IS5403 Week 8 Quizezz

Question

A forensic investigator at a crime lab is performing a forensic analysis of a hard drive that was brought in by state troopers. They make a mistake by using the wrong forensic tool during their forensics examination. What should the investigator do?

Disclose the mistake and preserve the chain of custody

Document the mistake and workaround the problem.

Disclose the mistake and assess another area of the hard drive

Document the mistake and press on with remaining tasks

Correct

6 of 10

Question

When data is collected for a forensic investigation, what order should be followed?

Order of seizure

Order of volatility

Order of vulnerability

Order of risk

Correct

7 of 10

Question

Along with the forensic investigation effort, the man hours and expense should not be tracked since the costs are always justified regardless, of the actual amount involved.

False

True

Correct

8 of 10

Question

For what purpose would it be desired to capture the system image?

To facilitate security management

To store the dump file offsite

To capture network packets

So memory analysis can be performed later

Check processor performance

Correct

9 of 10

Question

The forensic investigator at a crime lab will be performing a forensic analysis of a hard drive that was brought in by state troopers. What should be done before performing the analysis?

Capture data in order of volatility

Capture a system image

Capture video

Chain of custody

Correct

Question

The security administrator for Corp.com wants to provide wireless access for employees as well as guests. Multiple wireless access points and separate networks for internal users and guests are required. Which of the following should separate each network? (Choose all that apply.)

Security protocols

SSIDs

Channels

Physical security

Correct

6 of 10

Question

Which of the following is true concerning vulnerability scanning? (Choose all that apply.)

False positive is possible!

Some scanning attempts may be credentialed while some may be non-credentialed.

False negative is not possible!

All scanning attempts must be credentialed.

Some scanning attempts are intrusive while some are non-intrusive.

Correct

7 of 10

Question

How is credentialed scanning better than non-credentialed scanning? (Choose all that apply.)

Active vs. passive scanning

Safer scanning

Customized auditing

More accurate results

Correct

8 of 10

Question

Help from a Recovery Agent is necessary when:

The public key is lost.

One wants to implement OSCP.

One needs to service a CSR.

One needs to setup a registration authority.

The private key is lost by a user.

One needs to remove a CRL.

Correct

9 of 10

Question

What is the difference between a key escrow and a recovery agent? (Choose all that apply.)

The former is primarily for helping internal users

The latter is primarily for third party access to data

The latter is primarily for helping internal users

The former has replaced the latter in many occasions

The former is primarily for third party access to data

Correct

Which of the following is the average amount of time that it will take a device to recover from a failure that is not a terminal failure?

MTTF
FIT
MTTR
MTBF

CORRECT

Bria is reviewing the company's updated personal email policy. Which of the following will she NOT find in it?

Employees should not access personal email at work.
Employees should not forward company emails to a personal email account.
Employees should not give out their company email address unless requested.
Employees should not use company email to send personal email messages.

CORRECT

Which of these is NOT a response to risk?

resistance
avoidance
mitigation
transference

CORRECT

Which policy defines the actions users may perform while accessing systems and networking equipment?

End-user policy
Internet use policy
Acceptable use policy
User permission policy

CORRECT

Which of the following approaches to risk calculation typically assigns a numeric value (1-10) or label (High, Medium, or Low) represents a risk?

Qualitative risk calculation
Policy-based risk calculation
Rule-based risk calculation
Quantitative risk calculation

CORRECT

Which of the following is NOT a security risk of social media sites for users?

Social media security is lax or confusing.
Personal data can be used maliciously.
Social media sites use popup ads.
Users may be too trusting.

INCORRECT

Bob needs to create an agreement between his company and a third-party organization that demonstrates a "convergence of will" between the parties so that they can work together. Which type of agreement will Bob use?

CORRECT

Which of the following risk control types would use video surveillance systems and barricades to limit access to secure sites?

strategic
managerial
operational
technical

CORRECT

While traveling abroad, Giuseppe needs to use public Internet cafe computers to access the secure network. Which of the following non-persistence tools should he use?

Snapshot
Live boot media
Secure Configuration
Revert to known state

CORRECT

Which of the following covers the procedures of managing object authorizations?

Task management
Privilege management
Threat management
Asset management

CORRECT

Simona needs to research a control that attempts to discourage security violations before they occur. Which control will she research?

Corrective control
Detective control
Deterrent control
Preventive control

CORRECT

Agnella was asked to create a report that listed the reasons why a contractor should be provided penetration testing authorization. Which of the following would she NOT list in her report?

Indemnification
Legal authorization
Limit retaliation
Access to resources

CORRECT

What describes the ability of an enterprise data center to revert to its former size after expanding?

Contraction
Scalability
Elasticity
Reduction

CORRECT

What is a collection of suggestions that should be implemented?

Policy
Guideline
Code
Standard

CORRECT

Which of the following threats would be classified as the actions of a hactivist?

Internal threat
Environmental threat
External threat
Compliance threat

CORRECT

Which of the following is NOT a time employee training should be conducted?

When an employee is promoted.
When a new computer is installed.
After monthly patch updates.
During an annual department retreat.

CORRECT

Which statement is NOT something that a security policy must do?

Balance protection with productivity.
Be concise and easy to understand.
Be capable of being implemented and enforced.
State reasons why the policy is necessary.

CORRECT

Which statement does NOT describe a characteristic of a policy?

Policies may be helpful if it is necessary to prosecute violators.
Policies identify what tools and procedures are needed.
Policies define appropriate user behavior.
Policies communicate a unanimous agreement of judgment.

CORRECT

For adult learners, which approach is often preferred?

Pedagogical
Proactive
Andragogical
Institutional

CORRECT

Tomassa is asked to determine the expected monetary loss every time a risk occurs. Which formula will she use?

CORRECT

Question 1

Not yet answered

Points out of 1.00

Flag question

Question text

A list of the available nonkeyboard characters can be seen in Windows by opening what utility?

Question 2

Not yet answered

Points out of 1.00

Flag question

Question text

In cryptography, which of the five basic protections ensures that the information is correct and no unauthorized person or malicious software has altered that data?

Select one:

confidentiality

encryption

availability

integrity

Question 3

Answer saved

Points out of 1.00

Flag question

Question text

A service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service, is known as:

Question 4

Not yet answered

Points out of 1.00

Flag question

Question text

What connection technology allows a mobile device with a USB connection to act as either a host or a peripheral used for external media access?

Select one:

VDI

OTG

OTA

COPE

Question 5

Not yet answered

Points out of 1.00

Flag question

Question text

What specific type of hardware card inserts into a web server that contains one or more co-processors to handle SSL/TLS
processing?

Question 6

Not yet answered

Points out of 1.00

Flag question

Question text

What is the end result of a penetration test?

Question 7

Not yet answered

Points out of 1.00

Flag question

Question text

Websites that group individuals and organizations into clusters or groups based on some sort are considered to be what type of networks?

Question 8

Not yet answered

Points out of 1.00

Flag question

Question text

Slave devices that are connected to a piconet and are sending transmissions are known as what?

Question 9

Not yet answered

Points out of 1.00

Flag question

Question text

Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?

Question 10

Not yet answered

Points out of 1.00

Flag question

Question text

The use of what item below involves the creation of a large pre-generated data set of candidate digests?

Question 11

Not yet answered

Points out of 1.00

Flag question

Question text

What social engineering principal frightens and coerces a victim by using threats?

Question 12

Answer saved

Points out of 1.00

Flag question

Question text

What can be used to increase the strength of hashed passwords?

Question 13

Not yet answered

Points out of 1.00

Flag question

Question text

The goal of what type of threat evaluation is to better understand who the attackers are, why they attack, and what types of attacks might occur?

Select one:

threat modeling

threat profiling

threat mitigation

risk modeling

Question 14

Not yet answered

Points out of 1.00

Flag question

Question text

After the DES cipher was broken and no longer considered secure, what encryption algorithm was made as its successor?

Question 15

Not yet answered

Points out of 1.00

Flag question

Question text

What device operates at the Network Layer (layer 3) of the OSI model and forwards packets across computer networks?

Select one:

hub

router

switch

bridge

Question 16

Not yet answered

Points out of 1.00

Flag question

Question text

What describes an agreement between two or more parties and demonstrates a "convergence of will" between the parties
so that they can work together?

Select one:

MOU

NDA

ISA

BPA

Question 17

Not yet answered

Points out of 1.00

Flag question

Question text

How can a network of physical devices be grouped into logical units, regardless of what network switches they may be connected to?

Select one:

MAC address

IP address

VLAN

subnets

Question 18

Not yet answered

Points out of 1.00

Flag question

Question text

What are the two types of cross-site attacks? (Choose all that apply.)

Select one or more:

cross-site request forgery attacks

cross-site flood attacks

cross-site input attacks

cross-site scripting attacks

Question 19

Not yet answered

Points out of 1.00

Flag question

Question text

What term best describes when cryptography is applied to entire disks instead of individual files or groups of files?

Select one:

full disk encryption

disk encryption

OS encryption

system encryption

Question 20

Not yet answered

Points out of 1.00

Flag question

Question text

On and SDN network, what specific unit gives traffic the permission to flow through the network?

Question 21

Not yet answered

Points out of 1.00

Flag question

Question text

What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?

Question 22

Not yet answered

Points out of 1.00

Flag question

Question text

Select the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users.

Question 23

Not yet answered

Points out of 1.00

Flag question

Question text

A metallic enclosure that prevents the entry or escape of an electromagnetic field is known as a:

Select one:

bollard cage

Newton cage

mantrap

Faraday cage

Question 24

Not yet answered

Points out of 1.00

Flag question

Question text

In Microsoft Windows, what type of templates are a collection of security configuration settings?

Select one:

system

user

administrator

security

Question 25

Not yet answered

Points out of 1.00

Flag question

Question text

Select the device that is designed to exclusively monitor the RF frequency for network transmissions?

Select one:

wireless device probe

dedicated probe

access point probe

WAP

Question 26

Answer saved

Points out of 1.00

Flag question

Question text

The action that is taken by a subject over an object is called a(n):

Question 27

Not yet answered

Points out of 1.00

Flag question

Question text

The use of a single authentication credential that is shared across multiple networks is called:

Question 28

Not yet answered

Points out of 1.00

Flag question

Question text

What mobile operating system below requires all applications to be reviewed and approved before they can be made available in the App store?

Select one:

Symbian

Android

Blackberry OS

iOS

Question 29

Not yet answered

Points out of 1.00

Flag question

Question text

A port in what state below implies that an application or service assigned to that port is listening for any instructions?

Question 30

Not yet answered

Points out of 1.00

Flag question

Question text

Under which laws are health care enterprises required to guard protected health information and implement policies and procedures whether it be in paper or electronic format?

Select one:

HCPA

USHIPA

HIPAA

HLPDA

Question 31

Not yet answered

Points out of 1.00

Flag question

Question text

Data that is in an unencrypted form is referred to as which of the following?

Select one:

cleartext

simpletext

crypttext

plain text

Question 32

Not yet answered

Points out of 1.00

Flag question

Question text

What is the name for a cumulative package of all patches and hot-fixes as well as additional features up to a given point?

Question 33

Answer saved

Points out of 1.00

Flag question

Question text

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Select one:

verification request

authentication request

accounting request

access request

Question 34

Not yet answered

Points out of 1.00

Flag question

Question text

The use of one authentication credential to access multiple accounts or applications is referred to as which of the following?

Question 35

Not yet answered

Points out of 1.00

Flag question

Question text

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

Question 36

Not yet answered

Points out of 1.00

Flag question

Question 37

Not yet answered

Points out of 1.00

Flag question

Question text

What social engineering principal convinces a victim an immediate action is needed?

Question 38

Not yet answered

Points out of 1.00

Flag question

Question text

Piconets in which connections exist between different piconets are known as which of the following terms?

Question 39

Not yet answered

Points out of 1.00

Flag question

Question text

What is a value that can be used to ensure that plaintext, when hashed, will not consistently result in the same digest?

Question 40

Not yet answered

Points out of 1.00

Flag question

Question text

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Question 41

Not yet answered

Points out of 1.00

Flag question

Question text

A computer that uses SSD drives and is smaller than a standard notebook is an example of what type of a portable computer?

Select one:

laptop

subnotebook

netbook

tablet

Question 42

Not yet answered

Points out of 1.00

Flag question

Question text

What publicly released software security update is intended to repair a vulnerability?

Question 43

Not yet answered

Points out of 1.00

Flag question

Question text

Multiple sectors on a disk, when combined, are referred to as a:

Select one:

track

platter

cluster

slice

Question 44

Not yet answered

Points out of 1.00

Flag question

Question text

What is a block cipher algorithm that operates on 64-bit blocks and can have a key length from 32 to 448 bits?

Select one:

Rijndal

Whirlpool

Twofish

Blowfish

Question 45

Not yet answered

Points out of 1.00

Flag question

Question text

What dedicated hardware device aggregates hundreds or thousands of VPN connections?

Select one:

VPN concentrator

VPN gateway

VPN switch

VPN server

Question 46

Not yet answered

Points out of 1.00

Flag question

Question text

What process does a penetration tester rely on to access an ever higher level of resources?

Select one:

pivot

continuous exploitation

persistence

spinning

Question 47

Not yet answered

Points out of 1.00

Flag question

Question text

What kind of biometrics utilizes a person's unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person's face?

Select one:

reactive biometrics

cognitive biometrics

physical biometrics

standard biometrics

Question 48

Not yet answered

Points out of 1.00

Flag question

Question text

If Bob receives an encrypted reply message from Alice, whose private key is used to decrypt the received message?

Select one:

Bob's private key and Alice's public key.

Alice's private key.

Bob's private key.

Bob and Alice's keys.

Question 49

Not yet answered

Points out of 1.00

Flag question

Question text

A location that has all the equipment installed but does not have active Internet or telecommunications facilities, and does not have current backups of data, is an example of a:

Select one:

warm site

spare site

hot site

cold site

Question 50

Not yet answered

Points out of 1.00

Flag question

Question text

At what stage can a certificate no longer be used for any type of authentication?

Question 51

Not yet answered

Points out of 1.00

Flag question

Question text

What process addresses how long data must be kept and how it is to be secured?

Select one:

legal and compliance

legal retention

data methodology

data retention

Question 52

Not yet answered

Points out of 1.00

Flag question

Question text

During a vulnerability assessment, what type of software can be used to search a system for port vulnerabilities?

Select one:

threat scanner

port scanner

vulnerability profiler

application profiler

Question 53

Not yet answered

Points out of 1.00

Flag question

Question text

The Authentication Header (AH) protocol is a part of what encryption protocol suite below?

Select one:

TLS 3.0

GPG

IPSec

SSL

Question 54

Not yet answered

Points out of 1.00

Flag question

Question text

What federation system technology uses federation standards to provide SSO and exchanging attributes?

Question 55

Not yet answered

Points out of 1.00

Flag question

Question text

Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.

Select one:

intrusive

non-intrusive

active

passive

Question 56

Not yet answered

Points out of 1.00

Flag question

Question text

Select the technology that can be used to examine content through application-level filtering.

Question 57

Not yet answered

Points out of 1.00

Flag question

Question text

An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:

Select one:

Session blocking

Session replay

Session spoofing

Session hijacking

Question 58

Not yet answered

Points out of 1.00

Flag question

Question text

What cryptographic method, first proposed in the mid-1980s, makes use of sloping curves instead of large prime numbers?

Select one:

ECC

IKE

FCC

RSA

Question 59

Not yet answered

Points out of 1.00

Flag question

Question text

What device acts like a wireless base station in a network, acting as a bridge between wireless and wired networks?

Question 60

Not yet answered

Points out of 1.00

Flag question

Question text

Select the EAP protocol that uses digital certificates for authentication?

Select one:

EAP-FAST

EAP-TLS

EAP-MSCHAPv2

EAP-AKA

Question 61

Not yet answered

Points out of 1.00

Flag question

Question text

What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?

Select one:

DNS

TCP

ARP

UDP

Question 62

Not yet answered

Points out of 1.00

Flag question

Question text

What attack occurs when a domain pointer that links a domain name to a specific web server is changed by a threat actor?

Select one:

clickjacking

domain hijacking

DNS spoofing

pointer hack

Question 63

Not yet answered

Points out of 1.00

Flag question

Question text

If using the MD5 hashing algorithm, what is the length to which each message is padded?

Select one:

64 bits

32 bits

128 bits

512 bits

Question 64

Not yet answered

Points out of 1.00

Flag question

Question text

One of the armored virus infection techniques utilizes encryption to make virus code more difficult to detect, in addition to separating virus code into different pieces and inject these pieces throughout the infected program code. What is the name for this technique?

Select one:

split

Swiss cheese

appender

stealth

Question 65

Not yet answered

Points out of 1.00

Flag question

Question text

Malware that locks or prevents a device from functioning properly until a fee has been paid is known as:

Question 66

Not yet answered

Points out of 1.00

Flag question

Question text

Select the option that best describes a policy:

Select one:

A list of all items that have a positive economic value

A document that outlines specific requirements or rules that must be met

A collection of suggestions that should be implemented

A collection of requirements specific to the system or procedure that must be met by everyone

Question 67

Not yet answered

Points out of 1.00

Flag question

Question text

What are the planes used to allow SDN to virtualize parts of the physical network so that it can be more quickly and easily reconfigured? (Choose all that apply.)

Select one or more:

data plane

management plane

data plane

control plane

Question 68

Not yet answered

Points out of 1.00

Flag question

Question text

What security concept states a user should only be given the minimum set of permissions required to perform necessary tasks?

Select one:

least functionality

function limiting

whitelisting

blacklisting

Question 69

Not yet answered

Points out of 1.00

Flag question

Question text

If a penetration tester has gained access to a network and then tries to move around inside the network to other resources, what procedure is the tester performing?

Select one:

persistence

pivot

secondary exploitation

spinning

Question 70

Not yet answered

Points out of 1.00

Flag question

Question text

Select the security tool that is an inventory of applications and associated components that have been pre-approved and authorized to be active and present on the device?

Question 71

Not yet answered

Points out of 1.00

Flag question

Question text

Select the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:

Question 72

Not yet answered

Points out of 1.00

Flag question

Question text

Select the XML standard that allows secure web domains to exchange user authentication and authorization data and is used extensively for online e-commerce transactions.

Question 73

Not yet answered

Points out of 1.00

Flag question

Question text

What data unit is associated with the Open Systems Interconnection layer four?

Select one:

segment

packet

bit

frame

Question 74

Not yet answered

Points out of 1.00

Flag question

Question text

How is the coverage area for a cellular telephony network usually divided in a typical city?

Question 75

Not yet answered

Points out of 1.00

Flag question

Question text

What software methodology includes security automation?

Select one:

Agile

Secure DevOps

DevOps

Secure Agile

Question 76

Not yet answered

Points out of 1.00

Flag question

Question text

What can be defined as the planning, coordination, and communications functions that are needed to resolve an incident in an efficient manner?

Select one:

incident handling

incident management

incident planning

incident reporting

Question 77

Not yet answered

Points out of 1.00

Flag question

Question text

What control is designed to identify any threat that has reached the system?

Question 78

Not yet answered

Points out of 1.00

Flag question

Question text

What is the name of an instruction that interrupts a program being executed and requests a service from the operating system?

Select one:

system exception

hardware instruction

system call

unit call

Question 80

Not yet answered

Points out of 1.00

Flag question

Question text

If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?

Select one:

complete network segregation

physical network segregation

network isolation

logical network segregation

Question 81

Not yet answered

Points out of 1.00

Flag question

Question text

Those who wrongfully disclose individually identifiable health information can be fined up to what amount per calendar year?

Select one:

$500,000

$1,500,000

$250,000

$50,000

Question 82

Not yet answered

Points out of 1.00

Flag question

Question text

What hardware component can be inserted into a web server that contains one or more co-processors to handle SSL/TLS processing?

Select one:

SSL/TLS accelerator

SSL/TLS tap

SSL/TLS mirror

SSL/TLS access point

Question 83

Not yet answered

Points out of 1.00

Flag question

Question text

In information security, which of the following is an example of a threat actor?

Select one:

all of the above

a person attempting to break into a secure computer network

a virus that attacks a computer network

a force of nature such as a tornado that could destroy computer equipment

Clear my choice

Question 84

Not yet answered

Points out of 1.00

Flag question

Question text

A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?

Select one:

Certificate policy (CP)

Lifecycle policy (LP)

Certificate practice statement (CPS)

Access policy (AP)

Question 85

Not yet answered

Points out of 1.00

Flag question

Question text

What alternative term can be used to describe asymmetric cryptographic algorithms?

Select one:

public key cryptography

user key cryptography

private key cryptography

cipher-text cryptography

Question 86

Not yet answered

Points out of 1.00

Flag question

Question text

In what type of cluster does every server perform useful work so that if one fails, the remaining servers take on the additional load?

Select one:

symmetric server

asymmetric server

asymmetric network

symmetric network

Question 87

Not yet answered

Points out of 1.00

Flag question

Question text

A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:

Question 88

Answer saved

Points out of 1.00

Flag question

Question text

In what type of cloud computing does the customer have some control over the operating systems, storage, and their installed applications?

Select one:

Application as a Service

Software as a Service

Infrastructure as a Service

System as a Service

Question 89

Answer saved

Points out of 1.00

Flag question

Question text

DNS poisoning can be prevented using the latest edition of what software below?

Select one:

BIND

WINS

finger

DHCP

Question 90

Not yet answered

Points out of 1.00

Flag question

Question text

What is the term for a network set up with intentional vulnerabilities?

Question 91

Not yet answered

Points out of 1.00

Flag question

Question text

What common method is used to ensure the security and integrity of a root CA?

Select one:

Only use the root CA infrequently.

Keep it in an offline state from the network.

Password protect the root CA

Keep it in an online state and encrypt it.

Question 92

Not yet answered

Points out of 1.00

Flag question

Question text

Select the proprietary wireless network technology that is used primarily by sensors for communicating data.

Select one:

Bluetooth

SCD

USB

ANT

Question 93

Not yet answered

Points out of 1.00

Flag question

Question text

An administrator running a port scan wants to ensure that no processes are listening on port 23. What state should the port be in?

Select one:

secure port

hardened port

closed port

open port

Question 94

Answer saved

Points out of 1.00

Flag question

Question text

How many different Microsoft Windows file types can be infected with a virus?

Select one:

Question 95

Not yet answered

Points out of 1.00

Flag question

Question text

A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?

Select one:

Set up a proxy in front of the web server

Install a VPN, configure host

Configure a reduction point on a firewall

Create a DMZ, add necessary hosts.

Question 96

Not yet answered

Points out of 1.00

Flag question

Question text

Mobile devices with global positioning system (GPS) abilities typically make use of:

Select one:

location services

weak passwords

open networks

anti-virus software

Question 97

Not yet answered

Points out of 1.00

Flag question

Question text

The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?

Select one:

Create a subnet for each network switch in use

Add all users to a single network segment

Create additional subnets for the separate groups

Create a VLAN and add the users' computers / ports to the correct VLAN

Clear my choice

Question 98

Not yet answered

Points out of 1.00

Flag question

Question text

A snapshot of the current state of a computer that contains all current settings and data is known as what option below:

Select one:

system standard

system view

system image

system baseline

Question 99

Not yet answered

Points out of 1.00

Flag question

Question 100

Not yet answered

Points out of 1.00

Flag question

Question text

What specific type of authentication can be based on where the user is located?

Select one:

GPS

geolocation

somewhere locating

geocache

Question 101

Not yet answered

Points out of 1.00

Flag question

Question text

A series of instructions that can be grouped together as a single command and are often used to automate a complex set of tasks or a repeated series of tasks are known as:

Question 102

Not yet answered

Points out of 1.00

Flag question

Question text

Due to the potential impact of changes that can affect all users in an organization, and considering that security vulnerabilities can arise from uncoordinated changes, what should an organization create to oversee changes?

Select one:

change management team

security control team

compliance team

incident response team

Question 103

Not yet answered

Points out of 1.00

Flag question

Question text

The process of identifying exposure to threats, creating preventive and recovery procedures, and then testing them to determine if they are sufficient, is known as:

Question 104

Not yet answered

Points out of 1.00

Flag question

Question text

Select the option that best describes an asset:

Select one:

any item that is owned by an enterprise

any item that is used by management

any item that has a positive economic value

any item that is used by all employees

Clear my choice

Question 105

Not yet answered

Points out of 1.00

Flag question

Question text

What option below represents an example of behavioral biometrics?

Select one:

keystroke dynamics

facial recognition

user dynamics

fingerprint recognition

Question 106

Not yet answered

Points out of 1.00

Flag question

Question text

A framework for all of the entities involved in digital certificates for digital certificate management is known as:

Select one:

private key infrastructure

shared key infrastructure

public key infrastructure

network key infrastructure

Question 107

Not yet answered

Points out of 1.00

Flag question

Question text

Select the item that is not considered to be a basic characteristic of mobile devices.

Question 108

Not yet answered

Points out of 1.00

Flag question

Question text

Select the term used to describe tracking software that is deployed without the consent or control of the user.

Question 109

Not yet answered

Points out of 1.00

Flag question

Question text

The goal of redundancy is to reduce what variable?

Question 110

Not yet answered

Points out of 1.00

Flag question

Question text

What monitors emails for spam and other unwanted content to prevent these messages from being delivered?

Select one:

firewall

mail gateway

code emulation

router gateway

Question 111

Not yet answered

Points out of 1.00

Flag question

Question text

What is the maximum number of characters that can exist within a SSID name?

Select one:

Question 112

Not yet answered

Points out of 1.00

Flag question

Question text

What criteria must be met for an XXS attack to occur on a specific website?

Select one:

The website must accept user input while validating it and use that input in a response.

The website must accept user input without validating it and use that input in a response.

The website must accept user input while validating it and omit that input in a response.

The website must not accept user input without validating it and use that input in a response.

Question 113

Not yet answered

Points out of 1.00

Flag question

Question text

What block cipher mode of operation uses the most basic approach where the plaintext is divided into blocks, and each block is then encrypted separately?

Select one:

Electronic Code Book

Galois/Counter

Counter

Cipher Block Chaining

Question 114

Not yet answered

Points out of 1.00

Flag question

Question text

What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?

Question 115

Not yet answered

Points out of 1.00

Flag question

Question text

What class of attacks use innovative attack tools and once a system is infected it silently extracts data over an extended period?

Question 116

Not yet answered

Points out of 1.00

Flag question

Question text

The SHA-1 hashing algorithm creates a digest that is how many bits in length?

Select one:

192 bits

128 bits

160 bits

96 bits

Question 117

Not yet answered

Points out of 1.00

Flag question

Question text

A U.S. Department of Defense (DoD) smart card that is used for identification of active-duty and reserve military personnel along with civilian employees and special contractors is called:

Select one:

Common Access Card (CAC)

Personal Credential Card (PCC)

Credential Validation Card (CVC)

Identity Validation Card (IVC)

Clear my choice

Question 118

Not yet answered

Points out of 1.00

Flag question

Question text

A virus that infects an executable program file is known as?

Question 119

Not yet answered

Points out of 1.00

Flag question

Question text

A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology?

Select one:

Roller barrier

Anti-climb

Spiked barrier

Rotating spikes

Question 120

Not yet answered

Points out of 1.00

Flag question

Question text

What data unit is associated with the Open Systems Interconnection layer two?

Select one:

segment

packet

bit

frame

Question 121

Not yet answered

Points out of 1.00

Flag question

Question text

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):

Question 122

Not yet answered

Points out of 1.00

Flag question

Question text

The process by which keys are managed by a third party, such as a trusted CA, is known as?

Select one:

key renewal

key destruction

key management

key escrow

Question 123

Not yet answered

Points out of 1.00

Flag question

Question text

What process describes using technology as a basis for controlling the access and usage of sensitive data?

Select one:

control diversity

administrative controls

technical controls

vendor diversity

Question 124

Not yet answered

Points out of 1.00

Flag question

Question text

A collection of suggestions that should be implemented is referred to as a:

Select one:

baseline

security policy

guideline

security procedure

Question 125

Not yet answered

Points out of 1.00

Flag question

Question text

If a network administrator needs to configure a switch to copy traffic that occurs on some or all ports to a designated monitoring port on the switch, what switch technology will need to be supported?

Select one:

interface capture

port identity

port mirroring

port snooping

Question 126

Not yet answered

Points out of 1.00

Flag question

Question text

What language below is used to view and manipulate data that is stored in a relational database?

Select one:

ISL

DQL

SQL

Question 127

Not yet answered

Points out of 1.00

Flag question

Question text

At what level of the OSI model does the IP protocol function?

Select one:

Presentation Layer

Network Layer

Data link Layer

Transport Layer

Question 128

Not yet answered

Points out of 1.00

Flag question

Question text

The Temporal Key Integrity Protocol (TKIP) encryption technology uses a MIC value that is what length?

Select one:

32 bits

64 bits

24 bits

48 bits

Question 129

Not yet answered

Points out of 1.00

Flag question

Question text

A Bluetooth attack in which the attacker accesses unauthorized information from a wireless device using a Bluetooth connection, is known as which of the following terms?

Select one:

Bluejacking

Bluetalking

Bluecracking

Bluesnarfing

Question 130

Not yet answered

Points out of 1.00

Flag question

Question text

To date, the single most expensive malicious attack occurred in 2000, which cost an estimated $8.7 billion. What was the name of this attack?

Question 131

Not yet answered

Points out of 1.00

Flag question

Question text

Choose the SQL injection statement example below that could be used to find specific users:

Select one:

whatever' OR full_name equals '%Mia%'

whatever' OR full_name = '%Mia%'

whatever' OR full_name LIKE '%Mia%'

whatever' OR full_name IS '%Mia%'

Question 132

Not yet answered

Points out of 1.00

Flag question

Question text

What federated identity management (FIM) relies on token credentials?

Select one:

OpenPass

Shibboleth

OpenID

OAuth

Question 133

Not yet answered

Points out of 1.00

Flag question

Question text

What is another term used for a security weakness?

Select one:

risk

opportunity

threat

vulnerability

Question 134

Not yet answered

Points out of 1.00

Flag question

Question text

What specific science discipline do most social engineering attacks rely on when they are being used?

Select one:

psychology

psychiatry

criminology

engineering

Question 135

Not yet answered

Points out of 1.00

Flag question

Question text

How could an administrator initially manage applications on mobile devices using a technique called "app wrapping?"

Select one:

Cloud Application Management

Extended Application Management

Mobile Application Management

Remote Application Management

Question 136

Not yet answered

Points out of 1.00

Flag question

Question text

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Select one:

last login

password expiration

account expiration

account last used

Question 137

Not yet answered

Points out of 1.00

Flag question

Question text

Select the term that best describes automated attack software?

Select one:

open-source utility

intrusion application

open-source intelligence

insider software

Question 138

Not yet answered

Points out of 1.00

Flag question

Question text

An independently rotating large cup affixed to the top of a fence prevents the hands of intruders from gripping the top of a fence to climb over it. What is the name for this technology?

Select one:

top hat

bollard

roller barrier

fence

Question 139

Not yet answered

Points out of 1.00

Flag question

Question text

A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?

Select one:

Stateless packet filtering

Stateful packet filtering

Stateful frame filtering

Stateless frame filtering

Question 140

Not yet answered

Points out of 1.00

Flag question

Question text

Select the TCP/IP protocol that resolves a symbolic name to its corresponding IP address using a database consisting of an organized hierarchy tree.

Select one:

NIS

WINS

DNS

TACACS+

Question 141

Not yet answered

Points out of 1.00

Flag question

Question text

An attack that takes advantage of the procedures for initiating a session is known as what type of attack?

Select one:

DNS amplification attack

SYN flood attack

smurf attack

IP spoofing

Question 142

Not yet answered

Points out of 1.00

Flag question

Question text

What specific process in application development removes a resource that is no longer needed?

Select one:

deprovisioning

change management

baselining

version control

Question 143

Not yet answered

Points out of 1.00

Flag question

Question text

What kind of software program delivers advertising content in a manner that is unexpected and unwanted by the user, and is typically included in malware?

Select one:

adware

spam

Trojan

keylogger

Question 144

Not yet answered

Points out of 1.00

Flag question

Question text

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Select one:

reference monitor

label

subject

entity

Question 145

Not yet answered

Points out of 1.00

Flag question

Question text

If a user has more than one type of authentication credential, what type of authentication is being used?

Select one:

multifactor authentication

pattern authentication

token authentication

verified authentication

Question 146

Not yet answered

Points out of 1.00

Flag question

Question text

Using technology to search for computer evidence of a crime in order to retrieve information, even if it has been altered or erased, that can be used in pursuit of an attacker or criminal is an example of:

Select one:

penetration testing

risk management

vulnerability testing

computer forensics

Question 147

Not yet answered

Points out of 1.00

Flag question

Question text

An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?

Question 148

Not yet answered

Points out of 1.00

Flag question

Question text

In which type of encryption is the same key used to encrypt and decrypt data?

Select one:

private

public

asymmetric

symmetric

Question 149

Not yet answered

Points out of 1.00

Flag question

Question text

How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?

Select one:

DNS marking

DNS overloading

Phishing

DNS poisoning

Question 150

Not yet answered

Points out of 1.00

Flag question

Question text

The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?

Select one:

DIB

DAP

DIT

LDAP

Question 151

Not yet answered

Points out of 1.00

Flag question

Question text

Select the EAP protocol supported by WPA2 Enterprise that securely tunnels any credential form for authentication using TLS.

Question 152

Not yet answered

Points out of 1.00

Flag question

Question 153

Not yet answered

Points out of 1.00

Flag question

Question text

What term best describes any premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against noncombatant targets by subnational groups or clandestine agents?

Select one:

cybercriminal

cyberterrorism

hacking

cracking

Question 154

Not yet answered

Points out of 1.00

Flag question

Question text

In what kind of attack can attackers make use of millions of computers under their control in an attack against a single server or network?

Select one:

distributed

local

centered

remote

Question 155

Not yet answered

Points out of 1.00

Flag question

Question text

What kind of networking device forwards packets across different computer networks by reading destination addresses?

Question 156

Not yet answered

Points out of 1.00

Flag question

Question text

According to the U.S. Bureau of Labor Statistics, what percentage of growth for information security analysts is the available job outlook supposed to reach through 2024?

Select one:

Question 157

Not yet answered

Points out of 1.00

Flag question

Question text

What specific type of phishing attack uses the telephone to target a victim?

Select one:

whaling

target phishing

vishing

spear phishing

Question 158

Not yet answered

Points out of 1.00

Flag question

Question text

What information security position reports to the CISO and supervises technicians, administrators, and security staff?

Select one:

security administrator

security manager

security auditor

security engineer

Question 159

Not yet answered

Points out of 1.00

Flag question

Question text

Select the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.

Select one:

identity

integrity

availability

confidentiality

Question 160

Not yet answered

Points out of 1.00

Flag question

Question text

Select the email protocols that are not secure? (Choose all that apply.)

Select one or more:

S/MIME

IMAP

TLS

POP

Question 161

Not yet answered

Points out of 1.00

Flag question

Question text

If a user uses the operating system's "delete" command to erase data, what type of data removal procedure was used?

Select one:

purging

data sanitation

degaussing

wiping

Question 162

Not yet answered

Points out of 1.00

Flag question

Question text

What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?

Select one:

Galois/Counter

Counter

Electronic Code Book

Cipher Block Chaining

Question 163

Not yet answered

Points out of 1.00

Flag question

Question text

What allows an application to implement an encryption algorithm for execution?

Question 164

Not yet answered

Points out of 1.00

Flag question

Question text

Select below the type of malware that appears to have a legitimate use, but contains something malicious:

Select one:

script

Trojan

worm

virus

Question 165

Not yet answered

Points out of 1.00

Flag question

Question text

What level of security access should a computer user have to do their job?

Select one:

limiting amount

password protected

least amount

authorized access

Question 166

Not yet answered

Points out of 1.00

Flag question

Question text

What is the main weakness associated with the use of passwords?

Select one:

handshake technology

encryption technology

human memory

human reliability

Question 167

Not yet answered

Points out of 1.00

Flag question

Question text

What is the name of the process that basically takes a snapshot of the current security of an organization?

Select one:

threat analysis

vulnerability appraisal

risk assessment

threat assessment

Question 168

Not yet answered

Points out of 1.00

Flag question

Question text

A QR code can't contain which of the following items directly?

Question 169

Not yet answered

Points out of 1.00

Flag question

Question text

Anti-virus products typically utilize what type of virus scanning analysis?

Select one:

Static analysis

Wildcard scanning analysis

Heuristic detection analysis

String scanning analysis

Question 170

Not yet answered

Points out of 1.00

Flag question

Question text

What can be enabled to prevent a mobile device from being used until a user enters the correct passcode, such as a pin or password?

Question 171

Not yet answered

Points out of 1.00

Flag question

Question text

Select the specific type of interview that is usually conducted when an employee leaves the company?

Select one:

post interview

last interview

initial interview

exit interview

Question 172

Not yet answered

Points out of 1.00

Flag question

Question text

Bluetooth is an example of what type of technology below?

Select one:

Personal Area Network

Limited Area Network

Private Area Network

Small Area Network

Question 173

Not yet answered

Points out of 1.00

Flag question

Question text

How can an area be made secure from a non-secured area via two interlocking doors to a small room?

Question 174

Not yet answered

Points out of 1.00

Flag question

Question text

An administrator needs to examine FTP commands that are being passed to a server. What port should the administrator be monitoring?

Select one:

Question 175

Not yet answered

Points out of 1.00

Flag question

Question text

What term below is used to describe the process of gathering information for an attack by relying on the weaknesses of individuals?

Select one:

phreaking

social engineering

reverse engineering

hacking

Question 176

Not yet answered

Points out of 1.00

Flag question

Question text

What is the U.S. federal government standard for digital signatures?

Question 177

Not yet answered

Points out of 1.00

Flag question

Question text

An access point that is unauthorized and allows an attacker to bypass network security configurations is considered to be what type of access point?

Select one:

sanctioned

rogue

legitimate

random

Question 178

Not yet answered

Points out of 1.00

Flag question

Question text

Select below the type of cluster where standby server exists only to take over for another server in the event of its failure.

Question 179

Not yet answered

Points out of 1.00

Flag question

Question text

What cryptographic transport algorithm is considered to be significantly more secure than SSL?

Select one:

AES

ESSL

HTTPS

TLS

Question 180

Not yet answered

Points out of 1.00

Flag question

Question text

A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as which of the following?

Select one:

mandatory splitting

separation of duties

role reversal

process sharing

Question 181

Not yet answered

Points out of 1.00

Flag question

Question text

What is the name for an image that consists of an evidence-grade backup because its accuracy meets evidence standards?

Question 182

Not yet answered

Points out of 1.00

Flag question

Question text

An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?

Question 183

Not yet answered

Points out of 1.00

Flag question

Question text

The exchange of information among DNS servers regarding configured zones is known as:

Select one:

zone transfer

zone sharing

zone removal

resource request

Question 184

Not yet answered

Points out of 1.00

Flag question

Question text

An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?

Select one:

Load balancing

stateful packet filtering

proxy servers

failover servers

Question 185

Not yet answered

Points out of 1.00

Flag question

Question text

What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?

Select one:

forward proxy server

telnet server

DNS server

VPN server

Question 186

Not yet answered

Points out of 1.00

Flag question

Question text

Select the option that represents a wearable technology.

Select one:

Google Glass

Android

iPhone

Google Chromebook

Question 187

Not yet answered

Points out of 1.00

Flag question

Question text

In information security, what can constitute a loss?

Select one:

theft of information

a delay in transmitting information that results in a financial penalty

the loss of good will or a reputation

all of the above

Question 188

Not yet answered

Points out of 1.00

Flag question

Question text

Most portable devices, and some computer monitors have a special steel bracket security slot built into the case, which can be used in conjunction with a:

Select one:

cable lock

shield lock

U-lock

safe lock

Question 189

Not yet answered

Points out of 1.00

Flag question

Question text

Select the computing device that uses a limited version of an operating system and uses a web browser with an integrated media player.

Select one:

web-based

netbook

notebook

tablet

Question 190

Not yet answered

Points out of 1.00

Flag question

Question text

If an attacker purchases and uses a URL that is similar in spelling and looks like a well-known web site in order for the attacker to gain Web traffic to generate income, what type of attack are they using?

Select one:

URL hijacking

Web squatting

typo hijacking

spoofing

Question 191

Answer saved

Points out of 1.00

Flag question

Question 192

Not yet answered

Points out of 1.00

Flag question

Question text

What specific ways can a session token be transmitted? (Choose all that apply.)

Select one or more:

In the header of the HTTP requisition.

In the trailer of a frame.

In the URL.

In the header of a packet.

Question 193

Not yet answered

Points out of 1.00

Flag question

Question text

Select the secure alternative to the telnet protocol:

Select one:

SSH

IPsec

HTTPS

TLS

Question 194

Not yet answered

Points out of 1.00

Flag question

Question text

How can an administrator keep devices powered when power is interrupted?

Select one:

uninterruptible power supply

redundant power supply

replica power supply

uninterruptible system supply

Question 195

Not yet answered

Points out of 1.00

Flag question

Question text

What type of attack is targeted against a smaller group of specific individuals, such as the major executives working for a manufacturing company?

Question 196

Not yet answered

Points out of 1.00

Flag question

Question text

A written document that states how an organization plans to protect the company's information technology assets is a:

Select one:

standard

security procedure

guideline

security policy

Question 197

Not yet answered

Points out of 1.00

Flag question

Question text

What technology uses a chip on the motherboard of the computer to provide cryptographic services?

Select one:

TPM

HSM

FDE

SEDs

Question 198

Not yet answered

Points out of 1.00

Flag question

Question text

The simplest type of stream cipher, one in which one letter or character is exchanged for another, is known as what?

Select one:

lock

loop

substitution

shift

Question 199

Not yet answered

Points out of 1.00

Flag question

Question text

Authentication for WPA Personal is accomplished by using what type of key?

Select one:

MIC

PSK

TKIP

Question 200

Not yet answered

Points out of 1.00

Flag question

Question text

What security standard was introduced in conjunction with UEFI?

Select one:

Unified Boot

Firmware Interface

BIOS

Secure Boot

US-India Student Support Services