Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Altering the contents of packets as they travel over the Internet or altering data on computer disks after penetrating a network. For example - an attacker might place a tap on a network line to intercept packets as they leave the computer. The attac






2. A ____ means that the application or service assigned to that port is listening for any instructions.






3. Email attack that targets only specific users and has familiar information in it - making it more tempting to click the links in the message.






4. An attack that targets a computer's physical components and peripherals. (ie. hard disk - motherboard - cabling - etc.)






5. A technique that allows private IP addresses to be used on the public Internet.






6. A ____ encrypts all data that is transmitted between the remote device and the network.






7. Could become a key element in authentication in the future.






8. ____ involves stealing another person's personal information - such as a Social Security number - and then using the information to impersonate the victim - generally for financial gain.






9. Tools used to configure ________: WEP - WPA - MAC address filtering - SSID broadcasting - wireless antennae






10. A device that is around the same size as a credit card - containing embedded technologies that can store information and small amounts of software to perform some limited processing






11. ____ uses "speckling" and different colors so that no two spam e-mails appear to be the same.






12. A variety of threats such as viruses - worms - and Trojan horses






13. An operating system that has been reengineered so that it is designed to be secure from the ground up is known as a ____.






14. A person who uses his knowledge of operating systems and utilities to intentionally damage or destroy data or systems.






15. How secure the data in your backups is-can use physical security or encryption






16. The X.500 standard defines a protocol for a client application to access an X.500 directory called ____.






17. The protection of information from accidental or intentional misuse by persons inside or outside an organization






18. A database - organized as a hierarchy or tree - of the name of each site on the Internet and its corresponding IP number.






19. Attacker sets up a rogue DNS server that responds to legitimate requests with IP addresses for malicious or non-existent websites.






20. Pretending to be another person.






21. These access points are serious threats to network security because they allow attackers to intercept the RF signal and bypass network security to attack the network or capture sensitive data.






22. Sending high volumes of UDP requests to a target.






23. A commonly used technique by pornography sites where a user gets "locked" in a web site.






24. When a device receives a beacon frame from an AP - the device then sends a frame known as a ____ frame to the AP.






25. Ensures that messages are not corrupt or tampered with






26. Sending extremely critcal - derogatory - and oftern vulgar email messages or newsgroup postings to other user on the internet or online services






27. Web application attacks are considered ____ attacks.






28. Allows a single access point to service different types of users.






29. The perimeter of a protected - internal network where users - both authorized and unauthorized - from external networks can attempt to access it. Firewalls and IDS/IPS systems are typically placed in the DMZ.






30. Forging of the return address on an e-mail so that the e-mail message appears to come from someone other than the actual sender. This is not a virus but rather a way by which virus authors conceal their identities as they send out viruses.






31. Using a single authentication credential that is shared across multiple networks.






32. Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password - today attackers usually prefer ____.






33. Peering over the shoulder of someone to see the contents on that person's computer or cell phone screen.






34. Scrambles information into an alternative form that requires a key or password to decrypt the information






35. The weakness of passwords centers on ____.






36. Below 70 degrees or above 75 degrees






37. ____ is an attack in which an attacker attempts to impersonate the user by using his session token.






38. An attack that sends unsolicited messages to Bluetooth-enabled devices.






39. A pay-per-use computing model in which customers pay only for the computing resources they need.






40. Using video cameras to transmit a signal to a specific and limited set of receivers is called ____.






41. Hardware and/or software that guards a private network by analyzing the information leaving and entering the network






42. A list of statements used by a router to permit or deny the forwarding of traffic on a network based on one or more criteria.






43. An attack that accesses unauthorized information from a wireless device through a Bluetooth connection - often between cell phones and laptop computers.






44. Hacker who exposes vulnerabilities for financial gain or malicious purpose.






45. A password-protected and encrypted file that holds an individual's identification information - including a public key and a private key. The individual's public key is used to verify the sender's digital signature - and the private key allows the in






46. In the context of SSL encryption - a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting and what type of encryption the client's browser can decipher (for e






47. ____ is a software program that delivers advertising content in a manner that is unexpected and unwanted by the user.






48. If a password is communicated across a network to log on to a remote system - it is vulnerable to ______.






49. Use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.






50. An attack that accesses unauthorized information from a wireless device through a Bluetooth connection - often between cell phones and laptop computers.