Security Fundamentals Chap 1

What do you call the scope that hacker can use to break into a system?

• attack surface
• defence in depth
• principle of least privilege
• risk mitigation

What is a physical or logical device used to capture keystrokes?

• USB flash drive
• Keylogger
• PDA
• Smartphone

What is needed to highly secure a system?

• lots of time
• system update
• more money
• disabled administrator account

What is the best way to protect against social engineering?

• stronger encryption
• stronger authentication
• risk mitigation
• employee awareness

What is the first line of defence when setting up a network?

• physically secure the network
• configure authentication
• configure encryption
• configure an ACL

What is used to provide protection when one line of defence is breached?

• attack surface
• principle of least privilege
• risk mitigation
• defence in depth

What method used by a hacker relies on the trusting nature of the person being attacked?

• attack surface
• social engineering
• risk avoidance
• principle of least privilege

What technology is not used to implement confidentiality?

• auditing
• access controls
• authentication
• encryption

What type of device can be easily lost or stolen or can be used for espionage?

• processors
• RAM chips
• removable devices
• servers

Which concept determines what resources users can access after they log on?

• authentication
• auditing
• access control
• defence in depth