Vulnerabilities and Exploits Quiz

Podcast

Play an AI-generated podcast conversation about this lesson

Download our mobile app to listen on the go

Get App

Questions and Answers

What is a vulnerability?

A weakness in encryption algorithms
A strength in encryption algorithms
A strength in design, implementation, operation, or internal control
A weakness in design, implementation, operation, or internal control (correct)

What is a backdoor in a computer system?

A type of malware
A type of firewall
A secret method of bypassing normal authentication or security controls (correct)
A type of encryption algorithm

What is a denial-of-service attack?

An attack that steals sensitive information from a computer system
An attack that makes a machine or network resource unavailable to its intended users (correct)
An attack that modifies the operating system of a computer
An attack that encrypts data on a computer system

What is a direct-access attack?

An unauthorized user gaining physical access to a computer (C) Signup and view all the answers

What is eavesdropping?

The act of surreptitiously listening to a private computer conversation (communication) (D) Signup and view all the answers

What is TEMPEST?

A specification by the NSA referring to eavesdropping attacks (B) Signup and view all the answers

What is a multi-vector, polymorphic attack?

A new class of cyber threats that combined several types of attacks and changed form to avoid cybersecurity controls as they spread (C) Signup and view all the answers

What is a vulnerability?

A weakness in design, implementation, operation, or internal control (C) Signup and view all the answers

What is an exploitable vulnerability?

A vulnerability for which at least one working attack or exploit exists (C) Signup and view all the answers

What is a backdoor?

A secret method of bypassing normal authentication or security controls (D) Signup and view all the answers

What is a denial-of-service attack?

A machine or network resource that is unavailable to its intended users (A) Signup and view all the answers

What is a direct-access attack?

An unauthorized user gaining physical access to a computer (D) Signup and view all the answers

What is eavesdropping?

A surreptitious listening to a private computer conversation (C) Signup and view all the answers

What are multi-vector, polymorphic attacks?

A type of cyber threat that changes form to avoid cybersecurity controls (D) Signup and view all the answers

What is Multi-Factor Authentication (MFA)?

A policy that requires users to identify themselves by more than a username and password. (B) Signup and view all the answers

What is the purpose of Multi-Factor Authentication (MFA)?

To enhance organizational security by requiring users to identify themselves by more than a username and password. (C) Signup and view all the answers

What are the factors that can be used in Multi-Factor Authentication (MFA)?

Knowledge, possession, and inherence. (D) Signup and view all the answers

What are one-time passwords (OTPs)?

Passwords generated periodically or each time an authentication request is submitted. (B) Signup and view all the answers

What is Adaptive Authentication or Risk-based Authentication?

A subset of MFA that analyzes additional factors by considering context and behavior. (C) Signup and view all the answers

What is the difference between Multi-Factor Authentication (MFA) and Two-Factor Authentication (2FA)?

2FA restricts the number of factors required to only two, while MFA can be two or more. (C) Signup and view all the answers

What are some examples of Multi-Factor Authentication (MFA)?

Access badges, USB devices, smart cards, and biometrics. (B) Signup and view all the answers

Flashcards are hidden until you start studying

Study Notes

Understanding Multi-Factor Authentication (MFA)

MFA requires the user to provide two or more verification factors to gain access to a resource.
MFA is a core component of a strong identity and access management (IAM) policy.
MFA decreases the likelihood of a successful cyber attack.
MFA enhances organizational security by requiring users to identify themselves by more than a username and password.
MFA factors can include knowledge, possession, and inherence.
One of the most common MFA factors is one-time passwords (OTPs).
OTPs are generated periodically or each time an authentication request is submitted.
MFA examples include access badges, USB devices, smart cards, and biometrics.
Adaptive Authentication or Risk-based Authentication is a subset of MFA that analyzes additional factors by considering context and behavior.
Adaptive Authentication assigns a level of risk associated with the login attempt.
MFA is often used interchangeably with two-factor authentication (2FA).
2FA restricts the number of factors required to only two, while MFA can be two or more.