Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. An authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.






2. An authentication process that involves three steps.






3. Ensures that messages are not corrupt or tampered with






4. The X.500 standard defines a protocol for a client application to access an X.500 directory called ____.






5. Malicious or accidental threats by employees. (ex. door to secure building left propped open.)






6. A technology that can help to evenly distribute work across a network.






7. The most popular attack toolkit - which has almost half of the attacker toolkit market is ____.






8. An attacker motivated by the ideology to attack computer or infrastructure networks.






9. Fingerprints and patterns






10. Web application attacks are considered ____ attacks.






11. Forging of the return address on an e-mail so that the e-mail message appears to come from someone other than the actual sender. This is not a virus but rather a way by which virus authors conceal their identities as they send out viruses.






12. A system of security tools that is used to recognize and identify data that is critical to the organization and ensure that it is protected.






13. ____ involves horizontally separating words - although it is still readable by the human eye.






14. Sending high volumes of ICMP (usually ping) packets to a target.






15. This attack is where every possible combination of letters - numbers - and characters is used to create encrypted passwords.






16. A ____ means that the application or service assigned to that port is listening for any instructions.






17. Type of software attack where an attacker captures network traffic and stores it for retransmission at a later time to gain unauthorized access to a network.






18. A threat to networked hosts in which the host is flooded with broadcast ping messages. A _____ _____ is a type of denial-of-service attack.






19. An attack that forces a user to unintentionally click a link.






20. To create a rainbow table - each ____ begins with an initial password that is encrypted.






21. An attacker slips through a secure area following a legitimate employee.






22. Using video cameras to transmit a signal to a specific and limited set of receivers is called ____.






23. How many past backups you keep - what you did on your machine etc.






24. A program or device that can monitor data traveling over a network. Sniffers can show - all the data being transmitted over a network - including passwords and sensitive information - tends to be a favorite weapon in the hacker's arsenal






25. The most restrictive access control model is ____.






26. Business ____ theft involves stealing proprietary business information such as research for a new drug or a list of customers that competitors are eager to acquire.






27. An authentication system developed by the Massachusetts Institute of Technology (MIT) and used to verify the identity of networked users.






28. Small electronic devices that change user passwords automatically






29. Could become a key element in authentication in the future.






30. When DNS servers exchange information among themselves it is known as a ____.






31. ____ involves stealing another person's personal information - such as a Social Security number - and then using the information to impersonate the victim - generally for financial gain.






32. Lock - conduit - card key - video equipment - secured guard






33. A ____ is a series of instructions that can be grouped together as a single command and are often used to automate a complex set of tasks or a repeated series of tasks.






34. Fire - extreme weather - flooding - extreme temperatures - extreme humidity.






35. A security attack in which an internet user sends commands to another internet user's machine that cause the screen to fill with garbage characters. A flashing attack causes the user to terminate her session.






36. Using a single authentication credential that is shared across multiple networks.






37. A set of permissions that are attached to an object.






38. An attacker redirects an IP address to the MAC address of a computer that is not the intended recipient.






39. A hacker who exposes security flaws in applications and operating systems so manufacturers can fix them before they become widespread problems.






40. A ____ is a set of software tools used by an attacker to hide the actions or presence of other types of malicious software - such as Trojans - viruses - or worms.






41. Peering over the shoulder of someone to see the contents on that person's computer or cell phone screen.






42. Software that comes hidden in free downloadable software and tracks online movements - mines the information stored on a computer - or uses a computer's CPU and storage for some task the user knows nothing about - can cause extremely slow performance






43. These accounts are user accounts that remain active after an employee has left an organization.






44. In a ____ infection - a virus injects itself into the program's executable code instead of at the end of the file.






45. Hurricanes - tornadoes - flooding and earthquakes are all examples of this.






46. When organizations use software that filters content to prevent the transmission of unauthorized information






47. During RADIUS authentication the AP - serving as the authenticator that will accept or reject the wireless device - creates a data packet from this information called the ____.






48. In the context of SSL encryption - a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting and what type of encryption the client's browser can decipher (for e






49. Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password - today attackers usually prefer ____.






50. Sifting through a company's garbage to find information to help break into their computers