| Surname | First name | Email address | State | Started on | Completed | Time taken | Grade/50.00 | Feedback | Question 1 | Response 1 | Right answer 1 | Question 2 | Response 2 | Right answer 2 | Question 3 | Response 3 | Right answer 3 | Question 4 | Response 4 | Right answer 4 | Question 5 | Response 5 | Right answer 5 | Question 6 | Response 6 | Right answer 6 | Question 7 | Response 7 | Right answer 7 | Question 8 | Response 8 | Right answer 8 | Question 9 | Response 9 | Right answer 9 | Question 10 | Response 10 | Right answer 10 | Question 11 | Response 11 | Right answer 11 | Question 12 | Response 12 | Right answer 12 | Question 13 | Response 13 | Right answer 13 | Question 14 | Response 14 | Right answer 14 | Question 15 | Response 15 | Right answer 15 | Question 16 | Response 16 | Right answer 16 | Question 17 | Response 17 | Right answer 17 | Question 18 | Response 18 | Right answer 18 | Question 19 | Response 19 | Right answer 19 | Question 20 | Response 20 | Right answer 20 | Question 21 | Response 21 | Right answer 21 | Question 22 | Response 22 | Right answer 22 | Question 23 | Response 23 | Right answer 23 | Question 24 | Response 24 | Right answer 24 | Question 25 | Response 25 | Right answer 25 | Question 26 | Response 26 | Right answer 26 | Question 27 | Response 27 | Right answer 27 | Question 28 | Response 28 | Right answer 28 | Question 29 | Response 29 | Right answer 29 | Question 30 | Response 30 | Right answer 30 | Question 31 | Response 31 | Right answer 31 | Question 32 | Response 32 | Right answer 32 | Question 33 | Response 33 | Right answer 33 | Question 34 | Response 34 | Right answer 34 | Question 35 | Response 35 | Right answer 35 | Question 36 | Response 36 | Right answer 36 | Question 37 | Response 37 | Right answer 37 |
|---|
| West | James William | 2022704@student.uwtsd.ac.uk | Finished | 27 April 2021 11:30 AM | 27 April 2021 12:05 PM | 35 mins 48 secs | 41.00 | EXCELLENT | A potential danger to an asset such as data or the network itself is called?: Vulnerability; Attack Surface; Threat; RISK | Threat | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement RAID.; Implement a VLAN.; Implement a firewall.; Implement intrusion detection systems. | Implement a firewall. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Storage area network; Redundant array of independent disks; Network attached storage; Direct-attached storage | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Attack Surface; RISK; Vulnerability; Threat | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Familiarity; Urgency; Trusted partners; Intimidation | Urgency | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: VLANS; VPN; SSH; RAID | VPN | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Compensative control; Detective control; Recovery control; Deterrent control | Detective control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Logical; Physical; Technological; Administrative | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Attack Surface; Threat; RISK; Vulnerability | Vulnerability | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of rejection and rate of false negatives
; Rate of false negatives and rate of false positives
; Rate of false positives and rate of acceptability
; Rate of acceptability and rate of false negatives | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: Authentication; Accounting; Authorization; All the above | Accounting | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Public key from Jacek
; Username and password from James
; Private key from Jacek
; Private key from James | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless IP spoofing; Wireless sniffing; Wireless poisoning; Man-in-the-middle | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Authentication; Access; Authorization; Identification | Authentication | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: Both systems scramble the passwords before hashing.
; The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting.
; One system uses symmetrical hashing and the other uses asymmetrical hashing.
; Both systems use MD5 | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: Availability; All the above; Integrity; Confidentiality | All the above | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Process; Data in Storage; None of the above; Data in Transit | Data in Transit | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Data-sending; Keylogger; Proxy; Denial of Service (DoS) | Keylogger | Keylogger | The X.509 standards defines which security technology?: Security tokens; Strong passwords; Biometrics; Digital certificates | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Trojan horse; Man-in-the-middle attack; Ransomeware; DoS attack | Ransomeware | Ransomeware | What are the most effective ways to defend against malware?: Implement a VPN.; Implement strong passwords.; Implement RAID.; Install and update antivirus software. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Mitigation and acceptance
; Detection and analysis
; Confidentiality and eradication
; Prevention and containment
; Containment and recovery | Detection and analysis
; Containment and recovery | Detection and analysis
; Containment and recovery | What describes the protection provided by a fence that is 1 meter in height?: The fence deters determined intruders.; It deters casual trespassers only.; It prevents casual trespassers because of its height.; It offers limited delay to a determined intruder. | It deters casual trespassers only. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases proportionally.; Keyspace increases exponentially.; Keyspace decreases proportionally.; Keyspace decreases exponentially. | Keyspace increases exponentially. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Social engineering; Man-in-the-middle; Ransomeware; Pharming | Man-in-the-middle | Social engineering | What technique creates different hashes for the same password?
: SHA-256
; HMAC
; salting
; CRC | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: Browser hijacker; Spam; DNS poisoning; SEO poisoning | DNS poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Vulnerability scanners; Password crackers; Packet analyzers; Packet sniffers | Vulnerability scanners | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: MD5
; salting
; AES
; HMAC | HMAC | HMAC | Which methods can be used to implement multifactor authentication?: Passwords and Fingerprints; IDS and IPS; VPNs and VLANs; Tokens and Hashes | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: NIST Framework; ISO/IEC 27000; ISO OSI model; The National Vulnerability Database (NVD) | NIST Framework | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: WPA; SSH; Telnet; SCP | WPA | SSH | Which statement describes a distributed denial of service attack?”: An attacker sends an enormous quantity of data that a server cannot handle.; An attacker builds a botnet comprised of zombies.; An attacker views network traffic to learn authentication credentials.; One computer accepts data packets based on the MAC address of another computer. | An attacker builds a botnet comprised of zombies. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: Encryption; RAID; Identity management; Hashing | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: SSH; Encrypted voice messages; Strong authentication; ARP | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Trusted partners
; Ex-employees
; Amateurs
; Hacktivists | Trusted partners
; Ex-employees | Trusted partners
; Ex-employees | Which two protocols can use Advanced Encryption Standard (AES)?
: WPA
; WEP
; 802.11i
; 802.11q
; TKIP | WPA
; 802.11i | WPA
; 802.11i |
| Costinas | Adrian | 2024047@student.uwtsd.ac.uk | Finished | 27 April 2021 11:30 AM | 27 April 2021 12:15 PM | 44 mins 53 secs | 41.00 | EXCELLENT | A potential danger to an asset such as data or the network itself is called?: RISK; Vulnerability; Attack Surface; Threat | Threat | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement a VLAN.; Implement intrusion detection systems.; Implement RAID.; Implement a firewall. | Implement intrusion detection systems. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Network attached storage; Direct-attached storage; Storage area network; Redundant array of independent disks | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Vulnerability; Attack Surface; RISK; Threat | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Intimidation; Familiarity; Trusted partners; Urgency | Intimidation | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: VPN; RAID; VLANS; SSH | VPN | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Deterrent control; Recovery control; Detective control; Compensative control | Detective control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Logical; Physical; Administrative; Technological | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Threat; RISK; Vulnerability; Attack Surface | Vulnerability | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of acceptability and rate of false negatives
; Rate of false positives and rate of acceptability
; Rate of false negatives and rate of false positives
; Rate of rejection and rate of false negatives | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: All the above; Authorization; Accounting; Authentication | Accounting | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Private key from James
; Public key from Jacek
; Username and password from James
; Private key from Jacek | Private key from Jacek | Private key from James | Mutual authentication can prevent which type of attack?: Man-in-the-middle; Wireless IP spoofing; Wireless poisoning; Wireless sniffing | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Authorization; Identification; Access; Authentication | Authorization | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: One system uses symmetrical hashing and the other uses asymmetrical hashing.
; The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting.
; Both systems scramble the passwords before hashing.
; Both systems use MD5 | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: Availability; Integrity; Confidentiality; All the above | Confidentiality | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Process; Data in Storage; None of the above; Data in Transit | Data in Process | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Proxy; Data-sending; Denial of Service (DoS); Keylogger | Keylogger | Keylogger | The X.509 standards defines which security technology?: Strong passwords; Digital certificates; Security tokens; Biometrics | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Ransomeware; Man-in-the-middle attack; Trojan horse; DoS attack | Ransomeware | Ransomeware | What are the most effective ways to defend against malware?: Implement RAID.; Implement a VPN.; Implement strong passwords.; Install and update antivirus software. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Mitigation and acceptance
; Confidentiality and eradication
; Prevention and containment
; Containment and recovery
; Detection and analysis | Mitigation and acceptance
; Containment and recovery | Containment and recovery
; Detection and analysis | What describes the protection provided by a fence that is 1 meter in height?: It deters casual trespassers only.; It prevents casual trespassers because of its height.; The fence deters determined intruders.; It offers limited delay to a determined intruder. | It deters casual trespassers only. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases proportionally.; Keyspace decreases exponentially.; Keyspace increases exponentially.; Keyspace decreases proportionally. | Keyspace increases exponentially. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Ransomeware; Social engineering; Pharming; Man-in-the-middle | Social engineering | Social engineering | What technique creates different hashes for the same password?
: SHA-256
; CRC
; HMAC
; salting | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: Browser hijacker; DNS poisoning; Spam; SEO poisoning | SEO poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Vulnerability scanners; Password crackers; Packet analyzers; Packet sniffers | Packet sniffers | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: HMAC
; MD5
; salting
; AES | HMAC | HMAC | Which methods can be used to implement multifactor authentication?: Tokens and Hashes; IDS and IPS; VPNs and VLANs; Passwords and Fingerprints | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: The National Vulnerability Database (NVD); ISO OSI model; ISO/IEC 27000; NIST Framework | NIST Framework | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: SSH; WPA; SCP; Telnet | SSH | SSH | Which statement describes a distributed denial of service attack?”: An attacker sends an enormous quantity of data that a server cannot handle.; An attacker builds a botnet comprised of zombies.; An attacker views network traffic to learn authentication credentials.; One computer accepts data packets based on the MAC address of another computer. | An attacker builds a botnet comprised of zombies. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: Hashing; RAID; Identity management; Encryption | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: Strong authentication; SSH; Encrypted voice messages; ARP | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Amateurs
; Ex-employees
; Trusted partners
; Hacktivists | Ex-employees
; Trusted partners | Ex-employees
; Trusted partners | Which two protocols can use Advanced Encryption Standard (AES)?
: 802.11i
; WEP
; 802.11q
; TKIP
; WPA | 802.11i
; WEP
; 802.11q
; TKIP
; WPA | 802.11i
; WPA |
| Traczewski | Jacek | 2022703@student.uwtsd.ac.uk | Finished | 27 April 2021 11:30 AM | 27 April 2021 12:14 PM | 44 mins 12 secs | 45.00 | EXCEPTIONAL | A potential danger to an asset such as data or the network itself is called?: Threat; Attack Surface; Vulnerability; RISK | Vulnerability | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement intrusion detection systems.; Implement RAID.; Implement a firewall.; Implement a VLAN. | Implement a firewall. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Network attached storage; Direct-attached storage; Redundant array of independent disks; Storage area network | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Vulnerability; Threat; Attack Surface; RISK | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Familiarity; Intimidation; Urgency; Trusted partners | Intimidation | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: VLANS; SSH; RAID; VPN | VPN | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Deterrent control; Detective control; Recovery control; Compensative control | Recovery control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Physical; Technological; Logical; Administrative | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Vulnerability; RISK; Threat; Attack Surface | RISK | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of false positives and rate of acceptability
; Rate of false negatives and rate of false positives
; Rate of rejection and rate of false negatives
; Rate of acceptability and rate of false negatives | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: Accounting; Authorization; All the above; Authentication | Accounting | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Private key from Jacek
; Username and password from James
; Public key from Jacek
; Private key from James | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless poisoning; Man-in-the-middle; Wireless sniffing; Wireless IP spoofing | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Identification; Authentication; Authorization; Access | Authentication | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: Both systems scramble the passwords before hashing.
; One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms.
; One system uses symmetrical hashing and the other uses asymmetrical hashing.
; Both systems use MD5 | One system uses hashing and the other uses hashing and salting. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: Availability; All the above; Confidentiality; Integrity | Confidentiality | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: None of the above; Data in Process; Data in Transit; Data in Storage | Data in Process | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Keylogger; Data-sending; Proxy; Denial of Service (DoS) | Keylogger | Keylogger | The X.509 standards defines which security technology?: Security tokens; Strong passwords; Digital certificates; Biometrics | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Ransomeware; Man-in-the-middle attack; DoS attack; Trojan horse | Ransomeware | Ransomeware | What are the most effective ways to defend against malware?: Install and update antivirus software.; Implement strong passwords.; Implement a VPN.; Implement RAID. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Detection and analysis
; Prevention and containment
; Containment and recovery
; Confidentiality and eradication
; Mitigation and acceptance | Detection and analysis
; Containment and recovery | Detection and analysis
; Containment and recovery | What describes the protection provided by a fence that is 1 meter in height?: It deters casual trespassers only.; It prevents casual trespassers because of its height.; It offers limited delay to a determined intruder.; The fence deters determined intruders. | It deters casual trespassers only. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases exponentially.; Keyspace increases proportionally.; Keyspace decreases proportionally.; Keyspace decreases exponentially. | Keyspace increases exponentially. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Ransomeware; Man-in-the-middle; Social engineering; Pharming | Social engineering | Social engineering | What technique creates different hashes for the same password?
: SHA-256
; HMAC
; CRC
; salting | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: DNS poisoning; SEO poisoning; Browser hijacker; Spam | SEO poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Packet analyzers; Password crackers; Packet sniffers; Vulnerability scanners | Vulnerability scanners | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: AES
; HMAC
; MD5
; salting | HMAC | HMAC | Which methods can be used to implement multifactor authentication?: Passwords and Fingerprints; VPNs and VLANs; Tokens and Hashes; IDS and IPS | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: NIST Framework; The National Vulnerability Database (NVD); ISO/IEC 27000; ISO OSI model | NIST Framework | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: SCP; Telnet; SSH; WPA | SSH | SSH | Which statement describes a distributed denial of service attack?”: An attacker sends an enormous quantity of data that a server cannot handle.; An attacker builds a botnet comprised of zombies.; One computer accepts data packets based on the MAC address of another computer.; An attacker views network traffic to learn authentication credentials. | An attacker builds a botnet comprised of zombies. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: Hashing; Encryption; RAID; Identity management | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: Strong authentication; Encrypted voice messages; SSH; ARP | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Hacktivists
; Ex-employees
; Trusted partners
; Amateurs | Ex-employees
; Trusted partners | Ex-employees
; Trusted partners | Which two protocols can use Advanced Encryption Standard (AES)?
: 802.11q
; WPA
; 802.11i
; WEP
; TKIP | WPA
; 802.11i | WPA
; 802.11i |
| Mohammed | Samia | 2024620@student.uwtsd.ac.uk | Finished | 27 April 2021 11:31 AM | 27 April 2021 12:28 PM | 57 mins 20 secs | 31.00 | VERY GOOD | A potential danger to an asset such as data or the network itself is called?: Vulnerability; Attack Surface; Threat; RISK | Threat | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement a VLAN.; Implement RAID.; Implement a firewall.; Implement intrusion detection systems. | Implement a firewall. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Redundant array of independent disks; Storage area network; Network attached storage; Direct-attached storage | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Vulnerability; Threat; RISK; Attack Surface | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Intimidation; Trusted partners; Urgency; Familiarity | Intimidation | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: SSH; VPN; RAID; VLANS | RAID | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Compensative control; Deterrent control; Detective control; Recovery control | Detective control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Technological; Logical; Administrative; Physical | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Threat; RISK; Attack Surface; Vulnerability | Vulnerability | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of rejection and rate of false negatives
; Rate of acceptability and rate of false negatives
; Rate of false positives and rate of acceptability
; Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: All the above; Authentication; Authorization; Accounting | All the above | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Private key from Jacek
; Username and password from James
; Public key from Jacek
; Private key from James | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless IP spoofing; Wireless sniffing; Wireless poisoning; Man-in-the-middle | Wireless poisoning | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Identification; Authorization; Authentication; Access | Authentication | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: One system uses symmetrical hashing and the other uses asymmetrical hashing.
; Both systems scramble the passwords before hashing.
; Both systems use MD5
; The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The systems use different hashing algorithms.
; One system uses hashing and the other uses hashing and salting. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: Confidentiality; Availability; All the above; Integrity | All the above | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Process; Data in Transit; None of the above; Data in Storage | Data in Transit | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Denial of Service (DoS); Proxy; Data-sending; Keylogger | Keylogger | Keylogger | The X.509 standards defines which security technology?: Security tokens; Biometrics; Digital certificates; Strong passwords | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Ransomeware; Man-in-the-middle attack; DoS attack; Trojan horse | Ransomeware | Ransomeware | What are the most effective ways to defend against malware?: Implement strong passwords.; Implement a VPN.; Install and update antivirus software.; Implement RAID. | Implement strong passwords. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Confidentiality and eradication
; Mitigation and acceptance
; Detection and analysis
; Prevention and containment
; Containment and recovery | Confidentiality and eradication
; Detection and analysis | Detection and analysis
; Containment and recovery | What describes the protection provided by a fence that is 1 meter in height?: It offers limited delay to a determined intruder.; The fence deters determined intruders.; It prevents casual trespassers because of its height.; It deters casual trespassers only. | It offers limited delay to a determined intruder. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases proportionally.; Keyspace decreases proportionally.; Keyspace increases exponentially.; Keyspace decreases exponentially. | Keyspace decreases proportionally. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Social engineering; Man-in-the-middle; Ransomeware; Pharming | Man-in-the-middle | Social engineering | What technique creates different hashes for the same password?
: CRC
; salting
; SHA-256
; HMAC | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: SEO poisoning; DNS poisoning; Browser hijacker; Spam | SEO poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Packet sniffers; Packet analyzers; Vulnerability scanners; Password crackers | Vulnerability scanners | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: HMAC
; MD5
; AES
; salting | salting | HMAC | Which methods can be used to implement multifactor authentication?: VPNs and VLANs; Tokens and Hashes; Passwords and Fingerprints; IDS and IPS | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: ISO OSI model; ISO/IEC 27000; The National Vulnerability Database (NVD); NIST Framework | ISO/IEC 27000 | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: SCP; SSH; WPA; Telnet | WPA | SSH | Which statement describes a distributed denial of service attack?”: An attacker views network traffic to learn authentication credentials.; An attacker sends an enormous quantity of data that a server cannot handle.; An attacker builds a botnet comprised of zombies.; One computer accepts data packets based on the MAC address of another computer. | An attacker views network traffic to learn authentication credentials. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: RAID; Encryption; Identity management; Hashing | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: SSH; Encrypted voice messages; ARP; Strong authentication | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Hacktivists
; Trusted partners
; Ex-employees
; Amateurs | Trusted partners
; Ex-employees | Trusted partners
; Ex-employees | Which two protocols can use Advanced Encryption Standard (AES)?
: WPA
; 802.11i
; 802.11q
; WEP
; TKIP | WPA
; 802.11i | WPA
; 802.11i |
| Craciun | Alexandra | 1816129@student.uwtsd.ac.uk | Finished | 27 April 2021 11:31 AM | 27 April 2021 12:28 PM | 57 mins 15 secs | 48.00 | EXCEPTIONAL | A potential danger to an asset such as data or the network itself is called?: RISK; Attack Surface; Vulnerability; Threat | Threat | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement a firewall.; Implement a VLAN.; Implement RAID.; Implement intrusion detection systems. | Implement a firewall. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Redundant array of independent disks; Storage area network; Direct-attached storage; Network attached storage | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Attack Surface; RISK; Vulnerability; Threat | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Intimidation; Urgency; Trusted partners; Familiarity | Intimidation | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: RAID; VPN; VLANS; SSH | VPN | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Recovery control; Deterrent control; Compensative control; Detective control | Recovery control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Technological; Logical; Physical; Administrative | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Vulnerability; RISK; Attack Surface; Threat | Attack Surface | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of rejection and rate of false negatives
; Rate of false negatives and rate of false positives
; Rate of false positives and rate of acceptability
; Rate of acceptability and rate of false negatives | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: Accounting; Authentication; All the above; Authorization | All the above | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Private key from Jacek
; Public key from Jacek
; Private key from James
; Username and password from James | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless sniffing; Wireless IP spoofing; Man-in-the-middle; Wireless poisoning | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Identification; Authentication; Authorization; Access | Authentication | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: One system uses hashing and the other uses hashing and salting.
; Both systems use MD5
; Both systems scramble the passwords before hashing.
; The systems use different hashing algorithms.
; One system uses symmetrical hashing and the other uses asymmetrical hashing. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: Integrity; Confidentiality; All the above; Availability | Confidentiality | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Process; None of the above; Data in Transit; Data in Storage | Data in Process | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Keylogger; Data-sending; Proxy; Denial of Service (DoS) | Keylogger | Keylogger | The X.509 standards defines which security technology?: Security tokens; Digital certificates; Biometrics; Strong passwords | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Ransomeware; Man-in-the-middle attack; Trojan horse; DoS attack | Ransomeware | Ransomeware | What are the most effective ways to defend against malware?: Implement strong passwords.; Implement a VPN.; Implement RAID.; Install and update antivirus software. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Containment and recovery
; Confidentiality and eradication
; Detection and analysis
; Prevention and containment
; Mitigation and acceptance | Containment and recovery
; Detection and analysis | Containment and recovery
; Detection and analysis | What describes the protection provided by a fence that is 1 meter in height?: It deters casual trespassers only.; It offers limited delay to a determined intruder.; The fence deters determined intruders.; It prevents casual trespassers because of its height. | It deters casual trespassers only. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases exponentially.; Keyspace decreases exponentially.; Keyspace decreases proportionally.; Keyspace increases proportionally. | Keyspace increases exponentially. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Pharming; Man-in-the-middle; Social engineering; Ransomeware | Social engineering | Social engineering | What technique creates different hashes for the same password?
: SHA-256
; CRC
; HMAC
; salting | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: Spam; Browser hijacker; SEO poisoning; DNS poisoning | SEO poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Vulnerability scanners; Password crackers; Packet analyzers; Packet sniffers | Vulnerability scanners | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: salting
; AES
; HMAC
; MD5 | HMAC | HMAC | Which methods can be used to implement multifactor authentication?: VPNs and VLANs; IDS and IPS; Tokens and Hashes; Passwords and Fingerprints | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: ISO/IEC 27000; ISO OSI model; NIST Framework; The National Vulnerability Database (NVD) | NIST Framework | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: SCP; WPA; SSH; Telnet | SSH | SSH | Which statement describes a distributed denial of service attack?”: One computer accepts data packets based on the MAC address of another computer.; An attacker views network traffic to learn authentication credentials.; An attacker builds a botnet comprised of zombies.; An attacker sends an enormous quantity of data that a server cannot handle. | An attacker builds a botnet comprised of zombies. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: RAID; Encryption; Identity management; Hashing | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: Strong authentication; Encrypted voice messages; SSH; ARP | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Hacktivists
; Trusted partners
; Amateurs
; Ex-employees | Trusted partners
; Ex-employees | Trusted partners
; Ex-employees | Which two protocols can use Advanced Encryption Standard (AES)?
: WEP
; 802.11q
; 802.11i
; WPA
; TKIP | 802.11i
; WPA | 802.11i
; WPA |
| Ibrahim | Elsiddig Eldaw | 2024641@student.uwtsd.ac.uk | Finished | 27 April 2021 11:31 AM | 27 April 2021 12:28 PM | 56 mins 57 secs | 35.00 | EXCELLENT | A potential danger to an asset such as data or the network itself is called?: Threat; Attack Surface; Vulnerability; RISK | Threat | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement RAID.; Implement a firewall.; Implement intrusion detection systems.; Implement a VLAN. | Implement RAID. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Direct-attached storage; Storage area network; Network attached storage; Redundant array of independent disks | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: Threat; RISK; Attack Surface; Vulnerability | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Familiarity; Urgency; Intimidation; Trusted partners | Intimidation | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: VLANS; SSH; RAID; VPN | RAID | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Compensative control; Recovery control; Detective control; Deterrent control | Detective control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Physical; Technological; Logical; Administrative | Administrative | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Threat; RISK; Attack Surface; Vulnerability | Vulnerability | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of rejection and rate of false negatives
; Rate of acceptability and rate of false negatives
; Rate of false negatives and rate of false positives
; Rate of false positives and rate of acceptability | Rate of false negatives and rate of false positives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: Authorization; Accounting; Authentication; All the above | All the above | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Private key from Jacek
; Username and password from James
; Private key from James
; Public key from Jacek | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless sniffing; Wireless poisoning; Wireless IP spoofing; Man-in-the-middle | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Authentication; Access; Authorization; Identification | Access | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: Both systems use MD5
; One system uses symmetrical hashing and the other uses asymmetrical hashing.
; Both systems scramble the passwords before hashing.
; One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: All the above; Confidentiality; Availability; Integrity | All the above | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Storage; Data in Transit; Data in Process; None of the above | Data in Process | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Keylogger; Proxy; Denial of Service (DoS); Data-sending | Denial of Service (DoS) | Keylogger | The X.509 standards defines which security technology?: Strong passwords; Biometrics; Security tokens; Digital certificates | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Trojan horse; DoS attack; Man-in-the-middle attack; Ransomeware | DoS attack | Ransomeware | What are the most effective ways to defend against malware?: Implement strong passwords.; Install and update antivirus software.; Implement a VPN.; Implement RAID. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Detection and analysis
; Mitigation and acceptance
; Containment and recovery
; Prevention and containment
; Confidentiality and eradication | Containment and recovery
; Prevention and containment | Detection and analysis
; Containment and recovery | What describes the protection provided by a fence that is 1 meter in height?: It prevents casual trespassers because of its height.; The fence deters determined intruders.; It offers limited delay to a determined intruder.; It deters casual trespassers only. | It offers limited delay to a determined intruder. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace decreases exponentially.; Keyspace increases exponentially.; Keyspace increases proportionally.; Keyspace decreases proportionally. | Keyspace increases exponentially. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Social engineering; Man-in-the-middle; Ransomeware; Pharming | Man-in-the-middle | Social engineering | What technique creates different hashes for the same password?
: HMAC
; CRC
; SHA-256
; salting | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: Browser hijacker; Spam; SEO poisoning; DNS poisoning | SEO poisoning | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Password crackers; Packet sniffers; Packet analyzers; Vulnerability scanners | Vulnerability scanners | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: AES
; HMAC
; MD5
; salting | AES | HMAC | Which methods can be used to implement multifactor authentication?: Passwords and Fingerprints; IDS and IPS; Tokens and Hashes; VPNs and VLANs | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: The National Vulnerability Database (NVD); ISO/IEC 27000; ISO OSI model; NIST Framework | ISO/IEC 27000 | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: Telnet; SCP; WPA; SSH | SSH | SSH | Which statement describes a distributed denial of service attack?”: An attacker builds a botnet comprised of zombies.; An attacker views network traffic to learn authentication credentials.; One computer accepts data packets based on the MAC address of another computer.; An attacker sends an enormous quantity of data that a server cannot handle. | An attacker builds a botnet comprised of zombies. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: RAID; Encryption; Identity management; Hashing | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: SSH; Encrypted voice messages; ARP; Strong authentication | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Ex-employees
; Hacktivists
; Trusted partners
; Amateurs | Ex-employees
; Trusted partners | Ex-employees
; Trusted partners | Which two protocols can use Advanced Encryption Standard (AES)?
: TKIP
; 802.11q
; WPA
; WEP
; 802.11i | WPA
; 802.11i | WPA
; 802.11i |
| Robbani | Mohammed Gulam | 1913550@student.uwtsd.ac.uk | Finished | 27 April 2021 11:32 AM | 27 April 2021 12:01 PM | 29 mins 3 secs | 23.00 | SATISFACTORY | A potential danger to an asset such as data or the network itself is called?: Threat; Attack Surface; RISK; Vulnerability | RISK | Threat | A security specialist is asked for advice on a security measure to prevent unauthorized hosts from accessing the home network of employees. Which measure would be most effective?: Implement a firewall.; Implement RAID.; Implement a VLAN.; Implement intrusion detection systems. | Implement a firewall. | Implement a firewall. | A storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users: Storage area network; Redundant array of independent disks; Direct-attached storage; Network attached storage | Network attached storage | Network attached storage | A weakness in a system or its design that could be exploited by a threat: RISK; Attack Surface; Vulnerability; Threat | Vulnerability | Vulnerability | An executive manager went to an important meeting. The secretary in the office receives a call from a person claiming that the executive manager is about to give an important presentation but the presentation files are corrupted. The caller sternly recommends that the secretary email the presentation right away to a personal email address. The caller also states that the executive is holding the secretary responsible for the success of this presentation. Which type of social engineering tactic would describe this scenario?: Familiarity; Intimidation; Urgency; Trusted partners | Urgency | Intimidation | An organization allows employees to work from home two days a week. Which technology should be implemented to ensure data confidentiality as data is transmitted?: SSH; VLANS; VPN; RAID | RAID | VPN | An organization has implemented antivirus software. What type of security control did the company implement?: Deterrent control; Detective control; Compensative control; Recovery control | Detective control | Recovery control | An organization plans to implement security training to educate employees about security policies. What type of access control is the organization trying to implement?: Technological; Logical; Physical; Administrative | Technological | Administrative | Different points where an attacker could get into a system, and where they could get data out of the system is called as: Threat; Attack Surface; Vulnerability; RISK | Vulnerability | Attack Surface | In a comparison of biometric systems, what is the crossover error rate?
: Rate of rejection and rate of false negatives
; Rate of false negatives and rate of false positives
; Rate of false positives and rate of acceptability
; Rate of acceptability and rate of false negatives | Rate of acceptability and rate of false negatives | Rate of false negatives and rate of false positives | In Access control, the one which keeps track of what users do, including what they access, the amount of time they access resources, and any changes made is called as: Authorization; All the above; Accounting; Authentication | Authentication | Accounting | James and Jacek are using a digital signature to sign a document. What key should James use to sign the document so that Jacek can make sure that the document came from James?
: Username and password from James
; Public key from Jacek
; Private key from James
; Private key from Jacek | Private key from James | Private key from James | Mutual authentication can prevent which type of attack?: Wireless poisoning; Wireless IP spoofing; Man-in-the-middle; Wireless sniffing | Man-in-the-middle | Man-in-the-middle | Passwords, passphrases, and PINs are examples of which security term?: Authorization; Access; Identification; Authentication | Authentication | Access | Technicians are testing the security of an authentication system that uses passwords. When a technician examines the password tables, the technician discovers the passwords are stored as hash values. However, after comparing a simple password hash, the technician then discovers that the values are different from those on other systems. What are the two causes of this situation? (Choose two.)
: One system uses hashing and the other uses hashing and salting.
; Both systems use MD5
; The systems use different hashing algorithms.
; Both systems scramble the passwords before hashing.
; One system uses symmetrical hashing and the other uses asymmetrical hashing. | The systems use different hashing algorithms.
; One system uses symmetrical hashing and the other uses asymmetrical hashing. | One system uses hashing and the other uses hashing and salting.
; The systems use different hashing algorithms. | The one which prevents the disclosure of information to unauthorized people, resources and processes.: All the above; Integrity; Availability; Confidentiality | Confidentiality | Confidentiality | The state of data during initial input, modification, computation, or output is referred to as: Data in Storage; Data in Transit; None of the above; Data in Process | Data in Storage | Data in Process | The type of malware which actively attempts to steal confidential information such as credit card numbers by recording keystrokes entered into a web form is: Keylogger; Data-sending; Proxy; Denial of Service (DoS) | Keylogger | Keylogger | The X.509 standards defines which security technology?: Security tokens; Biometrics; Digital certificates; Strong passwords | Digital certificates | Digital certificates | Users report that the database on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?: Trojan horse; DoS attack; Man-in-the-middle attack; Ransomeware | Man-in-the-middle attack | Ransomeware | What are the most effective ways to defend against malware?: Implement strong passwords.; Implement a VPN.; Implement RAID.; Install and update antivirus software. | Install and update antivirus software. | Install and update antivirus software. | What are two incident response phases? (Choose two.)
: Containment and recovery
; Mitigation and acceptance
; Prevention and containment
; Detection and analysis
; Confidentiality and eradication | Containment and recovery
; Confidentiality and eradication | Containment and recovery
; Detection and analysis | What describes the protection provided by a fence that is 1 meter in height?: It deters casual trespassers only.; It prevents casual trespassers because of its height.; It offers limited delay to a determined intruder.; The fence deters determined intruders. | The fence deters determined intruders. | It deters casual trespassers only. | What happens as the key length increases in an encryption application?: Keyspace increases exponentially.; Keyspace decreases exponentially.; Keyspace increases proportionally.; Keyspace decreases proportionally. | Keyspace increases proportionally. | Keyspace increases exponentially. | What is a nontechnical method that a cybercriminal would use to gather sensitive information from an organization?: Ransomeware; Social engineering; Man-in-the-middle; Pharming | Social engineering | Social engineering | What technique creates different hashes for the same password?
: HMAC
; CRC
; SHA-256
; salting | salting | salting | What type of attack will make illegitimate websites higher in a web search result list?: Browser hijacker; SEO poisoning; Spam; DNS poisoning | Browser hijacker | SEO poisoning | Which cybersecurity weapon scans for use of default passwords, missing patches, open ports, misconfigurations, and active IP addresses?: Password crackers; Vulnerability scanners; Packet sniffers; Packet analyzers | Packet sniffers | Vulnerability scanners | Which hashing technology requires keys to be exchanged?
: AES
; salting
; HMAC
; MD5 | salting | HMAC | Which methods can be used to implement multifactor authentication?: Passwords and Fingerprints; VPNs and VLANs; IDS and IPS; Tokens and Hashes | Passwords and Fingerprints | Passwords and Fingerprints | Which national resource was developed as a result of a U.S. Executive Order after a ten-month collaborative study involving over 3,000 security professionals?: NIST Framework; ISO/IEC 27000; The National Vulnerability Database (NVD); ISO OSI model | The National Vulnerability Database (NVD) | NIST Framework | Which protocol would be used to provide security for employees that access systems remotely from home?: SSH; WPA; Telnet; SCP | WPA | SSH | Which statement describes a distributed denial of service attack?”: An attacker views network traffic to learn authentication credentials.; An attacker sends an enormous quantity of data that a server cannot handle.; An attacker builds a botnet comprised of zombies.; One computer accepts data packets based on the MAC address of another computer. | An attacker views network traffic to learn authentication credentials. | An attacker builds a botnet comprised of zombies. | Which technology can be used to ensure data confidentiality?: Encryption; Identity management; RAID; Hashing | Encryption | Encryption | Which technology can be used to protect VoIP against eavesdropping?: Strong authentication; ARP; SSH; Encrypted voice messages | Encrypted voice messages | Encrypted voice messages | Which two groups of people are considered internal attackers?
: Trusted partners
; Hacktivists
; Amateurs
; Ex-employees | Trusted partners
; Ex-employees | Trusted partners
; Ex-employees | Which two protocols can use Advanced Encryption Standard (AES)?
: 802.11q
; TKIP
; 802.11i
; WEP
; WPA | WEP
; WPA | 802.11i
; WPA |