Quiz Preview 10/ Computer Science & Information Technology - Introduction To Computer Science

The major role of ________ is to confirm that a user is who he or she claims to be.

Measures to maintain data availability do not include redundant systems' disk array and clustered machines, antivirus software to stop worms from destroying networks, and distributed denial-of-service (DDoS) prevention systems.

3

________ is the assurance that the systems responsible for delivering, storing, and processing information are accessible when required by authorized users.

4

Measures to maintain data integrity may include a checksum and access control.

5

Confidentiality controls include data classification, data encryption, and proper equipment disposal.

6

________ is trustworthiness of data or resources in the prevention of improper and unauthorized changes—the assurance that information is sufficiently accurate for its purpose.

7

Information security is defined as "a state of well-being of information and infrastructure in which the possibility of theft, tampering, and disruption of information and services is kept low and tolerable."

8

Information security relies on four major elements: confidentiality, integrity, availability, and authenticity.

9

________ is the assurance that the information is accessible only to those authorized to have access.

10

In a ________, the attacker exploits vulnerabilities in a computer application before the software developer can release a patch for them.

11

________ is the part of a malware or an exploit that performs the intended malicious actions, which can include creating backdoor access to a victim's machine, damaging or deleting files, and data theft.

12

Information security refers to ________ or ________ information and information systems that use, store, and transmit information from unauthorized access, disclosure, alteration, and destruction.

13

Information is NOT the critical asset that organizations need to secure.

14

Which of the following is an attack technique where the only information available to the attacker is some plaintext blocks along with the corresponding ciphertext and algorithm used to encrypt and decrypt the text?

15

Because attackers break into systems for various reasons, it is important for information security professionals to understand how malicious hackers exploit systems and the probable reasons behind the attacks.

16

Which of the following cryptography attacks is similar to the chosen plaintext attack, except that the attacker can obtain ciphertexts encrypted under two different keys?

17

Which of the following is an attack where an attacker intercepts the communication between a client and server, negotiates cryptographic parameters to decrypt the encrypted content, and obtains confidential information such as system passwords?

18

Which of the following symmetric-key block ciphers has either 18 rounds for 128-bit keys or 24 rounds for 256-bit keys and uses four 8 × 8-bit S-boxes that perform affine transformations and logical operations?

19

Which of the following protocols is often used for data compression, digital signing, encryption and decryption of messages, emails, files, and directories as well as to enhance the privacy of email communications?

20

Which of the following components of public key infrastructure acts as a verifier for the certificate authority?

21

Which of the following information does an attacker enumerate by analyzing the AWS error messages that reveal information regarding the existence of a user?

22

Which of the following encryption algorithms is a large tweakable symmetric-key block cipher with equal block and key sizes of 256, 512, or 1024 and involves only three operations, that is, addition-rotation-XOR?

23

Which of the following is a serverless security risk due to the poor design of identity and access controls, paving the way for attackers to identify missing resources, such as open APIs and public cloud storage, and leading to system business logic breakage and execution flow disruption?

24

In which of the following attacks does an attacker exploit the vulnerability residing in a bare-metal cloud server and use it to implant a malicious backdoor in its firmware?

25

Which of the following is the component in the docker architecture where images are stored and pulled and can be either private or public?

26

Which of the following cloud deployment models is also known as the internal or corporate cloud and is a cloud infrastructure operated by a single organization and implemented within a corporate firewall?

27

Which of the following cloud services provides data processing services, such as IoT services for connected devices, mobile and web applications, and batch-and-stream processing?

28

Which of the following Purdue levels is commonly referred to as an industrial demilitarized zone (IDMZ)?

29

Through which of the following SCADA vulnerabilities does an attacker exploit code security issues that include out-of-bound read/write vulnerabilities and heap- and stack-based buffer overflow?

30

Which of the following RFCrack commands is used by an attacker to perform an incremental scan on a target IoT device while launching a rolling-code attack?

31

Which of the following components of an IoT framework must incorporate strong encryption techniques for secure communications between endpoints and the authentication mechanism for the edge components?

32

John, an employee of an organization, always connects to the corporate network using his own mobile device. Which of the following best practices prevents BYOD risk when John connects to the corporate network?

33

In which of the following attacks does an attacker dump memory by rebooting a victim's device with a malicious OS and then extract sensitive data from the dumped memory?

34

Which of the following techniques involves sending unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones and laptops?

35

Which of the following Bluetooth attacks is similar to the ICMP ping-of-death attack, where the attacker sends an oversized ping packet to a victim's device to cause a buffer overflow?

36

Which of the following attacks does not directly recover a WEP key and requires at least one data packet from a target AP for initiation?

37

In which of the following attacks does an attacker install a fake communication tower between two authentic endpoints with the intention of misleading a user and interrupting the data transmission between the user and real tower to hijack an active session?

38

In which of the following types of attack does an attacker exploit the carrier-sense multiple access with collision avoidance (CSMA/CA) clear channel assessment (CCA) mechanism to make a channel appear busy?

39

Which of the following is a mode of operation that includes EAP or RADIUS for centralized client authentication using multiple authentication methods, such as token cards, Kerberos, and certificates?

40

Which of the following protocols uses AES and the Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP) for wireless data encryption?

41

To find an image’s ______ Multiply the number of pixels in the images height by the number of pixels in its width

42

Sets of programs designed to operate, control, and extend processing capabilities of the computer is

43

What is difference between a Sales Receipt and an Invoice?

44

What are the sequence of steps to complete bank reconciliation?

45

When powering up the computer, the ______ enables a CPU to communicate with the HDD.

46

One common way to deal with spam that makes it to your computer is to use a/an ____.

Find your answers, solutions and more...

We made it much easier for you to find exactly what you're looking for on Sciemce. Enjoy our search engine "Clutch."

Save a GPA. Donate your notes with us.

Quiz Preview 10/ Computer Science & Information Technology - Introduction To Computer Science

Recent Packs