Introduction to Cybersecurity: Course Final Exam Test Online

Hint

Confidentiality is a set of rules that prevents sensitive information from being disclosed to unauthorized people, resources and processes. Methods to ensure confidentiality include data encryption, identity proofing and two factor authentication.

Hint

The objectives for data integrity include data not being altered during transit and not being changed by unauthorized entities. Authentication and encryption are methods to ensure confidentiality. Data being available all the time is the goal of availability.

Hint

You should always verify that your device isn’t configured with file and media sharing and that it requires user authentication with encryption.

Hint

Placed in front of web servers, reverse proxy servers protect, hide, offload and distribute access to web servers.

Hint

This is an entry-level security certification that meets the U.S. Department of Defense Directive 8570.01-M requirements, which is an important item for anyone looking to work in IT security for the federal government.

Hint

This certification tests your understanding and knowledge of how to look for weaknesses and vulnerabilities in target systems using the same knowledge and tools as a malicious hacker but in a lawful and legitimate manner.

Hint

The main reason for resorting to cyberwarfare is to gain advantage over adversaries, whether they are nations or competitors.

Hint

Systems and sensitive data can be protected through techniques such as authentication, authorization and encryption. Developers should stick to using security techniques and libraries that have already been created, tested and verified and should not attempt to create their own security algorithms. These will only likely introduce new vulnerabilities.

Hint

Open Authorization is an open standard protocol that allows end users to access third party applications without exposing their user passwords.

Hint

This is an entry-level certification for newcomers who are preparing to start their career in the cybersecurity field.

Hint

Malware can be classified as follows: Virus (self-replicates by attaching to another program or file) Worm (replicates independently of another program) Trojan horse (masquerades as a legitimate file or program) Rootkit (gains privileged access to a machine while concealing itself) Spyware (collects information from a target system) Adware (delivers advertisements with or without consent) Bot (waits for commands from the hacker) Ransomware (holds a computer system or data captive until payment isreceived)

Hint

Cryptocurrency owners keep their money in encrypted, virtual ‘wallets.’ When a transaction takes place between the owners of two digital wallets, the details are recorded in a decentralized, electronic ledger or blockchain system. This means it is carried out with a degree of anonymity and is self-managed, with no interference from third parties such as central banks or government entities.

Hint

Processing refers to data that is being used to perform an operation such as updating a database record (data in process). Storage refers to data stored in memory or on a permanent storage device such as a hard drive, solid-state drive or USB drive (data at rest). Transmission refers to data traveling between information systems (data in transit).

Hint

An IDS, or intrusion detection system, is a device that can scan packets and compare them to a set of rules or attack signatures. If the packets match attack signatures, then the IDS can create an alert and log the detection.

Hint

A Distributed DoS (DDoS) attack is similar to a DoS attack but originates from multiple, coordinated sources. For example:

• An attacker builds a network (botnet) of infected hosts called zombies, which are controlled by handler systems.
• The zombie computers will constantly scan and infect more hosts, creating more and more zombies.
• When ready, the hacker will instruct the handler systems to make the botnet of zombies carry out a DDoS attack.

Hint

DDoS, or distributed denial of service, attacks are used to disrupt service by overwhelming network devices with bogus traffic.