ITF - CIA and AAA

What is the BEST countermeasure against social engineering?

• Access auditing

• Strong passwords

• Acceptable use policy

• User awareness training

Which of the following describes a Man-in-the-Middle attack?

• Malicious code is planted on a system where it waits for a triggering event before activating

• An attacker intercepts communications between two network hosts by impersonating each host

• An IP packet is constructed which is larger than the valid size

• A person over the phone convinces an employee to reveal their logon credentials

A technician walks into the office with a UPS. What sort of threat will this devices prepare a system for?

• Wiretapping

• Denial-of-Service

• Power outage

• Data redundancy

Which of the following are the BEST steps you can take to avoid having your mobile device exploited by a hacker or infected by a virus?

CHOOSE TWO

• Keep the operating system up to date

• Keep an up to date remote backup

• Turn off location services

• Lock the screen with some form of authentication

• Keep your device always in your possession

In which of the following situations should you expect total privacy?

• Email messages and attachments

• Social networking

• Instant messaging

• Financial transactions

Which of the following security measures is a form of biometrics?

• BIOS password

• Chassis intrusion detection

• TPM

• Fingerprint scanner

After entering a user ID and password, an online banking user must enter a PIN that was sent as a text message to their mobile phone. Which of the following digital security methods is being used?

• DLP

• Firewall

• Smart card

• Multifactor authentication

A technician assists Joe, an employee in the Sales department, who needs access to the client database by granting Joe administrator privileges. Later, Joe discovers he has access to the salaries in the payroll database.

Which of the following security practices was violated?

• Multifactor authentication

• Strong password policy

• Entry control roster

• Principle of least privilege

If a malicious user gains access to the system, which component of the framework lets administrators know how they gained access and what exactly they did?

• Accounting

• Authorization

• Access control

• Authentication

Your company has surveillance cameras in your office, uses strong authentication protocols, and requires biometric factors for access control. These are all examples of what principle?

• Integrity

• Non-repudiation

• Authentication

• Authorization