Deck 7: Digital Security

Question 1

FileVault is a MacOS utility included on by default on Macintosh computers that automatically encrypts data stored locally.

Answer 1

True

Question 2

Brute force attacks methodically try every possible password until the correct one is found.

Answer 2

True

Question 3

A cryptographic ________ is a word, number, or phrase that must be known to encrypt or decrypt data.

Answer 3

key

Question 4

It is not possible to encrypt a Windows hard drive volume.

Question 5

All Android devices automatically encrypt data stored on the device when a user activates the login password.

Question 6

Password entropy is a measure in _____ of a password's unpredictability.

Question 7

If you feel more secure with a totally random and unique password for each of your logins, then a(n) _______________ is an excellent option.

A) keylogger
B) encryption key
C) password manager
D) personal firewall

Question 8

Which of the following is not an example of user authentication?

A) Password
B) PINs
C) Fingerprint scanner
D) URLs (Uniform Resource Locators)

Question 9

A(n) _______ password is difficult to hack.

Question 10

A cryptographic __________ is a procedure for encryption or decryption.

A) firewall
B) ciphertext
C) key
D) algorithm

Question 11

Conventional wisdom tells us that strong passwords are at least _____ characters in length and include one or more uppercase letters, numbers, and symbols.

Question 12

An original message or file that has not yet been encrypted is referred to as ciphertext.

Question 13

Passwords used as encryption ________ help to make hijacked data unusable.

Question 14

There are various encryption methods, but __________ is the encryption standard currently used worldwide.

A) AES (Advanced Encryption Standard)
B) DDoS (distributed denial of service attacks)
C) IMSI (International Mobile Subscriber Identity)
D) TLS (Transport Layer Security)

Question 15

Password _________ is a measure in bits of a password's unpredictability.

Question 16

If you want to store passwords on a digital device, make sure to _________ the file in which they are stored.

Question 17

Which of the following is not a characteristic of a weak password?

A) Eight characters in length and include one or more uppercase letters, numbers, and symbols
B) Uses default passwords such as password, admin, system, and guest
C) Any sequence that includes a user name
D) Use of a word from a dictionary

Question 18

Which of the following attacks uses password-cracking software to generate every possible combination of letters, numerals, and symbols?

A) Entropy
B) Massive
C) Dictionary
D) Brute force

Question 19

The single most effective security measure for digital devices is to require a login password.

Question 20

This type of security transforms a message or data file in such a way that its contents are hidden from unauthorized readers.

A) Authentication
B) Encryption
C) Ciphertext
D) Decryption

Question 21

Any code that is designed to hide the existence of processes and privileges is referred to as a(n) _______.

Question 22

If you use a password manager, what do you as the user need to remember?

A) Your passwords for individual sites
B) The master password
C) Form data including credit card numbers
D) All of the above

Question 23

A computer _________ is a set of self-replicating program instructions that surreptitiously attaches itself to a legitimate executable file on a host device.

A) trojan
B) virus
C) worm
D) all of the above

Question 24

In addition to replicating itself, a virus is self-distributing.

Question 25

Stuxnet is a notorious computer _______.

Question 26

A computer _______ is a self-replicating, self-distributing program designed to carry out unauthorized activity on a victim's device.

Question 27

Password managers can generate unique passwords that have very good entropy.

Question 28

The core function of a password manager is to store user IDs with their corresponding ________.

Question 29

Viruses spread themselves from one device to another.

Question 30

________ refers to any computer program designed to surreptitiously enter a digital device.

Question 31

Common classifications of _________ include viruses, worms, and trojans.

Question 32

A password manager can store passwords in an encrypted file located at which of the following storage locations?

A) Local storage
B) Cloud storage
C) USB storage
D) All of the above

Question 33

Most trojans are not designed to replicate themselves.

Question 34

Password managers store passwords in a(n) _________ file.

Question 35

Similar to a worm, a trojan is not designed to spread itself to other devices.

Question 36

The action carried out by malware code is referred to as a(n) _______.

Question 37

__________ is the process of modifying an executable file or data stream by adding additional commands.

A) Keylogging
B) Pharming
C) Brute force attack
D) Code injection

Question 38

A key characteristic of viruses is their ability to lurk in a device for days or months, quietly replicating themselves.

Question 39

Which of the following is not a characteristic of a computer worm?

A) Self-replicating
B) Usually standalone executable programs
C) Self-distributing
D) Spread through a process called side-loading

Question 40

What is the process called when an app from a source other than an official app store is installed on a device?

A) Side-loading
B) Rootkit
C) Code injection
D) Dropper

Question 41

If you are traveling and expect to access files on a computer that you've left at home, make sure the remote access utility is turned off.

Question 42

Heuristics may produce false positives that mistakenly identify a legitimate file as malware.

Question 43

Which of the following sequence of events best describes an online intrusion?

A) Malware enters the device, and then opens a backdoor, which opens a communications link on the device that a hacker can exploit.
B) A backdoor is opened on the device locally, which allows malware to be loaded onto the device by a hacker.
C) A USB drive containing a trojan is inserted into a device, which opens a backdoor allowing a hacker access to the device.
D) None of the above.

Question 44

A virus __________ is a section of program code that contains a unique series of instructions known to be part of a malware exploit.

Question 45

One method of heuristic analysis allows the suspicious file to run in a guarded environment called a(n) ___________.

Question 46

Any data entering a digital device could be malware.

Question 47

When antivirus software detects malware, which of the following would not be a course of action you could take?

A) Conduct a heuristic analysis.
B) Repair the infection.
C) Put the infected file into quarantine.
D) Delete the infected file.

Question 48

__________ are standalone programs that masquerade as useful utilities or applications.

Question 49

___________ locks a device and then requests payment for an unlocking code.

Question 50

A virus __________ usually arrives as an email message that contains warnings about a fake virus.

A) payload
B) signature
C) hoax
D) dropper

Question 51

A(n) _________ is designed to deliver malicious code into a device.

Question 52

A(n) ________________ takes place when an unauthorized person gains access to a digital device by using an Internet connection and exploiting vulnerabilities in hardware or software.

A) address spoofing exploit
B) online intrusion
C) brute force attack
D) rogue antivirus

Question 53

The best defense against malware is _____________.

A) encryption
B) entropy
C) antivirus software
D) all of the above

Question 54

A(n) ___________ is malware that arrives in a trojan disguised as legitimate software and sets up a secret communication link to a hacker.

A) DDoS
B) TLS
C) PUP
D) RAT

Question 55

A(n) __________ is a computer program that seems to perform one function while actually doing something else.

Question 56

Antivirus software can use techniques called__________ to detect malware by analyzing the characteristics and behavior of suspicious files.

A) heuristic analysis
B) virus signature
C) side-loading
D) port scan

Question 57

Once you have installed antivirus software, you don't typically need to keep it running full time in the background.

Question 58

A(n) __________ is an undocumented method of accessing a digital device.

Question 59

Trojans depend on ________ to spread.

A) self-replication
B) social engineering
C) rootkits
D) code injection

Question 60

RATs can be used to create a backdoor to a victim's device that takes control of the device's camera.

Question 61

_____________ software shields certain applications against behaviors commonly exhibited by intrusions.

A) Malware
B) Rootkit
C) Antivirus
D) Virus signature

Question 62

Hackers can use ports to communicate with devices in botnets.

Question 63

A network utility called ______________ produces a detailed list of open ports on a device.

Question 64

__________ changes an originating address or a destination address to redirect the flow of data between two parties.

A) Social engineering
B) IMSI catching
C) Address spoofing
D) All of the above

Question 65

Which of the following would be considered spyware?

A) A keylogger
B) Firewall software
C) Antivirus software
D) All of the above

Question 66

A(n) _____________ is a hacker's LAN server that is designed to look like a legitimate Wi-Fi hotspot.

Question 67

To establish a(n) ________, hackers set up an unsecured Wi-Fi hotspot complete with an Internet connection.

A) keylogger
B) Evil Twin
C) botnet
D) none of the above

Question 68

Which of the following can be used to block unauthorized access while allowing authorized communications on a device or network?

A) Network router
B) Personal firewall
C) Hardware that uses NAT (network address translation)
D) All of the above

Question 69

Antivirus software cannot be expected to block threats that do not arrive in the form of malware.

Question 70

A(n) __________ is a device or software that is designed to block unauthorized access while allowing authorized communications.

A) Netstat
B) firewall
C) Evil Twin
D) digital certificate

Question 71

A(n) __________ pings a packet of data to a port in order to see if that port is open or not.

A) rootkit
B) port scan
C) virus signature
D) heuristic analysis

Question 72

MITM (man-in-the-middle) attacks include which of the following?

A) Address spoofing
B) IMSI catchers
C) Evil Twins
D) All of the above

Question 73

Hackers who gain control over several computers can organize them into a client-server network known as a(n) _______.

Question 74

A(n) ______________ attack exploits previously unknown vulnerabilities in software applications, hardware, and operating system program code.

A) zero-day
B) rootkit
C) brute force
D) dictionary

Question 75

If you suspect that your computer might be infected by a zero-day exploit, launching a(n) _______________ with a product such as Malwarebytes might identify the infection.

A) on-demand scan
B) rootkit
C) botnet
D) DDoS

Question 76

The objective of a MITM attack is for a third party to block communications between two entities.

Question 77

A botnet has a server that is controlled by hackers.

Question 78

_______ can be used to flood a Web site with so much traffic that it can no longer provide its intended service.

A) DDoS
B) An AES service attack
C) A Floodping attack
D) All of the above

Question 79

Correctly installed antivirus software will prevent all intrusions.

Question 80

Any software that secretly gathers personal information without the victim's knowledge is classified as __________.