IS5403 Week 2 New

 Lab 1

VirusTotal.txt
labconnection.com
0
PUP
API
Lab 2
5
Both of these
Both of these
1
DangerousObject
Lab 3
Heuristic scanning
Dynamic analysis
All of these
All of these
30

Lab 4
Wrong passcode 3 times

Alarm will sound

On-boarding

None
1234
Lab 5
Mobile app testing
MCM
MAM
UDM

5

Question

Which of the following malware does not harm the system but only targets the data?

Worm

Trojan

Logic bomb

Ransomware

Correct

 

5 of 10

6

Question

Password spraying cyber-attack can be categorized as which of the following type of attack?

Dictionary

Wordlist

Unencrypted

Brute-force

Correct

 

6 of 10

7

Question

A USB can be used to drop which of the following types of malware? [Choose all that apply]

Worms

Keyboard loggers

Backdoor

Trojan

Correct

 

7 of 10

8

Question

Which of the following statements are true for artificial intelligence (AI)? [Choose all that apply]

AI learns on its own without any input data

A self-driving car is an example of AI

Machine Learning or ML is a subset of AI

AI focuses on the broad idea of making a system execute a task

Correct

 

8 of 10

9

Question

Which of the following type of attack is a pre-cursor to the collision attack?

Birthday

Dictionary

Downgrade

Brute-force

Correct

3

Question

Which of the following statements are true for a zero-day attack? [Choose all that apply.]

A zero-day vulnerability can be example of an unknown threat

A zero-day vulnerability can only exist within the operating systems

A zero-day vulnerability can only be discovered when the software is deployed

A zero-day attack is impossible to detect as it exploits the unknown vulnerabilities

Correct

 

3 of 7

4

Question

Which of the following is known as out-of-the-box configuration?

Open permissions

Unsecured root accounts

Default settings

Errors

Correct

 

4 of 7

5

Question

Which of the following code provides instructions to the hardware?

Service Pack

Application

Firmware

Operating System

Correct

 

5 of 7

6

Question

For which of the following Windows versions, Microsoft has stopped providing support services? [Choose all that apply.]

Windows 8

Windows 7

Windows 8.1

Windows XP

Correct

8

Question

Which type of attack occurs if an application overruns the allocated buffer boundary and writes to adjacent memory locations?

Buffer Overflow

Race Condition

Symbolic Links

Kernel Flaw

Correct

 

8 of 15

9

Question

Which of the following enables attackers to inject client-side scripts into web pages viewed by other users?

Cross Site Request Forgery

SQL Injection

Cross Site Scripting

Path Traversal

Correct

 

9 of 15

10

Question

Which of the following is also known as a “dot dot slash” attack?

Cross Site Request Forgery

Path Traversal

Cross Site Scripting

SQL Injection

Correct

 

10 of 15

11

Question

An application lists all the files and subdirectories in its web folder. This indicates which of the following weaknesses on the application?

Buffer Overflow

Cross Site Scripting

Race Condition

Directory Listing

Correct

 

11 of 15

12

Question

Which of the following provides unauthorized access to another user's system resources or application files at the same level/role within an organization?

Horizontal Privilege Escalation

Reflected Cross Scripting

DOM Based Cross Scripting

Vertical Privilege Escalation

Correct

 

12 of 15

13

Question

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier which allows an attacker the opportunity to steal authenticated sessions, describes which of the following?

Session Sequencing

Session Takeover

Session Fixation

Session Hijacking

Correct

 

13 of 15

14

Question

Which of the following attack type confirms the vulnerability by revealing database-specific exceptions or error messages to the end-user or attacker?

No SQL Injection

Time Based SQL Injection

Error Based SQL Injection

Blind SQL Injection

Correct

2

Question

In which type of software environment are you most likely to find Microsoft Visual Studio and Eclipse?

Development

Staging

Production

Test

Correct

 

2 of 7

3

Question

What is the highest level of normalization that you can achieve with a database?

1NF - First Normal Form

4NF - Fourth Normal Form

5NF - Fifth Normal Form

6NF - Sixth Normal Form

Correct

 

3 of 7

4

Question

Which of the following loop runs until a statement becomes true?

Until loop

Do loop

While loop

If…else loop

Correct

 

4 of 7

5

Question

You have a version control system installed. Several developers work with this system. A new developer wants to work on the code. What is the first task that the developer must perform?

Copy the code from the developers' system

Send an approval request to get the code

Check out the existing code

Check in the code

Correct

 

5 of 7

6

Question

Which of the following statements is true for the scalability of a system?

It is the same as elasticity and the two terms can be used interchangeably

You can add more resources to the system to gain optimal application performance

Scalability is a popular phenomenon in the cloud environment

When workload increases, additional resources for the application are provided in an automated fashion

Correct

1

Question

Which of the following spectrums are used by wireless networks? [Choose all that apply]

2.4 GHz

5 GHz

3.6 GHz

1.2 GHz

Correct

 

1 of 6

2

Question

What is the maximum distance supported by Bluetooth 5.x?

20 feet

200 feet

50 feet

100 feet

Correct

 

2 of 6

3

Question

Which of the following features of Mobile Device Management (MDM) can be used by an organization? [Choose all that apply]

Password enforcement

Encryption

Remote Location

Geofencing

Remote Wipe

Correct

 

3 of 6

4

Question

Which of the following Unified Endpoint Management (UEM) features can help an IT administrator manage and administer IT assets? [Choose all that apply]

Remote management

Software deployment

Operating system deployment

User provisioning

License Management

Correct

 

4 of 6

5

Question

Which of the following method is used in sideloading?

Bluetooth

Wireless

USB

Mobile network

Correct

What word is used today to refer to network-connected hardware devices?

a. Client

b. Device

c. Host

d. Endpoint

Hide Feedback

Correct

Which of the following is NOT a characteristic of malware?

a. Launch

b. Imprison

c. Deceive

d. Diffusion

Hide Feedback

Correct

Gabriel's sister called him about a message that suddenly appeared on her screen that says her software license has expired and she must immediately pay $500 to have it renewed before control of the computer will be returned to her. What type of malware has infected her computer?

a. Cryptomalware

b. Impede-ware

c. Persistent lockware

d. Blocking ransomware

Hide Feedback

Correct

Marius's team leader has just texted him that an employee, who violated company policy by bringing in a file on her USB flash drive, has just reported that her computer is suddenly locked up with cryptomalware. Why would Marius consider this a dangerous situation?

a. The employee would have to wait at least an hour before her computer could be restored.

b. Cryptomalware can encrypt all files on any network that is connected to the employee's computer.

c. It sets a precedent by encouraging other employees to violate company policy.

d. The organization may be forced to pay up to $500 for the ransom.

Hide Feedback

Correct

Which type of malware relies on LOLBins?

a. PUP

b. File-based virus

c. Bot

d. Fileless virus

Hide Feedback

Correct

Which of the following is known as a network virus?

a. Remote exploitation virus (REV)

b. C&C

c. Worm

d. TAR

Hide Feedback

Correct

Josh is researching the different types of attacks that can be generated through a botnet. Which of the following would NOT be something distributed by a botnet?

a. Spam

b. Malware

c. Ad fraud

d. LOLBins

Hide Feedback

Correct

Which of the following is NOT a means by which a bot communicates with a C&C device?

a. Email

b. Command sent through Twitter posts

c. Signing in to a third-party website

d. Signing in to a website the bot herder operates

Hide Feedback

Correct

Randall's roommate is complaining to him about all of the software that came pre-installed on his new computer. He doesn't want the software because it slows down the computer. What type of software is this?

a. Spyware

b. Keylogger

c. Bot

d. PUP

Hide Feedback

Correct

What is the difference between a Trojan and a RAT?

a. A Trojan can carry malware while a RAT cannot.

b. There is no difference.

c. A RAT gives the attacker unauthorized remote access to the victim's computer.

d. A RAT can infect only a smartphone and not a computer.

Hide Feedback

Correct

Which of these would NOT be considered the result of a logic bomb?

a. Erase the hard drives of all the servers 90 days after Alfredo's name is removed from the list of current employees.

b. If the company's stock price drops below $50, then credit Oscar's retirement account with one additional year of retirement credit.

c. Delete all human resource records regarding Augustine one month after he leaves the company.

d. Send an email to Rowan's inbox each Monday morning with the agenda of that week's department meeting.

Hide Feedback

Correct

Which of the following attacks is based on a website accepting user input without sanitizing it?

a. XSS

b. SQLS

c. SSXRS

d. RSS

Hide Feedback

Correct

Which of the following attacks is based on the principle that when a user is currently authenticated on a website and then loads another webpage, the new page inherits the identity and privileges of the first website?

a. SSFR

b. CSRF

c. DRCR

d. DLLS

Hide Feedback

Correct

Which of the following manipulates the trusting relationship between web servers?

a. EXMAL

b. SCSI

c. CSRF

d. SSRF

Hide Feedback

Incorrect

Which type of memory vulnerability attack manipulates the "return address" of the memory location of a software program?

a. Buffer overflow attack

b. Integer overflow attack

c. Shim overflow attack

d. Factor overflow attack

Hide Feedback

Correct

• Check My Work

What race condition can result in a NULL pointer/object dereference?

a. Conflict race condition

b. Time of check/time of use race condition

c. Value-based race condition

d. Thread race condition

Hide Feedback

Correct

Which of the following attacks targets the external software component that is a repository of both code and data?

a. OS REG attack

b. Dynamic-link library (DLL) injection attack

c. Device driver manipulation attack

d. Application program interface (API) attack

Hide Feedback

Correct

What term refers to changing the design of existing code?

a. Library manipulation

b. Design driver manipulation

c. Refactoring

d. Shimming

Hide Feedback

Correct

Which of the following is technology that imitates human abilities?

a. RC

b. XLS

c. AI

d. ML

Hide Feedback

Correct

Which statement regarding a keylogger is NOT true?

a. Software keyloggers are generally easy to detect.

b. Software keyloggers can be designed to send captured information automatically back to the attacker through the Internet.

c. Keyloggers can be used to capture passwords, credit card numbers, or personal information.

d. Hardware keyloggers are installed between the keyboard connector and computer keyboard USB port.

Hide Feedback

Correct

Akira is explaining to his team members the security constraints that have made it a challenge for protecting a new embedded system. Which of the following would Akira NOT include as a constraint?

a. Authentication

b. Power

c. Cost

d. Availability

Hide Feedback

Correct

Agape has been asked to experiment with different hardware to create a controller for a new device on the factory floor. She needs a credit-card-sized motherboard that has a microcontroller instead of a microprocessor. Which would be the best solution?

a. FPGA

b. Raspberry Pi

c. SoC

d. Arduino

Hide Feedback

Correct

• Check My Work

Hakaku needs a tool with a single management interface that provides capabilities for managing and securing mobile devices, applications, and content. Which tool would be the best solution?

a. UEM

b. MCCM

c. MDM

d. MMAM

Hide Feedback

Correct

In her job interview, Xiu asks about the company policy regarding smartphones. She is told that employees may choose from a limited list of approved devices but that she must pay for the device herself; however, the company will provide her with a monthly stipend. Which type of enterprise deployment model does this company support?

a. COPE

b. BYOD

c. Corporate owned

d. CYOD

Hide Feedback

Correct

Aoi has been asked to provide research regarding adding a new class of Android smartphones to a list of approved devices. One of the considerations is how frequently the smartphones receive firmware OTA updates. Which of the following reasons would Aoi NOT list in her report as a factor in the frequency of Android firmware OTA updates?

a. OEMs are hesitant to distribute Google updates because it limits their ability to differentiate themselves from competitors if all versions of Android start to look the same through updates.

b. Because many of the OEMs have modified Android, they are reluctant to distribute updates that could potentially conflict with their changes.

c. Because OEMs want to sell as many devices as possible, they have no financial incentive to update mobile devices that users would then continue to use indefinitely.

d. Wireless carriers are reluctant to provide firmware OTA updates because of the bandwidth the updates consume on their wireless networks.

Hide Feedback

Correct

What is the process of identifying the geographical location of a mobile device?

a. Geomonitoring

b. Geolocation

c. Geotracking

d. GeoID

Hide Feedback

Correct

Which of these is used to send SMS text messages to selected users or groups of users?

a. Pull notification services

b. Push notification services

c. Replay notification distribution (RND)

d. MAM mass SMS

Hide Feedback

Correct

Enki received a request by a technician for a new subnotebook computer. The technician noted that he wanted USB OTG support and asked Enki's advice regarding its. Which of the following would Enki NOT tell him?

a. A device connected via USB OTG can function as a host.

b. Connecting a mobile device to an infected computer using USB OTG could allow malware to be sent to that device.

c. A device connected via USB OTG can function as a peripheral for external media access.

d. USB OTG is only available for connecting Android devices to a subnotebook.

Hide Feedback

Correct

• Check My Work

Banko's sister has just downloaded and installed an app that allows her to circumvent the built-in limitations on her Android smartphone. What is this called?

a. Jailbreaking

b. Rooting

c. Ducking

d. Sideloading

Hide Feedback

Correct

Which of the following technologies can convert a texting app into a live chat platform?

a. RCS

b. SMS

c. QR

d. MMS

Hide Feedback

Correct

What prevents a mobile device from being used until the user enters the correct passcode?

a. Swipe identifier (SW-ID)

b. Screen timeout

c. Touch swipe

d. Screen lock

Hide Feedback

Correct

Hisoka is creating a summary document for new employees about their options for different mobile devices. One part of his report covers encryption. What would Hisoka NOT include in his document?

a. Data backed up to an Apple or Google server could be unlocked by a court order.

b. Encryption occurs when the mobile device is locked.

c. Apple uses file-based encryption to offer a higher level of security.

d. All modern versions of mobile device OS encrypt all user data by default.

Hide Feedback

Correct

What does containerization do?

a. It separates personal data from corporate data.

b. It slows down a mobile device to half speed.

c. It places all keys in a special vault.

d. It splits operating system functions only on specific brands of mobile devices.

Hide Feedback

Correct

What allows a device to be managed remotely?

a. Mobile application management (MAM)

b. Mobile wrapper management (MWM)

c. Mobile device management (MDM)

d. Mobile resource management (MRM)

Hide Feedback

Correct

Which of these is NOT a security feature for locating a lost or stolen mobile device?

a. Last known good configuration

b. Alarm

c. Thief picture

d. Remote lockout

Hide Feedback

Correct

What enforces the location in which an app can function by tracking the location of the mobile device?

a. Graphical Management Tracking (GMT)

b. GPS tagging

c. Geofencing

d. Location resource management

Hide Feedback

Correct

Which of these is considered the strongest type of passcode to use on a mobile device?

a. Password

b. Draw connecting dots pattern

c. PIN

d. Fingerprint swipe

Hide Feedback

Correct

Which of the following is NOT a context-aware authentication?

a. Trusted places

b. Trusted contacts

c. On-body detection

d. Trusted devices

Hide Feedback

Incorrect

Which tool manages the distribution and control of apps?

a. MDM

b. MAM

c. MFM

d. MCM

Hide Feedback

Correct