Question 1

Which of the following is a type of script that automates repetitive tasks in an application such as a word processor but can also be programmed to be a virus?
A) worm
B) macro
C) back door
D) Trojan

Accepted Answer

A macro is a type of script that automates repetitive tasks in an application such as a word processor. However, if programmed maliciously, it can also act as a virus. A worm is a self-replicating program that spreads through networks, while a back door is a vulnerability intentionally left in software for remote access. A Trojan is a type of malware disguised as a useful program that can harm a computer system.

Question 2

Which security layer verifies the identity of a user,service,or computer?
A) authentication
B) repudiation
C) physical security
D) authorization

Accepted Answer

Authentication is the security layer that verifies the identity of a user, service, or computer by validating the credentials provided during the login process. It helps to ensure that only authorized individuals or systems are allowed access to sensitive data or resources. Repudiation refers to the ability to disavow or deny an action, physical security is a different layer that involves physical measures to protect resources, and authorization refers to the process of determining what a user is allowed to do once their identity has been authenticated.

Question 3

A worm creates files that copy themselves repeatedly and consume disk space.

Accepted Answer

This is true, as a worm's main purpose is to replicate itself and spread to other devices. This can result in the creation of multiple copies of the worm's file, which can consume significant amounts of disk space on infected devices.

Question 4

Which type of attack works by an attacker operating between two computers in a network and impersonating one computer to intercept communications?
A) malicious port scanning
B) man-in-the-middle
C) denial of service
D) remote procedure call

Accepted Answer

The description provided matches the characteristics of a man-in-the-middle attack. The attacker intercepts the communication between two computers and impersonates one of them to intercept or modify data being transmitted. Malicious port scanning is used to identify open ports on a system to exploit vulnerabilities. Denial of service is a type of attack that floods a system with traffic to make it unavailable. Remote procedure call is a protocol used for communication between different computers in a network.

Question 5

Which of the following is NOT one of the three primary goals of information security?
A) confidentiality
B) integrity
C) impartiality
D) availability

Accepted Answer

The three primary goals of information security are confidentiality, integrity, and availability. Impartiality is not one of the primary goals.

Question 6

What is a VPN typically used for?
A) secure remote access
B) detection of security threats
C) block open ports
D) filter harmful scripts

Accepted Answer

A VPN (Virtual Private Network) is typically used for secure remote access to a network, allowing users to connect to a network from an external location and securely access resources or data. It creates a secure and encrypted tunnel between the user and the network, protecting sensitive data and ensuring privacy. While VPNs can offer some level of protection against security threats, their primary purpose is to provide secure remote access. They do not typically involve blocking open ports or filtering harmful scripts.

Question 7

Which type of attack causes the operating system to crash because it is unable to handle arbitrary data sent to a port?
A) RPC attacks
B) ICMP message abuse
C) malicious port scanning
D) SYN flood

Accepted Answer

RPC (Remote Procedure Call) attacks can cause an operating system to crash by sending arbitrary data to a port that the system cannot handle, leading to a denial of service.

Question 8

In which form of authentication does the authenticating device generate a random code and send it to the user who wants to be authenticated?
A) basic
B) challenge/response
C) biometrics
D) signature

Accepted Answer

The form of authentication in which the authenticating device generates a random code and sends it to the user who wants to be authenticated is called challenge/response. This method provides better security than basic authentication as it requires a unique response from the user for each authentication attempt. Biometrics and signature authentication do not involve the use of random codes.

Question 9

What is the name of a storage area where viruses are placed by antivirus software so they cannot replicate or do harm to other files?
A) firewall
B) recycle bin
C) quarantine
D) demilitarized zone

Accepted Answer

The storage area where viruses are placed by antivirus software so they cannot replicate or do harm to other files is called quarantine. The other options (firewall, recycle bin, demilitarized zone) do not specifically refer to a storage area for viruses.

Question 10

Defense in depth can best be described as which of the following?
A) a firewall that protects the network and the servers
B) a layered approach to security
C) antivirus software and firewalls
D) authentication and encryption

Accepted Answer

Defense in depth is a layered approach to security where multiple layers of defense are implemented to protect against cyber threats. This can include measures such as firewalls, antivirus software, authentication protocols, and encryption techniques. By using multiple layers of defense, if one layer is compromised, there are still other layers in place to prevent a successful cyber attack.

Question 11

A hactivist can best be described as which of the following?
A) an unskilled programmer that spreads malicious scripts
B) consider themselves seekers of knowledge
C) use DoS attacks on Web sites with which they disagree
D) deface Web sites by leaving messages for their friends to read

Accepted Answer

Hacktivists use hacking techniques, such as DoS attacks, to promote political ends or express disagreement with certain websites or organizations.

Question 12

What can an attacker use a port scanner to test for on a target computer?
A) invalid IP addresses
B) SYN flags
C) open sockets
D) ping floods

Accepted Answer

An attacker can use a port scanner to test for open sockets on a target computer. This information can then be used to identify potential vulnerabilities and exploit them.

Option A is incorrect as a port scanner is not used to test for invalid IP addresses.

Option B is incorrect as SYN flags are not related to port scanning.

Option D is incorrect as ping floods are a type of DoS attack and not related to port scanning.

Question 13

Reviewing log files is a time-consuming task and therefore should only be done when an attack on the network has occurred.

Accepted Answer

Reviewing log files should be done regularly as a part of network security and monitoring. It helps diagnose potential security threats, identify system issues, and track user activity. Proactive log analysis can prevent security breaches before they occur, making it an essential part of network security.

Question 14

With discretionary access control,network users can share information with other users,making it more risky than MAC.

Accepted Answer

Discretionary access control (DAC) allows network users to share information with other users, which can increase the risk of unauthorized access or data breaches. In contrast, mandatory access control (MAC) restricts access based on a set of predefined rules, making it more secure than DAC.

Question 15

What is a program that appears to do something useful but is actually malware?
A) virus
B) logic bomb
C) Trojan
D) back door

Accepted Answer

A Trojan appears to be a legitimate program, but it actually contains malware that can harm a computer system or steal sensitive information. Trojans often trick users into downloading them by disguising themselves as useful software or attachments in an email.

Question 16

Physical security protects a system from theft,fire,or environmental disaster.

Accepted Answer

Physical security measures such as securing facilities, surveillance, controlling access to equipment, and backups protect against theft, fire or environmental disasters.

Question 17

Why might you want your security system to provide nonrepudiation?
A) to prevent a user from capturing packets and viewing sensitive information
B) to prevent an unauthorized user from logging into the system
C) to trace the origin of a worm spread through email
D) so a user can't deny sending or receiving a communication

Accepted Answer

Nonrepudiation provides assurance that a user cannot deny sending or receiving a communication. It is useful in situations where there is a need for legal proof of communication or data transfer.

Question 18

Which term is best described as an attack that relies on the gullibility of people?
A) malicious code
B) script kiddie
C) back door
D) social engineering

Accepted Answer

Social engineering involves manipulating people into divulging confidential information or performing actions that may not be in their best interest, often through deception or trickery. It relies on the gullibility or trust of individuals, rather than technical vulnerabilities.

Question 19

A packet monkey is an unskilled programmer who spreads viruses and other malicious scripts to exploit computer weaknesses.

Accepted Answer

A packet monkey is a type of hacker who primarily uses automated tools or pre-made scripts to launch attacks on computer systems, rather than developing their own malicious code. However, they may still possess a certain level of technical skill and knowledge in order to carry out these attacks effectively.

Question 20

Malware that creates networks of infected computers that can be controlled from a central station is referred to as which of the following?
A) botnet
B) Trojan
C) logic bomb
D) packet monkey

Accepted Answer

Malware that creates networks of infected computers that can be controlled from a central station is called a botnet. Trojans are malicious software that disguises itself as harmless software to gain access to a computer system. A logic bomb is a type of malware that is triggered by a specific event or date/time, and it is used to cause harm to the computer system. A packet monkey is a person who performs various troubleshooting tasks on network systems.

Quiz 1: Network Security Fundamentals

Which of the following is a type of script that automates repetitive tasks in an application such as a word processor but can also be programmed to be a virus?

Which security layer verifies the identity of a user,service,or computer?

A worm creates files that copy themselves repeatedly and consume disk space.

Which type of attack works by an attacker operating between two computers in a network and impersonating one computer to intercept communications?

Which of the following is NOT one of the three primary goals of information security?

What is a VPN typically used for?

Which type of attack causes the operating system to crash because it is unable to handle arbitrary data sent to a port?

In which form of authentication does the authenticating device generate a random code and send it to the user who wants to be authenticated?

What is the name of a storage area where viruses are placed by antivirus software so they cannot replicate or do harm to other files?

Defense in depth can best be described as which of the following?

A hactivist can best be described as which of the following?

What can an attacker use a port scanner to test for on a target computer?

Reviewing log files is a time-consuming task and therefore should only be done when an attack on the network has occurred.

With discretionary access control,network users can share information with other users,making it more risky than MAC.

What is a program that appears to do something useful but is actually malware?

Physical security protects a system from theft,fire,or environmental disaster.

Why might you want your security system to provide nonrepudiation?

Which term is best described as an attack that relies on the gullibility of people?

A packet monkey is an unskilled programmer who spreads viruses and other malicious scripts to exploit computer weaknesses.

Malware that creates networks of infected computers that can be controlled from a central station is referred to as which of the following?