Fiszki
BSS - ItC (en)
Test w formie fiszek
Ilość pytań: 72
Rozwiązywany: 326 razy
Which of the following firewalls hides or masquerades the private addresses of network hosts?
Network layer firewall
Host-based firewall
Network address translation firewall
Proxy server
Reverse proxy firewall
Network address translation firewall
Carrying out a multi-phase, long-term, stealthy and advanced operation against a specific target is often referred to as what?
Script kiddies
Advanced persistent threat
Rainbow tables
Social engineering
Network sniffing
Advanced persistent threat
You are configuring access settings to require employees in your organization to authenticate first before accessing certain web pages. Which requirement of information security is addressed through this configuration?
Confidentiality
Availability
Scalability
Integrity
Confidentiality
What are the objectives of ensuring data integrity? (Choose two correct answers)
Data is not changed by unauthorized entities
Data is encrypted while in transit and when stored on disks
Data is available all the time
Data is unaltered during transit
Access to the data is authenticated
Data is not changed by unauthorized entities
Data is unaltered during transit
An organization is experiencing overwhelming visits to a main web server. You are developing a plan to add a couple of more web servers for load balancing and redundancy. Which requirement of information security is addressed by implementing the plan?
Scalability
Availability
Confidentiality
Integrity
Availability
What of the following are examples of cracking an encrypted password? (Choose four correct answers)
Rainbow tables
Network sniffing
Social engineering
Spraying
Brute force attack
Dictionary attack
Intimidation
Rainbow tables
Spraying
Brute force attack
Dictionary attack
Improper management of physical access to a resource, such as a file, can lead to what type of security vulnerability?
Buffer overflow
Access control problems
Non-validated input
Weaknesses in security practices
Race conditions
Access control problems
A medical office employee sends emails to patients about their recent visits to the facility. What information would put the privacy of the patients at risk if it was included in the email?
Patient records
Next appointment
First and last name
Contact information
Patient records
What is the best way to avoid getting spyware on a machine?
Install the latest web browser updates
Install the latest antivirus updates
Install the latest operating system updates
Install software only from trusted websites
Install software only from trusted websites
You are surfing the Internet using a laptop at a public Wi-Fi cafe. What should you check first before you connect to the public network?
If the laptop requires user authentication for file and media sharing
That the Bluetooth adapter is disabled
If the laptop has a master password set to secure the passwords stored in the password manager
That the laptop web browser is operating in private mode
If the laptop requires user authentication for file and media sharing
What is the main function of the Cisco Security Incident Response Team?
To ensure company, system and data preservation
To provide standards for new encryption techniques
To design next generation routers and switches that are less prone to cyber attacks
To design polymorphic malware
To ensure company, system and data preservation
Which of the following firewalls are placed in front of web services to protect, hide, offload and distribute access to web servers?
Proxy server
Application layer firewall
Network layer firewall
Reverse proxy server
Transport layer firewall
Reverse proxy server
Which of the following certifications meets the U.S. Department of Defense Directive 8570.01-M requirements, which is important for anyone looking to work in IT security for the federal government?
ISACA CSX Cybersecurity Fundamentals
CompTIA Security+
ISC2 Certified Information Systems Security Professional
Palo Alto Networks Certified Cybersecurity Associate
EC Council Certified Ethical Hacker
Microsoft Technology Associate Security Fundamentals
CompTIA Security+
One of your colleagues has lost her identification badge. She is in a hurry to get to a meeting and does not have time to visit Human Resources to get a temporary badge. You lend her your identification badge until she can obtain a replacement.
Is this behavior ethical or unethical?
Ethical
Unethical
Unethical
Which of the following certifications tests your understanding and knowledge in how to look for weaknesses and vulnerabilities in target systems using the same knowledge and tools as a malicious hacker, but in a lawful and legitimate manner?
EC Council Certified Ethical Hacker
ISACA CSX Cybersecurity Fundamentals
Palo Alto Networks Certified Cybersecurity Associate
ISC2 Certified Information Systems Security Professional
Microsoft Technology Associate Security Fundamentals
CompTIA Security+
EC Council Certified Ethical Hacker
What is the main purpose of cyberwarfare?
To gain advantage over adversaries
To develop advanced network devices
To simulate possible war scenarios among nations
To protect cloud-based data centers
To gain advantage over adversaries
What vulnerability occurs when the output of an event depends on ordered or timed outputs?
Buffer overflow
Weaknesses in security practices
Race conditions
Non-validated input
Access control problems
Race conditions
What do you call the vulnerabilities discovered by Google security researchers that affect almost all CPUs released since 1995? (Select two correct answers)
NotPetva
Spectre
Meltdown
WannaCry
Shell shock
Spectre
Meltdown
If developers attempt to create their own security algorithms, it will likely introduce what type of vulnerabilities?
Access control problems
Race conditions
Weaknesses in security practices
Non-validated input
Buffer overflow
Weaknesses in security practices
Which technology creates a security token that allows a user to log in to a desired web application using credentials from a social media website?
VPN service
In-private browsing mode3
Password manager
Open authorization
Open authorization