Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A person who uses his knowledge of operating systems and utilities to intentionally damage or destroy data or systems.






2. A ____ encrypts all data that is transmitted between the remote device and the network.






3. Software that searches a server - switch - router - or other device for open ports - which can be vulnerable to attack.






4. ____ can be prewired for electrical power as well as wired network connections.






5. The identification of a user based on a physical characteristic - such as a fingerprint - iris - face - voice - or handwriting






6. Provides a greater degree of security by implementing port-based authentication.






7. A ____ tester has an in-depth knowledge of the network and systems being tested - including network diagrams - IP addresses - and even the source code of custom applications.






8. Sending or posting harmful or cruel text or images using the internet or other digital communication devices.






9. ____ IP addresses are IP addresses that are not assigned to any specific user or organization.






10. How secure the data in your backups is-can use physical security or encryption






11. Hardware and/or software that guards a private network by analyzing the information leaving and entering the network






12. A firewall capable only of examining packets individually. Stateless firewalls perform more quickly than stateful firewalls - but are not as sophisticated.






13. Malicious or accidental threats by employees. (ex. door to secure building left propped open.)






14. The process of giving someone permission to do or have something






15. A program that is automatically downloaded to your computer without your consent or even your knowledge.






16. Holds the promise of reducing the number of usernames and passwords that users must memorize.






17. The perimeter of a protected - internal network where users - both authorized and unauthorized - from external networks can attempt to access it. Firewalls and IDS/IPS systems are typically placed in the DMZ.






18. A user accessing a computer system must present credentials or ____ when logging on to the system.






19. Users who access a Web server are usually restricted to the ____ directory.






20. Windows Live ID was originally designed as a ____ system that would be used by a wide variety of Web servers.






21. ____ attacks are responsible for half of all malware delivered by Web advertising.






22. An attacker slips through a secure area following a legitimate employee.






23. A form of filtering that blocks only sites specified as harmful.






24. A technique that allows private IP addresses to be used on the public Internet.






25. Software attack using special monitoring software to gain access to private communications on the network wire or across a wireless network. (aka sniffing attack)






26. The act of driving while running a laptop configured to detect and capture wireless data transmissions.






27. A ____ attack is similar to a passive man-in-the-middle attack.






28. The time it takes for a key to be pressed and then released.






29. Forwards packets across computer networks.






30. The unique data block that results when an original piece of data (such as text) is encrypted (for example - by using a key.)






31. Can use fingerprints or other unique characteristics of a person's face - hands - or eyes (irises and retinas) to authenticate a user.






32. Can be accidental or intentional - internal or external. (ex. back-hoe operator performing legitimate construction cuts cables leading into a facility.)






33. A ____ is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic - yet they are actually imitations of real data files.






34. A ____ is designed to separate a nonsecured area from a secured area.






35. Hides inside other software - usually as an attachment or a downloadable file






36. The geographical storage of your backups-safest place is a different place from where you keep your actual data






37. An operating system that has been reengineered so that it is designed to be secure from the ground up is known as a ____.






38. A security attack in which an internet user sends commands to another internet user's machine that cause the screen to fill with garbage characters. A flashing attack causes the user to terminate her session.






39. Due to the limitations of online guessing - most password attacks today use ____.






40. How often you perform your backups (cost-benefit analysis of backing up)






41. Sifting through a company's garbage to find information to help break into their computers






42. Floods a Web site with so many requests for service that it slows down or crashes the site






43. Viruses and worms are said to be self-____.






44. Sending high volumes of ICMP (usually ping) packets to a target.






45. Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password - today attackers usually prefer ____.






46. These attacks may allow an attacker to construct LDAP statements based on user input statements.






47. An authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.






48. A technique to gain personal information for the purpose of identity theft - usually by means of fraudulent e-mail






49. Attack computer systems by transmitting a virus hoax - with a real virus attached. By masking the attack in a seemingly legitimate message - unsuspecting users more readily distribute the message and send the attack on to their co-workers and friends






50. An attack that intercepts legitimate communication between two victims and captures - analyzes and possibly alters the data packets before sending a fake reply.