Quiz
Advanced Digital Security Practice Quiz
This quiz has question types that open in the usual player.
Questions in this quiz (185)
1The gets() C function is never safe because
- AIt never stops
- BIt allocates memory on the heap
- CIt uses C strings (array of characters), which is impossible to do correctly
- DIt performs no bounds checking
2There are a number of C functions which are not safe to use, since it is easy to make mistakes that cause software vulnerabilities. Which is these is a safe (preferred) C function, which performs some bounds checking.
- Astmcpy
- Bstrcpy
- Cstrcat
- Dgets
3A buffer overflow in a C program that points the return pointer at somewhere else in the program's logic is known as:
- AA race condition
- BArbitrary code execution
- CArc injection
- DA segmentation fault
4What does the following compiler error indicate?
cliffe@linux-leedsmet:~> gcc testerr.c -o testerr
/tmp/ccdrbs9s.o: In function 'main':
testerr.c:(.text+0x25): warning: the 'gets' function is dangerous and should not be used.- AThat a deprecated function is being used. This indicated that the code potentially includes a buffer overflow
- BThat the main function is used, but should not be because it is error prone. Main_init() should be used instead
- CThat the code cannot compile because it contains a mistake. The program will not run
- DThat that code includes the gets() function, but it is safe to ignore this error message
5Which of the following is NOT a defence against stack smashing:
- ASignature-bases intrusion detection
- BAddress space layout randomization (ASLR)
- CCanaries
- DNon-executable stacks (NX)
6Compared to Java, C is:
- AMore prone to butter overflows, since the langauge is not strongly type-safe
- BA higher level langauge with more security features
- CSlower, since C is interpreted, but C is therefore more secure
- DA type-safe language, therefore more prone to error
7A buffer overflow in a C program can NOT typically result in:
- AA segmentation fault
- BA race condition
- CArc injection
- DArbitrary code execution
8Which CPU register is used to determine the bottom of the current stack frame?
- AEIP
- BEBP
- CESP
- DENP
9In the GDB debugger, what does the stepi command do?
- AIt continues execution for one assembly instruction
- BIt stores the EPI register value
- CIt prints the current contents of registers to the screen for inspection
- DIt runs one line of C code insturction
10Which CPU register is used to determine the next instruction to process?
- AEBP
- BESP
- CENP
- DEIP
11What does 0x41414141 respresent?
- AAAAA
- BA typical valid executable memory region
- CThe name of a register
- Dan assembly instruction to store a register
12The software vulnerability in the below code is a:
/*
* 2012 Leeds Met, Z. Cliffe Schreuders
* Licensed under the terms of the GPLv3
*/
#include <stdio.h>
int main() {
char execute [5] = "ls";
char name [3];
printf("What is your name?\n");
gets ((char*)&name);
printf("hello %s, execution the command %s\n"
"The files in the dir are:\n", name, execute);
sleep(2);
system(execute);
}- ACommand injection
- BRace condition
- CBuffer overflow
- DFormat string attack
13When a buffer overflow overwrites the return pointer, with a value that points to somewhere else on the stack, this is known as:
- ABuffer underflow
- BFrame smashing
- CStack smashing
- DHeap smashing
14The first computer bug to be discovered was:
- AA moth in a Cray supercomputer at US Department of Energy
- BA kernal Opps in Linux 1.0
- CA blue screen of death in Windows 3.11 at Microsoft
- DA moth in the Mark II Aiken Relay Calculator at Harvard University
15Which CPU register is used to determine the top of the current stack frame?
- AESP
- BENP
- CEIP
- DEBP
16The security of an encryption method should not rely on keeping the algorithm secret (only the key).
Which secure design principle does the above security rule-of-thumb relate to?- ASeparation of privilege
- BLeast privilege
- COpen design
- DEconomy of mechanism
- EComplete mediation
- FPsychological acceptability
- GFail safe defaults
- HLeast common mechanism
17A program should only run as a superuser if absolutely necessary.
Which secure design principle does the above security rule-of-thumb relate to?- ALeast privilege
- BComplete mediation
- CSeparation of privilege
- DPsychological acceptability
- EOpen design
- FLeast common mechanism
- GFail safe defaults
- HEconomy of mechanism
18Threat modelling is a process that aims to:
- AIdentify the security requirements of an organisation
- BSpeed up software development
- CCreate redundant documentation and bureaucracy
- DIdentify and rate threats facing a system
19Based on STRIDE, which of the following types of threat should be considered for an interator (external entity)?
- ASpoofing
- BTampering
- CRepudiation
- DInformation Disclosure
- EDenial of Service
- FElevation of Privilege
20Linus' Law states that "given enough eye-balls, all bugs are shallow". This implies:
- AOpen source software can be considered secure, since software development typically involves lots of people reviewing code
- BOpen source software is inherently insecure, since anyone can examine the source code to look for bugs
- CPeople who go hunting for bugs in software are emotionally shallow
- DAll bugs can lead to shallow softare vulnerabilities
21A time of check to time of use (TOCTOU) flaw is a form of:
- ARace condition
- BFormat string attack
- CBuffer overflow
- DMalware
22There should be multiple security controls in place, in case one fails.
Which secure design principle does the above security rule-of-thumb relate to?- AOpen design
- BSeparation of privilege
- CFail safe defaults
- DEconomy of mechanism
- EComplete mediation
- FLeast common mechanism
- GPsychological acceptability
- HLeast privilege
23There should not be a way to circumvent a security mechanism.
Which secure design principle does the above security rule-of-thumb relate to?- AOpen design
- BComplete mediation
- CSeparation of privilege
- DPsychological acceptability
- ELeast privilege
- FEconomy of mechanism
- GFail safe defaults
- HLeast common mechanism
24A firewall should be configured to deny all traffic, execpt for exceptions that have been stated.
Which secure design principle does the above security rule-of-thumb relate to?- AEcomony of mechanism
- BComplete mediation
- CSeparation of privilege
- DLeast privilege
- EOpen design
- FLeast common mechanism
- GPsychological acceptability
- HFail safe defaults
25STRIDE is designed for:
- AEstablishing security goals
- BReasoning about the threats a system faces
- CEvaluation the security of a system
- DListing all the attacks against a system, in a diagram or list
26The above code (in the image) contains which type of security flaw?
- AFormat string attack flaw
- BRace condition
- CCommand injection
- DBuffer Overflow
27Based on STRIDE, which of the following types of threat should be considered a data flow?
- ASpoofing
- BTampering
- CRepudation
- DInformation Disclosure
- EDenial of Service
- FElevation of Privilege
28Defensive programming involves:
- AWriting code that tries not to make assumptions and always checks whether errors have been encountered
- BWriting code that makes assumptions, and assumes that things are fine
- CWriting code that attacks other peoples computers
- DWriting code that contains errors
- EWriting new security features
29Which of the following is true of closed source software (where the code is not available?)
- AClosed source software is always more secure
- BThe running program can be dynamically tested using fuzz testing, to identify vulnerabilites
- CThe program's instructions cannot be studied
- DIt is impractical to test the program for security flaws
30Based on STRIDE, which of the following types of threat should be considered a data store?
- ASpoofing
- BTampering
- CRepudation
- DInformation Disclosure
- EDenial of Service
- FElevation of Privilege
31A time of check to time of use (TOCTOU) flaw is present when:
- AA program does not do correct bounds checking when coping data into memory
- BA program does not properly check the return values of a library call
- CA program relies on things to happen in a particular order of events
- DA program checks the state of a condition, then after some time (possibly shortly afterwards) assumes that that condition is in the same state
32Which of the following is not one of the development phases identified by the SDLC?
- ARequirements
- BVerification
- CImplementation
- DMaintenance
33One way of ensuring that security is being considered at each phase of software development is by adopting:
- AExtreme programming (XP)
- BDefencive programming
- COpen source software development
- DThe security development lifecycle (SDL)
34The security development lifecycle (SDL) was created by:
- AIBM
- BThe US Government
- CLinus Torvalds
- DMicrosoft
35The above (in the image) C code is vulnerable to what kind of software vulnerability?
- ABuffer overflow
- BFormat string attack
- CRace condition
- DInjection attack
36A security control should not be too hard to use.
Which secure design principle does the above security rule-of-thumb relate to?- AEcomony of mechanism
- BComplete mediation
- CSeparation of privilege
- DLeast privilege
- EOpen design
- FLeast common mechanism
- GPsychological acceptability
- HFail safe defaults
37A program that relies on the system's state remain the same between two lines of code may likely contain a:
- ARace condition
- BBuffer overflow
- CInjection attack flaw
- DStack smashin flaw
38It is typically more cost effective to add security features to an existing product, rather than spend extra time designing the security before the product is developed.
- ATrue
- BFalse
39Attack trees are primarily used to:
- ACreate redundant documentation and bureaucracy
- Bcreate a taxonomy of exploits
- CIdentify and rate threats facing a system
- DCreate a list of all the ways that a system could be attached in order to attempt to violate security requirements
40Which of the following is typically impractical without access to source code?
- AManual code review
- BStatic analysis
- CFuzzing
- DReverse engineering
41CppCheck is an example of a:
- AStatic analysis tool
- BFuzzer
- CCompiler
- DReverse engineering tool
42For a Spike script, which of the following spike functions will send the content of the fuzzing buffer to the program being tested?
- Aprintf
- Bs_string
- Cs_string_variable
- Dspike_send
- Es_readline
43A fuzzer typically aims to discover bugs by:
- AAnalysing the network traffic generated by a program
- BFeeding in input to a running program
- CAnalysing the source code of a program
- DUsing fuzzy logic
44What is the error in the above (in the image) code?
- AFormat string attack
- BRace condition
- CBuffer overflow - the the stack
- DBuffer overflow - on the heap
45CppCheck can only be used against
- AA running program
- BA compiled program
- CC/C++ code
- DAssembly code
46What is the error in the above (in the image) code?
- ARace condition
- BFormat string attack
- CBuffer overflow - on the heap
- DBuffer over flow - on the stack
47GCC is a:
- AReverse engineering tool
- BFuzzer
- CCompiler with some static analysis features
- DStatic analysis tool
48For a Spike script, which of the following spike functions will send the text data that is passed to it as-is to the program being tested?
- As_readline
- Bs_string
- Cspike_send
- Dprintf
- Es_string_variable
49What is the error in the above (in the image) code?
- ARace condition
- BBuffer overflow - on the stack
- Cbuffer overflow - on the heap
- DFormat string attack
50What is the error in the above (in the image) code?
Hint: argv[1] is the first argument passed to the program via the command argument
- ARace condition
- BBuffer overflow - on the stack
- CFormat string attack
- DBuffer overflow - on the heap
51What is the error in the above (in the image) code?
- ARace condition
- BBuffer overflow - on the heap
- CBuffer overflow - on the stack
- DFormat string attack
52Sulley is a:
- ACompiler with some static analysis features
- BStatic analysis tool
- CFuzzer
- DReverse engineering tool
53For a Spike script, which of the following spike functions will send the text data that is passed to it to the local console?
- As_readline
- Bspike_send
- Cprintf
- Ds_string_variable
- Es_string
54Keeping source code secret makes finding software bugs impractical
- ATrue
- BFalse
55For a Spike script, which of the following spike functions will read output from the program being tested?
- As_readline
- Bspike_send
- Cs_string_variable
- Ds_string
- Eprintf
56Fuzzing a complex network service involves
- AConfiguring a fuzzer to send completely random input
- BConfiguring a fuzzer to generally act like a normal client, but sending unexpected input (based on variations of what is normakl)
- CConfiguring a fuzzer to read the program's source code
- DA one line Spike script:
s_string("!");
57generic_send_tcp localhost 4444 myspike.spk 4 6
- ARuns Spike against a local service running on port 4444, starting at the 4th variable with the 6th input string
- BRuns Spike against a local service running on port 4444, starting at the 4th input string for the 6th variable
- CRuns Spike against a remote service running on port 4444
- DRuns Spike against a local service running on port 4, starting at the 6th variable with the 4444th input string
58Spike is a:
- AStatic analysis tool
- BFuzzer
- CReverse engineering tool
- DCompiler with some static analysis features
59For a Spike script, which of the following spike function will introduce random input?
- As_string
- Bspike_send
- Cprintf
- Ds_string_variable
60When pointing the EIP at instructions in memory (for example "JMP ESP"), why is it best to point EIP to instructions that come with the program itself, rather than Windows libraries?
- AThe program itself will change between platforms (WinXP/7/8)
- BIt is not possible to change ESP
- CThe stack is non-executable
- DWindows libraries are likely to change depending on platform (WinXP/7/8)
61If during exploit development, it is found that following a buffer overflow the ESP points at a regoin of the buffer, what would be a method of transferring control to the payload?
- APlace the ESP value on the buffer so that it is written to the EIP register, and diverted to the payload
- BSet the return address as "%ESP", and place the payload there
- CPoint the return address at the location of a "JMP ESP" instruction in memory, and place the payload at the location pointed to by ESP
- DSet the offset to the return value
62In Metasploit exploit development, what does "[target.ret].pack('V')" typically do?
- AConverts the return address to a format that can be placed on the stack (for example, little endian)
- BGenerates a buffer overflow
- CGenerates an offset to use, to space the return address correctly
- DConverts a return address to a human-readable format
63Pattern_create is typically used in exploit development in order to:
- AFind bad charaters
- BCreate a payload
- CCreate a NOP sled
- DCalculate an offset value
64In exploit development, a "NOP sled/slide" refers to:
- AThe distance from the begining of the malicious input, to where the payload should be placed
- BThe distance from where the malicioud input starts, to where the return address should be placed
- CA series of instructions that have no effect
- DThe address used to get to the shell code
- EAn instruction that has no effect
- FThe stack
65In expolit development, the "offset" refers to:
- AA series of instructions that have no effect
- BAn instruction that had no effect
- CThe address used to get to the shell code
- DThe stack
- EThe distance from the begining of the malicious input, to where the payload should be placed
- FThe distance from where the malicious input starts, to where the return address should be placed
66A "NOP sled/slide" is typically used to solve the problem of:
- ANot knowing whether the shellcode is valid
- BNot knowing whether the program is vulnerable
- CVulnerabilities in software, such as buffer overflows
- DNot knowing exactly where the shell code will end up in memory
- ENot knowing where the return address needs to be stored on the stack
- FNot knowing which characters are "bad"
67Metasploit modules are writted in what programming language?
- ARuby
- BC
- CC++
- DPython
68An EIP of 0x41414141 and an access violation, typically indicates that:
- AThe program is an FTP server
- BAn exploit has failed
- CTest input indicated that the program is vulnerable to an exploitable buffer overflow
- DThis is a successful exploitation: an attacker has arbitrary code execution!
69Which of these is typically a NOP
- A0x7C
- B0x90
- C0x41
- D0x00
70Buffer overflow exploits can be written in which language(s)?
- AOnly Ruby
- BOnly Perl
- COnly C
- DAny of these
71In exploit development, the "return address" refers to:
- AThe distance from where the malicious input starts, to where the return address should be placed
- BAn instruction that has no effect
- CA series of instructions that have no effect
- DThe distance from the begining of the malicious input, to where the payload should be placed
- EThe stack
- FThe address used to get to the shell code
72Which of these is typically a "bad character" that should be avoided in the payload of an exploit?
- A0x41
- B0x7C
- C0x90
- D0x00
73When a function returns, the EIP value is typically read from:
- AA series of instuctions that have no effect
- BThe distance from the begining of the malicious input, to where the payload should be placed
- CThe stack
- DThe address used to get the shell code
- EAn instruction that has no effect
- FThe heap
74MD5 is thought to be "broken" (various collisions have been found)
- ATrue
- BFalse
75An effective countermeasure against plain text view of passwords is: (choose the best answer)
- AUsing high entropy passwords
- BUsing a salt
- CUsing a password with a large key space
- DHashing passwords
76Authentication binds:
- AAuthorisation to a subject
- BAn identity to a user account
- CAn identity to a subject
- DAuthorisation to an object
77Given this entry in /etc/group:
video:x:33:xx
We can conclude:- AThe user "video" is a member of the group "xx"
- BThe user "x" is a member of the group "xx"
- CThe group "video" has a user named "xx"
- DThe user "video" is not a member of any group
78A one-way hash function produces:
- AAn encryption key
- BA fixed length hash
- CA random string
- DAn encrypted file
79Which is NOT a property of a cryptographic one-way hash function?
- AProduces a fixed-size string
- BCan be decrypted with a key to retrieve the original input
- CIt is deterministic
- DAccepts as input an arbitrary block of data
80The [blank_start]passwd[blank_end] command allows users to change their passwords
- Apasswd
81Using voice recognition, hand geometry, fingerprints, or retina matching for authentication is a form of [blank_start]biometrics[blank_end]
- Abiometrics
82One way hashes are used on passwords because: (choose the best answer)
- AIt is difficult to find two passwords that generate the same hash
- BThey are deterministic
- CIt removes the need to store the password in the clear
- DIt is faster then encrypting passwords
83Given this entry in /ect/group:
users:x:100:
We can conclude:- AThe group "users" has a GID of 100
- BThe group "users" has no members
- CThe group "x" has the members "users"
- DThe group "users" has a password of "x"
84A subject is:
- AA passive resource, such as a file
- BAn active entity within the system that can attempt to access objects
- CA security mechanism that mediates access
- DA role that a program can obtain to be granted access
85An example of a password stored "in the clear" is:
- AA password written down on a piece of paper
- BA password one-way hashed in /etc/shadow
- CA password encrypted using AES (for example using Truecrypt)
- DA password memorised (in your head)
86On Linux, a GID is:
- AA name of a group
- BA security system that enforces separation of groups
- CA group that is shared by all users on the computer
- DA number representing a group
87Given the /etc/passwd entry:
cliffe:x:0:100:cliffe:/home/cliffe:/bin/bash
We can conclude:- AThe user "x" is root
- BThe user "cliffe" is a super user, and shares the UID 0 with root, which is generally not a good idea
- CThe user "cliffe" is a member of the "root" group
- DThe user "cliffe" has GID of 0, meaning he can become root when needed
88When a person authenticated themself, this establishes:
- AThat the person is allowed to log in
- BWhat the person is allowed to do
- CWho the person claims to be
- DThat the person is who they claim to be
89Which of the following commands only outputs the current user's username?
- Agroups
- Bid
- Cwhoami
- Dpasswd
90Which of the following is NOT a one-way hash function?
- AAES
- BMD5
- CSHA-1
- DSHA-2
91Which program is typically used to run a single command as root?
- Abash
- Bsu -
- Csudo
- Dpasswd
92Given the /etc/shadow entry
test:$1$3V7XjslU$v6PdUIMn11YBpxuIhmy7h.:15596:0:99999:7:::
we can conclude that the password is hashed using:- AMD5
- BBlowfish
- CDES
- DSHA-2
93Given this entry in /etc/passwd:
cliffe:x:1000:100:cliffe:/home/cliffe:bin/bash
We can conclude:- AThe user "cliffe" is a super user
- BThe user "cliffe" has a primary GID of 1000
- CThe user "cliffe" has a home directory in /bin/bash
- DThe user "cliffe" has a UID of 1000
94Which of the following commands does NOT indicate the user's groups?
- Aid
- Bid -G
- Cgroups
- Dwhoami
95Linux user names are:
- AReal numbers: for example, "1.5"
- BHuman readable strings: for example, "cliffe"
- CInode structures
- D32-bit integers: for example, "1000"
96A disadvantage of biometrics is:
- AIt cannot be lost
- BIt cannot identify a person
- CIt cannot be revoked or changed
- DIt cannot be forgotten
97Which command is typically used to change user identity (effective UID) in order to run a number of commands as root:
- Apasswd
- Bbash
- Csudo
- Dsu -
98All users with a UID of 0 have a username of "root"
- ATrue
- BFalse
99Given the /etc/shadow entry
test:$1$3V7XjslU$v6PdUIMn11YBpxuIhmy7h.:15596:0:99999:7:::
we can conclude that the user is given _ days warning before the passwd expires:- A7
- B15596
- C0
- D99999
100On modern Linux systems hashes of passwords are stored in:
- A/etc/passwd
- B/etc/shadow
- C/etc/group
- DThey are not stored
101When a person identifies themselves, the establishes:
- AThat the person is who they claim to be
- BWhat the person is allowed to do
- CWho the person claims to be
- DThat the person is allowed to log in
102It is good practice to use low entropy passwords
- ATrue
- BFalse
103Which of the following hash functions were designed by Ronald Rivest?
- ASHA-2
- BMD5
- CSHA-3
- DSHA-1
104Which of these is NOT a disadvantage of biometrics:
- AIntrusive
- BExpense
- CFlase positives/negatives
- DCannot be lost
105A person can authenticate themselved using (choose the best answer)
- ATheir permissions
- BA description of themselves
- CA shared secret
- DPublic information
106Which is an example of "something the user knows" for authentication:
- APIN
- BBiometrics
- CSmartcard
- DLocation
107A person can identify themselves using (choose the best answer):
- AA password
- BA drivers licence photo
- CA drivers licence
- DA token
108On Linux why are some programs given their own user accounts?
- ATo prevent them from misusing other users'privileges
- BTo enable normal users to run their applications
- CTo enable applications to share their files more easily
- DTo allow root to organise files
109An effective countermeasure against precomputed attacks against passwords is: (choose the best answer)
- AEncrypting passwords
- BHashing passwords
- CUsing high entropy passwords
- DUsing a salt
110An effective countermeasure against force brute attacks against passwords is: (choose the best answer)
- AUsing a salt
- BUsing a password with a large key space
- CHashing passwords
- DEncrypting passwords
111It is a good idead to log in as root whenever possible
- ATrue
- BFalse
112The command "su - fred":
- ASets the UID of the user fred to 0
- BEffectively changes the current user to the identity of the user "fred"
- CEnables the user "fred" to run as the superuser
- DResets the bash shell to home directory of the superuser
113If the program shasum is run twice and outputs the same hash, this indicates that:
- AA hash collision has occurred
- BThe input being hashed each time is different in some way (for example, a missing semicolon)
- CThe input being hashed each time is exactly identical (for example, the same password is entered both times)
- DThe program is being run from the same directory each time
114On Linux, a user's primary group is specified in:
- A/etc/shadow
- B/etc/passwd
- C/bin/group
- D/etc/group
115Which is NOT a property of a cryptographic one-way hash function?
- ACan be decrypted with a key to retrieve the orginal input
- BIt is deterministic
- CProduces a fixed-size string
- DAccepts as input an arbitrary bloc of data
116The Biba model (a seminal access control model) is designed to represent security policies with an emphasis on:
- AIntegrity
- BConfidentiality
- CAvailability
- DNon-repudiation
117An access control list (ACL) is:
- AA token held by a process, granting it permission to access objects
- BAlways Unix file permissions
- CA representation of a column representing permissions for an object in a access control matrix that expresses the protection state of a system
- DAlways a form of mandatory access control
118An access control list is:
- AA list of subjects and the permissions they have in relation to a specific object (which the list is typically attached to)
- BA token that grants to the subject holding it authority to access objects
- CAn access control model that provides a policy abstraction between users and permissions
- DA large table describing all authorised activity in regard to all subjects and objects in a system
119Access control enforces:
- AAuthorisation
- BIdentification
- CAuthentication
- DVerification
120File access control lists (ACL) are typically stored:
- AIn the kernal
- BWith the subject
- CIn the cloud
- DWith the object
121Role-based access control is:
- AA list of subjects and the permissions they have in relation to a specific object (which the list is typically attached to)
- BA token that grants to the subject holding it authority to access objects
- CA large table describing all authorised activity in regard to all the subjects and objects in the system
- DAn access control model that provides a policy abstraction between users and permissions
122This type of access control simplifies policy by assigning permissions based on duties (thereby providing policy abstractions):
- ALattice-based access control (LBAC)
- BRole-based access control (RBAC)
- CMandatory access control (MAC), AKA non-discretionary access control
- DDiscretionary access control (DAC)
123The Bell and La Padula model (a seminal access control model) is designed to represent security policies with an emphasis on:
- AIntegrity
- BAvailability
- CNon-repudiation
- DConfidentiality
124Identity-based discretionary access control is particularly well suited to:
- AOrganisation where users do not own files, but rather are granted permission by an administrator to access particular files
- BMilitary, where strict rules specify what users are authorised to do
- CHome PCs, where users control their own files
- DSingle-user mobile devices, such as mobile phones
125An access control matrix can describe the protection state of any system, but is not usually used to express policy because:
- ANot all processes are subjects
- BA real system contains lots of subjects and objects, so the policy would be inefficient (very large)
- CNot all files are objects
- DAn access control matrix cannot express some policies
126Discretionary access control is particularly well suited to when an organisation wants to have control over what happens to the files regardless of who created them:
- ATrue
- BFalse
127An access control model is:
- AThe thing that actually enforces a policy
- BAn abstract way of representing (and reasoning about) a type of security policy (for example, RBAC)
- CA way of ensuring that identity is authenticated
- DThe rules that define what is authorised
128An advantage of mandatory access control (MAC) is that:
- AUsers can freely share and edit other users' files
- BUsers can be prevented from misconfiguring file permissions
- CMAC is easy to use and understand since it is the standard type of access control on operating systems such as Windows XP
- DMAC requires users to own their own files
129A capability is: (select the best answer)
- AA token held by a subject, authorising its access to objects
- BThe authority granted to any process
- CUnix file permissions
- DA representation of a column representing permissions for an object in an access control matrix that expresses the protection state of a system
130An access control matrix is:
- AA list of subjects and the permissions they have in relation to a specific object (which the list is typically attached to)
- BA token that grants to the subject holding it authority to access objects
- CAn access control model that provides a policy abstraction between users and permissions
- DA large table describing all authorised activity in regard to all subjects and objects in the system
131A security policy defines: (select the best answer)
- AHow rules are enforced
- BBackup strategies
- CWhether security vulnerabilities exist
- DWhat is authorised to happen
132When a user has no control over the security of the files they create, the type of access control in place is: (select the best answer)
- ADiscretionary access control (DAC)
- BRole-based access control (RBAC)
- CMandatory access control (MAC), AKA non-discrectionary access control
- DIdentity-based access controls (IBAC)
133When a user has control over the security of the files they create (for example, when users can specify who can access their files), the type of access control in place is: (select the best answer)
- ADiscrectionary access control (DAC)
- BMandatory access control (MAC), AKA non-discretionary access control
- CRole-based access control (RBAC)
- DLattice-based access control (LBAC)
134A security mechanism is:
- AThe rules that define what is authorised
- BA way of ensuring that identity is authenticated
- CAn abstract way of representing (and reasoning about) a type of security policy (for example, RBAC)
- DThe thing that actually enforces a policy
135A capability is:
- AA token that grants to the subject holding it authority to access objects
- BA list of subjects and the permissions they have in relation to a specific object (which the list is typically attached to)
- CA large table describing all authorised activity in regards to all the subjects and objects in a system
- DAn access control model that provides a policy abstraction between users and permissions
136The most common type of access control used on desktop PC operating systems (such as Windows and Unix) is:
- AMandatory access control (MAC), AKA non-discretionary access control
- BPassword-based authentication
- CRole-based access control (RBAc)
- DDiscretionary access control (DAC)
137Windows XP included discretionary access controls. However, the effectiveness was limited because: (select the best answer)
- AThe firewall had less features that other operating systems
- BMost users do not use passwords
- CMost users of XP are typically created as a superuser
- DAntivirus signatures are often out of date
138The"protection state" of a system is:
- AThe list of access control mechanisms currently in effect
- BThe state of a system in regards to security; for example, the privilege afforded to all subjects
- CHow secure the system currently is; for example, is the system completely patched against vulnerabilities
- DThe security that is in effect
139When a normal user can grant permissions without involving a system administrator (or anyone else), the type of access control in place is: (select th best answer)
- AMandatory access control (MAC), AKA non-discretionary access control
- BDiscretionary access control (DAC)
- CRole-bases access control (RBAC)
- DLattice-based access control (LBAC)
140Android Apps are self-signed which ensures
- AOnly apps with the same author can share the same UID
- BApp authors have paid Google for the right to develop apps
- COnly apps with the same hash can share the same GID
- DAp authors are who they say they are
141Granting a Linux capability to a process allows it to
- ADo something that normally only root can do
- BChange identities
- CPrevent it from doing something it can normally do
- DDo something that normally only another user can do
142A system call interposition scheme restricts programs by
- AMonitoring and filtering system calls
- BEmulating an entire operating system
- CSpecifying coarsely grained flag-based privileges
- DSpecifying finely-grained filename-based privileges
143On Linux a __ sandbox shares the kernel with other non-sandboxed programs, changes the file namespace, but does not provide network controls
- AChroot()
- BApparmor
- CSELinux
- DVMware Player
144Which of the following statements is NOT true
- AChroot() can be used to limit which network resources a program can access
- BChroot() can be used to limit which files a program can access
- CAll processes running after a chroot() should not remain as root
- DChroot() can be performed by root
145Linux capabilities restrict programs by
- AEnforcing coarsely grained flag-based privileges
- BEmulating an entire operating system
- CEnforcing finley-grained filename-based privileges
- DMonitoring and filtering system calls
146Android maintains a walled garden approach to security
- ATrue
- BFalse
147Using a Linux capability, rather than setuid
- AIs a good idea, an exploited vulnerability will have less authority
- BIs a bad idea, an exploited vulnerability will have more authority
- CIs a good idea, it will be impossible to exploit a vulnerability
- DIs a bad idea, it will be easier to exploit a vulnerability
148Copy on write sandboxes typically prevent programs from reading files on your computer
- ATrue
- BFalse
149When a program is authorised to access a file, because a user has selected that file with a dialog, this special "permissions granting dialog" is known as:
- AAccess Control List
- BVirtualisation
- CPowerbox
- DChroot
150Android is similar to GNU/Linux in that
- AIt uses the Linux kernel
- BIt had a very similar user-space, such as the programs typically found on a Linux system
- CIt is released entirely under GPL licensing
- DIt is also mainly created by Google
151When a program is explicitly launched into a controlled environment that only allows access to specific resources, it is confined by a
- ARule-based sandbox
- BRule-based system-wide control
- CAntimalware
- DIsolation-sandbox
152Para-virtualisation occurs when
- AThe guest OS must know about and participate in the virtualisation
- BAntimalware fails
- CThe guest OS needs not know about the virtualisation
- DThe host OS must not know about the virtualisation
153In Android, the permissions assigned to each program are specified by
- AThe author of the application
- BThe user of the device
- CGoogle's Bouncer system
- DThe operating system
154Hardware virtualisation restricts programs by
- AEmulating an entire computer
- BMonitoring and filtering system calls
- CEnforcing coarsely grained flag-based privileges
- DEnforcing finely-grained filename-based privileges
155Hardware emulation-based virtualisation such as VMware Player, can be used as a form of
- AIsolation-based sandbox
- BRule-based sandbox
- CRule-based system-wide control
- DAntimalware
156Android uses Linux user accounts to
- AConfine individual applications
- BConfine users
- CEncrypt files
- DSave space
157Which of the following schemes do not require applications to be launched into a sandbox in order to be confined
- AAppArmor
- BChroot()
- CJava applets
- DSandboxie
158App Armor restricts programs by
- AEnforcing finely-grained filename based privileges
- BEnforcing coarsely grained flag-based privileges
- CEmulating an entire operating system
- DMonitoring and filtering system calls
159Active Directory is a system based on
- AKerberos and LDAP
- BLDAP and NIS
- CRADIUS
- DLocal authentication
160LDAP can used to authenticate users on a Windows system via GINA
- ATrue
- BFalse
161Modifying a user’s details in an LDAP database requires local access to the LDAP server
- ATrue
- BFalse
162LDAP is what kind of protocol
- ABinary
- BAccess control
- CASCII
- DText
163Technically, LDAP is a
- AProtocol for accessing information stored in a database
- BProgram
- CDatabase
- DDistributed authentication protocol
- EAccess control model
164LDAP can be used to store/retrieve
- AEmail addresses
- BDNS settings
- CRoom numbers
- DPassword hashes
- EAll of these
165An LDAP Client configured as shown in the screenshot is vulnerable to what kind of attack?
- AUnauthenticated access
- BMan-in-the-middle attack, by using a self-signed certificate
- CBuffer overflow
- DEavesdropping
166LDAP was primarily designed forthe purpose of
- AProviding centrally administered identity management and authentication
- BRemotely managing access controls
- CReading from and writing to hierarchical databases
- DProviding distributed identity management and authentication
167Which of the following is the more secure option for provifing network-based identity management?
- ANIS
- Brlogin
- C/etc/shadow
- DLDAP with encryption
168Which of these network-based identity management systems is based on ticket granting via trusted third parties?
- ARADIUS
- BNIS
- CLDAP
- DKerberos
169It is not possible to authenticate users on Windows and Unix systems with the same centrally managed usernames and passwords
- ATrue
- BFalse
170Which of the following systems can be used for network-based identity management or network authentications?
- ARADIUS
- BNIS
- CLDAP
- DAD
- EKerberos
- FAll of these
171Which of these network based identity management systems lack any form of encryption
- ANIS
- BAD
- CRADIUS
- DKerberos
172An LDAP server used for authentication, without encryption add-ons is vulnerable to what kind of attack?
- AEavesdropping
- BUnauthenticated access
- CBuffer overflow
- DMan-in-the-middle attack, by using self-signed certificate
173What is the following an example of:
cn=Bobby Tables,ou=people,dc=mysite,dc=co,dc=uk- ADistinguished name
- BLDAP tree
- CDomain component
- DOrganisational unit
174LDAP uses TCP and UDP port (number): [blank_start]389[blank_end]
- A389
175The way that an LDAP DIT is organised is specified in the:
- AOU
- BSchema
- CDC
- DDN
176If you manage a website and domain used by various anonymous users, in order to use SSL you would typically
- AUse/pay an external CA to sign your X.509 certificate
- BGenerate an X.509 certificate using your owm generate CA
- CSign the certificate with your own certificate
- DAsk other users to sign the certificate with their certificates
177Web of trust and Certificate Authorities are examples of
- APublic key infrastructure
- BAccess controls
- CPublic key encryption algorthims
- DLocal authetication software
178If you have administrative control over a network of computers and wish to use SSL encryption to secure the intranet. It is common and secure practice to
- ACreate a CA for the organisation, and copy the certificate/public key to other systems in the organisation
- BUse self-signed certificates, and ask employees to review and accept unverified certificates
- CUse the web-of-trust for internal PKI
- DSend everything in-the-clear on the internet
179Web of trust certificate authentication is
- ADecentralised/distributed
- BCentralised
- CBased on ticket granting
- DBased on symmetric encryption
180Which of the following encryption schemes is more secure?
- AAES
- BDES
- CROT13
- DCaesar Cipher
181PGP is based on
- AWeb-of-trust
- BCA
- CLDAP
- DSSL
182In web-of-trust, when you assign trust to a user it means:
- AThat you trust that person to correctly verify identity before signing
- BThat your trust that person to act legally
- CThat you trust the identity of that person
- DThat you thrust that person to act fairly
183Certificate Authority authentication is:
- ABased on symmetric encryption
- BCentralised
- CBased on ticket granting
- DDecentralised / distributed
184A certificate for person A this is signed by a third party B, indicates:
- AThat A’s identify has reportedly been verified by B
- BThat B's identity has reportedly been verified by A
- CThat B can be trusted (is not malicious)
- DThat A can be trusted (is not malicious)
185What GNU Privacy Guard (GnuPG) command is used to generate a new key pair? [blank_start]--gen-key[blank_end]
- A--gen-key
Information
- Description
- Advanced Digital Security Practice Quiz
- Author
- Barry O'Sullivan
- Language
- English
- Views
- 53
- Tags
- Rating
- 5.0 out of 5 · 1 rating Rate this quiz