Title: EXAM ONE
Course: CET 2660 Network Security Fundamentals > Section: Module Two - Attacks, Assessments, and Mitigation

Q: A security weakness is known as a(n) ____.
- threat
- vulnerability
- risk
- opportunity
A: vulnerability

Q: A ____ is a computer program or a part of a program that lies dormant until it is triggered by a specific logical event.
- Trojan
- logic bomb
- macro virus
- metamorphic virus
A: logic bomb

Q: A ____ is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic, yet they are actually imitations of real data files.
- port scanner
- write blocker
- honeypot
- honeycomb
A: honeypot

Q: A ____ is a program advertised as performing one activity but actually does something else.
- script
- virus
- Trojan
- worm
A: Trojan

Q: A ____ is a series of instructions that can be grouped together as a single command and are often used to automate a complex set of tasks or a repeated series of tasks.
- rootkit
- macro
- program
- process
A: macro

Q: A ____ is a set of software tools used by an attacker to hide the actions or presence of other types of malicious software, such as Trojans, viruses, or worms.
- rootkit
- backdoor
- wrapper
- shield
A: rootkit

Q: A ____ outlines the major security considerations for a system and becomes the starting point for solid security.
- profile
- threat
- control
- baseline
A: baseline

Q: A ____ virus infects the Master Boot Record of a hard disk drive.
- file infector
- companion
- resident
- boot
A: boot

Q: A client-side attack that results in a user’s computer becoming compromised just by viewing a Web page and not even clicking any content is known as a ____.
- buffer overflow
- drive-by-download
- denial of service
- stack underflow
A: drive-by-download

Q: A computer ____ is malicious computer code that reproduces itself on the same computer.
- virus
- worm
- adware
- spyware
A: virus

Q: In information security, an example of a threat agent can be ____.
- a force of nature such as a tornado that could destroy computer equipment
- a virus that attacks a computer network
- an unsecured computer network
- both a and b
A: both a and b

Q: A(n) ____ examines the current security in a passive method.
- application scan
- system scan
- threat scan
- vulnerability scan
A: vulnerability scan

Q: A(n) ____ indicates that no process is listening at this port.
- open port
- open address
- closed address
- closed port
A: closed port

Q: A(n) ____ is hardware or software that captures packets to decode and analyze its contents.
- application analyzer
- protocol analyzer
- threat profiler
- system analyzer
A: protocol analyzer

Q: Business ____ theft involves stealing proprietary business information such as research for a new drug or a list of customers that competitors are eager to acquire.
- identity
- data
- plan
- record
A: data

Q: HTML is a markup language that uses specific ____ embedded in brackets.
- blocks
- marks
- taps
- tags
A: tags

Q: In a(n) ____ infection, a virus injects itself into the program’s executable code instead of at the end of the file.
- stealth
- appender
- Swiss cheese
- split
A: Swiss cheese

Q: In information security, a loss can be ____.
- theft of information
- a delay in transmitting information that results in a financial penalty
- the loss of good will or a reputation
- all of the above
A: all of the above

Q: The two types of malware that have the primary objective of spreading are ____.
- viruses and worms
- rootkits and worms
- Trojans and worms
- rootkits and Trojans
A: viruses and worms

Q: Targeted attacks against financial networks, unauthorized access to information, and the theft of personal information is sometimes known as ____.
- spam
- phishing
- cybercrime
- cyberterrorism
A: cybercrime

Q: The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.
- DNS spooking
- DNS poisoning
- DNS bonding
- DNS blacklisting
A: DNS poisoning

Q: The ____ Act requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.
- Gramm-Leach-Bliley
- Sarbanes-Oxley
- California Database Security Breach
- USA Patriot
A: Gramm-Leach-Bliley

Q: The ____ for software is the code that can be executed by unauthorized users.
- vulnerability surface
- risk profile
- input surface
- attack surface
A: attack surface

Q: The default root directory of the Microsoft Internet Information Services (IIS) Web server is ____.
- /var/www
- C:\Inetpub\ wwwroot
- /var/html
- /etc/var/www
A: C:\Inetpub\ wwwroot

Q: The most popular attack toolkit, which has almost half of the attacker toolkit market is ____.
- SpyEye
- NeoSploit
- ZeuS
- MPack
A: MPack

Q: The position of ____ is generally an entry-level position for a person who has the necessary technical skills.
- security technician
- security administrator
- CISO
- security manager
A: security technician

Q: The single most expensive malicious attack was the 2000 ____, which cost an estimated $8.7 billion.
- Nimda
- Slammer
- Love Bug
- Code Red
A: Love Bug

Q: The term ____ is frequently used to describe the tasks of securing information that is in a digital format.
- network security
- information security
- physical security
- logical security
A: information security

Q: Web application attacks are considered ____ attacks.
- client-side
- hybrid
- server-side
- relationship
A: server-side

Q: Users who access a Web server are usually restricted to the ____ directory.
- top
- base
- root
- tap
A: root

Q: Viruses and worms are said to be self-____.
- duplicating
- updating
- copying
- replicating
A: replicating

Q: When TCP/IP was developed, the host table concept was expanded to a hierarchical name system for matching computer names and numbers known as the ____.
- HTTP
- NSDB
- URNS
- DNS
A: DNS

Q: What is another name for unsolicited e-mail messages?
- spam
- spawn
- trash
- scam
A: spam

Q: When performing a vulnerability assessment, many organizations use ____ software to search a system for any port vulnerabilities.
- threat scanner
- vulnerability profiler
- port scanner
- application profiler
A: port scanner

Q: ____ are a loose-knit network of attackers, identity thieves, and financial fraudsters.
- Cybercriminals
- Cyberterrorists
- Computer spies
- Hackers
A: Cybercriminals

Q: ____ ensures that information is correct and that no unauthorized person or malicious software has altered that data.
- Availability
- Confidentiality
- Integrity
- Identity
A: Integrity

Q: ____ attacks are responsible for half of all malware delivered by Web advertising.
- “Canadian Pharmacy”
- Fake antivirus
- Melissa
- Slammer
A: Fake antivirus

Q: ____ ensures that only authorized parties can view information.
- Security
- Availability
- Integrity
- Confidentiality
A: Confidentiality

Q: ____ ensures that the individual is who they claim to be (the authentic or genuine person) and not an imposter.
- Encryption
- Authentication
- Authorization
- Accounting
A: Authentication

Q: ____ involves stealing another person’s personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain.
- Cyberterrorism
- Identity theft
- Phishing
- Scam
A: Identity theft

Q: ____ is a comparison of the present state of a system compared to its baseline.
- Baseline reporting
- Compliance reporting
- Baseline assessment
- Compliance review
A: Baseline reporting

Q: ____ is an attack in which an attacker attempts to impersonate the user by using his session token.
- Session replay
- Session spoofing
- Session hijacking
- Session blocking
A: Session hijacking

Q: ____ is a language used to view and manipulate data that is stored in a relational database.
- C
- DQL
- SQL
- ISL
A: SQL

Q: ____ is a means by which an organization can transfer the risk to a third party who can demonstrate a higher capability at managing or reducing risks.
- Insourcing
- Outsourcing
- Outcasting
- Inhousing
A: Outsourcing

Q: ____ is a software program that delivers advertising content in a manner that is unexpected and unwanted by the user.
- Adware
- Keylogger
- Spam
- Trojan
A: Adware

Q: ____ substitutes DNS addresses so that the computer is automatically redirected to another device.
- DNS poisoning
- Phishing
- DNS marking
- DNS overloading
A: DNS poisoning

Q: ____ is designed to display data, with the primary focus on how the data looks.
- XML
- HTML
- SGML
- ISL
A: HTML

Q: ____ is for the transport and storage of data, with the focus on what the data is.
- XML
- HTML
- SGML
- SML
A: XML

Q: ____ is when an attacker tricks users into giving out information or performing a compromising action.
- Phreaking
- Hacking
- Social engineering
- Reverse engineering
A: Social engineering

Q: ____ uses “speckling” and different colors so that no two spam e-mails appear to be the same.
- GIF layering
- Geometric variance
- Word splitting
- Layer variance
A: Geometric variance