Deck 3: Network Security

Question 1

Users typically can eliminate a vulnerability in one of their programs by ________.

A)installing a patch
B)doing a zero-day installation
C)using an antivirus program
D)all of the above

Answer 1

A

Question 2

The generic name for evil software is ________.

A)viruses
B)worms
C)exploits
D)malware

Answer 2

D

Question 3

A compromise is an attempted attack.

Answer 3

False

Question 4

The threat environment includes ________.

A)attackers
B)attacks
C)both A and B
D)neither A nor B

Question 5

Which phase of the plan-protect-respond cycle takes the largest amount of work?

A)plan
B)protect
C)respond
D)Each phase requires about equal effort.

Question 6

A ________ is a flaw in a program that permits a specific attack or set of attacks against this problem.

A)malware
B)security error
C)vulnerability
D)security fault

Question 7

Which of the following attach themselves to other programs?

A)viruses
B)worms
C)both A and B
D)neither A nor B

Question 8

An attack that occurs before a patch is available is called a zero-day attack.

Question 9

Which of the following can spread more rapidly?

A)directly-propagating viruses
B)directly-propagating worms
C)Both of the above can spread with approximately equal speed.

Question 10

An action that will stop many viruses is ________.

A)installing a firewall
B)the use of an antivirus program
C)both A and B
D)neither A nor B

Question 11

The generic name for a security flaw in a program is a ________.

A)virus
B)malware
C)security fault
D)vulnerability

Question 12

Viruses most commonly spread from one computer to another ________.

A)via e-mail
B)by propagating directly by themselves
C)through obfuscation
D)all of the above

Question 13

Universal malware requires a vulnerability to succeed.

Question 14

Compromises also are called ________.

A)breaches
B)incidents
C)both A and B
D)neither A nor B

Question 15

Malware is a generic name for evil software.

Question 16

Which of the following is a propagation vector for some worms?

A)e-mail
B)direct propagation
C)both A and B
D)neither A nor B

Question 17

Which of the following sometimes uses direct propagation between computers?

A)viruses
B)worms
C)both A and B
D)neither A nor B

Question 18

An action that will stop many viruses is ________.

A)installing patches
B)the use of an antivirus program
C)both A and B
D)neither A nor B

Question 19

Viruses propagate within a computer by infecting other programs in that computer.

Question 20

Firewalls typically stop viruses.

Question 21

Which of the following can thwart directly-propagating worms?

A)applying patches
B)firewalls
C)both A and B
D)neither A nor B

Question 22

A program that can capture passwords as you enter them is ________.

A)a keystroke logger
B)data mining software
C)both A and B
D)neither A nor B

Question 23

Scripts are likely to be dangerous primarily if a computer has a vulnerability.

Question 24

Spam can be used to ________.

A)implement a fraud
B)cause the reader to go to a website that will download malware to the victim's computer
C)both A and B
D)neither A nor B

Question 25

Scripts normally are bad.

Question 26

Pieces of code that are executed after the virus or worm has spread are called ________.

A)vulnerabilities
B)exploits
C)compromises
D)payloads

Question 27

An attack in which an authentic-looking e-mail or website entices a user to enter his or her username,password,or other sensitive information is called ________.(Select the most specific answer.)

A)phishing
B)identity theft
C)social engineering
D)a spyware attack

Question 28

Which of the following can thwart directly-propagating worms?

A)firewalls
B)antivirus programs
C)both A and B
D)neither A nor B

Question 29

The general name for malware on a user's PC that collects sensitive information and sends this information to an attacker is ________.

A)keystroke loggers
B)anti-privacy software
C)spyware
D)data mining software

Question 30

Trojan horses can get onto computers by ________.

A)viruses
B)hackers
C)both A and B
D)neither A nor B

Question 31

Antivirus programs can usually stop directly-propagating worms.

Question 32

Trojan horses can get onto computers by ________.

A)self-propagation
B)hackers
C)both A and B
D)neither A nor B

Question 33

Malware programs that masquerade as system files are called ________.

A)viruses
B)scripts
C)payloads
D)Trojan horses

Question 34

________ is lying to get victims to do something against financial self interest.

A)Social engineering
B)Fraud

Question 35

Scripts may execute commands when a webpage is downloaded.

Question 36

Credit card number thieves are called ________.(Pick the most precise answer.)

A)numbers racketeers
B)fraudsters
C)identity thieves
D)carders

Question 37

Tricking users into doing something against their interests is ________.

A)social engineering
B)hacking
C)both A and B
D)neither A nor B

Question 38

Mobile code is another name for ________.

A)virus
B)worm
C)both A and B
D)neither A nor B

Question 39

Identity theft is stealing credit card numbers,in order to make unauthorized purchases.

Question 40

Unsolicited commercial e-mail is better known as ________.

A)spam
B)adware
C)social engineering
D)identity theft

Question 41

What does a hacker usually do IMMEDIATELY after downloading a hacker toolkit?

A)install a Trojan horse
B)create a backdoor
C)execute an exploit
D)delete log files

Question 42

Attack programs that can be remotely controlled by an attacker are ________.

A)bots
B)DoS programs
C)exploits
D)sock puppets

Question 43

Hackers send probe packets to identify ________.

A)IP addresses with active hosts
B)hosts running certain applications
C)both A and B
D)neither A nor B

Question 44

What are the most dangerous types of employees?

A)financial employees
B)manufacturing employees
C)IT security employees
D)former employees

Question 45

The last stage in a hacking attack is ________.

A)scanning
B)the break-in
C)creating a back door
D)none of the above

Question 46

Methods that hackers use to break into computers are ________.

A)cracks
B)magics
C)exploits
D)compromises

Question 47

Hackers identify possible victim computers by sending ________.

A)scouts
B)probe packets
C)exploits
D)Mocking Jays

Question 48

A way back into a system that an attacker can use to get into the compromised computer later is called a ________.(Choose the most specific answer.)

A)backdoor
B)Trojan horse
C)compromise
D)rootkit

Question 49

The last stage in a hacking attack is the break-in.

Question 50

DoS attacks attempt to ________.

A)hack a computer
B)reduce the availability of a computer
C)both A and B
D)neither A nor B

Question 51

It is still hacking if a person unintentionally accesses unauthorized computer information.

Question 52

Cyberwar attacks are made by national governments or organized terrorists.

Question 53

Which of the following can be a type of backdoor?

A)A new account
B)A Trojan horse
C)both A and B
D)neither A nor B

Question 54

It is generally illegal to write malware.

Question 55

Which of the following can be upgraded after it is installed on a victim computer? (Choose the most specific answer.)

A)Trojan horses
B)bots
C)viruses
D)worms

Question 56

Which of the following tends to be more damaging to the victim?

A)credit card theft
B)identity theft
C)Both are about equally damaging to the victim.

Question 57

In distributed DoS attacks,the attacker sends messages directly to ________.

A)bots
B)the intended victim of the DoS attack
C)backdoors
D)DOS servers

Question 58

Most hackers today are driven by curiosity,a sense of power,and,sometimes,a desire to increase their reputation among peers.

Question 59

What type of attacker are most attackers today?

A)disgruntled employees and ex-employees
B)criminals
C)hackers motivated by a sense of power
D)cyberterrorists

Question 60

After a break-in,the first step usually is to ________.

A)do damage manually
B)delete log files
C)create a backdoor
D)download a hacker toolkit

Question 61

Implementation guidance is less specific than _______.

A)policy
B)implementation
C)standards
D)none of the above

Question 62

An attacker must break through two firewalls to get to a host.This illustrates the principle called ________.(Select the most specific answer.)

A)comprehensive security
B)risk assurance
C)having a DMZ
D)defense in depth

Question 63

A policy specifies ________.

A)what should be done
B)how to do it
C)both A and B
D)neither A nor B

Question 64

The goal of security is to eliminate risk.

Question 65

Attacking your own firm occurs in ________.

A)vulnerability testing
B)auditing
C)both A and B
D)neither A nor B

Question 66

Which of the following specifies what should be done?

A)policies
B)implementation
C)both A and B
D)neither A nor B

Question 67

Which of the following is true?

A)guidelines must be followed
B)guidelines must be considered
C)both A and B
D)neither A nor B

Question 68

Access control involves ________.

A)limiting access to each resource
B)limiting the permissions of users to each resource
C)both A and B
D)neither A nor B

Question 69

Actions that people are allowed to take on a resource comes under the heading of ________.

A)hacks
B)permissions
C)exploits
D)risks

Question 70

Balancing threats against protection costs is called ________.

A)economic justification
B)risk analysis
C)comprehensive security
D)defense in depth

Question 71

Oversight helps ensure that a policy is implemented faithfully.

Question 72

Policies are separated by implementation to take advantage of ________.

A)implementer knowledge
B)the delegation of work principle
C)minimum permissions

Question 73

Vulnerabilities are occasionally found in even the best security products.Consequently,companies must ________.

A)have comprehensive security
B)have defense in depth
C)do risk analysis
D)only give minimum permissions

Question 74

What type of attacker can do the most damage?

A)criminal attackers
B)hackers driven by curiosity
C)employees and ex-employees
D)national governments

Question 75

Security is primarily a management issue.

Question 76

Attackers only need to find a single weakness to break in.Consequently,companies must ________.

A)have comprehensive security
B)have insurance
C)do risk analysis
D)only give minimum permissions

Question 77

Oversight activities include ________.

A)vulnerability testing
B)creating guidelines
C)both A and B
D)neither A nor B

Question 78

In general,authenticated users should be given maximum permissions in a resource so that they can do their jobs with few restrictions.

Question 79

Which of the following must be followed?

A)standards
B)guidelines
C)both A and B
D)neither A nor B

Question 80

Which of the following is not one of the four major security planning principles?

A)perimeter defense
B)risk analysis
C)comprehensive security
D)defense in depth