Introduction to Cybersecurity Practice Exam
Course Introduction
Introduction to Cybersecurity offers students a foundational understanding of the principles, concepts, and technologies that secure computer systems and digital information. The course covers topics such as types of cyber threats and attacks, cybersecurity best practices, risk management, cryptography, network security, and legal and ethical issues in the digital world. Students will explore real-world case studies and gain practical skills to identify vulnerabilities, protect data, and respond to security incidents, preparing them to navigate the increasingly complex landscape of cybersecurity challenges in both personal and professional environments.
Recommended Textbook
CompTIA Security+ Guide to Network Security Fundamentals 5th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/3831
Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76425
Sample Questions
Q1) Which of the three protections ensures that only authorized parties can view information?
A)Security
B)Availability
C)Integrity
D)Confidentiality
Answer: D
Q2) In information security, what constitutes a loss?
A)theft of information
B)a delay in transmitting information that results in a financial penalty
C)the loss of good will or a reputation
D)all of the above
Answer: D
Q3) Which position below is considered an entry-level position for a person who has the necessary technical skills?
A)security technician
B)security administrator
C)CISO
D)security manager
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76418
Sample Questions
Q1) How many different Microsoft Windows file types can be infected with a virus?
A)50
B)60
C)70
D)80
Answer: C
Q2) Which of the following is malicious computer code that reproduces itself on the same computer?
A)virus
B)worm
C)adware
D)spyware
Answer: A
Q3) What is a worm?
Answer: A worm is a malicious program that uses a computer network to replicate, and is designed to enter a computer through the network then take advantage of vulnerability in an application or an operating system on the host computer.
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Application and Networking-Based Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76417
Sample Questions
Q1) HTML uses which option below within embedded brackets (< >) causing a web browser to display text in a specific format?
A)blocks
B)marks
C)taps
D)tags
Answer: D
Q2) Part of the TCP/IP protocol for determining the MAC address based on the IP address.
A)Address Resolution Protocol (ARP)
B)ARP Poisoning
C)Buffer overflow attack
D)Command injection
E)Cross-site scripting (XSS)
F)DNS poisoning
G)Flash cookie
H)Ping flood
I) Session token
J) Smurf attack
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76416
Sample Questions
Q1) What is the maximum effective range of a typical passive RFID tag?
A)12
B)15
C)19
D)25
Q2) Keyed entry locks are much more difficult to defeat than deadbolt locks.
A)True
B)False
Q3) DLP agent sensors are installed on each host device, and monitor for actions such as printing, copying to a USB flash drive, and burning to a CD or DVD.
A)True
B)False
Q4) What are the three states of data that DLP typically examines?
Q5) A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology?
A)Anti-climb
B)Spiked barrier
C)Roller barrier
D)Rotating spikes
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76415
Sample Questions
Q1) A cipher that manipulates an entire block of plaintext at one time.
A)Advanced Encryption Standard (AES)
B)Block cipher
C)Ciphertext
D)Data Encryption Standard (DES)
E)Diffie-Hellman (DH)
F)Elliptic curve cryptography (ECC)
G)Ephemeral key
H)Private key
I)Public key
J)Stream cipher
Q2) Cryptography that attempts to use the microscopic behaviors of objects to develop and share keys while also detecting eavesdropping is known as what type of cryptography?
A)Reactive cryptography
B)Symmetric cryptography
C)Analog cryptography
D)Quantum cryptography
Q3) A(n) ____________________ is a method used by operating systems to store, retrieve, and organize files.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76414
Sample Questions
Q1) Digital certificates cannot be used to identify objects other than users.
A)True
B)False
Q2) Select below the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:
A)Registration Authority
B)Delegation Authority
C)Certification Authority
D)Participation Authority
Q3) A trust model that has multiple CAs that sign digital certificates
A)Bridge trust model
B)Certificate Authority (CA)
C)Certificate Repository
D)Digital certificate
E)Distributed trust model
F)key escrow
G)Public key Infrastructure (PKI)
H)Session keys
I)Third-party trust
J)Trust model
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76413
Sample Questions
Q1) A server that routes incoming requests to a specific destination server, and acts as the final destination IP for all client access, is known as a:
A)forward proxy
B)application proxy
C)system proxy
D)reverse proxy
Q2) Defense in depth, or layered security, involves the use of multiple types of network hardware within a network.
A)True
B)False
Q3) A ______________ is a worker who work occasionally or regularly from a home office.
Q4) What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?
A)Application
B)Protocol
C)Packet
D)Signature
Q5) Describe how VLAN communication takes place.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76412
Sample Questions
Q1) List the steps of a DNS lookup.
Q2) What transport protocol is used by Windows operating systems to allow applications on separate computers to communicate over a LAN?
A)SSH
B)Telnet
C)NetBIOS
D)DHCP
Q3) Discuss one security advantage to hosts running virtualization.
Q4) When setting up a server virtualization environment, what component below manages the virtual machine operating systems and supports one or more guest systems?
A)kernel
B)supervisor
C)hypercard
D)hypervisor
Q5) TCP/IP uses its own five-layer architecture that includes Network Interface, Internet, Control, Transport, and Application.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76411
Sample Questions
Q1) Which of the following choices is not one of the four types of packets used by EAP?
A)Request
B)Response
C)Success
D)Error
Q2) APs use antennas that radiate a signal in all directions.
A)True
B)False
Q3) Bluetooth devices are not backward compatible with previous versions.
A)True
B)False
Q4) Because PEAP can be vulnerable to specific types of attacks, Cisco now recommends that users migrate to a more secure EAP than PEAP.
A)True
B)False
Q5) What is the Message Integrity Check (MIC) within WPA used for?
Q6) When a wireless device looks for beacon frames it is known as
Q7) What is the role of the IEEE in computer networking and wireless communications?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Mobile Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76424
Sample Questions
Q1) Describe a netbook computer.
Q2) A technology that prevents a mobile device from being used until the user enters the correct passcode.
A)Asset tracking
B)Geo-fencing
C)Geo-tagging
D)Location services
E)Lock screen
F)Mobile application management (MAM)
G)Off-boarding
H)On-boarding
I)Remote wiping
J) Secure digital (SD)
Q3) What are the two options for using encryption with mobile devices?
Q4) A laptop may have multiple hardware ports. Which of the following is not a typical port included on a laptop?
A)Universal Serial Bus (USB)
B)eSATA
C)RJ-45
D)RS232
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76423
Sample Questions
Q1) Providing only the minimum amount of privileges necessary to perform a job or function.
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction
Q2) Discuss the differences between DAP and LDAP.
Q3) List two major access control models.
Q4) Describe the Bell-LaPadula model.
Q5) The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76422
Sample Questions
Q1) OpenID is an example of a web-based federated identity management (FIM) system.
A)True
B)False
Q2) What type of one-time password (OTP) changes after a set time period?
A)HMAC-Based one-time password (HOTP)
B)Period-based one-time password (POTP)
C)Time-based one-time password (TOTP)
D)Interval-based one-time password (IOTP)
Q3) What is the difference between multifactor authentication and single-factor authentication?
Q4) In most systems, a user logging in would be asked to ____________________ herself.
Q5) Discuss the weaknesses of OpenID.
Q6) The use of one authentication credential to access multiple accounts or applications is referred to as?
A)Individual Sign On
B)Single Sign On
C)Unilateral Sign On
D)Federated Sign On
Q7) List and describe two of the common password setting objects.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76421
Sample Questions
Q1) RAID level 0 is known as disk mirroring, because it involves connecting multiple drives in the server to the same disk controller card.
A)True
B)False
Q2) When creating a data backup plan or policy, what five basic questions should be answered?
Q3) A statistical value that is the average time until a component fails, cannot be repaired, and must be replaced.
A)Business continuity
B)Chain of custody
C)Clustering
D)Computer forensics
E)Continuity of operations
F)Faraday cage
G)Hot site
H)Mean time between failures (MTBF)
I)Recovery point objective
J)Risk assessment
Q4) RAID 0 technology is based on ____________________.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76420
Sample Questions
Q1) What kind of policy outlines how organizations use personal information it collects?
A)VPN
B)network
C)encryption
D)privacy
Q2) Websites that group individuals and organizations into clusters or groups based on some sort of affiliation are considered to be what type of websites?
A)social networking
B)social engineering
C)social management
D)social control
Q3) What are the typical classification designations of government documents?
Q4) What is a general security tip for using a social networking site?
Q5) Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: Vulnerability Assessment and Third Party Integration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76419
Sample Questions
Q1) Discuss one type of asset that an organization might have.
Q2) An administrator needs to view packets and decode and analyze their contents. What type of application should the administrator use?
A)application analyzer
B)protocol analyzer
C)threat profiler
D)system analyzer
Q3) Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.
Q4) The goal of what type of threat evaluation is to better understand who the attackers are, why they attack, and what types of attacks might occur?
A)threat mitigation
B)threat profiling
C)risk modeling
D)threat modeling
Q5) Discuss the purpose of OVAL.
Q6) List two types of hardening techniques.
Q7) List and describe the three categories that TCP/IP divides port numbers into.
To view all questions and flashcards with answers, click on the resource link above. Page 17