resource management
• GPS tagging
• Graphical Management Tracking (GMT)

CORRECT

A friend of Ukrit told him that he has just downloaded and installed an app that allows him to circumvent the built-in limitations on his Apple iOS smartphone. What is this called?

• Sideloading
• Rooting
• Jailbreaking
• Ducking

CORRECT

Gaetan has attempted to enter the passcode for his mobile device but keeps entering the wrong code. Now he is asked to enter a special phrase to continue. Which configuration setting is enabled on Gaetan's mobile device?

• reset to factory settings
• enable high security
• lock device
• extend lockout period

CORRECT

Agape was asked to make a recommendation regarding short-range wireless technologies to be supported in a new conference room that was being renovated. Which of the following would she NOT consider due to its slow speed and its low deployment levels today?

• NFC
• ANT
• Infrared
• Bluetooth

CORRECT

Which of these is NOT a security feature for locating a lost or stolen mobile device?

• remote lockout
• last known good configuration
• thief picture
• alarm

CORRECT

Calista is designing the specifications for new laptop computers to be purchased by her company. She is comparing the different types and sizes of USB connections found on the devices. Which type USB connection would she NOT find on a laptop?

• Micro
• Type D
• Mini
• Standard

CORRECT

In her job interview, Xiu asks about the company policy regarding smartphones. She is told that employees may choose from a limited list of approved devices but that she must pay for the device herself; however, the company will provide her with a monthly stipend. Which type of enterprise deployment model does this company support?

• Corporate-owned
• COPE
• BYOD
• CYOD

CORRECT

What is the process of identifying the geographical location of a mobile device?

• geolocation
• geotracking
• geomonitoring
• geoID

CORRECT