Cybersecurity Quiz

Which controls are looked at as technical controls?

• IDs

• Training manual

• Firewall

• AUP

Answer explanation

Controls that enforce security are looked at as technical controls. Thus, firewalls and IDs are technical controls. Policy documents are more administrative controls.

Which type of injection attack uses keywords such as select and update to manipulate data through a web form?

• LDAP injection

• SQL injection

• XML injection

• HTML injection

Answer explanation

A SQL injection is an injection attack that uses keywords such as select and update to manipulate data through a web form.

End users call the help desk complaining about a webpage not loading the most current data for the page unless the user refreshes the page. What should the help desk agent have the user do first?

• Restart the browser

• Clear out the cookies

• Clear out the history

• Clear out the cache

Answer explanation

if a web page is not loading the latest data on the first load one should clear the browser cache. Clearing out cookies or history will probably not solve the problem.

When one suspects a device has been affected by malware what is the first step that should be taken to remediate the device?

• Run a system scan on the device.

• Disconnect the device from the network.

• Update the signature files on the anti-malware app to use for remediation.

• Update the anti-malware app to use for remediation.

Answer explanation

When one suspects a device has been affected by malware the first step taken to remediate the device should be to disconnect it from the current network so that the malware spreads as little as possible.

Spoofing redirects Internet traffic from one website to an identical looking site to trick you into entering your username and password into their database. Which term best fits this description?

• no change is needed

• Spamming

• Pharming

• Phishing

Answer explanation

Pharming redirects Internet traffic from one website to an identical looking site to trick you into entering your username and password into their database.

What must take place for someone trying to enter a physical area of a building before access control takes place?

• Authentication

• Authorization

• Accounting

• Auditing

Answer explanation

Given that access control is the determination of what areas that person has access to a person must be authenticated have their identity proven before access control can take place. Auditing is important but does not always proceed access control.

Mac filtering is best suited for large wireless networks.

• True

• False

Answer explanation

Mac filtering is best suited for small wireless networks as Mac addresses need to be added to a Mac filtering table manually.

WEP is the strongest form of encryption for a wireless network.

• True

• False

Answer explanation

Wired equivalent privacy WEP has been cracked and thus should not be used.

WPA WPA2 can require an authentication server.

• True

• False

Answer explanation

Wi-Fi protected access WPA WPA2 requires an authentication server if using 802.1 X mode.

One of the layers of defense in the anti-phishing and malware protection strategies developed by Microsoft is?

• Smartscreen filter

• Malware detector

• Home defense

• Sure block

Answer explanation

Smartscreen filter is one of the multiple layers of deficits and the anti-phishing and malware protection strategies developed by Microsoft for Windows 8 and higher and Windows Server 2012 and higher. The smart screen filter provides an early warning system to notify users of suspicious websites that could be engaging in phishing attacks or distributing malware through a socially engineered attack.