AP Cybersecurity: Topic 4.1 Quiz B

Last updated about 3 hours ago

30 Nsɛmmisa

AP Cybersecurity: Topic 4.1 Quiz B

Last updated about 3 hours ago

30 Nsɛmmisa

Which of the following best distinguishes an embedded computer from a personal computer?

Embedded computers are designed for general work or recreational purposes like web browsing.

Embedded computers are part of a larger machine and have specific instruction sets for interfacing with specialized components.

Embedded computers always have more storage capacity than personal computers.

Embedded computers are only used in medical equipment and never in everyday household objects.

What is the primary function of a server computer in an enterprise environment?

To provide services (such as DNS, DHCP, or FTP) to other computers on the network.

To run on battery power for mobile use by employees.

To act as a personal workstation for graphic design and media production.

To interface exclusively with the physical components of a car or train.

Which characteristic primarily differentiates a computer worm from a virus?

A worm requires a user to execute or open a file to activate it.

A worm spreads from one computer to another without any human interaction.

A worm encrypts files to demand payment.

A worm is always embedded inside a piece of hardware.

A user downloads a game that seems harmless, but it secretly installs malicious software that gives an adversary remote control over the system. What type of malware is this?

Ransomware

Logic bomb

Trojan (or Remote Access Trojan)

Fileless Malware

What is the specific goal of ransomware?

To log the user's keystrokes to steal passwords.

To encrypt a device’s files and prevent access until a payment is made.

To use the computer's processing power for mining cryptocurrency.

To remain invisible in the RAM without leaving a file on the hard drive.

Which type of malware is designed to trigger its malicious effect only when specific conditions, such as a specific date or operating system version, are met?

Logic bomb

Spyware

Rootkit

Worm

How does a rootkit differ from other standard types of malware?

It is the only malware that spreads via email.

It gets into the operating system and can control the system while hiding its own presence from detection.

It is a piece of hardware attached to the keyboard.

It only affects handheld devices like smartphones.

What distinguishes "fileless malware" from traditional malware?

It lives in RAM and uses legitimate installed programs to compromise the device, rather than existing as a file on the disk.

It is a virus that deletes all files on the computer immediately.

It can only be transferred via a USB drive.

It is a theoretical concept that has not yet been seen in the wild.

Which of the following is a function of a keylogger?

Blocking access to specific websites.

Logging user keystrokes to potentially extract usernames and passwords.

Encrypting the hard drive boot sector.

Spreading automatically to all contacts in an address book.

Why is the lack of a BIOS or UEFI password considered a security vulnerability?

It prevents the computer from connecting to the internet.

It allows an adversary to boot into "recovery mode" or from an external drive to alter user profiles and passwords.

It causes the computer's processor to overheat.

It prevents the operating system from loading automatically.

If "autorun" is enabled on a device, how might an adversary exploit it?

By sending a phishing email that automatically opens.

By loading malware onto an external drive that executes immediately when inserted into the device.

By guessing the user's weak password remotely.

By forcing the device to restart repeatedly.

Which vulnerability allows adversaries to connect to a device and is best mitigated by a firewall?

Unpatched software

Open ports

Weak physical security

Lack of anti-virus software

Which of the following is an example of an "Internet of Things" (IoT) device?

A high-performance enterprise database server.

A smart thermostat with an embedded computer.

A standard desktop workstation.

A virtual machine running in the cloud.

How can an adversary exploit weak authentication requirements?

By using social engineering to get a user to divulge their password.

By identifying a logic bomb on the hard drive.

By scanning for electromagnetic noise.

By replacing the device's power supply.

Which of the following best distinguishes an embedded computer from a personal computer?

Embedded computers are designed for general work or recreational purposes like web browsing.

Embedded computers are part of a larger machine and have specific instruction sets for interfacing with specialized components.

Embedded computers always have more storage capacity than personal computers.

Embedded computers are only used in medical equipment and never in everyday household objects.

What is the primary function of a server computer in an enterprise environment?

To provide services (such as DNS, DHCP, or FTP) to other computers on the network.

To run on battery power for mobile use by employees.

To act as a personal workstation for graphic design and media production.

To interface exclusively with the physical components of a car or train.

Which characteristic primarily differentiates a computer worm from a virus?

A worm requires a user to execute or open a file to activate it.

A worm spreads from one computer to another without any human interaction.

A worm encrypts files to demand payment.

A worm is always embedded inside a piece of hardware.

A user downloads a game that seems harmless, but it secretly installs malicious software that gives an adversary remote control over the system. What type of malware is this?

Ransomware

Logic Bomb

Trojan (or Remote Access Trojan)

Fileless Malware

What is the specific goal of ransomware?

To log the user's keystrokes to steal passwords.

To encrypt a device’s files and prevent access until a payment is made.

To use the computer's processing power for mining cryptocurrency.

To remain invisible in the RAM without leaving a file on the hard drive.

Which type of malware is designed to trigger its malicious effect only when specific conditions, such as a specific date or operating system version, are met?

Logic bomb

Spyware

Rootkit

Worm

How does a rootkit differ from other standard types of malware?

It is the only malware that spreads via email.

It gets into the operating system and can control the system while hiding its own presence from detection.

It is a piece of hardware attached to the keyboard.

It only affects handheld devices like smartphones.

What distinguishes "fileless malware" from traditional malware?

It lives in RAM and uses legitimate installed programs to compromise the device, rather than existing as a file on the disk.

It is a virus that deletes all files on the computer immediately.

It can only be transferred via a USB drive.

It is a theoretical concept that has not yet been seen in the wild.

Which of the following is a function of a keylogger?

Blocking access to specific websites.

Logging user keystrokes to potentially extract usernames and passwords.

Encrypting the hard drive boot sector.

Spreading automatically to all contacts in an address book.

Why is the lack of a BIOS or UEFI password considered a security vulnerability?

It prevents the computer from connecting to the internet.

It allows an adversary to boot into "recovery mode" or from an external drive to alter user profiles and passwords.

It causes the computer's processor to overheat.

It prevents the operating system from loading automatically.

If "autorun" is enabled on a device, how might an adversary exploit it?

By sending a phishing email that automatically opens.

By loading malware onto an external drive that executes immediately when inserted into the device.

By guessing the user's weak password remotely.

By forcing the device to restart repeatedly.

Which vulnerability allows adversaries to connect to a device and is best mitigated by a firewall?

Unpatched software

Open ports

Weak physical security

Lack of anti-virus software

According to the provided text, what constitutes a "High" risk from a device vulnerability?

A vulnerability that involves potentially compromising sensitive data or critical operations.

A vulnerability related to a single open telnet port on a non-critical laptop.

A vulnerability that requires physical access to a device located in a secure vault.

A vulnerability that causes a minor slowdown in web browsing speed.

What is a "Low" risk vulnerability typically characterized by?

It involves critical infrastructure like water treatment pumps.

It allows for the complete destruction of the device's data.

If exploited, it would have little impact on the organization or data.

It involves missing patches on a public-facing email server.

Which of the following is an example of an "Internet of Things" (IoT) device?

A high-performance enterprise database server.

A smart thermostat with an embedded computer.

A standard desktop workstation.

A virtual machine running in the cloud.

How can an adversary exploit weak authentication requirements?

By using social engineering to get a user to divulge their password.

By identifying a logic bomb on the hard drive.

By scanning for electromagnetic noise.

By replacing the device's power supply.