Deck 2: Cybersecurity and Cryptography

Question 1

This was commonly used in cryptography during World War II.

A)Tunneling
B)Personalization
C)Van Eck phreaking
D)One-time pad

Answer 1

One-time pad

Question 2

Today, many Internet businesses and users take advantage of cryptography based on this approach.

A)Public key infrastructure
B)Output feedback
C)Encrypting File System
D)Single sign on

Answer 2

Public key infrastructure

Question 3

This is the name for the issuer of a PKI certificate.

A)Man in the middle
B)Certificate authority
C)Resource Access Control Facility
D)Script kiddy

Answer 3

Certificate authority

Question 4

Developed by Philip R. Zimmermann, this is the most widely used privacy-ensuring program by individuals and is also used by many corporations.

A)DS
B)OCSP
C)Secure HTTP
D)Pretty Good Privacy

Question 5

This is the encryption algorithm that will begin to supplant the Data Encryption Standard (DES) - and later Triple DES - over the next few years as the new standard encryption algorithm.

A)Rijndael
B)Kerberos
C)Blowfish
D)IPsec

Question 6

This is the inclusion of a secret message in otherwise unencrypted text or images.

A)Masquerade
B)Steganography
C)Spoof
D)Eye-in-hand system

Question 7

In password protection, this is a random string of data used to modify a password hash.

A)Sheepdip
B)Salt
C)Bypass
D)Dongle

Question 8

This is a mode of operation for a block cipher, with the characteristic that each possible block of plaintext has a defined corresponding cipher text value and vice versa.

A)Foot printing
B)Hash function
C)Watermark
D)Electronic Code Book

Question 9

This is a trial and error method used to decode encrypted data through exhaustive effort rather than employing intellectual strategies.

A)Chaffing and winnowing
B)Cryptanalysis
C)Serendipity
D)Brute force cracking

Question 10

An intruder might install this on a networked computer to collect user ids and passwords from other machines on the network.

A)Passphrase
B)Root kit
C)Ownership tag
D)Token

Question 11

This type of intrusion relies on the intruder's ability to trick people into breaking normal security procedures.

A)Shoulder surfing
B)Hijacking
C)Brain fingerprinting
D)Social engineering

Question 12

The developers of an operating system or vendor application might issue this to prevent intruders from taking advantage of a weakness in their programming.

A)Cookie
B)Key fob
C)Watermark
D)Patch

Question 13

This is an attack on a computer system that takes advantage of a particular vulnerability that the system offers to intruders.

A)Port scan
B)Denial of service
C)Exploit
D)Logic bomb

Question 14

This is a program in which harmful code is contained inside apparently harmless programming or data.

A)Snort
B)Honeypot
C)Blue bomb
D)Trojan horse

Question 15

This is the modification of personal information on a Web user's computer to gain unauthorized information with which to obtain access to the user's existing accounts.

A)Identity theft
B)Cookie poisoning
C)Shoulder surfing
D)Relative identifier

Question 16

This type of attack may cause additional damage by sending data containing codes designed to trigger specific actions - for example, changing data or disclosing confidential information.

A)Buffer overflow
B)Block cipher
C)War dialing
D)Distributed denial-of-service attack

Question 17

This is the forging of an e-mail header so that the message appears to have originated from someone or somewhere other than the actual source.

A)Foot printing
B)Non repudiation
C)E-mail spoofing
D)Finger

Question 18

This is a type of network security attack in which the intruder takes control of a communication between two entities and masquerades as one of them.

A)Hijacking
B)Identity theft
C)Smurf attack
D)Tunneling

Question 19

This is a compromised Web site that is being used as an attack launch point in a denialof-service attack.

A)Bastion host
B)Packet monkey
C)Dongle
D)Zombie

Question 20

This electronic "credit card" establishes a user's credentials when doing business or other transactions on the Web and is issued by a certification authority.

A)Private key
B)Digital certificate
C)Smart card
D)Ownership tag

Question 21

What "layer" of an e-mail message should you consider when evaluating e-mail security?

A)TCP/IP
B)SMTP
C)Body
D)All of the above