Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Typically used on home routers that allow multiple users to share one IP address received from an Internet service provider (ISP).






2. A password-protected and encrypted file that holds an individual's identification information - including a public key and a private key. The individual's public key is used to verify the sender's digital signature - and the private key allows the in






3. A variety of threats such as viruses - worms - and Trojan horses






4. These accounts are user accounts that remain active after an employee has left an organization.






5. The most popular attack toolkit - which has almost half of the attacker toolkit market is ____.






6. Pretending to be another person.






7. Scrambles information into an alternative form that requires a key or password to decrypt the information






8. A group of piconets in which connections exist between different piconets is called a ____.






9. Often used for managing user access to one or more systems.






10. Hacker who exposes vulnerabilities for financial gain or malicious purpose.






11. A pay-per-use computing model in which customers pay only for the computing resources they need.






12. A method for confirming users' identities






13. Lock - conduit - card key - video equipment - secured guard






14. The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.






15. A security attack in which an internet user sends commands to another internet user's machine that cause the screen to fill with garbage characters. A flashing attack causes the user to terminate her session.






16. Can be accidental or intentional - internal or external. (ex. back-hoe operator performing legitimate construction cuts cables leading into a facility.)






17. Mass mailings sent as Instant Messages to users. Often these can feature links to explicit porn sites.






18. If a password is communicated across a network to log on to a remote system - it is vulnerable to ______.






19. A database - organized as a hierarchy or tree - of the name of each site on the Internet and its corresponding IP number.






20. Can be used to determine whether new IP addresses are attempting to probe the network.






21. Using one's social skills to trick people into revealing access credentials or other information valuable to the attacker. <dumpster diving - or looking through people's trash - etc>






22. Sending or posting harmful or cruel text or images using the internet or other digital communication devices.






23. In the context of SSL encryption - a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting and what type of encryption the client's browser can decipher (for e






24. A form of filtering that blocks only sites specified as harmful.






25. Sifting through a company's garbage to find information to help break into their computers






26. Software that comes hidden in free downloadable software and tracks online movements - mines the information stored on a computer - or uses a computer's CPU and storage for some task the user knows nothing about - can cause extremely slow performance






27. How many past backups you keep - what you did on your machine etc.






28. Altering the contents of packets as they travel over the Internet or altering data on computer disks after penetrating a network. For example - an attacker might place a tap on a network line to intercept packets as they leave the computer. The attac






29. A ____ encrypts all data that is transmitted between the remote device and the network.






30. ____ are a loose-knit network of attackers - identity thieves - and financial fraudsters.






31. Software that can guess passwords






32. A ____ attack is similar to a passive man-in-the-middle attack.






33. It accepts spoken words for input as if they had been typed on the keyboard.






34. When organizations use software that filters content to prevent the transmission of unauthorized information






35. An operating system that has been reengineered so that it is designed to be secure from the ground up is known as a ____.






36. To create a rainbow table - each ____ begins with an initial password that is encrypted.






37. A ____ virus is loaded into random access memory (RAM) each time the computer is turned on and infects files that are opened by the user or the operating system.






38. If a user typically accesses his bank's Web site from his home computer on nights and weekends - then this information can be used to establish a ____ of typical access.






39. A ____ means that the application or service assigned to that port is listening for any instructions.






40. Attacker sets up a rogue DNS server that responds to legitimate requests with IP addresses for malicious or non-existent websites.






41. Email attack that targets only specific users and has familiar information in it - making it more tempting to click the links in the message.






42. A ____ tester has an in-depth knowledge of the network and systems being tested - including network diagrams - IP addresses - and even the source code of custom applications.






43. Hurricanes - tornadoes - flooding and earthquakes are all examples of this.






44. ____ uses "speckling" and different colors so that no two spam e-mails appear to be the same.






45. Ensures that messages are not corrupt or tampered with






46. A random string of text issued from one computer to another in some forms of authentication. It is used - along with the password (or other credential) - in a response to verify the computer's credentials.






47. The breadth of your back-up (what types of files you will back up-media - documents - OS - etc)






48. An attack that intercepts legitimate communication between two victims and captures - analyzes and possibly alters the data packets before sending a fake reply.






49. Wants to cause as much damage as possible - without a particular target or goal.






50. Form of phishing that targets wealthy individuals.