Question 1

Which of the following is the least likely consequence if the process of user authentication is compromised?
A) Abuse of user's private information
B) Communications falsely attributed to user
C) Loss of user's access to account
D) Proceeds from Spanish lottery deposited in user's bank account

Accepted Answer

If user authentication is compromised, it is unlikely that proceeds from a lottery would be deposited into the user's account, as this scenario is unrelated to typical consequences of compromised authentication.

Question 2

Which of the following malware programs is disguised as a benevolent program?
A) Virus
B) Worm
C) Trojan horse
D) Logic bomb

Accepted Answer

A Trojan horse is a type of malware that is disguised as legitimate software to trick users into installing it.

Question 3

A Caesar cipher that shifts characters 3 positions to the right would encode the word BUBBLE as which of the following?
A) BLEBUB
B) YRYYIB
C) EXEEOH
D) ELBBUB

Accepted Answer

A Caesar cipher shifts each letter in the word by a fixed number of positions in the alphabet. Shifting each letter in "BUBBLE" 3 positions to the right results in "EXEEOH".

Question 4

Which feature of a cell phone has been in the news because it is being exploited by some organizations to collect data about the user?
A) Recent call lists
B) Cameras
C) GPS capabilities
D) Directory lists

Accepted Answer

GPS capabilities have been in the news for being exploited to track user locations and collect data without explicit consent.

Question 5

Which of the following security attacks collects key information, like your password, by using a fake web page?
A) Phishing
B) Back door
C) Buffer overflow
D) Denial of service

Accepted Answer

Phishing is a type of attack where attackers create a fake web page that looks legitimate to trick users into entering sensitive information like passwords.

Question 6

Because good passwords are hard to remember, users should memorize just a few and use them for all of their accounts.

Accepted Answer

Using the same password for multiple accounts increases the risk of a security breach, as a compromise of one account could lead to unauthorized access to others.

Question 7

Malware known as a Trojan horse uses a system-oriented event to determine when it launches its attack.

Accepted Answer

The answer of Malware known as a Trojan horse uses...

Question 8

The companies that make antivirus software are constantly updating their databases of signatures and heuristics to detect new malware.

Accepted Answer

Antivirus companies regularly update their databases to identify and protect against new malware threats as they emerge.

Question 9

Cryptanalysis is the process of "breaking" a cryptographic code.

Accepted Answer

Cryptanalysis involves analyzing and breaking cryptographic codes and ciphers to understand or decrypt the information without prior knowledge of the key.

Question 10

A transposition cipher substitutes one character with another.

Accepted Answer

A transposition cipher rearranges the positions of characters in the plaintext, rather than substituting them with different characters.

Question 11

A digital signature is a way to "sign" a document by appending extra data that are both unique to the sender and very difficult to forge.

Accepted Answer

A digital signature uses cryptographic techniques to ensure the authenticity and integrity of a message or document, making it unique to the sender and difficult to forge.

Question 12

Phishing is a technique that uses a fake web page to collect information such as usernames and passwords.

Accepted Answer

Phishing often involves creating a fake website that mimics a legitimate one to trick users into entering sensitive information like usernames and passwords.

Question 13

A username is not sufficient for user authentication.

Accepted Answer

A username is typically used for identification, not authentication. Authentication requires verifying the identity, often through a password or other methods.

Question 14

Information security experts embrace the principle that no single individual should have the authority to have a significant impact on the system.

Accepted Answer

This principle is known as "separation of duties," which ensures that no single person has control over all aspects of a critical process, reducing the risk of fraud or error.

Question 15

Which of the following is not a reasonable password management guideline?
A) Use a combination of uppercase and lowercase letters in your password.
B) Never tell anyone your password.
C) Do not use the same password for multiple accounts.
D) Use a password that is easy for you to remember, like your dog's name.

Accepted Answer

Using a password that is easy to remember, like your dog's name, is not a reasonable guideline because it can be easily guessed or found out by others, making it less secure.

Question 16

Which of the following is the least significant challenge in the use of fingerprint analysis for user authentication?
A) Potential for false acceptance
B) Potential for false rejection
C) Relatively high cost
D) User complaints about inconvenience

Accepted Answer

The answer of Which of the following is the least...

Question 17

Which of the following malware programs might launch its attack on the next April Fool's Day?
A) Virus
B) Worm
C) Trojan horse
D) Logic bomb

Accepted Answer

A logic bomb is a type of malware that is triggered by a specific event or date, such as April Fool's Day.

Question 18

A route cipher is an example of what category of encryption?
A) Caesar cipher
B) Public-key encryption
C) Transposition cipher
D) Electronic signature

Accepted Answer

A route cipher is a type of transposition cipher, where the positions of the characters are shifted according to a certain system or route.

Question 19

According to a 2018 report, what percentage of cyber-attacks target small businesses?
A) 5%
B) 12%
C) 25%
D) 43%

Accepted Answer

According to a 2018 report by Verizon, 43% of cyber-attacks target small businesses, highlighting their vulnerability to such threats.

Question 20

Which of the following are not user authentication credentials?
A) Smart cards
B) CAPTCHA phrases
C) Passwords
D) Fingerprints

Accepted Answer

CAPTCHA phrases are used to distinguish between humans and bots, not for user authentication.

Quiz 17: Computer Security

Which of the following is the least likely consequence if the process of user authentication is compromised?

Which of the following malware programs is disguised as a benevolent program?

A Caesar cipher that shifts characters 3 positions to the right would encode the word BUBBLE as which of the following?

Which feature of a cell phone has been in the news because it is being exploited by some organizations to collect data about the user?

Which of the following security attacks collects key information, like your password, by using a fake web page?

Because good passwords are hard to remember, users should memorize just a few and use them for all of their accounts.

Malware known as a Trojan horse uses a system-oriented event to determine when it launches its attack.

The companies that make antivirus software are constantly updating their databases of signatures and heuristics to detect new malware.

Cryptanalysis is the process of "breaking" a cryptographic code.

A transposition cipher substitutes one character with another.

A digital signature is a way to "sign" a document by appending extra data that are both unique to the sender and very difficult to forge.

Phishing is a technique that uses a fake web page to collect information such as usernames and passwords.

A username is not sufficient for user authentication.

Information security experts embrace the principle that no single individual should have the authority to have a significant impact on the system.

Which of the following is not a reasonable password management guideline?

Which of the following is the least significant challenge in the use of fingerprint analysis for user authentication?

Which of the following malware programs might launch its attack on the next April Fool's Day?

A route cipher is an example of what category of encryption?

According to a 2018 report, what percentage of cyber-attacks target small businesses?

Which of the following are not user authentication credentials?