Slides (37)
1 -
Where is an IPS commonly placed in a network?
1. In front of the firewall
2. Behind the firewall
3. In line with the firewall
4. On the user's device
2 -
The AES uses a ___ bit block size and a key size of ___ bits.
1. 64; 128 or 192
2. 256; 128, 192, or 256
3. 128; 128, 192, or 256
4. 128; 128 or 256
3 -
In the transposition cipher with a keyword, the permutation determined by the keyword "privacy" is ___.
1. 4536127
2. 3657142
3. 2357146
4. 1745326
4 -
What problem was Kerberos designed to address?
1. Deniel of service attack
2. Impersonation
3. Eavesdropping
4. Hacking
5 -
The key of the Caesar cipher is ___.
1. 23
2. 5
3. 26
4. 3
6 -
If it detects a threat, an IPS can ___.
1. Report the threat to security admins
2. Record the details of the threat
3. All of the above
4. Take preventive action to stop the threat
7 -
Which of the following files define all users on a Linux system?
1. /etc/password
2. /etc/passwd
3. /etc/user.conf
4. /etc/users
8 -
What type of the access control system uses predefined rules and does not have the concept of a resource owner?
1. DAC
2. NTFS
3. MAC
4. Rule-based access control
9 -
Authentication is needed to prevent ___.
1. Brute force
2. Cryptanalysis
3. Impersonation
4. Eavesdropping
10 -
The protocol ___ is designed to create security associations, both inbound and outbound.
1. IKE
2. CA
3. SA
4. KDC
11 -
The Diffie-Hellman key exchange protocol is vulnerable to ___.
1. Dictionary attack
2. none of the above
3. Deniel-of-Service Attack
4. Man-in-the-middle attack
12 -
Which of the following options lists all the seven filed of the </etc/passwd> file in the correct order?
1. Username, UID, GID, comment, home directory, command
2. Username, UID, GID, home directory, command, comment
3. UID, username GID, home directory, comment, command
4. Username, UID, group name, GID, home directory, comment
13 -
A firewall determines what traffic is allowed through it based on ___.
1. Channel bank
2. Number portability
3. Rule base
4. Point-to-point protocol
14 -
A subsitution box (S-box) of DES takes ___ and outputs ___.
1. 4 bits, 2 bits
2. 6 bits, bits
3. 6 bits, 4 bits
4. 8 bits, 4 bits
15 -
A collision-resistant hash function can provide ___.
1. user privacy
2. data integrity
3. data confidentiality
4. data authentication
16 -
Which is true of a signature-based IDS?
1. It only identifies on known signatures
2. It works best in large enterprises
3. It cannot work with an IPS
4. It detects never-before-seen anomalies
17 -
Which of the following is a limitation of dictionary attacks?
1. Relies on lack of input validation in login field
2. Ineffective against salted passwords
3. Must wait for password to be transmitted
4. Ineffective against complex passwords
5. Requires the password to be stored as plaintext
18 -
What type of network attack relies on multiple hosts participating in an attack on one host
1. Trojan attack
2. Distributed denial of service attack
3. Denial of service attack
4. Buffer overflow
19 -
Which of the cryptographic primitives can be used to encrypt and decrypt data using the same key?
1. Cryptographically secure PRNG
2. Digital signatures
3. Private key cryptography
4. One-way hashing functions
5. Public key cryptography
20 -
Which of the cryptographic primitives can be used as proof of a message's sender?
1. Private key cryptography
2. Digital signatures
3. One-way hashing functions
4. Public key cryptography
5. Cryptographically secure PRNG
21 -
Which of the following statements regarding discretionary access control is true?
1. Control over subjects is enforced by the system
2. Control over objects is enforced by the system
3. An object may grant access to a subject they own
4. A subject may grant access to objects owned by others
5. A subject may grant others access to any objects they own
22 -
In which of the following scenarios would you use private-key encryption?
1. Storing user passwords
2. Transmitting confidential information
3. Validating the source of an application
4. Verifying that a message has not been altered
23 -
Which of the following statements about the stages of a cyber attack are true?
1. During maintaining access, an attacker tries to pivot from their initial foothold to other, more privileged accounts or components
2. While clearing tracks, an attacker will communicate with their demands to the victim
3. In gaining access, an attacker will attempt to plant a backdoor to allow easy access to the system
4. In scanning, an attacker will attempt to determine what services are running on the system that may be vulnerable
5. During reconnaissance, an attacker will try to gain privileged access to the system
24 -
Malware which has the same code but changes its appearance with each infection is called:
1. Amorphic
2. Isomorphic
3. Polymorphic
4. Metamorphic
25 -
Which of the following forms of malicious software requires a host file to propagate?
1. Spyware
2. Trojan horse
3. Worm
4. Virus
5. Rootkit
26 -
Which of the following forms of malicious software propagates independently through the network?
1. Worm
2. Trojan horse
3. Spyware
4. Rootkit
5. Virus
27 -
Which of the following activities would not be carried out during passive reconnaissance?
1. Dumpster diving
2. Examining the company directory
3. Performing a port scan
4. Scanning for open wireless networks
5. Examining whois entries for company domains
28 -
Password salting describes the process in which:
1. a string is appended or prepended to the password before hashing
2. a password is encrypted using a symmetric key cipher
3. a password is hashed multiple times using a different algorithm
4. a password is hashed multiple times using the same algorithm
5. a string is appended or prepended to the password after hashing
29 -
Which of the following mitigations would be effective in detecting whether a message has been altered since transmission?
1. Installing an anti-virus
2. Applying input validation
3. Encrypting the message contents
4. One-way hashing function
5. Intrusion detection system
30 -
Which of the following is a challenge in the use of public key encryption?
1. Key storage
2. Cipher availability
3. Key generation
4. Identity proofing
31 -
If you had to summarise the key programming failure with SQL injection, it would be:
1. Bypassing authentication.
2. Trusting without verifying.
3. Circumventing the same origin policy.
4. Confusing data with code.
32 -
Which security model specifies that subjects should not be able to access information classified at a lower level than themselves?
1. Clark-Wilson
2. Biba
3. Chinese wall
4. Bell-LaPadula
33 -
What is a good defence against powers that are particular to an eavesdropper?
1. Using encryption.
2. Using passwords to authenticate users.
3. Using a type-safe language.
4. Using a firewall.
34 -
Exploitation of the Heartbleed bug permits
1. injecting code.
2. reading outside bounds of a buffer.
3. a format string attack.
4. overwriting cryptographic keys in memory.
35 -
What is one difference between an HTTP GET and an HTTP POST request?
1. Only GET requests use the REFERER header.
2. Only POST requests may include parameter data in the request body.
3. Only GET requests are subject to the same-origin policy.
4. Only POST requests can encode parameters in the URL.
36 -
Which of the following tests is the most intrusive?
1. Numeration
2. Enumeration
3. Port scanning
4. Null scanning
37 -
Similar Templates
Frequently Asked Questions
How to use AhaSlides templates?
Visit the Template section on the AhaSlides website, then choose any template that you like to use. Then, click on the Get Template button to use that template right away. You can edit and present immediately without having to sign up. Create a free AhaSlides account if you want to see your work later on.
Do I need to pay to sign up?
Of course not! AhaSlides account is 100% free of charge with unlimited access to most of AhaSlides’s features, with a maximum of 50 participants in the free plan.
If you need to host events with more participants, you can upgrade your account to a suitable plan (please check out our plans here: Pricing - AhaSlides) or contact our CS team for further support.
Do I need to pay to use AhaSlides templates?
Not at all! AhaSlides templates are 100% free of charge, with an unlimited number of templates you can access to. Once you’re in the presenter app, you can visit our Templates section to find presentations catereing to your needs.
Are AhaSlides Templates compatible with Google Slides and Powerpoint?
At the moment, users can import PowerPoint files and Google Slides to AhaSlides. Please refer to these articles for more information:
Can I download AhaSlides templates?
Yes, it’s definitely possible! At the moment, you can download AhaSlides templates by exporting them as a PDF file.