Security + Flashcard Review

Front

You need to ensure that your company’s anti-virus application protects against viruses that include protective code that prevents outside examination of critical elements. Which type of virus is this?

Back

Armored virus

Front

As the security administrator for your company, you are primarily concerned with protecting corporate assets. Currently you are working to ensure confidentiality for corporate data. Which activity is NOT a way to obtain confidential information? a. Dumpster diving, b. Treason, c. Social engineering, d. Shoulder surfing

Back

Treason

Front

Which threat actor would most likely have the most resources available? a. Hacktivist, b. Script kiddies, c. Organized crime, Nation States

Back

Nation States

Front

What tool is used to preform a vulnerability test? Options: Black box test, White box test, Penetration test, Scanning tool

Back

Scanning tool

Front

What is the goal when you passively test security controls?

Back

Probing for weakness

Front

What is often the weakest link in the security chain and represents the largest vulnerability?

Back

Untrained users

Front

Which type of vulnerability is demonstrated by an SQL injection?

Back

Improper input handling

Front

Your manager suspects that your network is under attack. You have been asked to provide information regarding traffic flow and statistical information for your network. Which tool should you use?

Back

Protocol analyzer

Front

Your company recently discover that an attacker carried out an exhaustive password attack. Which type of password attack is often referred to as?

Back

Brute force attack

Front

What must be secured in the PKI (Public Key Infrastructure)?

Back

The private key of the root CA (Certification Authority)