Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. An AP that is set up by an attacker.






2. Countless requests for a TCP connection sent to an FTP server - web server - or system attached to the internet.






3. Web application attacks are considered ____ attacks.






4. The action that is taken by the subject over the object is called a ____.






5. Pretending to be another person.






6. Mass mailings sent as Instant Messages to users. Often these can feature links to explicit porn sites.






7. The geographical storage of your backups-safest place is a different place from where you keep your actual data






8. Tools used to configure ________: WEP - WPA - MAC address filtering - SSID broadcasting - wireless antennae






9. Requires that if the fraudulent application of a process could potentially result in a breach of security - then the process should be divided between two or more individuals.






10. Attack computer systems by transmitting a virus hoax - with a real virus attached. By masking the attack in a seemingly legitimate message - unsuspecting users more readily distribute the message and send the attack on to their co-workers and friends






11. ____ uses "speckling" and different colors so that no two spam e-mails appear to be the same.






12. Requires mutual authentication used for WLAN encryption using Cisco client software.






13. Users who access a Web server are usually restricted to the ____ directory.






14. Could become a key element in authentication in the future.






15. Software attack using special monitoring software to gain access to private communications on the network wire or across a wireless network. (aka sniffing attack)






16. Securing a restricted area by erecting a barrier is called ____.






17. In a ____ infection - a virus injects itself into the program's executable code instead of at the end of the file.






18. This attack is where every possible combination of letters - numbers - and characters is used to create encrypted passwords.






19. Software written with malicious intent to cause annoyance or damage - need to attach to something (such as an executable file)






20. A threat that originates from outside the company. (ex. power failure.)






21. Software that comes hidden in free downloadable software and tracks online movements - mines the information stored on a computer - or uses a computer's CPU and storage for some task the user knows nothing about - can cause extremely slow performance






22. A program that is automatically downloaded to your computer without your consent or even your knowledge.






23. An attack that accesses unauthorized information from a wireless device through a Bluetooth connection - often between cell phones and laptop computers.






24. A technique for crashing by sending too much data to the buffer in a comuter's memory






25. A ____ is a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic - yet they are actually imitations of real data files.






26. A type of virus that spreads itself - not only from file to file - but also from computer to computer - do not need to attach to anything to spread and can tunnel themselves into computers.






27. Form of phishing that targets wealthy individuals.






28. The most popular attack toolkit - which has almost half of the attacker toolkit market is ____.






29. It is able to code and decode data






30. When a device receives a beacon frame from an AP - the device then sends a frame known as a ____ frame to the AP.






31. A ____ is a computer program or a part of a program that lies dormant until it is triggered by a specific logical event.






32. Four interrelated aspects to _________:Access - data - infrastructure - computers






33. The identification of a user based on a physical characteristic - such as a fingerprint - iris - face - voice - or handwriting






34. The process of verifying that your backups actually work






35. Peering over the shoulder of someone to see the contents on that person's computer or cell phone screen.






36. Use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.






37. ____ can be prewired for electrical power as well as wired network connections.






38. The breadth of your back-up (what types of files you will back up-media - documents - OS - etc)






39. A firewall that can block designated types of traffic from entering a protected network.






40. An attack that intercepts legitimate communication between two victims and captures - analyzes and possibly alters the data packets before sending a fake reply.






41. A user under Role Based Access Control can be assigned only one ____.






42. Password and BioMetric






43. An attack that uses multiple computers on disparate networks to launch an attack from multiple hosts simultaneously.






44. An authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.






45. Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident <tell people passwords - etc>






46. Lock - conduit - card key - video equipment - secured guard






47. Forging of the return address on an e-mail so that the e-mail message appears to come from someone other than the actual sender. This is not a virus but rather a way by which virus authors conceal their identities as they send out viruses.






48. In the context of SSL encryption - a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting and what type of encryption the client's browser can decipher (for e






49. The most common protocol suite used today for local area networks (LANs) as well as the Internet is ____.






50. Software that searches a server - switch - router - or other device for open ports - which can be vulnerable to attack.