Security and Management Review

Name:

True/False
Indicate whether the statement is true or false.

Antivirus software, once installed, will always catch all viruses.

Some spyware is adware therefor all adware is spyware.

Passwords are the most stringent form of authentication.

The main difference between a worm and a virus is that a worm does not require a host file to propagate.

A local password policy applies when a user is logged into the local machine.

Multiple Choice
Identify the choice that best completes the statement or answers the question.

This form of social engineering is often orchestrated by someone who knows you are angry or arguing with another person. They set it up so they can be the hero.

a.	Heroism	c.	Creating trust
b.	Creating mistrust	d.	Hero complex

This is a file that tracks your website preferences and usage

a.	Cookie	c.	Trojan
b.	Sandwich	d.	Virus

This is a common name for a program that can replicate itself, has no useful purpose, and often destroys things in the process.

a.	Malware	c.	Trojan
b.	Adware	d.	Virus

This monitors actions on a system and sends that information back to its originating source

a.	Spyware	c.	Trojan
b.	Adware	d.	Virus

10.

A friend gives you a program to install that sends random jokes to your screen. It looks fun and legit. A few days later your computer starts acting strange. Your CD tray opens and closes every now and again. You also notice you’re getting more spam. What might this be?

a.	Spyware	c.	Grayware
b.	Adware	d.	Trojan Horse

11.

You’ve been researching car stereos lately. Today it seems like every site you visit has a popup related to music, cars, stereos, and MP3 players. What should you do?

a.	Enable pop up blocker	c.	Check your system for adware
b.	Check your system for Trojans	d.	Reinstall your OS

12.

This is a form of social engineering that tricks people into providing passwords or other private information through an email and/or spoofed website.

a.	Dumpster diving	c.	Phishing
b.	Piggybacking	d.	Shoulder surfing

13.

All of a sudden a bunch of company secrets have been posted in the Internet. The boss is livid, and the stocks are falling. When the culprits were caught, they found a bunch of CDs and even an old hard drive in their “lair” of evil. What is the most likely way they obtained this information?

a.	Dumpster diving	c.	Phishing
b.	Piggybacking	d.	Shoulder surfing

14.

This is a form of social engineering that tricks people into allowing an unauthorized person into a building or secure area.

a.	Dumpster diving	c.	Phishing
b.	Piggybacking	d.	Shoulder surfing

15.

This is a form of social engineering that tricks people into allowing an unauthorized person into a building or secure area or giving private information when a person pretends to be someone he/she is not.

a.	Masquerading	c.	Phishing
b.	Piggybacking	d.	Shoulder surfing

16.

Which would be the best countermeasure against social engineering?

a.	Strong policies	c.	Secure passwords
b.	User awareness and training	d.	Auditing of data access

Image 8-2

17.

Stich would like to set it up so that if someone comes in and tries to brute force a password, the account will lock after a given number of tries. Which one would he choose?

a.	Account lockout duration	c.	Account lockout counter
b.	Account lockout threshold	d.	Password policy

18.

What do biometrics use to authenticate an identity?

a.	Possession of a device	c.	Ability to perform tasks
b.	Human characteristics	d.	Knowledge of passwords

19.

You want to ensure no one can change the CMOS settings. What should you do?

a.	Set a BIOS administrator password	c.	Use TPM
b.	Set a user BIOS password	d.	Set up chassis intrusion

20.

You want to ensure a server will not boot if someone changes or reconfigures the hardware. What should you do?

a.	Set a BIOS administrator password	c.	Use TPM
b.	Set a user BIOS password	d.	Set up chassis intrusion

21.

You want a security solution that encrypts the entire hard drive, preventing access even if the drive is moved to another computer.

a.	IPSec	c.	EFS
b.	Bitlocker	d.	VPN

22.

Which is the most effective form of wireless encryption

a.	SSID	c.	WPA
b.	WEP	d.	WPA2

23.

Which protocol ensures secure connection over HTTP?

a.	HTTP	c.	SSL
b.	HTTPS	d.	SSH

24.

What protocol would you use if you wanted to have a file that you don’t want other users to read?

a.	Bitlocker	c.	EFS
b.	EHS	d.	SSH

25.

This control panel is accesssed in Windows XP to configure the screensaver

a.	Display	c.	Screen Saver
b.	Personalization	d.	Personalize

26.

This control panel is accesssed in Windows Vista to configure the screensaver

a.	Display	c.	Screen Saver
b.	Personalization	d.	Personalize

27.

You have a salesman who constantly walks off, leaving his laptop on his desk in an area open to clients. How should you secure this laptop?

a.	Use cable locks	c.	Use a screensaver
b.	Use keyboard locks	d.	Shut it edown

28.

You are throwing away a bunch of old stuff from a storage room. You find some CDs and DVDs, but aren’t sure if the data is sensitive or not. What should you do?

a.	Throw them away in a locked bin.	c.	Use a third party disk-wiping program to delete the data
b.	Degauss them	d.	Shred them

29.

You have really locked down the ports on your computer. You can surf the net, but keep getting errors when you try to purchase things, or go to websites that start with HTTPS. You can’t figure out what’s going on. What port should you open?

a.	80	c.	443
b.	21	d.	143

30.

This is a program that often looks like something useful, but then delivers a negative payload that destroys things in the process.

a.	Malware	c.	Trojan
b.	Adware	d.	Virus

Multiple Response
Identify one or more choices that best complete the statement or answer the question.

31.

What does virus software do to protect your system? Choose two

a.	Prevents viruses from being downloaded	c.	Prevents the virus from activating
b.	Removes Malware after the damage is done	d.	Kicks in the Malware software

32.

Viruses can hide in:

a.	Start up services	c.	Registry entries
b.	Email attachments	d.	JPGs

33.

What are two ways virus protection detect viruses?

a.	Up to date virus definitions from reputible sources	c.	Using open source virus updates from a variety of coders
b.	Online virus scanners	d.	using heuristic algorithms that can detect patterns of behavior

34.

What are some problems with password authentication?

a.	Passwords can be shared	c.	Passwords can be stolen
b.	Passwords can be too long	d.	Passwords can be forgotten

35.

Which of the following are examples of social engineering?

36.

Which requirements must be met if a local password complexity policy is enabled?

a.	Passwords must be at least 10 characters long	c.	Passwords must meet four out of the four options: upper case, lower case, numbers, non-alphabetic chacters
b.	Passwords must meet three out of the four options: upper case, lower case, numbers, non-alphabetic chacters	d.	Passwords must be at least 6 characters long

Image 8-2

37.

What are the security policies applied in 8-2?

a.	Lock account after 4 incorrect passwords entered within an hour	d.	Reset number of incorrect passwords after half an hour.
b.	Lock account after 4 incorrect passwords entered within half an hour	e.	Unlock account after 30 minutes
c.	Reset number of incorrect passwords after an hour.	f.	Unlock account after 60 minutes

38.

You want to prevent users from reusing old passwords, and you don’t want them to change their password more than every seven days. (Why? Because then they forget them and they bug you.) Which would you choose?

a.	Minimum password age	c.	Enforce password history
b.	Password complexity requirements	d.	Maximum password age

39.

You are configuring a local password policy. You want users to use at least 10 characters in their password, and you want to lock their accounts after 3 incorrect tries. Which two policies would you define?

40.

Which of the following would work in the event you lose a drivelock password?

a.	Move the hard drive to another computer	c.	Google it
b.	Contact the vendor	d.	Try to guess the password

41.

Which security feature encrypts the entire contents of a hard drive?

a.	Hard Drive Password	c.	TPM
b.	Drivelock	d.	Bitlocker

42.

Which of the following protocols allow secure communications to a remote network over the internet?

a.	IPSec	c.	L2TP
b.	HTTP	d.	PPTP

43.

Uses a username and password for access to the wireless network

44.

As a best practice, what three things can keep you from having unauthorized access to your computer when you step away for a few minutes?

a.	Short screensaver, password required on return	c.	Password required on wakeup
b.	Putting computer in sleep mode	d.	Shutting down your computer

45.

You are configuring your firewall to allow SMTP out and POP3 in. Which ports would you open? Select two

46.

You are configuring your firewall and want to block people on your computer from using FTP. Which ports would you block? Choose two.

47.

You want to be able to access your computer from other networks. What two things would you do?

a.	Turn on/enable remote desktop	c.	Create inbound exceptions for remote desktop
b.	Create inbound exceptions for remote assistance	d.	Turn on/enable remote assistance

48.

Which two actions will dramatically increase your security on a workstation or laptop?

a.	Enable a firewall	c.	Use task scheduler to schedule daily backups
b.	Enable desktop support	d.	Install and keep updated a solid virus program

49.

You set up a server that is going to provide email and web services. Which of the following ports need to be opened?

50.

Which of the following can be considered social engineering?

a.	Asking someone to hold the door as they enter a secured building.	c.	Calling a company and pretending to be the IT manager and gaining password and login information of a supervisor
b.	Digging through a trash can	d.	Getting someone to click a link in a phishing email.

Completion
Complete each statement.

51.

A virus must be ________ in order to cause damage.

52.

VOIP stands for

53.

This is software that is often installed by a trojan that collects every keystroke you type and transmits it to a remote computer.

54.

This is software that is secretly installed on a computer and monitors the user activity and/or interferes with user control over his or her computer.

55.

This is designed to allow someone else to control your computer.

56.

This is malicious software that can be used to gather information about what you do on the internet.

Img 8-3

57.

The image in 8-3 is an example of ______

58.

This is the art of getting someone to do something because of their nature as a human being.

Matching

Spam/Spim?Spit

a.	Electronic junk mail	d.	Low
b.	Junk sent via instant messaging	e.	Extremely high
c.	Spam sent over internet telephony	f.	Medium

59.

The prevalence of spam/spim/spit is

60.

spam

61.

spit

62.

spim

Spoofing, Phishing, and Pharming

a.	spoofing	e.	high
b.	phishing	f.	low
c.	pharming	g.	Worst case damage
d.	extremely high	h.	Don’t click on links in emails from unknown users. Verify with banks and companies before opening an email with a link in it. Never give out your passwords or credit card information over the phone unless you called them first.

63.

Best way to prevent phishing, pharming, or spoofing

64.

An attack in which a person or program masquerades or pretends to be someone else or another program or a valuable program.

65.

Personal information is acquired and identity is stolen. Bank accounts can be drained, credit can be ruined. Victims can be locked out of their own accounts.

66.

Phony webpage, usually accessed through a link in a phony email, that looks like it belongs to a legitimate company. Crooks try to trick users into entering usernames and passwords for bank accounts, Paypal accounts, and other accounts where they can shop or access their money or credit/debit card information to steal it to use or sell to others.

67.

An attack where a hacker takes over a legit website but redirects traffic to another bogus website to exploit the victim’s computer, collect banking or credit card data, etc.

a.	adware	f.	antispyware
b.	spyware	g.	DDoS
c.	keylogging	h.	passwords, credit card numbers
d.	firewall	i.	antivirus software
e.	Botnet

68.

Software that automatically plays or displays advertising

69.

Usually not very effective against keyloggers

70.

Software that is the most effective against adware

71.

Software that can be very dangerous because it can send sensitive data back to rogue systems.

72.

Botnets are often used to launch these

73.

Capturing keystrokes and sending them to a rogue website or person

74.

Things that can be delivered by keyloggers

Authentication Matching

a.	this is an electronic "passport" that allows a person, computer or organization to exchange information securely over the Internet using the PKI	e.	This supports the distribution and creation of public encryption so users and computers can exchange data over networks securely and verify the identity of the other party
b.	The entity that ensures that certificates are valid.	f.	a mathematical technique used to validate the authenticity and integrity of a message, software or digital document.
c.	Maintain lists of trusted CA root certificates so they can easily verify certificates that the CA’s have verified and signed.	g.	Many digital certificates conform to this standard.
d.	Giving someone permission to do something on a computer or network.	h.	the process of determining whether someone or something is, in fact, who or what it is declared to be.

75.

Certificate Authority

76.

Digital certificate

77.

authentication

78.

Digital signature

79.

Operating systems and browsers

80.

X.509

81.

Authorization

a.	TPM	d.	BIOS user password
b.	Chassis Intrusion Detection	e.	DriveLock admin password
c.	BIOS Administrator password

82.

Tells you if the cover has been recovered

83.

If you lose this password, there is no way to boot the system

84.

Required to start the system, but can’t change CMOS settings

85.

Required to change the CMOS

86.

If you lose this password, there are two ways to reset the system to get in

87.

Generates and stores cryptographic keys

88.

Can be used to keep the system from booting if hardware has changed

89.

Can reset this warning in the BIOS

Match the service to the port it comes in on

a.	FTP	g.	POP3
b.	SSH	h.	HTTP WITH SSL
c.	Telnet	i.	IMAP4
d.	HTTP	j.	UDP
e.	SSL	k.	TCP
f.	SMTP

90.

20 TCP

91.

22 UDP & TCP

92.

80 TCP

93.

21 TCP

94.

443 TCP & UDP

95.

443 UDP AND TCP

96.

More secure, more headers, less data, slower, used most often

97.

110 TCP

98.

143 TCP AND UDP

99.

23 TCP

100.

Faster, less secure, used for streaming audio/video, DoS, and some trojans. More data in each packet.