Modern security systems

1. The number of security incidents

		a)	is increasing every year
		b)	is decreasing every year
		c)	remains approximately constant
		d)	is independent of the security solutions adopted

Evaluate your answer

2. Network security

		a)	only involves securing the computers at each end of the communication
		b)	is a requirement only for business applications
		c)	objective is to mitigate the consequences of all possible threats and preventing them from entering or spreading network
		d)	is provided by the only use of data encryption mechanisms

Evaluate your answer

3. A network security system

		a)	is always a software solution with cryptographic capability
		b)	does not provide solutions against a DoS attack
		c)	is the information security infrastructure of an organization
		d)	is a set of devices that monitor and control data traffic through the network and uses secure protocols and cryptographic algorithms

Evaluate your answer

4. Which of the following is not a security service

		a)	confidentiality
		b)	encipherment
		c)	data privacy
		d)	non-repudiation

Evaluate your answer

5. Which of the following is not a security mechanism

		a)	routing
		b)	encipherment
		c)	access control
		d)	data integrity

Evaluate your answer

6. Regarding attack classifications

		a)	Denial of service is a passive attack
		b)	Traffic analysis is an active attack
		c)	monitoring of unprotected communications is a passive attack
		d)	Eavesdropping is a passive attack

Evaluate your answer

7. The security threats

		a)	are always malicious
		b)	from insider attackers are generally more dangerous than from outsider
		c)	only apply to computers, servers and routers, but not to smartphones
		d)	can compromise the user privacy, but not a password

Evaluate your answer

8. Regarding malicious software

		a)	Viruses use files to infect and propagate
		b)	botnets are locally controlled
		c)	Worms require files to infect and propagate
		d)	is legitimate purpose software but contains harmful bugs

Evaluate your answer

9. Spyware

		a)	is considered a legitimate alternative offered to consumers
		b)	attack does not need the computer is connected to the network
		c)	may be installed along with other software or as the result of a virus infection
		d)	are always easy to detect, but not to remove

Evaluate your answer

10. zero-day attacks

		a)	are easily discovered
		b)	never exploits more than one vulnerability
		c)	are not detected by anti-virus products
		d)	can be exploited only one day

Evaluate your answer

11. Scanners refers to

		a)	programs that detect vulnerabilities unknown to anyone but a cyber attacker
		b)	software that displays advertisements and is given to the user embedded into another application.
		c)	programs that can determine what TCP/IP services are running on a computer and probe those services for security weaknesses.
		d)	ip address spoofing attacks

Evaluate your answer

12. Denial of service attacks

		a)	steal data from a computer
		b)	try that the victim system cannot respond more requests
		c)	is distributed due to the use of botnets
		d)	destroy data from victim computer

Evaluate your answer

13. Distributed DoS attacks

		a)	do not use intermediary computers to perform the attack
		b)	can not be solved by blocking a single IP address
		c)	destroy data from victim computer
		d)	are based in sending the few communication requests from few intermediary computers to a victim

Evaluate your answer

14. Social engineering attacks

		a)	take profit from a zero-day vulnerability
		b)	use a botnet
		c)	require important technological skills of the attacker
		d)	allows the attacker to obtain confidential information by means of a human interaction

Evaluate your answer

15. What kind of malware restricts the access to the infected computer and demands the user pays money to remove the restrictions?

		a)	botnet
		b)	virus
		c)	zombie
		d)	ransomware

Evaluate your answer

16. What kind of attack brings down the network or the victim computer?

		a)	DoS
		b)	zero-day
		c)	spoofing
		d)	spyware

Evaluate your answer

17. Regarding antivirus

		a)	maintenance and updating is required
		b)	always use signature-based detection
		c)	signature-based detection detect zero-days vulnerabilities
		d)	cannot impair the performance of a computer

Evaluate your answer

18. Which is the correct sentence regarding firewalls

		a)	They can be classified into packet filters and proxy
		b)	Packet-filter firewalls are useful for application-specific vulnerabilities
		c)	Proxy firewalls allows the analysis of protocols at the application layer
		d)	The main strength of proxy firewalls are speed and flexibility

Evaluate your answer

19. When IDS are used

		a)	firewalls are not needed
		b)	anti-virus are not required, since they compare "signatures" of an attack
		c)	if it is a HIDS, the performance of the computer can be impaired
		d)	if it is anomaly detection, false alarms are not possible

Evaluate your answer

20. Which of the following sentences is true regarding firewalls

		a)	The use of a set of rules is optional
		b)	The rules only are used to block communications
		c)	The rules can either block communication or permit it
		d)	It cannot prevent connections to some locations

Evaluate your answer

21. Strong authentication methods

		a)	can be implemented with the only use of a password
		b)	are required in some business applications
		c)	require the use of password crackers
		d)	always need 3 factor authentication

Evaluate your answer

22. Hardening and OS

		a)	requires the installation of all possible patches
		b)	is not done by using hardening checklists available
		c)	does not necesserily make it more secure
		d)	avoids social engineering attacks

Evaluate your answer

23. Regarding mobile security

		a)	the attacks are the same of the traditional computer
		b)	the use of anti-virus is not required
		c)	The likelihood of a mobile malware attack is increasing due to the prevalence of mobile malware threats
		d)	the attacks could never use the phone network

Evaluate your answer