DSF 601 Quizzes

ATTACK - ACTION DERIVED FROM VULNERABILITIES LENTE
Quiz: Foundations of Security
Backups only the data that has changed since the previous backup.
Correct answer: Incremental
humTdumT$@t0nAwa11 is an example of a strong password.
Correct answer: True
A differential backup offers a longer restore time over incremental backups.
Correct answer: False
Hackers use ___ as agents that carry out malicious activity over the Internet.
Correct answer: bots
Any individual who breaks into a computer system with the aim of stealing, destroying or vandalizing information. Select all the correct answers.
Correct answers: attacker, intruder, cracker
____ is the practice of publishing the personal information of an individual such as home address, telephone number or social security number.
Correct answer: Doxing
Use directly identifiable information such as birth dates and phone numbers in your passwords.
Correct answer: False
The grades record of a certain student in a particular school was modified by an attacker so that all his failing marks became passing marks. Which particular security aspect was lost?
Correct answer: Integrity
Is the statement below FACT or OPINION? Only servers should be protected from thieves who can open the case and grab the hard drive. Workstations are not as vulnerable since they don’t contain important databases such as those found in servers.
Correct answer: Opinion
The first layer of security is the user.
Correct answer: False
Any action or event with the potential to compromise or violate security.
Correct answer: Threat
P@ssword789 is a weak password.
Correct answer: True
A hacker is always a bad guy.
Correct answer: False
Fill in the blanks:
An attacker creates ____ to target software vulnerabilities. These may arrive via the following pathways.
  • attachments to ____ messages
  • compromised ____ sites
  • social ____ sites
Alternatively, the attacker may directly target _____ servers.
Correct answers: exploit, email, web, networking, vulnerable
Is the statement below FACT or OPINION?
You may not want employees copying company information to removable media. However, you actually can’t disable or remove USB ports, and other means of connecting external drives.
Correct answer: Opinion
Use a unique password for each separate account.
Correct answer: True
The three types of backup procedures (full, incremental and differential) may be used alternately throughout the operation of the system. For example,, a full backup is done of Friday. Then on Monday the next week, an incremental backup is performed, as well as for every end-of-the-day task for the rest of the week. By Monday morning the next week, a differential backup is done.
Correct answer: True
Match the following cybersecurity measures with their correct application before, during or after an attack.
  • installation of antivirus — precaution
  • configuring a firewall — precaution
  • patching your OS — maintenance
  • updating your applications — maintenance
  • downloading updates of virus definitions — maintenance
  • temporarily disconnecting from the Internet — reaction
  • restoring from backups — reaction
  • activating mirror sites — reaction
  • installing adware scanner — precaution
____ is the action of stealing information from a compromised system.
Correct answer: Hacking DATA THEFT CORRECT ANSWER LENTE
A zero-day attack usually has no solutions or patches.
Correct answer: True
This type of backup will provide you with the best protection, however, it will require more time and will consume more storage assets.
Correct answer: full backup
A ____ backup contains all of the data that has changed since the last full backup.
Correct answer: differential
Cybersecurity deals with the well-being of information and data.
Correct answer: True // FALSE KUNO MO
Is the statement below FACT or OPINION?
Ideally, a set of backups should be kept off site, and you must take care to ensure that they are secured in that offsite location.
Correct answer: Fact
What is the device shown in the image below?
Correct answer: Laptop cable lock (Kensington lock)
Marchl101977 is a strong password.
Correct answer: False
Your personal phone number was leaked by Facebook to a third party marketer. You now begin to receive spamming SMS messages and robocalls. Which aspect of security was lost?
Correct answer: Confidentiality
The defense employed against a security threat is called a ____.
Correct answer: Countermeasure
The existence of weakness of design that when exploited, leads to an unexpected or undesirable event compromising the system.
Correct answer: Vulnerability
 
Quiz: Securing Operating Systems
Windows BitLocker is available in all versions of Windows.
Correct answer: False
What is the usual number of incorrect password attempts allowed before the account is locked out?
Correct answer: 3
Which of the following is the default antivirus installed in Windows 10?
Correct answer: Windows Defender
Password cracking may be as simple as someone looking over your shoulder as you log into our account.
Correct answer: True
An encrypted system may load data a bit slower compared to systems that are not encrypted?
Correct answer: Fact
This approach to password cracking involves the use of pre-defined lists of words that are tried as valid passwords.
Correct answer: dictionary attack
Which of the following are measures for increasing security of your WiFi network?
Correct answers: hiding your SSID, password-protecting the router admin account, password-protecting WiFi access, filtering allowed MAC addresses
You can lock your Windows computer by pressing the Windows key + L.
Correct answer: Fact
Software usually contain vulnerabilities and these are addressed through updates and ______.
Correct answer: patches
Why should Guest accounts be disabled in an operating system?
Correct answer: Guest accounts usually are not password-protected
Which of the following utilities is used to return one's Windows computer to an earlier state in case of a system failure or other major problem?
Correct answer: System Restore
Simply visiting websites will not infect your system with malware.
Correct answer: False
Worms, adware, spyware and viruses are all examples of _____.
Correct answer: malware
Which of the following is the weakest password
Correct answer: kimmy2011
Linux is a better operating system since it has no vulnerabilities.
Correct answer: False
This security threat is a means by which security mechanisms may be bypassed in order to access the system itself.
Correct answer: backdoor
Disguising the Administrator account by renaming it to something else does not contribute to the security of a Windows system.
Correct answer: Opinion
Which of the following are examples of Microsoft encryption tools?
Correct answers: Windows EFS, Windows BitLocker
When does Patch Thursday take place?
Correct answer: Never
Start Menu items should NOT display recently-opened items.
Correct answer: True
 
Quiz: Protecting Systems from Computer Virus
This was the fastest-spreading email worm ever.
Correct answer: Mydoom ???
It is good practice for commercial entities and businesses to adopt free-version antivirus software.
Correct answer: False
Which of the following is good practice in using antivirus software to protect computer systems?
Correct answer: install a single antivirus app on your computer to make optimal use of system resources
Computer malware only infect Windows-s based computers
Correct answer: False
An antivirus program protects systems not just from viruses, but other forms of malware as well.
Correct answer: True
Which type of malware was WannaCry?
Correct answer: ransomware
The antivirus' application does not need to be updated.
Correct answer: False
Free-version antivirus software can still help protect computer systems despite some features being disabled.
Correct answer: True
The use of _____ techniques in antivirus operation to detect malware depends on the software identifying suspicious behavior that is characterized as “virus-like”.
Correct answer: heuristics
The use of _____ files to detect malware is one of the more widely-used approaches to antivirus operation.
Correct answer: signature
Emails being received should be scanned for malware after downloading the attachments.
Correct answer: False
To achieve maximum benefit from the antivirus program, it should be updated regularly.
Correct answer: True
Which of the following systems is most secure from computer viruses?
Correct answer: A computer with USB ports disabled and not connected to any network // MEN WITH GUNS RATATAT
Why should and antivirus' patches be downloaded from its official website?
Correct answer: to be sure that the patch files do not contain any Trojan payloads
 
Quiz: Data Encryption (20/20)
Which of the following is true?
Correct answer: Both DES and AES are symmetric encryption standards.
_____ is unreadable text that is the output of an encryption algorithm.
Correct answer: cipher text
A _____ is information used to encrypt or decrypt data.
Correct answer: encryption key
One objective of data encryption is to protect the integrity of data. In which of the following scenarios could this objective have applied had an encryption system been in place?
Correct answer: a student grade in his/her permanent record was changed to a higher one
The effective management of encryption keys is just as important as the effective use of data encryption techniques.
Correct answers: True
It is relatively safe to send passwords in plaintext through email.
Correct answers: False
Digital signatures implement asymmetric encryption.
Correct answers: True
Which encryption process is the slower of the two?
Correct answers: asymmetric
The public key is supposed to be shared in symmetric encryption.
Correct answers: False
The encryption technique called a _____ does not involve the use of keys.
Correct answers: hash function
To whom would a user apply for a digital certificate?
Correct answers: registration authority
One objective of data encryption is to enable non-repudiation. In which of the following scenarios could this objective have applied had an encryption system been in place?
Correct answer: a student denied that he/she sent a threatening email to a teacher
When should encryption be used to protect sensitive information?
Correct answers: during transmission, during storage
Which encryption technique is utilized by Windows BitLocker?
Correct answer: symmetric
The use of symmetric encryption assures the user of which of the following?
Correct answers: confidentiality, integrity
Which of the following actually issues the user a digital certificate?
Correct answers: certification authority
In asymmetric encryption, a _____ key is used to encrypt data, while a ______ key is used to decrypt it.
Correct answers: public, private
 
QUIZ: Data Backup & Recovery (17/20)
Which of the following statements represents good backup practice when using backup utilities such as Windows Backup and Restore?
Correct answer: Backup system images to external storage
Physical measurements of the human body including retinal, fingerprint and vein pattern scanning is known as ______ security.
Correct answer: biometrics
This type of backup copies files that were created or changed since the last full backup.
Correct answer: incremental backup
A user accidentally deletes an important file from his computer. The method of deletion he/she used was to right-click the file and then choosing "Delete" from the menu. The file has no backup in storage. Which of the following statements is TRUE in conjunction with the scenario presented? Choose the best answer.
Correct answer: it is still possible to recover the file
Which of the following is the correct procedure for storage of backup data?
Correct answer: store backup data offsite
This type of backup copies all files including system files, application files, and data files.
Correct answer: normal backup
How often should filed be modified during the course of daily normal work operations be backed up?
Correct answer: daily
A Class C fire is caused by combustion of which particular material(s)?
Correct answer: electrical equipment
What is the ideal humidity for a data center or server room?
Correct answer: 20 - 80%
Which type of backup procedure is the most difficult to recover data from?
Correct answer: incremental backup
Data backup and recovery includes the physical security of workstations, servers, mobile devices and other storage media.
Correct answer: True
A single backup copy of important data is enough to protect it.
Correct answer: False
HVAC stands for Heating, Ventilation and Air Conditioning. Which of these three components deals with excessive humidity?
Correct answer: ventilation
Which type of backup procedure is the quickest to recover data from?
Correct answer: differential backup
What is the usual cause of computer equipment giving users a mild electric shock?
Correct answer: ungrounded electrical equipment
A Class A fire is cause by combustion of which particular material(s)?
Correct answer: paper, wood, plastics
Backup data should be encrypted.
Correct answer: True
The practice of executing plans and procedures to backup important data to secondary storage is enough to protect the data.
Correct answer: False
Which of the following is the optimal temperature in a data center or server room?
Correct answer: 18 - 27 degrees Celsius
Fires in data centers, server rooms and computer laboratories are usually caused by ______.
Correct answer: short circuit
 
QUIZ: Basic Browser Security (15/15)
Web browsers usually have privacy and security settings that the user has to correctly configure to be effective.
Correct answer: True
Enabling or disabling if a browser remembers a user's browsing history is usually found in which setting to be configured?
Correct answer: privacy settings
Users on a local Intranet do not have to worry about online security/
Correct answer: False
Maintaining security on the Internet is important due to which particular reason?
Correct answer: All of the above
A web cookie is a _____ file, and it can't execute instructions of carry a virus/
Correct answer: text
A web cookie is sent by the web server to the client browser.
Correct answer: True
Which of the following is NOT something that the user should do when installing add-ins, extensions or plug-ins for a web browser?
Correct answer: automatically accept all browser suggestions to install add-ins, extensions or plug-ins
Browser users are unable to control whether they accept or reject cookies from a server.
Correct answer: False
Users of social media platforms such as Facebook do not have to configure its privacy and security settings.
Correct answer: False
Which of the following is the correct reason why a user (User A) should never allow a browser to remember passwords?
Correct answer: If User B happens to use the same browser and he knows what User A's account username is, he can access the account.
A web cookie is sent by the client browser to the web server.
Correct answer: True
It is not possible to check if your browser's privacy setting are hard enough to prevent your data from leaking into the Internet.
Correct answer: False
Most modern browsers have settings that the user can configure to guard against dangerous downloads from compromised servers.
Correct answer: True
A browser is able to delete browsing history via which manner?
Correct answer: All of the above
Which of these browsers come a built-in VPN?
Correct answer: Opera
 
QUIZ: Protecting Children Online (13/15)
What are the effects of online pornography and child abuse on children?
Correct answer: physical injuries due to molestation, psychological problems such as depression and anger, mental weakness / low self-esteem
Is is within the rights of a parent to monitor the Internet activity, including IM usage history, of children who are minors still under their supervision.
Correct answer: True
Which particular methods can a parent or guardian employ in order to protect a child from online threats?
Correct answer: block websites inappropriate for children, block unknown email addresses that attempt to contact the child, control the amount of time the child spends on the Internet,filter videos by using kid-friendly versions of the video apps installed on computers or gadgets
Child pornography is usually defined as a depiction of a minor engaged in sexual activity. Who are defines as minors under Philippine law?
Correct answer: those under 18 years of age
Is is possible that a typographical error on the part of the child user as the URL for the website being typed in the browser address bar would lead the child to a porn or other adult-related website.
Correct answer: True
Filtering software should be used to guard against a child accidentally accessing websites that are meant for adults.
Correct answer: True
Search engines use terms known as _____ tags or variables to index a website. When a user searches for websites, the search engines display the results using these tags.
Correct answer: meta
This online risk to a child user involves search results that take the child to websites which are inappropriate for the child, instead of the sites or material that the child is looking for.
Correct answer: misdirected searches
_____ is defined as the harassment, threats to or embarrassment of a child or teen usually through Internet-based communication systems.
Correct answer: cyberbullying
Grooming a child for online abuse is accomplished through which activity?
Correct answer: All of the above
 
QUIZ: Securing Network Connections (14/15)
A network "appliance" is usually ____
Correct answer: hardware
MAC address filtering is a fool-proof way to make sure only authorized users can access the network.
Correct answer: False
Which of the following devices may NOT become an access point?
Correct answer: terminal
An attacker can use the network as a free access point to the Internet. This is known as ____
Correct answer: freeloading
A network firewall may come as a hardware solution, or as a software solution
Correct answer: True
What should be done to safeguard data being transmitted between sender and receiver?
Correct answer: encryption
Which of the following can an attacker do on a breached wireless network?
Correct answer: all of the above
Which of the following can an attacker do on a breached wireless network?
Correct answer: all of the above
Which of the following is the typical setup for a corporate or home network?
Correct answer: ISP -> modem -> router -> switch -> workstation
What does a firewall do?
Correct answer: blocks unauthorized traffic coming from the WAN from pushing through into the LAN
What is the primary purpose of having a home network?
Correct answer: to be able to share resources
An attacker can impersonate a valid user on the network. This is known as ____
Correct answer: spoofing
Which protocol automatically assigns IP addresses to devices on a network?
Correct answer: DHCP
Which of the following is a recommended network security best practices?
Correct answer: Share only specific files whenever possible
The action taken in order to intercept and record packets of data coming and going to and from a network.
Correct answer: sniffing
A network administration tool should be able to alert the network administrator to active rogue access points
Correct answer: True
 
QUIZ: Security on Social Networking Sites (19/20)
A child is groomed online by a pedophile they meet on Facebook. The child is sent gifts in order for trust to be established. What type of security risks is this?
Correct answer: contact with predators
Parents and guardians should monitor their children's social media activity, but only as long as these children are minors.
Correct answer: True
Facebook allows the user to control which third-party apps can access the user's data.
Correct answer: True
Flaws in the design of the social networking platform may also provide attackers a vector for launching breaching attempts against users.
Correct answer: True
A minor may be permitted to create a social media account without adult supervision.
Correct answer: False
Which of the following are personally-identifiable information which a user provides a social networking site when creating a profile?
Correct answer: all of the above
Information technology practitioners should read the privacy policy and ____ of a social networking platform carefully.
Correct answer: terms of service
Facebook does not allow users to block other users.
Correct answer: False
Identity theft does not occur in social networking sites.
Correct answer: False
What is the difference between cyberbullying and cyber-harrasment?
Correct answer: Cyberbullying occurs if the victim is a minor regardless of the perpetrator, while cyber-harrasment occurs between adults
Should you allow external search engines to index your Facebook search listing?
Correct answer: No
A common way for malware to propagate via social networks sharing video content is a social engineering attempt to lure the user into downloading and installing a ____.
Correct answer: video codec
Facial recognition is a continuing feature of Facebook at present.
Correct answer: False
What is the minimum age of a person permitted to create a Facebook account according to the platform's terms of service?
Correct answer: 13 years
A child sees photos of explicit sexual activity between two adults on social media. This is an example of which type of security risk?
Correct answer: objectionable content
Facebook allows users to control whether strangers can search for them in the platform.
Correct answer: True
Which group of users who are not your friends should be allowed to send you a message on Facebook?
Correct answer: (Acquaintances) Friends of friends ??
A "limited friend" is better known as a ____
Correct answer: acquaintance
It is a breach of a minor's privacy for parent or guardian to have access to his/her social media account passwords.
Correct answer: False
A child sees photos of explicit sexual activity between two adults on social media. This is an example of which type of security risk?
Correct answer: objectionable content