1002 A + Ch 04 & 05 Security Principles & Security Technologies

Ann, an end user, receives a call from someone claiming to be from the help desk and asking for her username and password to prevent her email box from being deleted immediately. Which of the following BEST describes this type of attack?

• Social engineering

• Ransomware

• Man-in-the-middle

• Shoulder surfing

Which of the following is a type of security threat where a collection of infected computers is used together to deliver spam, spread malware, or other attacks?

• Phishing

• Botnet

• Logic bomb

• Man-in-the-middle

Joe, a user, just downloaded a game onto his company phone. When he is not using the device, it unexpectedly dials unrecognized numbers and downloads new content. Joe is the victim of which of the following?

• Trojan horse

• Spyware

• Social engineering

• Worms

A human-based or software-based attack where the goal is to pretend to be someone else for the purpose of identity concealment is ________.

• Social engineering

• Spoofing

• Zero-day

• Man-in-the-middle

A user in the accounting department is not able to access a file on the network accounting folder. What is the likely reason?

• The workstation is victim of a denial-of-service attack

• The username is not authenticating on the network

• The user does not have file level permissions

• The administrator has not applied appropriate security patches

A technician has been tasked with limiting the users who can connect to a network printer located centrally within an office environment. Which of the following tools would be the BEST to utilize to achieve this goal?

• VPN

• ACL

• RDP

• DLP

What is the process of setting practices and procedures that govern how an organization will respond to a data security breach?

• Incident Management

• Disaster Recovery Plan

• Business Impact Analysis

• Group Security Policy Settings

What controls the overall security behavior of a Windows system?

• User training

• Administrators

• Windows Security Policy Settings

• Computer Management Console

Which of the following will help to protect an organization from unauthorized access to their network? (Click all that apply)

• Multi-factor authentication

• Strong passwords

• Physical security

What is a software suite that helps protect data from being stolen while the data is moving across the network?

• Firewall

• Encryption

• Port Filtering

• DLP