Deck 16: Security

Question 1

To protect the systems we have to ensure security on the following level:

A) physical
B) network
C) operating system
D) all of the above

Answer 1

D

Question 2

Describe the idea of masquerading attack.

Answer 2

During a masquerading, an attacker pretends to be an authorized user in order to gain access to a system or to gain greater privileges than are authorized for her/him.

Question 3

______________ virus changes each time it is installed to avoid detection by antivirus software.

A) A polymorphic
B) A source code
C) An encrypted
D) A macro

Answer 3

B

Question 4

________________ encrypts the information on the target computer and renders it inaccessible to the owner

A) Spyware
B) Ransomware
C) Logic bomb
D) all of the above

Question 5

Using a firewall, the following connection is allowed:

A) from Internet to company's computers
B) from Internet to DMZ (demilitarized zone)
C) from computers in DMZ (demilitarized zone) to company computers
D) none of the above

Question 6

Vulnerability scans can check:

A) unexpected long-running processes
B) hidden network daemons
C) unauthorized programs in system directories
D) all of the above

Question 7

Describe the idea of main-in-the-Medium attack.

Question 8

Describe the problem of a buffer overflow.

Question 9

IPSec uses ______ encryption.

A) asymmetric
B) symmetric
C) one-time password
D) Caesar cipher

Question 10

Address Space Layout Randomization (ASLR) technique protects an operating system against_______________

A) a macro virus
B) zero-day attack
C) Denial of Service
D) a code-injection attack

Question 11

Why an asymmetric encryption algorithm uses two keys?

Question 12

What is the reason to use a stream cipher?

Question 13

TLS provides security at the _______ layer.

A) network
B) transport
C) application
D) none of the above

Question 14

Port scanning allows a hacker to__________________

A) known users' passwords
B) disrupt legitimate use of a system
C) detect a system's vulnerabilities
D) modify a transmission between a remote user and a system

Question 15

Why UNIX does not suffer from viruses?

Question 16

IPSs (Intrusion Prevention Systems) can detect zero-day attack if they employ_____________

A) signature-based detection
B) anomaly detection
C) all of the above
D) none of the above

Question 17

User authentication can be based on_______________

A) the user's possession of something
B) the user's knowledge of something
C) an attribute of the user
D) all of the above

Question 18

Trojan mule is a type of the Trojan horse which emulates ____________

A) a legitimate email
B) a system shell
C) a login program
D) a legitimate webpage

Question 19

Describe the principle of least privilege.

Question 20

________ is a type of social-engineering attack, in which a legitimate-looking e-mail misleads a user into entering confidential information.

A) spamming
B) phishing
C) attack surface
D) denial-of-service

Question 21

The attack surface is the set of points at which an attacker can try to break into the system.

Question 22

How does one distribute a key for symmetric algorithms?

Question 23

Transport Layer Security (TLS) employs server's certificate from certification authority (CA).

Question 24

It is much faster for a computer to encode and decode ciphertext by using the usual symmetric algorithms than by using asymmetric algorithms.

Question 25

A virus is a fragment of code embedded in a malware.

Question 26

In a symmetric encryption algorithm, one key is used to encrypt and a different one is used to decrypt.

Question 27

When a user logs on, MW Windows 10 creates a list of files which can be used by the user.

Question 28

What does a security policy include?

Question 29

The purpose of denial-of-service attacks is to gain information or steal resources.

Question 30

How are one-time password systems implemented?

Question 31

MS Word documents in RTF format are resistant to macro viruses.

Question 32

A firewall is installed between the trusted and the untrusted.