Question 1

An incorrect configuration of wireless hardware or software can often result in easy access to a system.

Accepted Answer

This is true. Incorrectly configured wireless hardware or software can create vulnerabilities that can be exploited by attackers to gain unauthorized access to a system. Common misconfigurations include weak passwords, unsecured wireless networks, and outdated firmware or software. It is important to regularly review and update the configuration of wireless systems to ensure that they are secure and protected against potential threats.

Question 2

____ occurs when an individual uses the personal information of someone else to impersonate that individual with the intent to commit fraud or other crimes.
A) Identity theft
B) Spam
C) DoS attack
D) Phishing

Accepted Answer

Identity theft involves stealing and using someone else's personal information for fraudulent purposes. This could include using their name, Social Security number, or financial information to open accounts, make purchases, or commit other crimes. Spam is unsolicited email or messages, a DoS attack floods a network with traffic to disrupt service, and phishing involves tricking someone into divulging their personal information through fraudulent emails or websites.

Question 3

DoS attacks are rare against wired network servers.

Accepted Answer

DoS attacks can target any type of server, wired or wireless. It is not limited to just one type of network.

Question 4

Before users can be given access to a computer and its data, they must in some way prove that they are who they claim to be. This process of providing proof is known as ____.
A) authorization
B) encryption
C) cryptography
D) authentication

Accepted Answer

The process of providing proof of identity is called authentication. Authorization refers to the process of granting access to specific resources once a user has been authenticated. Encryption and cryptography are related to securing data, but not specifically to user authentication.

Question 5

In a ____ attack, each word from a dictionary is encoded in the same way the computer encodes a user's password for protection. Attackers then compare the encoded dictionary words against those in the encoded password file.
A) DoS
B) brute force
C) dictionary
D) rogue AP

Accepted Answer

This is a dictionary attack where the attacker compares encoded dictionary words against those in the encoded password file. A brute force attack is where the attacker tries every possible combination of characters until the correct one is found. A DoS (Denial of Service) attack is where the attacker floods a computer or network with traffic to make it unavailable to users. A rogue AP (Access Point) is an unauthorized access point used to gain access to a network.

Question 6

Authentication can be performed based on what you have, what you know, or what you are.

Accepted Answer

Authentication can indeed be performed based on what you have (such as a smart card or token), what you know (such as a password or PIN), or what you are (such as biometric identification).

Question 7

The ____ is a popular protocol used to manage networked equipment.
A) SMTP
B) SNMP
C) FTP
D) POP3

Accepted Answer

SNMP (Simple Network Management Protocol) is a protocol used for managing networked equipment such as servers, routers, switches, and other devices. It allows network administrators to monitor and control network devices from a central location. SMTP (Simple Mail Transfer Protocol) is used for sending emails, FTP (File Transfer Protocol) is used for transferring files over a network, and POP3 (Post Office Protocol version 3) is used for retrieving emails from a mail server. While all of these protocols are used in networking, SNMP is specifically designed for equipment management.

Question 8

____ is a service that allows devices on a network to discover other devices and determine how to work with them.
A) IPSec
B) SNMP
C) UPnP
D) PnP

Accepted Answer

UPnP (Universal Plug and Play) is a service that allows devices to discover other devices on a network and determine how to work with them. It is commonly used for home automation, media streaming, and gaming devices. IPSec is a protocol used for secure communication over a network, SNMP is a protocol used for network management, and PnP (Plug and Play) is a process for automatically detecting and installing hardware devices on a computer. None of these options fit the description of a service that allows devices on a network to discover other devices and determine how to work with them except UPnP.

Question 9

____ typically displays advertising banners or pop-up ads and is frequently encountered while visiting Web sites with a browser.
A) Logic bomb
B) Adware
C) Spam
D) Phishing

Accepted Answer

Adware is a type of software that displays unwanted advertisements, such as banners or pop-up ads, while users browse the internet. It is often bundled with other software programs and can be difficult to remove.

Question 10

____ is a general term used to describe software that violates a user's personal security.
A) Virus
B) Spyware
C) Worm
D) Logic bomb

Accepted Answer

Spyware is a type of software that infiltrates a user's device without their knowledge or consent and collects personal information, such as browsing habits, login credentials, and credit card information. It is generally used for advertising purposes or to sell the collected information to third-party advertisers. Viruses, worms, and logic bombs are types of malware that can cause damage to a user's system, but they may not necessarily violate personal security in the same way that spyware does.

Question 11

A computer ____ is a program that secretly attaches itself to another document or program and executes when that document or program is opened.
A) virus
B) worm
C) spam
D) logic bomb

Accepted Answer

A virus is a type of malicious software that attaches itself to other programs or files and can replicate themselves to spread to other computers. When an infected file or program is opened, the virus is activated and can cause harm to the computer.

Question 12

In a ____ attack, an attacker attempts to create every possible password combination by systematically changing one character at a time in a password.
A) dictionary
B) brute force
C) DoS
D) rogue AP

Accepted Answer

This type of attack is called a brute force attack, where the attacker systematically tries all possible combinations of characters in a password. Dictionary attacks rely on a pre-existing list of possible passwords, while DoS attacks are focused on overwhelming a network or system with traffic, and rogue AP attacks involve a fake wireless access point.

Question 13

A ____ bypasses all of the network security and opens the entire network and all users to direct attacks.
A) wireless router
B) firewall
C) rogue access point
D) wireless gateway

Accepted Answer

A rogue access point is a wireless access point that has been installed on a network without the permission or knowledge of the network administrator. It bypasses all network security and opens up the entire network to direct attacks from unauthorized users. Wireless routers, firewalls, and wireless gateways are all security measures that can be used to protect a network, but a rogue access point undermines all of these measures.

Question 14

A ____ attack is designed to prevent a device from performing its intended function.
A) denial-of-service (DoS)
B) rogue AP
C) phishing
D) pharming

Accepted Answer

A denial-of-service attack is specifically designed to flood a device or network with traffic or requests, overwhelming its ability to function properly and denying users access to the resources they need. Rogue APs, phishing attacks, and pharming attacks are not necessarily intended to prevent a device from functioning, but rather to misdirect or manipulate its operation.

Question 15

A ____ is a computer program that lies dormant until it is triggered by a specific event.
A) worm
B) virus
C) spam
D) logic bomb

Accepted Answer

A logic bomb is a type of malicious code that is intentionally inserted into a software system and designed to execute when triggered by a specific event, such as a certain date or the loss of a job by a programmer. It can cause damage such as system crashes or deletion of files.

Question 16

In technical terms, ____ describes the points of risk regarding the penetration of a security defense.
A) security vulnerability
B) dictionary attack
C) password guessing
D) IPSec

Accepted Answer

Security vulnerability refers to the potential weakness or flaw in a security system that could be exploited by attackers to gain unauthorized access or cause damage to systems or data. It is commonly used to describe the points of risk regarding the penetration of a security defense. The other options (dictionary attack, password guessing, and IPSec) are all related to security but do not specifically describe the points of risk in security defense.

Question 17

Because CSMA/CA has all stations wait a random amount of time after the medium is clear, the number of collisions is significantly reduced.

Accepted Answer

This statement is true. CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) is a protocol designed to minimize collisions in wireless networks. With CSMA/CA, each station listens to the wireless medium before transmitting to check if it is idle. If the medium is busy, the station waits for a random amount of time before attempting to transmit again. This reduces the likelihood of multiple stations transmitting at the same time and causing collisions.

Question 18

____ allows the Windows operating system to automatically detect new hardware when it is installed on a computer.
A) UPnP
B) SNMP
C) IPSec
D) PnP

Accepted Answer

PnP stands for "Plug and Play" and is a feature that allows the Windows operating system to automatically detect and configure new hardware when it is installed on a computer. This makes it easy to add devices to a computer without needing to manually install drivers or configure settings.

Question 19

One of the spyware tools often used is ____.
A) DoS
B) spam
C) adware
D) rogue APs

Accepted Answer

Adware is a type of software that displays unwanted advertisements and collects user data without their consent. It is often used by spyware tools to gather information about the user's browsing behavior and serve targeted advertisements. DoS (Denial of Service) is a type of attack that floods a network or server with traffic to make it inaccessible, spam refers to unsolicited and/or unwanted emails, and rogue APs (Access Points) are unauthorized wireless access points that can be used for malicious purposes.

Question 20

Logic bombs are easy to detect before they are triggered.

Accepted Answer

Logic bombs are specifically designed to remain undetected until they are triggered, making them difficult to detect and prevent.

Quiz 4: Active Wireless Attacks

An incorrect configuration of wireless hardware or software can often result in easy access to a system.

____ occurs when an individual uses the personal information of someone else to impersonate that individual with the intent to commit fraud or other crimes.

DoS attacks are rare against wired network servers.

Before users can be given access to a computer and its data, they must in some way prove that they are who they claim to be. This process of providing proof is known as ____.

In a ____ attack, each word from a dictionary is encoded in the same way the computer encodes a user's password for protection. Attackers then compare the encoded dictionary words against those in the encoded password file.

Authentication can be performed based on what you have, what you know, or what you are.

The ____ is a popular protocol used to manage networked equipment.

____ is a service that allows devices on a network to discover other devices and determine how to work with them.

____ typically displays advertising banners or pop-up ads and is frequently encountered while visiting Web sites with a browser.

____ is a general term used to describe software that violates a user's personal security.

A computer ____ is a program that secretly attaches itself to another document or program and executes when that document or program is opened.

In a ____ attack, an attacker attempts to create every possible password combination by systematically changing one character at a time in a password.

A ____ bypasses all of the network security and opens the entire network and all users to direct attacks.

A ____ attack is designed to prevent a device from performing its intended function.

A ____ is a computer program that lies dormant until it is triggered by a specific event.

In technical terms, ____ describes the points of risk regarding the penetration of a security defense.

Because CSMA/CA has all stations wait a random amount of time after the medium is clear, the number of collisions is significantly reduced.

____ allows the Windows operating system to automatically detect new hardware when it is installed on a computer.

One of the spyware tools often used is ____.

Logic bombs are easy to detect before they are triggered.