Cybersecurity Fundamentals
Solved Exam Questions
Course Introduction
Cybersecurity Fundamentals introduces students to the essential principles and practices that protect computer systems, networks, and data from digital threats. Covering topics such as types of cyber attacks, threat detection, risk management, cryptography, network security, and ethical issues, this course provides a broad understanding of the cybersecurity landscape. Through lectures, hands-on labs, and real-world case studies, students will develop skills to identify vulnerabilities, implement basic security measures, and understand the importance of safeguarding digital information in both personal and professional contexts.
Recommended Textbook
Computer Security Principles and Practice 3rd Edition by William Stallings
Available Study Resources on Quizplus
24 Chapters
1076 Verified Questions
1076 Flashcards
Source URL: https://quizplus.com/study-set/3981
Page 2
Chapter 1: Computer Systems Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79973
Sample Questions
Q1) A(n)_________ assessment is periodically assessing the risk to organizational operations,organizational assets,and individuals,resulting from the operation of organizational information systems and the associated processing,storage,or transmission or organizational information.
Answer: risk
Q2) Masquerade,falsification,and repudiation are threat actions that cause __________ threat consequences.
A)unauthorized disclosure
B)disruption
C)deception
D)usurpation
Answer: C
Q3) Security mechanisms typically do not involve more than one particular algorithm or protocol.
A)True
B)False
Answer: False
Q4) A(n)_________ is any means taken to deal with a security attack.
Answer: countermeasure
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Cryptographic Tools
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79962
Sample Questions
Q1) There are two general approaches to attacking a symmetric encryption scheme: cryptanalytic attacks and __________ attacks.
Answer: brute-force
Q2) __________ is the scrambled message produced as output.
A)Plaintext
B)Ciphertext
C)Secret key
D)Cryptanalysis
Answer: B
Q3) A __________ stream is one that is unpredictable without knowledge of the input key and which has an apparently random character.
Answer: pseudorandom
Q4) The __________ is a pair of keys that have been selected so that if one is used for encryption,the other is used for decryption.
Answer: public and private key
Q5) Public-key cryptography is asymmetric.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: User Authentication
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79956
Sample Questions
Q1) Presenting or generating authentication information that corroborates the binding between the entity and the identifier is the ___________.
A)identification step
B)authentication step
C)verification step
D)corroboration step
Answer: C
Q2) A __________ authentication system attempts to authenticate an individual based on his or her unique physical characteristics.
Answer: biometric
Q3) A host generated random number is often called a __________.
Answer: nonce
Q4) __________ systems identify features of the hand,including shape,and lengths and widths of fingers.
A)Signature
B)Fingerprint
C)Hand geometry
D)Palm print
Answer: C
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Access Control
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79955
Sample Questions
Q1) Security labels indicate which system entities are eligible to access certain resources.
A)True
B)False
Q2) An ABAC model can define authorizations that express conditions on properties of both the resource and the subject.
A)True
B)False
Q3) Role hierarchies make use of the concept of __________ to enable one role to implicitly include access rights associated with a subordinate role.
Q4) __________ provide a means of adapting RBAC to the specifics of administrative and security policies in an organization.
A)Constraints
B)Mutually Exclusive Roles
C)Cardinality
D)Prerequisites
Q5) A __________ access control scheme is one in which an entity may be granted access rights that permit the entity,by its own volition,to enable another entity to access some resource.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Database and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79954
Sample Questions
Q1) A __________ is a suite of programs for constructing and maintaining the database and for offering ad hoc query facilities to multiple users and applications.
Q2) The __________ cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.
A)hybrid
B)community
C)private
D)public
Q3) An IPS incorporates IDS functionality but also includes mechanisms designed to block traffic from intruders.
A)True
B)False
Q4) The cloud carrier is useful when cloud services are too complex for a cloud consumer to easily manage.
A)True
B)False
Q5) In a ___________ administration a small number of privileged users may grant and revoke access rights.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Malicious Software
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/79953
Sample Questions
Q1) Sometimes known as a "logic bomb",the __________ is the event or condition that determines when the payload is activated or delivered.
Q2) __________ technology is an anti-virus approach that enables the anti-virus program to easily detect even the most complex polymorphic viruses and other malware,while maintaining fast scanning speeds.
Q3) A __________ virus is explicitly designed to hide itself from detection by anti-virus software.
Q4) A __________ is a collection of bots capable of acting in a coordinated manner.
Q5) Unsolicited bulk e-mail is referred to as __________.
A)spam
B)propagating
C)phishing
D)crimeware
Q6) Computer viruses first appeared in the early __________.
A)1960s
B)1970s
C)1980s
D)1990s
Q7) A __________ is when a user views a Web
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Denial-Of-Service Attacks
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79952
Sample Questions
Q1) Using forged source addresses is known as _________.
A)source address spoofing
B)a three-way address
C)random dropping
D)directed broadcast
Q2) The source of the attack is explicitly identified in the classic ping flood attack.
A)True
B)False
Q3) When a DoS attack is detected,the first step is to _______.
A)identify the attack
B)analyze the response
C)design blocking filters
D)shut down the network
Q4) In a _______ attack the attacker creates a series of DNS requests containing the spoofed source address for the target system.
A)SYN flood
B)DNS amplification
C)poison packet
D)UDP flood
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Intrusion Detection
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79951
Sample Questions
Q1) ________ are decoy systems that are designed to lure a potential attacker away from critical systems.
Q2) The __________ is the human with overall responsibility for setting the security policy of the organization,and,thus,for decisions about deploying and configuring the IDS.
Q3) A common location for a NIDS sensor is just inside the external firewall.
A)True
B)False
Q4) A (n)__________ is a hacker with minimal technical skill who primarily uses existing attack toolkits.
A)Master
B)Apprentice
C)Journeyman
D)Activist
Q5) Network-based intrusion detection makes use of signature detection and anomaly detection.
A)True
B)False
Q6) An IDS comprises three logical components: analyzers,user interface and _____.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Firewalls and Intrusion Prevention Systems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79950
Sample Questions
Q1) _________ matching scans incoming packets for specific byte sequences (the signature)stored in a database of known attacks.
Q2) The _________ defines the transport protocol.
A)destination IP address
B)source IP address
C)interface
D)IP protocol field
Q3) The firewall follows the classic military doctrine of _________ because it provides an additional layer of defense.
Q4) A _________ firewall applies a set of rules to each incoming and outgoing IP packet and then forwards or discards the packet.
Q5) Snort Inline adds three new rule types: drop,reject,and _________.
Q6) The _________ is inserted between the premises network and the Internet to establish a controlled link and to erect an outer security wall or perimeter to protect the premises network from Internet-based attacks.
Q7) A logical means of implementing an IPSec is in a firewall.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Buffer Overflow
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/79972
Sample Questions
Q1) __________ defenses aim to detect and abort attacks in existing programs.
Q2) _________ attacks can occur in a binary buffer copy when the programmer has included code to check the number of bytes being transferred,but due to a coding error,allows just one more byte to be copied than there is space available.
Q3) _________ is a tool used to automatically identify potentially vulnerable programs.
A)Slamming
B)Sledding
C)Fuzzing
D)All of the above
Q4) In the classic __________ overflow,the attacker overwrites a buffer located in the local variable area of a stack frame and then overwrites the saved frame pointer and return address.
Q5) Shellcode must be able to run no matter where in memory it is located.
A)True
B)False
Q6) The __________ project produces a free,multiplatform 4.4BSD-based UNIX-like operating system.
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Software Security
Available Study Resources on Quizplus for this Chatper
43 Verified Questions
43 Flashcards
Source URL: https://quizplus.com/quiz/79971
Sample Questions
Q1) __________ programming is a form of design intended to ensure the continuing function of a piece of software in spite of unforeseeable usage of the software.
Q2) In the ________ attack the user supplied input is used to construct a SQL request to retrieve information from a database.
Q3) A number of widely used standard C _________ compound the problem of buffer overflow by not providing any means of limiting the amount of data transferred to the space available in the buffer.
Q4) An ASCII character can be encoded as a 1 to 4 byte sequence using the UTF-8 encoding.
A)True
B)False
Q5) The most common technique for using an appropriate synchronization mechanism to serialize the accesses to prevent errors is to acquire a _______ on the shared file,ensuring that each process has appropriate access in turn.
A)lock
B)code injection
C)chroot jail
D)privilege escalation
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Operating System Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79970
Sample Questions
Q1) Each layer of code needs appropriate hardening measures in place to provide appropriate security services.
A)True
B)False
Q2) It is possible for a system to be compromised during the installation process.
A)True
B)False
Q3) Once the system is appropriately built,secured,and deployed,the process of maintaining security is ________.
A)complete
B)no longer a concern
C)continuous
D)sporadic
Q4) The first critical step in securing a system is to secure the __________.
A)base operating system
B)system administrator
C)malware protection mechanisms
D)remote access privileges
Q5) System security begins with the installation of the ________.
Page 14
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Trusted Computing and Multilevel Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79969
Sample Questions
Q1) The __________ is a controlling element in the hardware and operating system of a computer that regulates the access of subjects to objects on the basis of security parameters of the subject and object.
Q2) A component describes a specific set of security requirements.
A)True B)False
Q3) The addition of multilevel security to a database system does not increase the complexity of the access control function.
A)True
B)False
Q4) Multilevel security is of interest when there is a requirement to maintain a resource in which multiple levels of data sensitivity are defined. A)True
B)False
Q5) The ________ access mode allows the subject neither read nor write access to the object but may invoke the object for execution.
Q6) A subject is said to have a security _________ of a given level.
Q7) Trusted computing provides three basic services: authenticated boot,certification, and _________.
Page 15
To view all questions and flashcards with answers, click on the resource link above.
Chapter 14: It Security Management and Risk Assessment
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79968
Sample Questions
Q1) ISO details a model process for managing information security that comprises the following steps: plan,do,________,and act.
Q2) The __________ approach to risk assessment aims to implement a basic general level of security controls on systems using baseline documents,codes of practice,and industry best practice.
Q3) The advantages of the _________ risk assessment approach are that it provides the most detailed examination of the security risks of an organization's IT system and produces strong justification for expenditure on the controls proposed.
Q4) The use of the _________ approach would generally be recommended for small to medium-sized organizations where the IT systems are not necessarily essential to meeting the organization's business objectives and additional expenditure on risk analysis cannot be justified.
Q5) _________ is choosing to accept a risk level greater than normal for business reasons.
A)Risk avoidance
B)Reducing likelihood
C)Risk transfer
D)Risk acceptance
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: It Security Controls,plans,and Procedures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79967
Sample Questions
Q1) The objective of the ________ control category is to avoid breaches of any law,statutory,regulatory,or contractual obligations,and of any security requirements.
A)access
B)asset management
C)compliance
D)business continuity management
Q2) Appropriate security awareness training for all personnel in an organization,along with specific training relating to particular systems and controls,is an essential component in implementing controls.
A)True
B)False
Q3) The three steps for IT security management controls and implementation are: prioritize risks,respond to risks,and __________ .
Q4) Contingency planning falls into the _________ class of security controls.
Q5) It is likely that the organization will not have the resources to implement all the recommended controls.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 17
Chapter 16: Physical and Infrastructure Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79966
Sample Questions
Q1) A person that becomes statically charged can damage electronic equipment by an electric discharge.
A)True
B)False
Q2) The ______ is an optional key that may be present on any PIV card,does not require PIN entry,and whose purpose is to authenticate the card and therefore its possessor.
A)VIS
B)BIO
C)CHUID
D)CAK
Q3) _______ threats encompass threats related to electrical power and electromagnetic emission.
Q4) _______ facilities include electrical power,communication services,and environmental controls such as heat and humidity.
A)Supporting
B)Information
C)Physical
D)All of the above
Q5) The most essential element of recovery from physical security breaches is ____.
Page 18
To view all questions and flashcards with answers, click on the resource link above.
Chapter 17: Human Resources Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79965
Sample Questions
Q1) The group of users,sites,networks,or organizations served by the CSIRT is a(n)_______.
Q2) CERT stands for ___________.
A)Computer Error Response Team
B)Compliance Error Repair Technology
C)Computer Emergency Response Team
D)Compliance Emergency Response Technology
Q3) A capability set up for the purpose of assisting in responding to computer security-related incidents that involve sites within a defined constituency is called a ______.
A)CIRT
B)CIRC
C)CSIRT
D)all of the above
Q4) Security awareness,training,and education programs may be needed to comply with regulations and contractual obligations.
A)True
B)False
Q5) In general,a(n)________ program seeks to inform and focus an employee's attention on issues related to security within the organization.
To view all questions and flashcards with answers, click on the resource link above. Page 19
Chapter 18: Security Auditing
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79964
Sample Questions
Q1) Although important,security auditing is not a key element in computer security.
A)True
B)False
Q2) Audit trails are different from audit logs.
A)True
B)False
Q3) Windows is equipped with three types of event logs: system event log,security event log,and ________ event log.
Q4) Data representing behavior that does not trigger an alarm cannot serve as input to intrusion detection analysis.
A)True
B)False
Q5) Severe messages,such as immediate system shutdown,is a(n)_____ severity.
A)alert
B)emerg
C)crit
D)warning
Q6) ______ is UNIX's general-purpose logging mechanism found on all UNIX variants and Linux.
Page 20
To view all questions and flashcards with answers, click on the resource link above.
Chapter 19: Legal and Ethical Aspects
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79963
Sample Questions
Q1) The relative lack of success in bringing cybercriminals to justice has led to an increase in their numbers,boldness,and the global scale of their operations.
A)True
B)False
Q2) A ________ provides distribution channels,such as an online shop or a Web retailer.
A)content provider
B)distributor
C)consumer
D)clearinghouse
Q3) The right to seek civil recourse against anyone infringing his or her property is granted to the ________.
Q4) ________ ensures that a user may make multiple uses of resources or services without others being able to link these uses together.
A)Anonymity
B)Pseudonymity
C)Unobservability
D)Unlinkability
To view all questions and flashcards with answers, click on the resource link above.
21
Chapter 20: Symmetric Encryption and Message
Confidentiality
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79961
Sample Questions
Q1) Symmetric encryption is also referred to as secret-key or single-key encryption.
A)True
B)False
Q2) Plaintext is the scrambled message produced as output.
A)True
B)False
Q3) For general-purpose block-oriented transmission you would typically use _______ mode.
A)CBC
B)CTR
C)CFB
D)OFB
Q4) With _________ encryption the encryption process is carried out at the two end systems.
Q5) The National Bureau of Standards is now the National Institute of Standards and Technology.
A)True
B)False
Q6) _________ is the process of attempting to discover the plaintext or key. Page 22
To view all questions and flashcards with answers, click on the resource link above.
Page 23
Chapter 21: Public-Key Cryptography and Message
Authentication
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79960
Sample Questions
Q1) ______ has been issued as RFC 2014,has been chosen as the mandatory-to-implement MAC for IP Security,and is used in other Internet protocols,such as Transport Layer Security.
Q2) The purpose of the __________ algorithm is to enable two users to exchange a secret key securely that can then be used for subsequent encryption of messages.
Q3) Although the _________ attack is a serious threat,there are simple countermeasures that can be used such as constant time calcs,random delays or blinding computations.
A)timing
B)chosen ciphertext
C)mathematical
D)none of the above
Q4) Cryptographic hash functions generally execute faster in software than conventional encryption algorithms such as DES.
A)True
B)False
Q5) The evaluation criteria for the new hash function are: security,_______,and algorithm and implementation characteristics.
Q6) One of the simplest hash functions is the ________ of every block.
To view all questions and flashcards with answers, click on the resource link above. Page 24
Chapter 22: Internet Security Protocols and Standards
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79959
Sample Questions
Q1) In the case of ________ only the digital signature is encoded using base64.
A)enveloped data
B)signed and enveloped data
C)signed data
D)clear-signed data
Q2) _________ is a specification for cryptographically signing e-mail messages,permitting a signing domain to claim responsibility for a message in the mail stream.
Q3) The result of S/MIME encrypting the digest using DSS and the sender's private DSS key is the ________.
A)digital signature
B)envelope
C)digest code
D)mail extension
Q4) The ________ is housed in the user's computer and is referred to as a client e-mail program or a local network e-mail server.
Q5) A signed data message can only be viewed by a recipient with __________ capability.
Q6) If encryption is used alone,_______ is used to convert the ciphertext to ASCII format.
To view all questions and flashcards with answers, click on the resource link above. Page 25
Chapter 23: Internet Authentication Applications
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79958
Sample Questions
Q1) ________ is a set of SOAP extensions for implementing message integrity and confidentiality in Web services.
Q2) _______ certificates are used in most network security applications,including IP security,secure sockets layer,secure electronic transactions,and S/MIME.
A)X.509
B)PKI
C)FIM
D)SCA
Q3) A software utility initially developed at MIT and available both in the public domain and in commercially supported versions,________ is the defacto standard for remote authentication.
Q4) Kerberos is designed to counter only one specific threat to the security of a client/server dialogue.
A)True
B)False
Q5) The certification _________ is the issuer of certificates and certificate revocation lists.
Q6) In a generic identity management architecture a ________ is an identity holder.
To view all questions and flashcards with answers, click on the resource link above. Page 26
Chapter 24: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/79957
Sample Questions
Q1) The two services involved with the distribution of messages within a DS are distribution and _________.
Q2) The MAC service data unit contains any protocol control information needed for the functioning of the MAC protocol.
A)True
B)False
Q3) ______ is the recommended technique for wireless network security.
A)Using encryption
B)Using anti-virus and anti-spyware software
C)Turning off identifier broadcasting
D)All of the above
Q4) Two types of countermeasures are appropriate to deal with eavesdropping: signal-hiding techniques and ____________.
Q5) WPA2 incorporates all of the features of the IEEE 802.11i WLAN security specifications.
A)True
B)False
Q6) CRC is an error detecting code.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 27