Comp Con Final Questions Chapter 7

Chapter 7: Which of the following terms would best match this definition: Transforms a message or data file in such a way that its contents are hidden from unauthorized readers. encryption An original message or file that has not yet been encrypted is referred to as ciphertext. false A cryptographic ________ is a word, number, or phrase that must be known to encrypt or decrypt data. key There are various encryption methods, but __________ is the encryption standard currently used worldwide. AES A cryptographic __________ is a procedure for encryption or decryption. algorithm Which of the following is not an example of an authentication protocol? password, PINs, fingerprint scanner The single most effective security measure for digital devices is to password protect access to them. true Passwords used as encryption ________ help to make hijacked data unusable. Keys Android devices automatically encrypt data stored on the device when a user activates the login password. false It is not possible to encrypt a Windows hard drive volume. false OS X devices include a utility that automatically encrypts data stored locally. true A(n) _______ password is difficult to hack. strong Conventional wisdom tells us that strong passwords are at least _____ characters in length and include one or more uppercase letters, numbers, and symbols. eight Which of the following type of attack uses password cracking software to generate every possible combination of letters, numerals, and symbols. brute force Which of the following is not a characteristic of a weak password? eight characters in length and include one or more uppercase letters, numbers and symbols Brute force attacks methodically try every possible password until the correct one is found true Password _________ is a measure in bits of a password's unpredictability. entropy Password entropy is a measure in _____ of a password's unpredictability bits If you want to store passwords on your digital device, make sure to _________ the file in which they are stored. encrypt If you feel more secure with a totally random and unique password for each of your logins, then a(n) _______________ is an excellent option. password manager The core function of a password manager is to store user IDs with their corresponding ________. passwords Password managers can generate unique passwords that have very good entropy true Password managers store passwords in a(n) _________ file enrypted If you use a password manager, what do you as the user need to remember? the master password A password manager can store passwords in an encrypted file located at which of the following storage locations? local storage, cloud storage, USB storage ________ refers to any computer program designed to surreptitiously enter a digital device. malware The action carried out by malware code is referred to as a(n) _______. payload Common classifications of _________ include viruses, worms, and trojans. malware A computer _________ is a set of selfreplicating program instructions that surreptitiously attaches itself to a legitimate executable file on a host device. virus In addition to replicating itself, a virus selfdistributing. false Viruses spread themselves from one device to another false __________ is the process of modifying an executable file or data stream by adding additional commands code injection What is the process called when an app from a source other than an official app store is installed on a device? side-loading any code that is designed to hide the existence of processes and privileges is referred to as a(n) _______. rootkit A key characteristic of viruses is their ability to lurk in a device for days or months, quietly replicating themselves. true A computer _______ is a selfreplicating, selfdistributing program designed to carry out unauthorized activity on a victim's device. worm . Which of the following is not a characteristic of a computer worm? spread through a process called side-loading Stuxnet is a notorious computer _______. worm Similar to a worm, a trojan is not designed to spread itself to other devices. false Most trojans are not designed to replicate themselves true A(n) __________ is a computer program that seems to perform one function while actually doing something else. trojan _________ are standalone programs that masquerade as useful utilities or applications trojans Trojans depend on ________ to spread. social engineering A(n) _________ is designed to deliver malicious code into a device. dropper Any data entering a digital device could be malware. True The best defense against malware is _____________ antivirus software A virus __________ is a section of program code that contains a unique series of instructions known to be part of a malware exploit. signature Antivirus software can use techniques called__________ to detect malware by analyzing the characteristics and behavior of suspicious files. heuristic analysis One method of heuristic analysis allows the suspicious file to run in a guarded environment called a(n) ___________ . sandbox Heuristics may produce false positives that mistakenly identify a legitimate file as malware true When antivirus software detects malware, which of the following would not be a course of action you could take? conduct a heuristic analysis Once you have installed antivirus software, you don't typically need to keep it running full time in the background false A virus __________ usually arrives as an email message that contains warnings about a supposedly new virus. hoax A(n) ________________ takes place when an unauthorized person gains access to a digital device by using an Internet connection and exploiting vulnerabilities in hardware or software. online intrusion Which of the following sequence of events best describes an online intrusion? malware enters the device, then opens a backdoor, leading to an open communication link on the device that a hacker can exploit A ___________ is malware that arrives in a trojan disguised as legitimate software and sets up a secret communication link to a hacker RAT A(n) __________ is an undocumented method of accessing a digital device. backdoor RATs can be used to create a backdoor to a victim's device that takes control of the device's camera. true If you are traveling and expect to access files on a computer that you've left at home, make sure the remote access utilities is turned off. false Which type of device is the top target for ransomware? smartphones ___________ locks a device and then requests payment for an unlocking code ransomware Hackers who gain control over several computers can organize them into a clientserver network known as a(n) _______. botnet A botnet has a server that is controlled by hackers. true ______ can be used to flood a Web site with so much traffic that it can no longer provide its intended service DDoS, botnets, and commands from a botmaster Correctly installed antivirus software will prevent all intrusions. false Antivirus software cannot be expected to block threats that do not arrive in the form of malware. true A(n) ______________ attack exploits previously unknown vulnerabilities in software applications, hardware, and operating system program code zero-day _____________ software shields certain applications against behaviors commonly exhibited by intrusions anti-exploit Hackers can use ports to communicate with devices in botnets true A(n) __________ pings a packet of data to a port in order to see if that port is open or not. port scan . A network utility called ______________ produces a detailed list of open ports on a device. netstat A(n) __________ is a device or software that is designed to block unauthorized access while allowing authorized communications. firewall Which of the following can be used to block unauthorized access while allowing authorized communications on a device or network? network router, personal firewall and hardware that uses a NAT Any software that secretly gathers personal information without the victim's knowledge is classified as __________. spyware Which of the following would be considered spyware? a keylogger MITM attacks include which of the following address spoofing, IMSI catchers, evil twins The objective of a MITM attack is for a third party to block communications between two entities. false A(n) _____________ is a LAN server that is designed to look like a legitimate WiFi hotspot evil twin To establish a(n) ________, hackers set up an unsecured WiFi hotspot complete with an Internet connection. evil twin __________ changes an originating address or a destination address to redirect the flow of data between two parties. address spoofing If a hacker intercepts encrypted data by way of a MITM attack, the contents of that data is not always secure. true The current method of encrypting communication between a client and a server depends on a security protocol called _______ TLS _______ is a 64bit number that uniquely identifies a cellular device. IMSI IMSI catchers are operated by cellular service companies. false ______________ is a deceptive practice that exploits human psychology by inducing victims to interact with a digital device in a way that is not in their best interest. social engineering ____________ is a term for a person who devises and carries out a scam in order to accomplish a goal. NOT main-in-the-middle, internet worm or RAT (none of the above) Social engineering attacks prey on human vulnerabilities true A social engineering scam called ___________ is when a victim is promised a large sum of money in exchange for a bank account number from which a small advance fee is withdrawn. advance fee fraud __________ is defined as unsolicited messages that are usually sent in massive numbers using electronic mail systems. spam Spam sent by scammers often uses spoofed email addresses. true Most massmailing databases are legitimately compiled from customer lists. false Spam accounts for approximately ______ of all email. 70% The CAN-SPAM Act is considered an effective means of controlling the volume of spam on the Internet. false ___________ is a term describing spam that uses a false pretext to trick victims into participating. pretexting Most ISPs and email services do not use filtering techniques to block spam. false A spam __________ uses a set of rules to examine email messages and determine which are spam. filter Which of the following is not a type of spam filter? entropy Blacklist and header filtering is usually performed by email clients and Webmail services. false . ________ is an email scam that masquerades as a message from a legitimate source. phishing _________ redirects Web site traffic to fraudulent Web sites pharming Pharming attacks carried out by DNS spoofing can be detected by antivirus software or spyware removal software false ____________ is a service offered by Google that checks URLs against a list of suspicious Web site URLs. safe browsing Microsoft uses a service called Safe Browsing to alert users about sites to avoid. false . A ______________ exploit usually begins with a virus warning and an offer to disinfect the infected device. rogue antivirus The most common types of PUPs and PUAs are toolbars and alternative browsers. true What is the term used to describe unwanted software that installs along with the application software that you originally downloaded and installed? PUP