Cybersecurity Chapter 5

A recent email sent throughout the company stated that there would be a change in security policy. The security officer who was presume sent the message stated the message was not sent from the security office and the company may be a victim of a spoofed email. What been added to the message to ensure the message actually came from the person?

• digital signature

• hashing

• non-repudiation

• asymmetric key

A user is connecting to an e-commerce server to buy some widgets for a company. The user connects to the site and notices there is no browser security status bar. The site does prompt for a username and password and the user is able to log in. What is the danger in proceeding with this transaction?

• The user is using the wrong browser to perform the transaction.

• Ad blocker software is preventing the security bar from working properly, and thus there is no danger with the transaction.

• The certificate from the site has expired, but is still secure.

• The site is not using a digital certificate to secure the transaction, with the result that everything is in the clear.

What is the purpose of CSPRNG?

• to generate salt

• to prevent a computer from being a zombie

• to secure a web site

• to process hash lookups

A user has created a new program and wants to distribute it to everyone in the company. The user wants to ensure that when the program is downloaded, that the program is not changed while in transit.

What can the user do to ensure that the program is not changed.

• Encrypt the program and require a password after it is downloaded.

• Turn off antivirus on all the computers.

• Distribute the program on a thumb drive.

• Create a hash of the program file that can be used to verify the integrity of the file after it is downloaded.

What is the standard for a public key infrastructure to manage digital certificates?

• NIST-SP800

• PKI

• x.503

• x.509

What are three validation criteria used for a validation rule? (Choose three)

• size

• key

• range

• encryption

• format

A user downloads an updated driver for a video card from a website.

A warning message pops up saying the driver is not approved.

What does the piece of software lack?

• code recognition

• source code

• valid ID

• digital signature

What is a strength of using a hashing function?

• It is not commonly used in security.

• It is a one-way function and not reversible.

• It has a variable length output.

• It can take only a fixed length message.

Which method tries all possible passwords until a match is found?

• birthday

• cryptographic

• dictionary

• brute force

A user is instructed by a boss to find a better method to secure passwords in transit. The user has researched several means to do so a on using HMAC. What are the key elements needed to implement HMAC?

• message digest and asymmetric key

• IPsec and checksum

• secret key and message digest

• symmetric key and asymmetric key