Test your basic knowledge |

Information Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Keeps a record of the state of a connection between an internal computer and an external device and then makes decisions based on the connection as well as the conditions.






2. Mass mailings sent as Instant Messages to users. Often these can feature links to explicit porn sites.






3. An authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.






4. Web application attacks are considered ____ attacks.






5. Can also capture transmissions that contain passwords.






6. Type of software attack where an attacker captures network traffic and stores it for retransmission at a later time to gain unauthorized access to a network.






7. Using video cameras to transmit a signal to a specific and limited set of receivers is called ____.






8. ____ can be prewired for electrical power as well as wired network connections.






9. A method for confirming users' identities






10. Peering over the shoulder of someone to see the contents on that person's computer or cell phone screen.






11. Software attack using special monitoring software to gain access to private communications on the network wire or across a wireless network. (aka sniffing attack)






12. A threat that originates from outside the company. (ex. power failure.)






13. An attacker motivated by the ideology to attack computer or infrastructure networks.






14. An attack that targets a computer's physical components and peripherals. (ie. hard disk - motherboard - cabling - etc.)






15. An attack that sends unsolicited messages to Bluetooth-enabled devices.






16. An authentication protocol that operates over PPP and that requires the authenticator to take the first step by offering the other computer a challenge. The requestor responds by combining the challenge with its password - encrypting the new string o






17. An attack that accesses unauthorized information from a wireless device through a Bluetooth connection - often between cell phones and laptop computers.






18. A ____ is designed to separate a nonsecured area from a secured area.






19. If a user typically accesses his bank's Web site from his home computer on nights and weekends - then this information can be used to establish a ____ of typical access.






20. It is able to code and decode data






21. Use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.






22. Often used for managing user access to one or more systems.






23. Considered a more "real world" access control than the other models because the access is based on a user's job function within an organization.






24. Magnetic tape drives - hard drives - optical media (CD or DVD) - solid-state media (flash drives or SD)






25. Provides a greater degree of security by implementing port-based authentication.






26. A private key and public key






27. A technique for crashing by sending too much data to the buffer in a comuter's memory






28. The action that is taken by the subject over the object is called a ____.






29. The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.






30. When organizations use software that filters content to prevent the transmission of unauthorized information






31. Content filtering - encryption - firewalls






32. A list of statements used by a router to permit or deny the forwarding of traffic on a network based on one or more criteria.






33. A program or device that can monitor data traveling over a network. Sniffers can show - all the data being transmitted over a network - including passwords and sensitive information - tends to be a favorite weapon in the hacker's arsenal






34. Using one's social skills to trick people into revealing access credentials or other information valuable to the attacker. <dumpster diving - or looking through people's trash - etc>






35. A standard that provides a predefined framework for hardware and software developers who need to implement access control in their devices or applications.






36. Could become a key element in authentication in the future.






37. The most restrictive access control model is ____.






38. The signal from an ID badge is detected as the owner moves near a ____ - which receives the signal.






39. Hides inside other software - usually as an attachment or a downloadable file






40. Hacker who exposes vulnerabilities for financial gain or malicious purpose.






41. A security analysis of the transaction within its approved context.






42. Attack computer systems by transmitting a virus hoax - with a real virus attached. By masking the attack in a seemingly legitimate message - unsuspecting users more readily distribute the message and send the attack on to their co-workers and friends






43. Holds the promise of reducing the number of usernames and passwords that users must memorize.






44. In the context of SSL encryption - a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting and what type of encryption the client's browser can decipher (for e






45. Pretending to be another person.






46. Related to the perception - thought process - and understanding of the user.






47. ____ involves horizontally separating words - although it is still readable by the human eye.






48. When DNS servers exchange information among themselves it is known as a ____.






49. Users who access a Web server are usually restricted to the ____ directory.






50. A type of virus that spreads itself - not only from file to file - but also from computer to computer - do not need to attach to anything to spread and can tunnel themselves into computers.