DSF 601 — Reviewer for Finals

EXAM Pointers:

Prelim: Foundations of Security — 5pts
Endterm: Protecting the Child Online — 15pts
Endterm: Securing Internet Connections — 15pt
Endterm: Security on Social Networking Sites — 20pts
Endterm: Social Engineering & Identity Theft — 15pts
Endterm: Internet Security — 15pts
Endterm: Intro to Digital Forensics — 15pts

Quiz: Foundations of Security — 5pts

Backups only the data that has changed since the previous backup.
Correct answer: Incremental

humTdumT$@t0nAwa11 is an example of a strong password.
Correct answer: True

A differential backup offers a longer restore time over incremental backups.
Correct answer: False

Hackers use ___ as agents that carry out malicious activity over the Internet.
Correct answer: bots

Any individual who breaks into a computer system with the aim of stealing, destroying or vandalizing information. Select all the correct answers.
Correct answers: attacker, intruder, cracker

____ is the practice of publishing the personal information of an individual such as home address, telephone number or social security number.
Correct answer: Doxing

Use directly identifiable information such as birth dates and phone numbers in your passwords.
Correct answer: False

The grades record of a certain student in a particular school was modified by an attacker so that all his failing marks became passing marks. Which particular security aspect was lost?
Correct answer: Integrity

Is the statement below FACT or OPINION? Only servers should be protected from thieves who can open the case and grab the hard drive. Workstations are not as vulnerable since they don’t contain important databases such as those found in servers.
Correct answer: Opinion

The first layer of security is the user.
Correct answer: False

Any action or event with the potential to compromise or violate security.
Correct answer: Threat

P@ssword789 is a weak password.
Correct answer: True

A hacker is always a bad guy.
Correct answer: False

Fill in the blanks:

An attacker creates ____ to target software vulnerabilities. These may arrive via the following pathways.

attachments to ____ messages
compromised ____ sites
social ____ sites

Alternatively, the attacker may directly target _____ servers.
Correct answers: exploit, email, web, networking, vulnerable

Is the statement below FACT or OPINION?

You may not want employees copying company information to removable media. However, you actually can’t disable or remove USB ports, and other means of connecting external drives.
Correct answer: Opinion

Use a unique password for each separate account.
Correct answer: True

The three types of backup procedures (full, incremental and differential) may be used alternately throughout the operation of the system. For example,, a full backup is done of Friday. Then on Monday the next week, an incremental backup is performed, as well as for every end-of-the-day task for the rest of the week. By Monday morning the next week, a differential backup is done.
Correct answer: True

Match the following cybersecurity measures with their correct application before, during or after an attack.

installation of antivirus — precaution
configuring a firewall — precaution
patching your OS — maintenance
updating your applications — maintenance
downloading updates of virus definitions — maintenance
temporarily disconnecting from the Internet — reaction
restoring from backups — reaction
activating mirror sites — reaction
installing adware scanner — precaution

____ is the action of stealing information from a compromised system.
Correct answer: Data Theft

A zero-day attack usually has no solutions or patches.
Correct answer: True

This type of backup will provide you with the best protection, however, it will require more time and will consume more storage assets.
Correct answer: full backup

A ____ backup contains all of the data that has changed since the last full backup.
Correct answer: differential

Cybersecurity deals with the well-being of information and data.
Correct answer: False

Is the statement below FACT or OPINION?

Ideally, a set of backups should be kept off site, and you must take care to ensure that they are secured in that offsite location.
Correct answer: Fact

What is the device shown in the image below?
Correct answer: Laptop cable lock (Kensington lock)

Marchl101977 is a strong password.
Correct answer: False

Your personal phone number was leaked by Facebook to a third party marketer. You now begin to receive spamming SMS messages and robocalls. Which aspect of security was lost?
Correct answer: Confidentiality

The defense employed against a security threat is called a ____.
Correct answer: Countermeasure

The existence of weakness of design that when exploited, leads to an unexpected or undesirable event compromising the system.
Correct answer: Vulnerability

QUIZ: Basic Browser Security — 15pts

Web browsers usually have privacy and security settings that the user has to correctly configure to be effective.
Correct answer: True

Enabling or disabling if a browser remembers a user's browsing history is usually found in which setting to be configured?
Correct answer: privacy settings

Users on a local Intranet do not have to worry about online security/
Correct answer: False

Maintaining security on the Internet is important due to which particular reason?
Correct answer: All of the above

A web cookie is a _____ file, and it can't execute instructions of carry a virus/
Correct answer: text

A web cookie is sent by the web server to the client browser.
Correct answer: True

Which of the following is NOT something that the user should do when installing add-ins, extensions or plug-ins for a web browser?
Correct answer: automatically accept all browser suggestions to install add-ins, extensions or plug-ins

Browser users are unable to control whether they accept or reject cookies from a server.
Correct answer: False

Users of social media platforms such as Facebook do not have to configure its privacy and security settings.
Correct answer: False

Which of the following is the correct reason why a user (User A) should never allow a browser to remember passwords?
Correct answer: If User B happens to use the same browser and he knows what User A's account username is, he can access the account.

A web cookie is sent by the client browser to the web server.
Correct answer: True

It is not possible to check if your browser's privacy setting are hard enough to prevent your data from leaking into the Internet.
Correct answer: False

Most modern browsers have settings that the user can configure to guard against dangerous downloads from compromised servers.
Correct answer: True

A browser is able to delete browsing history via which manner?
Correct answer: All of the above

Which of these browsers come a built-in VPN?
Correct answer: Opera

QUIZ: Protecting Children Online — 15pts

What are the effects of online pornography and child abuse on children?
Correct answer: physical injuries due to molestation, psychological problems such as depression and anger, mental weakness / low self-esteem

Is is within the rights of a parent to monitor the Internet activity, including IM usage history, of children who are minors still under their supervision.
Correct answer: True

Which particular methods can a parent or guardian employ in order to protect a child from online threats?
Correct answer: block websites inappropriate for children, block unknown email addresses that attempt to contact the child, control the amount of time the child spends on the Internet, filter videos by using kid-friendly versions of the video apps installed on computers or gadgets

Child pornography is usually defined as a depiction of a minor engaged in sexual activity. Who are defines as minors under Philippine law?
Correct answer: those under 18 years of age

Is is possible that a typographical error on the part of the child user as the URL for the website being typed in the browser address bar would lead the child to a porn or other adult-related website.
Correct answer: True

Filtering software should be used to guard against a child accidentally accessing websites that are meant for adults.
Correct answer: True

Search engines use terms known as _____ tags or variables to index a website. When a user searches for websites, the search engines display the results using these tags.
Correct answer: meta

This online risk to a child user involves search results that take the child to websites which are inappropriate for the child, instead of the sites or material that the child is looking for.
Correct answer: misdirected searches

_____ is defined as the harassment, threats to or embarrassment of a child or teen usually through Internet-based communication systems.
Correct answer: cyberbullying

Grooming a child for online abuse is accomplished through which activity?
Correct answer: All of the above

QUIZ: Securing Network Connections — 15pts

A network "appliance" is usually ____
Correct answer: hardware

MAC address filtering is a fool-proof way to make sure only authorized users can access the network.
Correct answer: False

Which of the following devices may NOT become an access point?
Correct answer: terminal

An attacker can use the network as a free access point to the Internet. This is known as ____
Correct answer: freeloading

A network firewall may come as a hardware solution, or as a software solution
Correct answer: True

What should be done to safeguard data being transmitted between sender and receiver?
Correct answer: encryption

Which of the following can an attacker do on a breached wireless network?
Correct answer: all of the above

Which of the following is the typical setup for a corporate or home network?
Correct answer: ISP -> modem -> router -> switch -> workstation

What does a firewall do?
Correct answer: blocks unauthorized traffic coming from the WAN from pushing through into the LAN

What is the primary purpose of having a home network?
Correct answer: to be able to share resources

An attacker can impersonate a valid user on the network. This is known as ____
Correct answer: spoofing

Which protocol automatically assigns IP addresses to devices on a network?
Correct answer: DHCP

Which of the following is a recommended network security best practices?
Correct answer: Share only specific files whenever possible

The action taken in order to intercept and record packets of data coming and going to and from a network.
Correct answer: sniffing

A network administration tool should be able to alert the network administrator to active rogue access points
Correct answer: True

QUIZ: Social Engineering & Identity Theft — 15pts

Is this email phishing or legitimate?

Correct answer: legitimate

For the most part, phishing attacks arrive via email. DEspite their technical features, the methodology represents age-old fraud. Which of these term best describes how phishing works?
Correct answer: social engineering

Legitimate companies will never ask for personal or financial information via email.
Correct answer: True

Having HTTPS or a closed padlock in a website's URL is a guarantee that the iste is legitimate and secure.
Correct answer: False

If you receive a request via email that's not ordinary but it' coming from an email addres that you're familiar with, you don't need to call the sender to confirm if they did indeed send you the message in question.
Correct answer: False

Knowing what information you have that is valuable to a hacker helps you to see what you need to protect from a hacker.
Correct answer: True

A caller uses language that instills a sense of urgency in you. You feel pressure to rush into action. The call is most likely...
Correct answer: social engineering

Is the email below phishing or legitimate?

Correct answer: phishing

Is this email phishing or legitimate?

Correct answer: legitimate

An email if presenting you a problem that can only be resolved by you verifying your information. Included in the message will be a link that brings you to a form to provide your information. This email is most likely...
Correct answer: a phishing attempt

Is the email below phishing or legitimate?

Correct answer: legitimate

Emails will be sent that look like they're coming from a trustworthy source, like a business or a colleague that the victim frequently interacts with. The victim is often prompted to click a link and sign in to one of their web accounts. When clicked, the link will take them to a fake website that has been set up to look identical to the website the victim thinks they're visiting. When the victim gets to the spoofed website and logs in, they're just hand delivered their login information to the attacker. What type of attack is this?
Correct answer: phishing

Social engineers place infected USB drives around organizations parking lots in hopes of baiting an employee into bringing the USB drive inside the gates of their organization. What type of attack is this?
Correct answer: trojan (??)

A customer service agent from a company you do business online sends you a message "responding" to a request for help. Though you never sent request for help, you might decide that since you already have a rep contacting you. this would be an opportune time to receive support for an issue you've been experiencing. Is this a good idea?
Correct answer: No, CSRs only respond to service requests. If you never made a request, why would one be getting in tough with you now?

Identify the legitimate URL from among the options seen below:
Correct answer: https://paypal.com.ph/webapps/mpp/pay-online

QUIZ: Security on Social Networking Sites — 20pts

A child is groomed online by a pedophile they meet on Facebook. The child is sent gifts in order for trust to be established. What type of security risks is this?
Correct answer: contact with predators

Parents and guardians should monitor their children's social media activity, but only as long as these children are minors.
Correct answer: True

Facebook allows the user to control which third-party apps can access the user's data.
Correct answer: True

Flaws in the design of the social networking platform may also provide attackers a vector for launching breaching attempts against users.
Correct answer: True

A minor may be permitted to create a social media account without adult supervision.
Correct answer: False

Which of the following are personally-identifiable information which a user provides a social networking site when creating a profile?
Correct answer: all of the above

Information technology practitioners should read the privacy policy and ____ of a social networking platform carefully.
Correct answer: terms of service

Facebook does not allow users to block other users.
Correct answer: False

Identity theft does not occur in social networking sites.
Correct answer: False

What is the difference between cyberbullying and cyber-harrasment?
Correct answer: Cyberbullying occurs if the victim is a minor regardless of the perpetrator, while cyber-harrasment occurs between adults

Should you allow external search engines to index your Facebook search listing?
Correct answer: No

A common way for malware to propagate via social networks sharing video content is a social engineering attempt to lure the user into downloading and installing a ____.
Correct answer: video codec

Facial recognition is a continuing feature of Facebook at present.
Correct answer: False

What is the minimum age of a person permitted to create a Facebook account according to the platform's terms of service?
Correct answer: 13 years

A child sees photos of explicit sexual activity between two adults on social media. This is an example of which type of security risk?
Correct answer: objectionable content

Facebook allows users to control whether strangers can search for them in the platform.
Correct answer: True

Which group of users who are not your friends should be allowed to send you a message on Facebook?
Correct answer: Friends of friends (?)

A "limited friend" is better known as a ____
Correct answer: acquaintance

It is a breach of a minor's privacy for parent or guardian to have access to his/her social media account passwords.
Correct answer: False

A child sees photos of explicit sexual activity between two adults on social media. This is an example of which type of security risk?
Correct answer: objectionable content

QUIZ: Intro to Digital Forensics

The first phase of digital forensics involves ____
Correct answer: Identification

The scientific examination and analysis of digital evidence in such a way that the information can be used as evidence in a court of law
Correct answer: Cyber forensics

All activity relating to the seizure, access, storage or transfer or digital evidence must be fully ____, preserved and available for review.
Correct answer: documented

When analyzing collected possible sources of evidence, how should the forensic investigator work?
Correct answer: perform analysis using a duplicate image

The scope of digital forensics only includes digital media and digital storage devices.
Correct answer: False

How can a forensic investigator prove that an image of the source of possible evidence is an exact copy of the original?
Correct answer: use a hashing algorithm

Which of the following are examples of potential evidence or containers of evidence?
Correct answer: all of the above

A paper trail is maintained so that the persons who had charge of the evidence at any given time can be known quickly and summoned to testify during trial is required. This refers to ____.
Correct answer: the chain of custody

In the image provided below, indicate all articles that are possibly sources of digital or other evidence.

1 system unit
2 external drive
3 laptop
4 optical disks
5 optical disks
6 various paper
7 printer
8 scanner
9 shredder
10 smartphone/PDA

Post-it notes stuck on a computer or monitor should also be collected as part of evidence gathering.
Correct answer: True

Creating an image of the collected digital devices in digital forensics involves this phase.
Correct answer: Preservation

In digital forensics, collected sources of data must never be altered.
Correct answer: True

The environment where evidence can potentially exist.
Correct answer: crime scene (?)

To compare the created image with the original.
Correct answer: authenticate