Question 1

What is a piece of malicious software that gets passed from computer to computer by attaching itself to a program?

Accepted Answer

A virus is a type of malware that spreads by attaching itself to a program or file and then infecting other programs or files when they are opened or executed. Unlike worms, viruses cannot spread on their own and require some form of human interaction to propagate. Trojan is a type of malware that disguises as a legitimate program to deceive users to install and execute it, while spyware is a type of malware that collects sensitive information from a user's computer without their knowledge or consent.

Question 2

What is a software program that looks like one thing (such as a utility or a game)but is actually doing something else (such as modifying CMOS settings)?

Accepted Answer

A Trojan is a program that appears to be one thing (such as a utility or a game) but is actually doing something else (such as modifying CMOS settings). Spyware is a type of malware designed to collect data from a computer system without the user's knowledge or consent. A virus is a type of malicious software that replicates itself by modifying other computer programs and inserting its own code. A worm is a type of malware that spreads from computer to computer, often through network connections.

Question 3

What is it called when a user accesses resources in an unauthorized way?

Accepted Answer

Unauthorized access refers to when a user gains access to resources or data without proper authorization or permission to do so. This can be done intentionally or unintentionally, but it is considered a security breach and a violation of data privacy laws.

Question 4

Antimalware programs can passively monitor your computer's activity.In this mode,what are they called?

Accepted Answer

Antimalware programs that passively monitor a computer's activity are called virus shields.

Question 5

What could a computer use to determine a user's identity with the most authority?

Accepted Answer

A biometric device, such as a fingerprint scanner or facial recognition software, would provide the most reliable way to verify a user's identity because it is difficult to counterfeit or steal biometric data. Passwords and usernames can be easily forgotten, guessed, or stolen, while a firewall only controls access to a network and does not verify individual user identities.

Question 6

How does a computer determine who can or should access it?

Accepted Answer

Authentication is the process of verifying the identity of a user or device. It is used to determine who can or should access a computer or network.

Question 7

What is it called when a hacker goes through the garbage looking for information?

Accepted Answer

The term for a hacker going through the garbage looking for information is "dumpster diving."

Question 8

A user has a credit card-sized card used to prove her identity with a PIN.What is this card called?

Accepted Answer

A smart card is a card with a microchip that stores and processes data. It can be used for various purposes, including identity verification, access control, and payment processing. The card can be secured with a PIN code, which the user must enter to authenticate themselves.

Question 9

What is a complete program that travels from machine to machine through computer networks and has the capability to cause malicious problems?

Accepted Answer

A worm is a type of malicious software that is capable of self-replication and spreading through computer networks. It can cause harm by consuming bandwidth, damaging data, or even taking control of the affected system. Unlike viruses or Trojans, worms do not need human interaction to spread and can travel autonomously from one machine to another.

Question 10

To lock down security settings on a single computer in a workgroup,what would you use?

Accepted Answer

To lock down security settings on a single computer in a workgroup, Local Security Settings can be used. Local Security Settings enables you to configure individual security policies on a stand-alone computer, which includes password policies, account lockout policies, and audit policies. Group Policy is used to manage multiple computers in a domain environment, while Account Lockout Policy and Password Policy are components of Local Security Policies.

Question 11

What is the process of using or manipulating people inside the networking environment to gain access to that network from the outside?

Accepted Answer

Social engineering is the process of using psychological techniques to manipulate people into giving up confidential information or access to secure networks. This can include tactics like pretexting, phishing, and tailgating, and is often used by hackers and cybercriminals to gain unauthorized access to networks and systems. Internal viruses and inside attacks are also potential threats to network security, but they don't necessarily involve social engineering tactics. Hacking may involve elements of social engineering, but it's a more general term that also encompasses technological exploits and vulnerabilities.

Question 12

What is Microsoft's encryption method of choice for providing transparent encryption between the server and the client?

Accepted Answer

The answer of What is Microsoft's encryption method of choice...

Question 13

Which of the following is not considered grayware?

Accepted Answer

Grayware refers to software that may be undesirable or unwanted, but does not meet the definition of malware. Pop-ups, spyware, and adware all fall under this category. Phishing, on the other hand, is not software and is typically classified as a type of social engineering attack rather than grayware.

Question 14

Most computer attacks are accomplished through what type of attack?

Accepted Answer

Social engineering is the most common type of attack where attackers trick or manipulate individuals into divulging sensitive information or performing certain actions. This can include phishing emails, phone scams, or pretexting. Port scanning, buffer overflows, and password cracking are also common attack methods, but not as prevalent as social engineering.

Question 15

Sally is a member of multiple groups.A file has been granted different permissions to the different groups.What is Sally's effective permission?

Accepted Answer

Sally's effective permissions are the combined permissions of all the groups she is a member of, as she can perform any action allowed by any of the groups.

Question 16

What is the act of trying to get people to give their user names,passwords,or other security information by pretending to be someone else electronically called?

Accepted Answer

The act described is called phishing, where someone pretends to be someone else electronically to try and obtain sensitive information like passwords and usernames.

Question 17

To lock down security settings on a single computer in a domain,what would you use?

Accepted Answer

Group Policy is the best option to lock down security settings on a single computer in a domain because it applies the same settings to multiple computers and users within an organization. This ensures consistency in security settings and reduces the risk of security breaches. Local Security Settings, Account Lockout Policy, and Password Policy can also be used in conjunction with Group Policy to strengthen security measures.

Question 18

Together,what are viruses,Trojans,and worms called?

Accepted Answer

Viruses, Trojans, and worms are all types of malware, which is short for malicious software.

Question 19

Physical security,authentication,the file system,users and groups,and security policies combine to make what?

Accepted Answer

Access control refers to the combination of physical security, authentication, the file system, users and groups, and security policies. It is the process of controlling who has access to what resources and at what level of access.

Question 20

What word describes the process of cleaning up after a virus infection?

Accepted Answer

Remediation refers to the process of cleaning up and removing any trace of a virus or malware infection on a computer system. This includes removing infected files, repairing any damage caused by the virus, and updating security measures to prevent future infections.

Quiz 29: Securing Computers