Question 1: Which of the following is NOT a mitigation best practice for online banking risks?
Site encryption
A shared computer
Authentication security
Virus scanning
Question 2: Which of the following are two of the most common online banking threats?
Spoofing and phishing
Spoofing and ransomware
Persuasion and shoulder surfing
Phishing and persuasion
Question 3: Which of the following is a means of authentication?
Neither A nor B
Kerberos
Both A and B
Public key infrastructure (PKI)
Question 4: In a path traversal attack, the attacker commonly uses __________ to navigate the directory tree to access files in other directories.
Boolean Boolean
characters
Windows Explorer
None of the above
Question 5: Data processing converts __________.
conclusions into facts
facts into conclusions
information into data
data into information
Question 6: ___________ involves protecting sensitive data through encryption.
Insecure cryptographic storage
Failure to restrict URL access
Broken authentication and session management
Insecure communications
Question 7: Which of the following is NOT a form of social engineering?
Dumpster diving
Shoulder surfing
Phishing
Ransomware
Question 8: Which of the following is a type of hacker?
Social engineer
CISSP
Trojan horse
Man-in-the-middle
Question 9: Although manually operated, what was one of the first complex data processing devices?
The Analytical Engine
The punch card tabulating system
The Difference Engine
The abacus
Question 10: What uses Authentication Header (AH) and Encapsulating Security Payload (ESP) to create secure data transmissions?
XSS
IPSec
DNS
SSL
Question 11: Which of the following is not a common phase of customer life cycle management?
Retention
Inception
Conversion
Acquisition
Question 12: Your company has several small branch offices spread throughout the state. Which of the following is the best choice to help branch office personnel meet and work on projects without incurring the cost of traveling?
Social media
Audio conferencing
VoIP
Unified collaborative communications (UCC)
Question 13: Which security tenet emphasizes the need for the information to be delivered unaltered to the recipient?
Integrity
Authorization
Confidentiality
Availability
Question 14: Which of the following helps to ensure the confidentiality and integrity of data communications?
DNS
IPSec
TCP/IP
SNMP
Question 15: Which of the following acts as an intermediary for requests from clients seeking resources from other servers?
Perimeter defense
Proxy server
DMZ
Firewall
Question 16: Software that executes on two or more computers in a network is a ___________ application.
client/server
Mainframe
Distributed
Peer to peer
Question 17: Which of the following best describes a cookie?
A small data file that a Web site may write to your hard drive
A small software program that is stored on a piece of hardware and may be updated to add more functionality
A type of shopping cart
A type of short-range communication network
Question 18: Which of the following is a physical or logical subnetwork that hosts an organization's external services to an outside network, such as the Internet?
Proxy server
Perimeter defense
DMZ
Firewall
Question 19: Which of the following techniques would help a Web application to properly validate user input?
Using SSL for all user input
Whitelisting and accepting only known good characters
Blacklisting unknown IP addresses
Cleansing all data in the database
Question 20: The buying and selling of goods and services over the Internet is commonly referred to as __________.
social purchasing
brick and mortar sales
network commerce
e-commerce