Cybersecurity Final Exam

Cybersecurity Final Exam

1 - What is cybersecurity?

the use of satellites to spy on malicious users

efforts to prevent people from becoming hackers

the act of securing the Internet

the protection of cyberspace

2 - What is the purpose of a reconnaissance attack on a computer network?

to steal data from the network servers

to redirect data traffic so that it can be monitored

to prevent users from accessing network resources

to gather information about the target network and system

3 - When an organization is developing cybersecurity procedures, what else, besides technology, must be considered to ensure that the procedures are effective?

user authentication

closed circuit TVs

user behavior

more security personnel

4 - An attacker sends a piece of malware as an email attachment to employees in a company. What is one probable purpose of the attack?

searching and obtaining trade secrets

cracking the administrator password for a critical server

probing open ports on the firewall on the border network

denying external access to a web server that is open to the public

5 - When describing malware, what is a difference between a virus and a worm?

A virus focuses on gaining privileged access to a device whereas a worm does not.      

A virus can be used to deliver advertisements without user consent whereas a worm cannot.

A virus replicates itself by attaching to another file whereas a worm can replicate itself independently.

A virus can be used to launch a DoS attack (but not a DDoS), but a worm can be used to launch both DoS and DDoS attacks.

6 - Which example illustrates how malware might be concealed?

A worm is launched with the objective of deleting key operating system files on company file and web servers.

A virus spreads in an organization with the objective to obtain the email contacts from employee workstations.

An attack is launched against a public website of an online retailer with the objective of blocking its response to visitors.

An email is sent to the employees of an organization with an attachment that looks like an antivirus update, but the attachment actually consists of spyware.

7 - Fill in the blank.

You need to put the word: Cybersecurity

8 - What type of attack uses multiple sources in an effort to render a target system unusable?

spam

phishing

DDoS

cyberfraud

9 - What type of software are Zeus and SpyEye classified as?

malware

DDoS launcher 

antiphishing software

intrusion detection applications

10 - What was the first banking technology that used a PIN to authenticate customers?

Internet banking

Mobile banking

Computer banking

automatic teller machines

11 - True or False? Phone phreaking was the start of what is known as hacking.

true

false

12 - What is an example of cyber kill chain?

a group of botnets

a planned process of cyberattack

a series of worms based on the same core code

a combination of virus, worm, and Trojan Horse

13 - True or False?  Losing data to an attacker can cause more damage to a company than losing money can.

true

false

14 - What device passively monitors network traffic for anomalies that can indicate an attack?

switch

IDS

bridge

web proxy

15 - What is cyberwarfare?

It is an attack only on military targets.

It is an attack designed to disrupt, corrupt, or exploit national interests.            

It is an attack on a major corporation.

It is an attack that only involves robots and bots.

16 - True or False?  In wartime, cyberattacks are considered a criminal act, not an act of war.

true

false

17 - What is the best method of information gathering and analysis when tracking a global security threat?

using historical data

using real-time data

using tracking reports

using a honeynet or honeypot

18 - What term is used to describe a single threat that represents multiple types of attack?

vector attack

blended threat

virus attack       

diversified threat

19 - True or False? Security conscious organizations are safe from cyberattacks.

true      

false

20

The Correct Answer: Architecture

21 - Who is responsible for enabling and maintaining a secure environment within a large organization?

only the IT department

all of the customers and clients of the organization

Only the Chief Security Officer

employees at all levels within the organization

only the Chief Operations Officer

22 - What are two reasons that medical devices are easily compromised and hacked? (Choose two.)

Many medical devices have plastic covers that make them more susceptible to wireless hacking.

Medical devices do not require passwords so that they are easier for the patients to operate.

Up to now, security has not been the main concern of the medical industry.

Data retrieved from the medical devices is stored in the cloud.

Many medical devices rely on wireless technology and they are not all capable of supporting strong encryption.

Most medical devices use low power CPU that cannot handle data encryption.

23 - What is a concern when a company has a cloud-based infrastructure as part of its IT infrastructure?

Email becomes more prone to attack.

Software as a service (SaaS) is not easy to implement.

The company shares the security footprint with other companies.

More downtime is possible as a result of the borderless infrastructure.

24 - A company uses a cloud-based payroll system. Which cloud computing technology is this company using?

browser as a service (BaaS)

infrastructure as a service (IaaS)

software as a service (SaaS)

wireless as a service (WaaS)

               

25 - What was used as a cyberwarfare weapon to attack a uranium enrichment facility in Iran?

DDoS

PSYOPS               

Stuxnet              

SQL injection