Sra Chapter 15 (Part 2) And Chapter 11

Front 1

What is the term used to describe a hacker's attempt to discover unprotected modem connections to computer systems and networks called?

Back 1

War-dialing

Front 2

The activity where hackers wander throughout an area with a computer with wireless capability, searching for wireless networks they can access is referred to as which of the following?

Back 2

War-driving

Front 3

_____________ relies on lies and misrepresentation to trick an authorized user into providing information or access to an attacker.

Back 3

Social Engineering

Front 4

The term ___________ refers to software that has been designed for some nefarious purpose.

Back 4

Malware

Front 5

What is the process of assessing the state of an organization's security compared against an established standard called?

Back 5

Auditing

Front 6

Johnny received a "new version" of the game Solitaire in an e-mail. After running the program, a backdoor was installed on his computer without his knowledge. What kind of an attack is this?

Back 6

Trojan

Front 7

What is software that records and reports activities of the user (typically without their knowledge) called?

Back 7

Spyware

Front 8

Malicious code that sits dormant until a particular event occurs to release its payload is called what?

Back 8

Logic Bomb

Front 9

Authentication is the granting of specific permissions based on the privileges held by the account.

Back 9

False

Front 10

Authorization is the matching of user-supplied credentials to previously stored credentials on a host machine, and usually involves a username and password.

Back 10

False

Front 11

In a Kerberos environment, the first ticket in the two-step process is the ticket-granting ticket.

Back 11

True

Front 12

What protocol would you use for remote access, to get a console with an encrypted connection?

Back 12

SSH

Front 13

The three major components of the SSH protocol are the

Back 13

Transport Layer Protocol, User Authentication Protocol, and Connection Protocol

Front 14

Which protocol enables the secure transfer of data from a remote PC to a server by creating a VPN across a TCP/IP network?

Back 14

PPTP

Front 15

Which of the following describes the wireless standard?

Back 15

802.11

Front 16

In addition to "What users know," "What users have," and "What users are," what did the author add to be able to authenticate a user?

Back 16

"What users do"

Front 17

With IPsec, AH and ESP

Back 17

can be used separately or together

Front 18

_______________ describes a process in which each side of an electronic communication verifies the authenticity of the other.

Back 18

Mutual authentication

Front 19

Mandatory access control:

Back 19

grants access permissions to objects based on the sensitivity of the information contained in the objects.

Front 20

_______________ is an authentication process by which the user can enter a single user ID and password then move from application to application or resource to resource without having to supply further authentication information.

Back 20

Single Sign-on