Fundamentals of Information Security - D430
Knowledge Checks (ALL) questions with verified
answers
_________ is an email program that supports encryption (Pretty Good Privacy).
Ans✓✓✓-PGP
_________ media stores media on nonvolatile member chips and are hardier in
nature when it comes to avoiding damage. Ans✓✓✓-Flash
_________ refers to how useful the data is. Ans✓✓✓-Utility
__________ are performed to ensure compliance with applicable laws, policies,
and other administrative controls is being accomplished as well as detecting
misuse. Ans✓✓✓-Audits
__________ is a block cipher symmetric algorithm. Ans✓✓✓-DES
__________ is a wireless protocol that uses AES encryption. Ans✓✓✓-WPA3
__________ is used for port scanning, discovering devices, and searching for hosts
on a network. It is an important tool to help identify and remove unessential
services when hardening an operating system. Ans✓✓✓-Nmap
___________ mandates certain practices for financial record keeping. Ans✓✓✓-
SOX
,____________ ensures data has not been tampered with and is correct,
authentic, and reliable. Ans✓✓✓-Integrity
____________ is a tool used to find and report network services on hosts that
have known vulnerabilities. Ans✓✓✓-Nessus
____________ is where an attacker makes the hosting application server issue
requests to arbitrary external domains or internal resources in an attempt to
identify sensitive data. Ans✓✓✓-SSRF
_____________ are configured to deliberately display vulnerabilities or materials
that would make the system attractive to an attacker to lure them in. Ans✓✓✓-
Honeypot
_____________ attacks allow unauthorized users to access data, applications, or
environments. Ans✓✓✓-Interception.
_____________ ensures authorized users have access to resources when needed.
Ans✓✓✓-Availability
_____________ is a network tool that can map the topology of and help locate
vulnerabilities in firewalls. Ans✓✓✓-Hping3
_____________ is a sniffer that is capable of intercepting and troubleshooting
traffic from both wired and wireless sources. Ans✓✓✓-Wireshark
_____________ is a tool commonly used to detect wireless access points.
Ans✓✓✓-Kismet
, _____________ is an open-source Web server analysis tool that checks for
common vulnerabilities. It is not a type of tool categorized as an exploit
framework. Ans✓✓✓-Nikto
_____________ is the process of ensuring and confirming that the identity of the
user is genuine and legitimate. Proving who you are. Ans✓✓✓-Authenticity
______________ controls such as video surveillance systems and burglar alarms,
serve to detect and report undesirable events. Ans✓✓✓-Detective
______________ is a hash function that is commonly used to validate and sign
digital security certificates and documents. Ans✓✓✓-SHA-2
_______________ agrees to standards but does not make laws or regulations.
Ans✓✓✓-Industry
_______________ is the process of ascribing a user identifier (ID) to a human
being or to another computer or network component. Ans✓✓✓-Identification
________________ is a widely used asymmetric encryption method used for
many transactions including in the Secure Sockets Layer (SSL) protocol used to
secure Web and email traffic. Ans✓✓✓-RSA
________________ is mandated by congress. Ans✓✓✓-Regulatory
Knowledge Checks (ALL) questions with verified
answers
_________ is an email program that supports encryption (Pretty Good Privacy).
Ans✓✓✓-PGP
_________ media stores media on nonvolatile member chips and are hardier in
nature when it comes to avoiding damage. Ans✓✓✓-Flash
_________ refers to how useful the data is. Ans✓✓✓-Utility
__________ are performed to ensure compliance with applicable laws, policies,
and other administrative controls is being accomplished as well as detecting
misuse. Ans✓✓✓-Audits
__________ is a block cipher symmetric algorithm. Ans✓✓✓-DES
__________ is a wireless protocol that uses AES encryption. Ans✓✓✓-WPA3
__________ is used for port scanning, discovering devices, and searching for hosts
on a network. It is an important tool to help identify and remove unessential
services when hardening an operating system. Ans✓✓✓-Nmap
___________ mandates certain practices for financial record keeping. Ans✓✓✓-
SOX
,____________ ensures data has not been tampered with and is correct,
authentic, and reliable. Ans✓✓✓-Integrity
____________ is a tool used to find and report network services on hosts that
have known vulnerabilities. Ans✓✓✓-Nessus
____________ is where an attacker makes the hosting application server issue
requests to arbitrary external domains or internal resources in an attempt to
identify sensitive data. Ans✓✓✓-SSRF
_____________ are configured to deliberately display vulnerabilities or materials
that would make the system attractive to an attacker to lure them in. Ans✓✓✓-
Honeypot
_____________ attacks allow unauthorized users to access data, applications, or
environments. Ans✓✓✓-Interception.
_____________ ensures authorized users have access to resources when needed.
Ans✓✓✓-Availability
_____________ is a network tool that can map the topology of and help locate
vulnerabilities in firewalls. Ans✓✓✓-Hping3
_____________ is a sniffer that is capable of intercepting and troubleshooting
traffic from both wired and wireless sources. Ans✓✓✓-Wireshark
_____________ is a tool commonly used to detect wireless access points.
Ans✓✓✓-Kismet
, _____________ is an open-source Web server analysis tool that checks for
common vulnerabilities. It is not a type of tool categorized as an exploit
framework. Ans✓✓✓-Nikto
_____________ is the process of ensuring and confirming that the identity of the
user is genuine and legitimate. Proving who you are. Ans✓✓✓-Authenticity
______________ controls such as video surveillance systems and burglar alarms,
serve to detect and report undesirable events. Ans✓✓✓-Detective
______________ is a hash function that is commonly used to validate and sign
digital security certificates and documents. Ans✓✓✓-SHA-2
_______________ agrees to standards but does not make laws or regulations.
Ans✓✓✓-Industry
_______________ is the process of ascribing a user identifier (ID) to a human
being or to another computer or network component. Ans✓✓✓-Identification
________________ is a widely used asymmetric encryption method used for
many transactions including in the Secure Sockets Layer (SSL) protocol used to
secure Web and email traffic. Ans✓✓✓-RSA
________________ is mandated by congress. Ans✓✓✓-Regulatory
