Scribd Logo
Upload

Welcome to Scribd!

  • 127 views

    Assessment Test

    Uploaded by

    Bra Nii Black
    The document contains an assessment test with 40 multiple choice questions covering topics related to cybersecurity including access control, passwords, denial of service attacks, firewalls, VPNs, malware, CIA triad, auditing, cryptography, digital signatures, security models, rings protection, controls, risk assessment, intellectual property, evidence types, computer crimes, incident response, physical security, user verification, and intrusion detection systems.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Assessment Test

    Uploaded by

    Bra Nii Black
    127 views6 pages
    The document contains an assessment test with 40 multiple choice questions covering topics related to cybersecurity including access control, passwords, denial of service attacks, firewalls, VPNs, malware, CIA triad, auditing, cryptography, digital signatures, security models, rings protection, controls, risk assessment, intellectual property, evidence types, computer crimes, incident response, physical security, user verification, and intrusion detection systems.

    Original Description:

    Assessment Text

    Original Title

    Assessment Test (1)

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document contains an assessment test with 40 multiple choice questions covering topics related to cybersecurity including access control, passwords, denial of service attacks, firewalls, VPNs, malware, CIA triad, auditing, cryptography, digital signatures, security models, rings protection, controls, risk assessment, intellectual property, evidence types, computer crimes, incident response, physical security, user verification, and intrusion detection systems.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    127 views6 pages

    Assessment Test

    Uploaded by

    Bra Nii Black
    The document contains an assessment test with 40 multiple choice questions covering topics related to cybersecurity including access control, passwords, denial of service attacks, firewalls, VPNs, malware, CIA triad, auditing, cryptography, digital signatures, security models, rings protection, controls, risk assessment, intellectual property, evidence types, computer crimes, incident response, physical security, user verification, and intrusion detection systems.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 6

    Assessment Test

    1. Which of the following types of access control seeks to discover evidence of


    unwanted, unauthorized, or illicit behaviour or activity?
    A. Preventive
    B. Deterrent
    C. Detective
    D. Corrective

    2. Define and detail the aspects of password selection that distinguish good password
    choices from ultimately poor password choices.
    A. Difficult to guess or unpredictable
    B. Meet minimum length requirements
    C. Meet specific complexity requirements
    D. All of the above

    3. Which of the following is most likely to detect DoS attacks?


    A. Host-based IDS
    B. Network-based IDS
    C. Vulnerability scanner
    D. Penetration testing

    4. Which of the following is considered a denial of service attack?


    A. Pretending to be a technical manager over the phone and asking a receptionist to
    change their password
    B. While surfing the Web, sending to a web server a malformed URL that causes
    the system to consume 100 percent of the CPU
    C. Intercepting network traffic by copying the packets as they pass through a specific
    subnet
    D. Sending message packets to a recipient who did not request them simply to be
    annoying

    5. At which layer of the OSI model does a router operate?


    A. Network layer
    B. Layer 1
    C. Transport layer
    D. Layer 5

    6. Which type of firewall automatically adjusts its filtering rules based on the content of
    the traffic of existing sessions?
    A. Static packet filtering
    B. Application-level gateway
    C. Stateful inspection
    D. Dynamic packet filtering

    7. A VPN can be established over which of the following?


    A. Wireless LAN connection
    B. Remote access dial-up connection
    C. WAN link
    D. All of the above

    8. What type of malware uses social engineering to trick a victim into


    installing it?
    A. Viruses
    B. Worms
    C. Trojan horse
    D. Logic bomb

    9. The CIA Triad comprises what elements?


    A. Contiguousness, interoperable, arranged
    B. Authentication, authorization, accountability
    C. Capable, available, integral
    D. Availability, confidentiality, integrity

    10. Which of the following is not a required component in the support of


    accountability?
    A. Auditing
    B. Privacy
    C. Authentication
    D. Authorization

    11. Which of the following is not a defence against collusion?


    A. Separation of duties
    B. Restricted job responsibilities
    C. Group user accounts
    D. Job rotation

    12. A data custodian is responsible for securing resources after


    ________________________ has assigned the resource a
    security label.
    A. Senior management
    B. Data owner
    C. Auditor
    D. Security staff

    13. In what phase of the Capability Maturity Model for Software (SWCMM) are
    quantitative measures utilized to gain a detailed understanding of the software
    development process?
    A. Repeatable
    B. Defined
    C. Managed
    D. Optimizing

    14. Which one of the following is a layer of the ring protection scheme
    that is not normally implemented in practice?
    A. Layer 0
    B. Layer 1
    C. Layer 3
    D. Layer 4

    15. What is the last phase of the TCP/IP three-way handshake sequence?
    A. SYN packet
    B. ACK packet
    C. NAK packet
    D. SYN/ACK packet

    16. Which one of the following vulnerabilities would best be countered by adequate
    parameter checking?
    A. Time of check to time of use
    B. Buffer overflow
    C. SYN flood
    D. Distributed denial of service

    17. What is the value of the logical operation shown here?


    X: 0 1 1 0 1 0
    Y: 0 0 1 1 0 1
    _________________
    X Y: ?
    A. 0 1 1 1 1 1
    B. 0 1 1 0 1 0
    C. 0 0 1 0 0 0
    D. 0 0 1 1 0 1

    18. In what type of cipher are the letters of the plain-text message rearranged to form
    the cipher text?
    A. Substitution cipher
    B. Block cipher
    C. Transposition cipher
    D. One-time pad

    19. What is the length of a message digest produced by the MD5 algorithm?
    A. 64 bits
    B. 128 bits
    C. 256 bits
    D. 384 bits

    20. If Renee receives a digitally signed message from Mike, what key does she use to
    verify that the message truly came from Mike?
    A. Renee’s public key
    B. Renee’s private key
    C. Mike’s public key
    D. Mike’s private key

    21. Which of the following is not a composition theory related to security models?
    A. Cascading
    B. Feedback
    C. Iterative
    D. Hookup

    22. The collection of components in the TCB that work together to implement reference
    monitor functions is called the ____________________.
    A. Security perimeter
    B. Security kernel
    C. Access matrix
    D. Constrained interface

    23. Which of the following statements is true?


    A. The less complex a system, the more vulnerabilities it has.
    B. The more complex a system, the less assurance it provides.
    C. The less complex a system, the less trust it provides.
    D. The more complex a system, the less attack surface it generates.

    24. Ring 0, from the design architecture security mechanism known as protection rings,
    can also be referred to as all but which of the following?
    A. Privileged mode
    B. Supervisory mode
    C. System mode
    D. User mode

    25. Audit trails, logs, CCTV, intrusion detection systems, antivirus software, penetration
    testing, password crackers, performance monitoring, and cyclic redundancy checks
    (CRCs) are examples of what?
    A. Directive controls
    B. Preventive controls
    C. Detective controls
    D. Corrective controls

    26. System architecture, system integrity, covert channel analysis, trusted facility
    management, and trusted recovery are elements of what security criteria?
    A. Quality assurance
    B. Operational assurance
    C. Life cycle assurance
    D. Quantity assurance

    27. Which of the following is a procedure designed to test and perhaps bypass a
    system’s security controls?
    A. Logging usage data
    B. War dialing
    C. Penetration testing
    D. Deploying secured desktop workstations

    28. Auditing is a required factor to sustain and enforce what?


    A. Accountability
    B. Confidentiality
    C. Accessibility
    D. Redundancy
    29. What is the formula used to compute the ALE?
    A. ALE = AV * EF * ARO
    B. ALE = ARO * EF
    C. ALE = AV * ARO
    D. ALE = EF * ARO

    30. What is the first step of the business impact assessment process?
    A. Identification of priorities
    B. Likelihood assessment
    C. Risk identification
    D. Resource prioritization

    31. Which of the following represent natural events that can pose a threat or risk to an
    organization?
    A. Earthquake
    B. Flood
    C. Tornado
    D. All of the above

    32. What kind of recovery facility enables an organization to resume operations as


    quickly as possible, if not immediately, upon failure of the primary facility?
    A. Hot site
    B. Warm site
    C. Cold site
    D. All of the above

    33. What form of intellectual property is used to protect words, slogans, and logos?
    A. Patent
    B. Copyright
    C. Trademark
    D. Trade secret

    34. What type of evidence refers to written documents that are brought into court to
    prove a fact?
    A. Best evidence
    B. Payroll evidence
    C. Documentary evidence
    D. Testimonial evidence

    35. Why are military and intelligence attacks among the most serious computer crimes?
    A. The use of information obtained can have far-reaching
    detrimental strategic effects on national interests in an enemy’s hands.
    B. Military information is stored on secure machines, so a successful attack can be
    embarrassing.
    C. The long-term political use of classified information can impact a country’s
    leadership.
    D. The military and intelligence agencies have ensured that the laws protecting their
    information are the most severe.
    36. What type of detected incident allows the most time for an investigation?
    A. Compromise
    B. Denial of service
    C. Malicious code
    D. Scanning

    37. If you want to restrict access into or out of a facility, which would
    you choose?
    A. Gate
    B. Turnstile
    C. Fence
    D. Mantrap

    38. What is the point of a secondary verification system?


    A. To verify the identity of a user
    B. To verify the activities of a user
    C. To verify the completeness of a system
    D. To verify the correctness of a system

    39. Spamming attacks occur when numerous unsolicited messages are sent to a victim.
    Because enough data is sent to the victim to prevent legitimate activity, it is also known
    as what?
    A. Sniffing
    B. Denial of service
    C. Brute-force attack
    D. Buffer overflow attack

    40. Which type of intrusion detection system (IDS) can be considered an expert system?
    A. Host-based
    B. Network-based
    C. Knowledge-based
    D. Behaviour-based

    You might also like