1 of 70
Definition
Brute force
Give this one a try later!
A company institutes a new policy that “All office computer monitors must
face toward employees and must face away from doorways. The monitor
screens must not be visible to people visiting the office.”
Which principle of the CIA triad is this company applying?
Confidentiality
Utility
Integrity
Availability
In the system room of a small company, an emergency power shut-down
switch was installed right next to a light switch. As a result, employees
sometimes shut down the power accidentally when they leave the data center.
Which type of control should be implemented to mitigate the risk of
accidental shut down?
, Physical
Logical
Administrative
Technical
A systems administrator enables operating system logging to capture
unsuccessful log in attempts. Which attack can be uncovered by
reviewing such logs?
Brute Force
Denial of Service
Stolen Password
Spear Phishing
A student downloads free software from a website and this software includes
some malware. Which tool can locate this vulnerability?
Asymmetric encryption
Antivirus software
Access control list
Honeypot
Don't know?
2 of 70
Definition
Availability
Give this one a try later!
,A company has just completed an audit of disaster protection strategies. The
company has decided it must keep and be able to retrieve backup data for a
period of 30 years. The company has implemented tape backups using 8mm
digital audio tapes. Which factor could impact the company’s ability to access
information from the backup tapes?
Technical obsolescence
Tape access speed
Reading tape header
At a small company, an employee makes an unauthorized data alteration.
Network speed
Which component of the CIA triad has been compromised?
Integrity
Confidentiality
Availability
Authenticity
A hospital allows its patients to pay by credit card. Which set of regulations
apply to the hospital’s operations?
HIPAA and PCI DSS
HIPAA and FCRA
FERPA and HITECH
FERPA and PCI DSS
A company has had several successful denial of service (DoS) attacks on
its email server. Which security principle is being attacked?
Availability
Confidentiality
Integrity
Possession
Don't know?
3 of 70
, Term
Which type of tool can be used to detect vulnerabilities in source
code related to improper handling of user input?
Fuzzer
Port scanner
Sniffer
Honeypot
Give this one a try later!
Compression fuzzer
Port Scanner Honeypots
Don't know?
Definition
Brute force
Give this one a try later!
A company institutes a new policy that “All office computer monitors must
face toward employees and must face away from doorways. The monitor
screens must not be visible to people visiting the office.”
Which principle of the CIA triad is this company applying?
Confidentiality
Utility
Integrity
Availability
In the system room of a small company, an emergency power shut-down
switch was installed right next to a light switch. As a result, employees
sometimes shut down the power accidentally when they leave the data center.
Which type of control should be implemented to mitigate the risk of
accidental shut down?
, Physical
Logical
Administrative
Technical
A systems administrator enables operating system logging to capture
unsuccessful log in attempts. Which attack can be uncovered by
reviewing such logs?
Brute Force
Denial of Service
Stolen Password
Spear Phishing
A student downloads free software from a website and this software includes
some malware. Which tool can locate this vulnerability?
Asymmetric encryption
Antivirus software
Access control list
Honeypot
Don't know?
2 of 70
Definition
Availability
Give this one a try later!
,A company has just completed an audit of disaster protection strategies. The
company has decided it must keep and be able to retrieve backup data for a
period of 30 years. The company has implemented tape backups using 8mm
digital audio tapes. Which factor could impact the company’s ability to access
information from the backup tapes?
Technical obsolescence
Tape access speed
Reading tape header
At a small company, an employee makes an unauthorized data alteration.
Network speed
Which component of the CIA triad has been compromised?
Integrity
Confidentiality
Availability
Authenticity
A hospital allows its patients to pay by credit card. Which set of regulations
apply to the hospital’s operations?
HIPAA and PCI DSS
HIPAA and FCRA
FERPA and HITECH
FERPA and PCI DSS
A company has had several successful denial of service (DoS) attacks on
its email server. Which security principle is being attacked?
Availability
Confidentiality
Integrity
Possession
Don't know?
3 of 70
, Term
Which type of tool can be used to detect vulnerabilities in source
code related to improper handling of user input?
Fuzzer
Port scanner
Sniffer
Honeypot
Give this one a try later!
Compression fuzzer
Port Scanner Honeypots
Don't know?
