A potential danger to an asset such as data or the network itself is called?
A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?
A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users
A weakness in a system or its design that could be exploited by a threat
An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?
An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?
An organization has implemented antivirus software. What type of security control did the company implement?
An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?
Different points where an attacker could get into a system, and where they could get data out of the system is called as
In a comparison of biometric systems, what is the crossover error rate?
Rate of false negatives and rate of false positives
Rate of false positives and rate of acceptability
Rate of rejection and rate of false negatives
Rate of acceptability and rate of false negatives
In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as
James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
Public key from Jacek
Private key from James
Private key from Jacek
Username and password from James
Mutual authentication can prevent which type of attack?
Passwords, passphrases, and PINs are examples of which security term?
Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
The systems use different hashing algorithms.
Both systems use MD5
Both systems scramble the passwords before hashing.
One system uses hashing and the other uses hashing and salting.
One system uses symmetrical hashing and the other uses asymmetrical hashing.
The one which prevents the disclosure of information to unauthorized people, resources and processes.
The state of data during initial input, modification, computation, or output is referred to as
The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is
The X.509 standards defines which security technology?
Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?
What are the most effective ways to defend against malware?
What are two incident response phases? (Choose two.)
Prevention and containment
Containment and recovery
Mitigation and acceptance
Detection and analysis
Confidentiality and eradication
What describes the protection provided by a fence that is 1 meter in height?
What happens as the key length increases in an encryption application?
What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?
What technique creates different hashes for the same password?
SHA-256
HMAC
CRC
salting
What type of attack will make illegitimate websites higher in a web search result list?
Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?
Which hashing technology requires keys to be exchanged?
MD5
AES
Which methods can be used to implement multifactor authentication?
Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?
Which protocol would be used to provide security for employees that access systems remotely from home?
Which statement describes a distributed denial of service attack?”
Which technology can be used to ensure data confidentiality?
Which technology can be used to protect VoIP against eavesdropping?
Which two groups of people are considered internal attackers?
Amateurs
Ex-employees
Trusted partners
Hacktivists
Which two protocols can use Advanced Encryption Standard (AES)?
WPA
802.11q
802.11i
TKIP
WEP