Fichas
SCIA 472 Chapter 1
Fichas del conjunto (20)
- 1Which of the following refers to a piece of code designed to cause harm that is intentionally inserted into a software system and will activate upon the occurrence of some predetermined data, time, or event? a. Logic bomb b. Trojan horse c. Cracker d. Denial of service (DoS) attackLogic bomb
- 2Breaking the trust the client has placed in the ethical hacker can lead to the: a. planning stage being deemed incomplete. b. rules of engagement having to be rewritten. c. questioning of other details, such as the results of the test. d. failure of the testing results to accurately portray the organization’s assets.c. questioning of other details, such as the results of the test.
- 3Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same effect; however, a distributed denial of service (DDos) attack: a. involves accessing a system of computers without authorization. b. is launched from large numbers of hosts that have been compromised and act after receiving a particular command. c. involves intentional deception designed to produce illegal financial gain or to damage another party. d. is software written with a deliberate purpose to cause damage, destruction, or disruption.b. is launched from large numbers of hosts that have been compromised and act after receiving a particular command.
- 4While “hacker” has become a universal term for people who break the law or break into systems without authorization, these people are more correctly known as: a. embezzlers. b. exploiters. c. white-hat hackers. d. crackers.d. crackers.
- 5Which of the following refers to a piece of software, a tool, or a technique that targets or takes advantage of a vulnerability? a. Asset b. Authentication c. Exploit d. Hackerc. Exploit
- 6Which of the following is NOT considered one of the three types of controls you can use in risk mitigation? a. Physical b. Distribution c. Technical d. Administrativeb. Distribution
- 7Which of the following refers to hacking that is carried out to bring attention to a cause, group, or political ideology? a. Hacktivism b. Robin Hood c. Intrusions d. Ethical hackinga. Hacktivism
- 8Accessing a system of computers without authorization is considered to be: a. theft of access. b. a denial of service (DoS) attack. c. social engineering. d. a network intrusion.d. a network intrusion.
- 9Which of the following statements is true regarding ethical hackers? a. Hackers are considered ethical as long as the end result of their actions causes no harm. b. Ethical hackers believe in the Robin Hood ideal. c. Ethical hackers can be either white hat or black hat hackers. d. Ethical hackers engage in their activities only with the permission of the asset owner.d. Ethical hackers engage in their activities only with the permission of the asset owner.
- 10Which of the following refers to the structured and methodical means of investigating, uncovering, attacking, and reporting on a target system’s strengths and vulnerabilities? a. Hacktivism b. Penetration testing c. Authentication d. Ethical evaluationb. Penetration testing
- 11What type of penetration testing is most often used when an organization wants to closely simulate how an attacker views a system? a. White-box testing b. Black-box testing c. White-hat testing d. Black-hat testingb. Black-box testing
- 12The ethical hacker is tasked with evaluating the overall state of security. The core principles of security involve preserving all of the following except: a. confidentiality. b. integrity. c. disclosure. d. availability.c. disclosure.
- 13A major difference between a hacker and an ethical hacker is the: a. code of ethics to which each subscribes. b. education level each has obtained. c. level of technological proficiency each has accomplished. d. social position each has reached.a. code of ethics to which each subscribes.
- 14Footprinting, scanning, enumeration, system hacking, escalation of privilege, covering tracks, and planting backdoors are considered: a. hacking steps. b. ethical hacking steps. c. intrusion detection steps. d. auditing steps.a. hacking steps.
- 15Planning, discovery, attack, and reporting are considered: a. hacking steps. b. ethical hacking steps. c. intrusion detection steps. d. auditing steps.b. ethical hacking steps.
- 16Which of the following tests is designed to simulate an attack against technology from either the inside or the outside depending on the goals and intentions of the client? a. Administrative attack b. Physical attack c. Technical attack d. Assessment attackc. Technical attack
- 17Which of the following tests is designed to find loopholes or shortcomings in how tasks and operational processes are performed? a. Administrative attack b. Physical attack c. Technical attack d. Assessment attacka. Administrative attack
- 18Which of the following tests includes anything that targets equipment or facilities and can also include actions against people, such as social engineering-related threats? a. Administrative attack b. Physical attack c. Technical attack d. Assessment attackb. Physical attack
- 19When performing a penetration test, the team should generally include members with: a. different objectives. b. the same or similar skills. c. different but conflicting skills. d. different but complementary skills.d. different but complementary skills.
- 20During the planning phase of a penetration test, the aim should be to: a. determine why a penetration test and its associated tasks are necessary. b. perform the attack and measure the results. c. report the results of the attack to the organization. d. research applicable state and federal regulations that apply to the proposed tests.a. determine why a penetration test and its associated tasks are necessary.