[
  {
    "quest": "473) Developed by IBM and refined by Symantec, the __________ provides a malware detection system that will automatically capture, analyze, add detection and shielding, or remove new malware and pass information about it to client systems so the malware can be detected before it is allowed to run elsewhere",
    "answers": [
      {
        "text": "Intrusion Prevention System (IPS)",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Encryption tool",
        "image": ""
      },
      {
        "text": "digital immune system",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "342) In a a __________ attack the slave zombies construct packets requiring a response that contains the target's IP address as the source IP address in the packet's IP header. These packets are sent to uninfected machines that respond with packets directed at the target machine\nSelect one:",
    "answers": [
      {
        "text": "reﬂector DDoS",
        "image": ""
      },
      {
        "text": "blended",
        "image": ""
      },
      {
        "text": "internal resource",
        "image": ""
      },
      {
        "text": "direct DDoS",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "302) ____________detection involves the collection of data relating to the behavior of legitimate users over a period of time. Statistical tests are applied to observed behavior to determine with a high level of conﬁdence whether that behavior is not legitimate user behavior",
    "answers": [
      {
        "text": "Signature-based",
        "image": ""
      },
      {
        "text": "Statistical anomaly",
        "image": ""
      },
      {
        "text": "Heuristic",
        "image": ""
      },
      {
        "text": "Machine learning",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "469) A __________ is when a user views a Web page controlled by the attacker that contains a code that exploits the browser bug and downloads and installs malware on the system without the user's knowledge or consent",
    "answers": [
      {
        "text": "Phishing attack",
        "image": ""
      },
      {
        "text": "drive-by-download",
        "image": ""
      },
      {
        "text": "Cross-site scripting (XSS)",
        "image": ""
      },
      {
        "text": "Denial of Service (DoS) attack",
        "image": ""
      },
      {
        "text": "Social engineering attack",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "311) The ________ is an audit collection module operating as a background process on a monitored system whose purpose is to collect data on security related events on the host and transmit these to the central manager\nSelect one:",
    "answers": [
      {
        "text": "central manager module",
        "image": ""
      },
      {
        "text": "host agent module",
        "image": ""
      },
      {
        "text": "intruder alert module",
        "image": ""
      },
      {
        "text": "LAN monitor agent module",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "826) A(n) __________ is an action, device, procedure, or technique that reduces a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the harm it can cause, or by discovering and reporting it so that correct action can be taken\nSelect one:",
    "answers": [
      {
        "text": "protocol",
        "image": ""
      },
      {
        "text": "attavk",
        "image": ""
      },
      {
        "text": "countermeasure",
        "image": ""
      },
      {
        "text": "adversary",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "441) _________ attacks can occur in a binary buffer copy when the programmer has included code to check the number of bytes being transferred, but due to a coding error, allows just one more byte to be copied than there is space available",
    "answers": [
      {
        "text": "SQL injection",
        "image": ""
      },
      {
        "text": "off-by-one",
        "image": ""
      },
      {
        "text": "Cross-site scripting (XSS)",
        "image": ""
      },
      {
        "text": "Integer overflow",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1145) the __________ approach is unsuitable for a connectionless type of application because it requires the overhead of a handshake before any connectionless transmission, effectively negating the chief characteristic of a connectionless transaction.",
    "answers": [
      {
        "text": "timestamp",
        "image": ""
      },
      {
        "text": "backward reply",
        "image": ""
      },
      {
        "text": "challenge-response",
        "image": ""
      },
      {
        "text": "replay",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "416) A buffer _________ is a condition at an interface under which more input can be placed into a buffer or data holding area than the capacity allocated, overwriting other information",
    "answers": [
      {
        "text": "underflow/underrun/underwrite",
        "image": ""
      },
      {
        "text": "overflow/overrun/overwrite",
        "image": ""
      },
      {
        "text": "bypass/overwrite/override",
        "image": ""
      },
      {
        "text": "breach/infiltration/compromise",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "417) A consequence of a buffer overflow error is __________ ",
    "answers": [
      {
        "text": "loss of data connectivity and communication",
        "image": ""
      },
      {
        "text": "corruption of data used by the program, unexpected transfer of control int he program, and possible memory access violation",
        "image": ""
      },
      {
        "text": "system shutdown and restart",
        "image": ""
      },
      {
        "text": "network congestion and slow performance",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "286) The _________ is the predefined formally documented statement that defines what activities are allowed to take place on an organization's network or on particular hosts to support the organization's requirements",
    "answers": [
      {
        "text": "incident response plan",
        "image": ""
      },
      {
        "text": "access control list",
        "image": ""
      },
      {
        "text": "security policy",
        "image": ""
      },
      {
        "text": "encryption protocol",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "88) Because of the opportunities for parallel execution in __________ mode, processors that support parallel features, such as aggressive pipelining, multiple instruction dispatch per clock cycle, a large number of registers, and SIMD instructions can be effectively utilized",
    "answers": [
      {
        "text": "CBC",
        "image": ""
      },
      {
        "text": "CTR",
        "image": ""
      },
      {
        "text": "CFB",
        "image": ""
      },
      {
        "text": "ECB",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "439) __________ is one of the best known protection mechanisms that is a GCC compiler extension that inserts additional function entry and exit code",
    "answers": [
      {
        "text": "Address Space Layout Randomization (ASLR)",
        "image": ""
      },
      {
        "text": "Data Execution Prevention (DEP)",
        "image": ""
      },
      {
        "text": "Control Flow Integrity (CFI)",
        "image": ""
      },
      {
        "text": "stackguard",
        "image": ""
      },
      {
        "text": "Stack smashing protection",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "474) __________ technology is an anti-virus approach that enables the anti-virus program to easily detect even the most complex polymorphic viruses and other malware, while maintaining fast scanning speeds",
    "answers": [
      {
        "text": "Encryption key",
        "image": ""
      },
      {
        "text": "Generic decryption",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Intrusion Detection System (IDS)",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "344) Unlike heuristics or ﬁngerprint based scanners,the _________ integrates with the operating system of a host computer and monitors program behavior in real time for malicious actions\nSelect one:",
    "answers": [
      {
        "text": "mobile code",
        "image": ""
      },
      {
        "text": "digital immune system",
        "image": ""
      },
      {
        "text": "generic decryption",
        "image": ""
      },
      {
        "text": "behavior blocking software",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "5) The principal objectives of computer security are to prevent unauthorized users from gaining access to resources, to prevent legitimate users from accessing resources in an unauthorized manner, and to enable legitimate users to access resources in an authorized manner",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "422) __________ can prevent buffer overflow attacks, typically of global data, which\nattempt to overwrite adjacent regions in the processes address space, such as the global offset table",
    "answers": [
      {
        "text": "secure coding practices",
        "image": ""
      },
      {
        "text": "guard pages",
        "image": ""
      },
      {
        "text": "encrypted tunnels",
        "image": ""
      },
      {
        "text": "intrusion detection systems (IDS)",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "129) Assuming that Alice and Bob have each other?s public key. In order to establish a shared session key, Alice just needs to generate a random k, encrypt k using Bob?s public key, and send the encrypted k to Bob and then Bob will know he has a key shared with Alice",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "314) A ________ is used to measure the current value of some entity. Examples include the number of logical connections assigned to a user application and the number of outgoing messages queued for a user process\nSelect one:",
    "answers": [
      {
        "text": "Gauge",
        "image": ""
      },
      {
        "text": "Resource utilization",
        "image": ""
      },
      {
        "text": "Counter",
        "image": ""
      },
      {
        "text": "Interval timer",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "414) Traditionally the function of __________ was to transfer control to a user commandline interpreter, which gave access to any program available on the system with the privileges of the attacked program",
    "answers": [
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Shellcode",
        "image": ""
      },
      {
        "text": "Antivirus software",
        "image": ""
      },
      {
        "text": "Virtual private network (VPN)",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "284) The _________ (RFC 4766) document defines requirements for the Intrusion Detection Message Exchange Format (IDMEF)",
    "answers": [
      {
        "text": "Intrusion Detection Message Exchange Requirements",
        "image": ""
      },
      {
        "text": "Network Security Protocol Standards",
        "image": ""
      },
      {
        "text": "Firewall Configuration Best Practices",
        "image": ""
      },
      {
        "text": "Data Encryption Algorithms",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "430) A __________ can occur as a result of a programming error when a process attempts to store data beyond the limits of a fixed-size buffer and consequently overwrites adjacent memory locations",
    "answers": [
      {
        "text": "buffer overflow",
        "image": ""
      },
      {
        "text": "Null pointer dereference",
        "image": ""
      },
      {
        "text": "Division by zero",
        "image": ""
      },
      {
        "text": "Integer overflow",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "110) An encryption scheme is _________ if the cost of breaking the cipher exceeds the value of the encrypted information and/or the time required to break the cipher exceeds the useful lifetime of the information",
    "answers": [
      {
        "text": "vulnerable",
        "image": ""
      },
      {
        "text": "computationally secure",
        "image": ""
      },
      {
        "text": "unbreakable",
        "image": ""
      },
      {
        "text": "reversible",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "277) __________ is a security service that monitors and analyzes system events for the purpose of finding, and providing real-time warning of attempts to access system resources in an unauthorized manner",
    "answers": [
      {
        "text": "Anti-virus software",
        "image": ""
      },
      {
        "text": "Data encryption",
        "image": ""
      },
      {
        "text": "Intrusion Detection",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "404) The function of ________ was to transfer control to a user commandline interpreter,which gave access to any program available on the system with the privileges of the attacked program",
    "answers": [
      {
        "text": "Cryptographic hash function",
        "image": ""
      },
      {
        "text": "Shellcode",
        "image": ""
      },
      {
        "text": "Key exchange algorithm",
        "image": ""
      },
      {
        "text": "Digital signature",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "444) In the classic __________ overflow, the attacker overwrites a buffer located in the local variable area of a stack frame and then overwrites the saved frame pointer and return address",
    "answers": [
      {
        "text": "Heap buffer overflow",
        "image": ""
      },
      {
        "text": "Integer overflow",
        "image": ""
      },
      {
        "text": "Format string vulnerability",
        "image": ""
      },
      {
        "text": "stack buffer",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "113) \"The input to the encryption algorithm is the XOR of the next 64 bits of plaintext and the preceding 64 bits of ciphertext\" is a description of the ________ mode of operation",
    "answers": [
      {
        "text": "Stream Cipher (SC)",
        "image": ""
      },
      {
        "text": "Counter (CTR)",
        "image": ""
      },
      {
        "text": "Cipher Block Chaining (CBC)",
        "image": ""
      },
      {
        "text": "Electronic Codebook (ECB)",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "512) Modifying the system's TCP/IP network code to selectively drop an entry for an incomplete connection from the TCP connections table when it overflows, allowing a new connection attempt to proceed is _______",
    "answers": [
      {
        "text": "poison packet",
        "image": ""
      },
      {
        "text": "slashdot",
        "image": ""
      },
      {
        "text": "backscatter traffic",
        "image": ""
      },
      {
        "text": "random drop",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1120) the __________ mechanism assures that a received packet was in fact transmitted by the party identified as the source in the packet header and assures that the\nPacket has not been altered in transit.",
    "answers": [
      {
        "text": "confidentiality",
        "image": ""
      },
      {
        "text": "authentication",
        "image": ""
      },
      {
        "text": "security",
        "image": ""
      },
      {
        "text": "key management",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "81) The output of the encryption function is fed back to the shift register in Output Feedback mode, whereas in ___________ the ciphertext unit is fed back to the shift register",
    "answers": [
      {
        "text": "Electronic Codebook mode",
        "image": ""
      },
      {
        "text": "Cipher Block Chaining mode",
        "image": ""
      },
      {
        "text": "Counter mode",
        "image": ""
      },
      {
        "text": "Cipher Feedback mode",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "111) The _________ was issued as a federal information-processing standard and is intended to replace DES and 3DES with an algorithm that is more secure and efficient",
    "answers": [
      {
        "text": "Data Encryption Standard (DES)",
        "image": ""
      },
      {
        "text": "Rivest Cipher 4 (RC4)",
        "image": ""
      },
      {
        "text": "Blowfish",
        "image": ""
      },
      {
        "text": "Advanced Encryption Standard (AES)",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1170) The __________ strategy is when users are told the importance of using hard to guess passwords and provided with guidelines for selecting strong passwords.",
    "answers": [
      {
        "text": "reactive password checking",
        "image": ""
      },
      {
        "text": "computer-generated password",
        "image": ""
      },
      {
        "text": "proactive password checking",
        "image": ""
      },
      {
        "text": "user education",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "709) The __________ strategy is when users are told the importance of using hard to guess passwords and provided with guidelines for selecting strong passwords",
    "answers": [
      {
        "text": "reactive password checking",
        "image": ""
      },
      {
        "text": "proactive password checking",
        "image": ""
      },
      {
        "text": "computer-generated password",
        "image": ""
      },
      {
        "text": "user education",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "305) The simplest statistical test is to measure the _________ of a parameter over some historical period which would give a reﬂection of the average behavior and its variability\nSelect one:",
    "answers": [
      {
        "text": "mean and standard deviation",
        "image": ""
      },
      {
        "text": "Markoprocess",
        "image": ""
      },
      {
        "text": "multivariate",
        "image": ""
      },
      {
        "text": "time series",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "281) ________ detection techniques detect intrusion by observing events in the system and applying a set of rules that lead to a decision regarding whether a given pattern of activity is or is not suspicious",
    "answers": [
      {
        "text": "Signature",
        "image": ""
      },
      {
        "text": "Statistical",
        "image": ""
      },
      {
        "text": "Heuristic",
        "image": ""
      },
      {
        "text": "Machine learning",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "429) Traditionally the function of __________ was to transfer control to a user command-line interpreter, which gave access to any program available on the system with the privileges of the attacked program",
    "answers": [
      {
        "text": "Ransomware",
        "image": ""
      },
      {
        "text": "Spyware",
        "image": ""
      },
      {
        "text": "shellcode",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      },
      {
        "text": "Keylogger",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "90) Both __________ produce output that is independent of both the plaintext and the ciphertext. This makes them natural candidates for stream ciphers that encrypt plaintext by XOR one full block at a time",
    "answers": [
      {
        "text": "CBC and ECB",
        "image": ""
      },
      {
        "text": "OFB and CTR",
        "image": ""
      },
      {
        "text": "ECB and OFB",
        "image": ""
      },
      {
        "text": "CTR and CBC",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "322) The _________ prevents duplicate passwords from being visible in the password ﬁle. Even if two users choose the same password, those passwords will be assigned at different times\nSelect one:",
    "answers": [
      {
        "text": "honeypot",
        "image": ""
      },
      {
        "text": "salt",
        "image": ""
      },
      {
        "text": "rule based intrusion detection",
        "image": ""
      },
      {
        "text": "audit record",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "407) __________ can prevent buffer overflow attacks, typically of global data, which attempt to overwrite adjacent regions in the processes address space, such as the global offset table",
    "answers": [
      {
        "text": "Intrusion Prevention System (IPS)",
        "image": ""
      },
      {
        "text": "Honeytokens",
        "image": ""
      },
      {
        "text": "Guard pages",
        "image": ""
      },
      {
        "text": "Captcha",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "54) A __________ uses macro or scripting code, typically embedded in a document and triggered when the document is viewed or edited, to run and replicate itself into other such documents",
    "answers": [
      {
        "text": "boot sector infector",
        "image": ""
      },
      {
        "text": "file infector",
        "image": ""
      },
      {
        "text": "macro virus",
        "image": ""
      },
      {
        "text": "multipartite virus",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "509) In both direct flooding attacks and ______ the use of spoofed source addresses results in response packets being scattered across the Internet and thus detectable",
    "answers": [
      {
        "text": "SYN spoofing attacks",
        "image": ""
      },
      {
        "text": "indirect flooding attacks",
        "image": ""
      },
      {
        "text": "ICMP attacks",
        "image": ""
      },
      {
        "text": "system address spoofing",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "316) A _________ is a legitimate user who accesses data, programs, or resources for which such access is not authorized, or who is authorized for such access but misuses his or her privileges\nSelect one:",
    "answers": [
      {
        "text": "Misfeasor",
        "image": ""
      },
      {
        "text": "Emissary",
        "image": ""
      },
      {
        "text": "Clandestine User",
        "image": ""
      },
      {
        "text": "Masquerader",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "582) The __________ cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability",
    "answers": [
      {
        "text": "hybrid",
        "image": ""
      },
      {
        "text": "community",
        "image": ""
      },
      {
        "text": "private",
        "image": ""
      },
      {
        "text": "public",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "262) A ________ monitors network traffic for particular network segments or devices and analyzes network, transport, and application protocols to identify suspicious activity",
    "answers": [
      {
        "text": "host-based IDS ",
        "image": ""
      },
      {
        "text": "security intrusion",
        "image": ""
      },
      {
        "text": "network-based IDS ",
        "image": ""
      },
      {
        "text": "intrusion detection",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "461) A __________ uses multiple methods of infection or propagation to maximize the speed of contagion and the severity of the attack",
    "answers": [
      {
        "text": "Man-in-the-middle attack",
        "image": ""
      },
      {
        "text": "Social engineering attack",
        "image": ""
      },
      {
        "text": "blended attack",
        "image": ""
      },
      {
        "text": "Phishing attack",
        "image": ""
      },
      {
        "text": "Denial of Service (DoS) attack",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "823) __________ assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed\nSelect one:",
    "answers": [
      {
        "text": "Privacy",
        "image": ""
      },
      {
        "text": "System Integrity",
        "image": ""
      },
      {
        "text": "Avvailability",
        "image": ""
      },
      {
        "text": "Data Integrity",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "279) Copying a database containing credit card numbers, viewing sensitive data without authorization, and guessing and cracking passwords are examples of _________ ",
    "answers": [
      {
        "text": "firewall configuration",
        "image": ""
      },
      {
        "text": "intrusion",
        "image": ""
      },
      {
        "text": "network segmentation",
        "image": ""
      },
      {
        "text": "vulnerability scanning",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "383) The function of ___________ was to transfer control to a user command-line interpreter, which gave access to any program available on the system with the privileges of the attacked program",
    "answers": [
      {
        "text": "stacking",
        "image": ""
      },
      {
        "text": "shellcode",
        "image": ""
      },
      {
        "text": "no-execute",
        "image": ""
      },
      {
        "text": "memory management",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "60) __________ will integrate with the operating system of a host computer and monitor program behavior in real time for malicious actions",
    "answers": [
      {
        "text": "Fingerprint-based scanners",
        "image": ""
      },
      {
        "text": "Behavior-blocking software",
        "image": ""
      },
      {
        "text": "Generic decryption technology",
        "image": ""
      },
      {
        "text": "Heuristic scanners",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "243) A _____ monitors network traffic for particular network segments or devices and analyzes network, transport, and application protocols to identify suspicious activity",
    "answers": [
      {
        "text": "Host-based IDS",
        "image": ""
      },
      {
        "text": "Intrusion Prevention System",
        "image": ""
      },
      {
        "text": "Firewal",
        "image": ""
      },
      {
        "text": "Network-based IDS",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "273) The _______ is the ID component that analyzes the data collected by the sensor for signs of unauthorized or undesired activity or for events that might be of interest to the security administrator",
    "answers": [
      {
        "text": "data source ",
        "image": ""
      },
      {
        "text": "sensor",
        "image": ""
      },
      {
        "text": "operator ",
        "image": ""
      },
      {
        "text": "analyzer",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "834) ________ assures that a system performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system\nSelect one:",
    "answers": [
      {
        "text": "Data Integrity",
        "image": ""
      },
      {
        "text": "Confidentiality",
        "image": ""
      },
      {
        "text": "Availability",
        "image": ""
      },
      {
        "text": "System Integrity",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1140) ________ is a procedure that allows communicating parties to verify that the contents of a received message have not been altered and that the source is authentic.",
    "answers": [
      {
        "text": "Identification",
        "image": ""
      },
      {
        "text": "Message authentication",
        "image": ""
      },
      {
        "text": "Verification",
        "image": ""
      },
      {
        "text": "User authentication",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "502) The ______ attacks the ability of a network server to respond to TCP connection requests by overflowing the tables used to manage such connections",
    "answers": [
      {
        "text": "DNS amplification attack",
        "image": ""
      },
      {
        "text": "SYN spoofing attack",
        "image": ""
      },
      {
        "text": "basic flooding attack",
        "image": ""
      },
      {
        "text": "poison packet attack",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "16) __________ implements a security policy that specifies who or what may have access to each specific system resource and the type of access that is permitted in each instance",
    "answers": [
      {
        "text": "Audit control",
        "image": ""
      },
      {
        "text": "Resource control",
        "image": ""
      },
      {
        "text": "System control",
        "image": ""
      },
      {
        "text": "Access control",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1140) A (n)__________ uses a microcontroller, is not programmable once the program logic for the device has been burned into ROM, and has no interaction with a user.",
    "answers": [
      {
        "text": "deeply embedded system",
        "image": ""
      },
      {
        "text": "constrained device",
        "image": ""
      },
      {
        "text": "lattice device",
        "image": ""
      },
      {
        "text": "embedded system",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "460) A _________ is a set of programs installed on a system to maintain covert access to that system with administrator (root) privileges while hiding evidence of its presence",
    "answers": [
      {
        "text": "Encryption tool",
        "image": ""
      },
      {
        "text": "Spyware",
        "image": ""
      },
      {
        "text": "rootkit",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Antivirus software",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "368) A buffer ____________ is a condition at an interface under which more input can be placed into a buffer or data holding area than the capacity allocated, overwriting other information",
    "answers": [
      {
        "text": "overwrite",
        "image": ""
      },
      {
        "text": "overflow",
        "image": ""
      },
      {
        "text": "overrun",
        "image": ""
      },
      {
        "text": "all of these options",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "434) An essential component of many buffer overflow attacks is the transfer of execution to code supplied by the attacker and often saved in the buffer being overflowed.\nThis code is known as _________ ",
    "answers": [
      {
        "text": "Exploit",
        "image": ""
      },
      {
        "text": "shellcode",
        "image": ""
      },
      {
        "text": "Payload",
        "image": ""
      },
      {
        "text": "Malware",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "326) _________ detection focuses on characterizing the past behavior of individual users or related groups of users and then detecting signiﬁcant deviations\nSelect one:",
    "answers": [
      {
        "text": "Threshold",
        "image": ""
      },
      {
        "text": "Proﬁle-based anomaly",
        "image": ""
      },
      {
        "text": "Statistical anomaly",
        "image": ""
      },
      {
        "text": "Action condition",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "89) __________ mode is suitable for parallel operation. Because there is no chaining, multiple blocks can be encrypted or decrypted simultaneously. Unlike CTR mode, this mode includes a nonce as well as a counter",
    "answers": [
      {
        "text": "XTS-AES",
        "image": ""
      },
      {
        "text": "S-AES",
        "image": ""
      },
      {
        "text": "3DES",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "264) __________ involves an attempt to define a set of rules or attack patterns that can be used to decide if a given behavior is that of an intruder",
    "answers": [
      {
        "text": "Profile based detection ",
        "image": ""
      },
      {
        "text": "Signature detection",
        "image": ""
      },
      {
        "text": "Threshold detection ",
        "image": ""
      },
      {
        "text": "Anomaly detection",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "241) The _____ is the IDS component that analyzes the data collected by the sensor for signs of unauthorized or undesired activity or for events that might be of interest to the security administrator",
    "answers": [
      {
        "text": "Agent",
        "image": ""
      },
      {
        "text": "Collector",
        "image": ""
      },
      {
        "text": "Analyzer",
        "image": ""
      },
      {
        "text": "Logger",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "345) _________ is a mass mailing e-mail worm that installs a backdoor in infected computers thereby enabling hackers to gain remote access to data such as passwords and credit card numbers\nSelect one:",
    "answers": [
      {
        "text": "Sobig.f",
        "image": ""
      },
      {
        "text": "Mydoom",
        "image": ""
      },
      {
        "text": "Slammer",
        "image": ""
      },
      {
        "text": "Code Red",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "339) _____technology enables the antivirus program to easily detect even the most complex polymorphic viruses while maintaining fast scanning speeds",
    "answers": [
      {
        "text": "File signature matching",
        "image": ""
      },
      {
        "text": "Generic Decryption",
        "image": ""
      },
      {
        "text": "Behavioral analysis",
        "image": ""
      },
      {
        "text": "Heuristic scanning",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "347) _________ antivirus programs are memory resident programs that identify a virus by its actions rather than its structure in an infected program\nSelect one:",
    "answers": [
      {
        "text": "First generation",
        "image": ""
      },
      {
        "text": "Fourth generation",
        "image": ""
      },
      {
        "text": "Second generation",
        "image": ""
      },
      {
        "text": "Third generation",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "419) The function of ________ was to transfer control to a user command-line interpreter, which gave access to any program available on the system with the privileges of the attacked program",
    "answers": [
      {
        "text": "ransomware",
        "image": ""
      },
      {
        "text": "shellcode",
        "image": ""
      },
      {
        "text": "rootkit",
        "image": ""
      },
      {
        "text": "keylogger",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "472) Countermeasures for malware are generally known as _________ mechanisms because they were first developed to specifically target virus infections",
    "answers": [
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Encryption tool",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      },
      {
        "text": "anti-virus",
        "image": ""
      },
      {
        "text": "Intrusion Detection System (IDS)",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "433) \"Smashing the Stack for Fun and Profit\" was a step by step introduction to exploiting stack-based buffer overflow vulnerabilities that was published in Phrack magazine by _________ ",
    "answers": [
      {
        "text": "Aleph One",
        "image": ""
      },
      {
        "text": "L0phtcrack",
        "image": ""
      },
      {
        "text": "Acid Burn",
        "image": ""
      },
      {
        "text": "The Mentor",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "825) A flaw or weakness in a system's design, implementation, or operation and management that could be exploited to violate the system's security policy is a(n) __________\nSelect one:",
    "answers": [
      {
        "text": "vulnerability",
        "image": ""
      },
      {
        "text": "countermeasure",
        "image": ""
      },
      {
        "text": "risk",
        "image": ""
      },
      {
        "text": "adversary",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "331) The _________ worm exploits a security hole in the Microsoft Internet Information Server to penetrate and spread to other hosts. It also disables the system ﬁle checker in Windows\nSelect one:",
    "answers": [
      {
        "text": "Mydoom",
        "image": ""
      },
      {
        "text": "Warezov",
        "image": ""
      },
      {
        "text": "Slammer",
        "image": ""
      },
      {
        "text": "Code Red",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "432) A ___________ overflow occurs when the targeted buffer is located on the stack, usually as a local variable in a function's stack frame",
    "answers": [
      {
        "text": "Heap buffer overflow",
        "image": ""
      },
      {
        "text": "Global buffer overflow",
        "image": ""
      },
      {
        "text": "stack buffer",
        "image": ""
      },
      {
        "text": "Data section buffer overflow",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "84) The __________ method is ideal for a short amount of data and is the appropriate mode to use if you want to transmit a DES or AES key securely",
    "answers": [
      {
        "text": "cipher feedback mode",
        "image": ""
      },
      {
        "text": "counter mode",
        "image": ""
      },
      {
        "text": "electronic codebook mode",
        "image": ""
      },
      {
        "text": "output feedback mode",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "303) A ________ is an individual who seizes supervisory control of the system and uses this control to evade auditing and access controls or to suppress audit collection\nSelect one:",
    "answers": [
      {
        "text": "Clandestine User",
        "image": ""
      },
      {
        "text": "Mole",
        "image": ""
      },
      {
        "text": "Masquerader",
        "image": ""
      },
      {
        "text": "Misfeasor",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "300) What are possible locations for NIDS sensors?",
    "answers": [
      {
        "text": "inside the external firewall",
        "image": ""
      },
      {
        "text": "between the external firewall and the Internet",
        "image": ""
      },
      {
        "text": "before internal servers and database resources",
        "image": ""
      },
      {
        "text": "before the workstation networks",
        "image": ""
      },
      {
        "text": "All of the above ",
        "image": ""
      }
    ],
    "correct": 4,
    "image": ""
  },
  {
    "quest": "580) An end user who operates on database objects via a particular application but does not own any of the database objects is the __________",
    "answers": [
      {
        "text": "application owner",
        "image": ""
      },
      {
        "text": "end user other than application owner",
        "image": ""
      },
      {
        "text": "foreign key",
        "image": ""
      },
      {
        "text": "administrator",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "710) A __________ strategy is one in which the system periodically runs its own password cracker to find guessable passwords",
    "answers": [
      {
        "text": "user education",
        "image": ""
      },
      {
        "text": "proactive password checking",
        "image": ""
      },
      {
        "text": "reactive password checking",
        "image": ""
      },
      {
        "text": "computer-generated password",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "154) ________ is a term that refers to the means of delivering a key to two parties that wish to exchange data without allowing others to see the key",
    "answers": [
      {
        "text": "Private key",
        "image": ""
      },
      {
        "text": "Key exchange protocol",
        "image": ""
      },
      {
        "text": "Key distribution technique ",
        "image": ""
      },
      {
        "text": "Public key",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "260) A _________ is a security event that constitutes a security incident in which an intruder gains access to a system without having authorization to do so",
    "answers": [
      {
        "text": "intrusion detection ",
        "image": ""
      },
      {
        "text": "IDS",
        "image": ""
      },
      {
        "text": "criminal enterprise ",
        "image": ""
      },
      {
        "text": "security intrusion",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "824) An assault on system security that derives from an intelligent act that is a deliberate attempt to evade security services and violate the security policy of a system is a(n) __________",
    "answers": [
      {
        "text": "risk",
        "image": ""
      },
      {
        "text": "vulnerability",
        "image": ""
      },
      {
        "text": "asset",
        "image": ""
      },
      {
        "text": "attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1297)________ includes data processing and storage equipment,transmission and networking facilities,and offline storage media.",
    "answers": [
      {
        "text": "Supporting facilities",
        "image": ""
      },
      {
        "text": "Physical facilities",
        "image": ""
      },
      {
        "text": "Information system hardware",
        "image": ""
      },
      {
        "text": "Infrastructure facilities",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "500) A ______ triggers a bug in the system's network handling software causing it to crash and the system can no longer communicate over the network until this software is reloaded",
    "answers": [
      {
        "text": "echo",
        "image": ""
      },
      {
        "text": "reflection",
        "image": ""
      },
      {
        "text": "poison packet",
        "image": ""
      },
      {
        "text": "flash flood",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "86) \"Each block of plaintext is XORed with an encrypted counter. The counter is incremented for each subsequent block\", is a description of ___________ mode",
    "answers": [
      {
        "text": "Cipher Block Chaining",
        "image": ""
      },
      {
        "text": "Counter",
        "image": ""
      },
      {
        "text": "Cipher Feedback",
        "image": ""
      },
      {
        "text": "Electronic Codebook",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "715) A __________ is when an adversary attempts to achieve user authentication without access to the remote host or to the intervening communications path",
    "answers": [
      {
        "text": "client attack",
        "image": ""
      },
      {
        "text": "eavesdropping attack",
        "image": ""
      },
      {
        "text": "host attack",
        "image": ""
      },
      {
        "text": "Trojan horse attack",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "338) A _________ is a secret entry point into a program that allows someone who is aware of it to gain access without going through the usual security access procedures\nSelect one:",
    "answers": [
      {
        "text": "multipartite",
        "image": ""
      },
      {
        "text": "backdoor",
        "image": ""
      },
      {
        "text": "hatch",
        "image": ""
      },
      {
        "text": "Trojan horse",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1142) _________ is a program flaw that occurs when program input data can accidentally or deliberately influence the flow of execution of the program.",
    "answers": [
      {
        "text": "PHP attack",
        "image": ""
      },
      {
        "text": "Format string injection attack",
        "image": ""
      },
      {
        "text": "XSS attack",
        "image": ""
      },
      {
        "text": "Injection attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "105) Cryptographic systems are generically classified by _________",
    "answers": [
      {
        "text": "the type of operations used for transforming plaintext to ciphertext",
        "image": ""
      },
      {
        "text": "the number of keys used",
        "image": ""
      },
      {
        "text": "the way in which the plaintext is processed",
        "image": ""
      },
      {
        "text": "all of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "706) Presenting or generating authentication information that corroborates the binding between the entity and the identifier is the ___________",
    "answers": [
      {
        "text": "identification step",
        "image": ""
      },
      {
        "text": "verification step",
        "image": ""
      },
      {
        "text": "authentication step",
        "image": ""
      },
      {
        "text": "corroboration step",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "317) A _________ is an individual who is not authorized to use the computer and who penetrates a system's access controls to exploit a legitimate user's account\nSelect one:",
    "answers": [
      {
        "text": "Clandestine User",
        "image": ""
      },
      {
        "text": "Masquerader",
        "image": ""
      },
      {
        "text": "Sniffer",
        "image": ""
      },
      {
        "text": "Misfeasor",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "646) __________ houses cross-connects and active equipment for distributing cable to the equipment distribution area",
    "answers": [
      {
        "text": "Main distribution area",
        "image": ""
      },
      {
        "text": "Equipment distribution area",
        "image": ""
      },
      {
        "text": "Horizontal distribution area",
        "image": ""
      },
      {
        "text": "Zone distribution area",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "280) _________ anomaly detection focuses on characterizing the past behavior of individual users or related groups of users and then detecting significant deviations",
    "answers": [
      {
        "text": "Profile-based",
        "image": ""
      },
      {
        "text": "Statistical",
        "image": ""
      },
      {
        "text": "Behavioral",
        "image": ""
      },
      {
        "text": "Signature-based",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "238) _____ involves an attempt to define a set of rules or attack patterns that can be used to decide if a given behavior is that of an intruder",
    "answers": [
      {
        "text": "Traffic Analysis",
        "image": ""
      },
      {
        "text": "Payload Inspection",
        "image": ""
      },
      {
        "text": "Signature Detection",
        "image": ""
      },
      {
        "text": "Anomaly Detection",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "784) IPsec can assure that _________",
    "answers": [
      {
        "text": "a router advertisement comes from an authorized router",
        "image": ""
      },
      {
        "text": "a routing update is not forged",
        "image": ""
      },
      {
        "text": "a redirect message comes from the router to which the initial packet was sent",
        "image": ""
      },
      {
        "text": "all of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "83) The __________ algorithm will work against any block encryption cipher and does not depend on any particular property of DES",
    "answers": [
      {
        "text": "counter mode attack",
        "image": ""
      },
      {
        "text": "ciphertext stealing",
        "image": ""
      },
      {
        "text": "meet-in-the-middle attack",
        "image": ""
      },
      {
        "text": "cipher block chaining",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "288) The __________ is the human with overall responsibility for setting the security policy of the organization, and, thus, for decisions about deploying and configuring the IDS",
    "answers": [
      {
        "text": "hacker",
        "image": ""
      },
      {
        "text": "administrator",
        "image": ""
      },
      {
        "text": "analyst",
        "image": ""
      },
      {
        "text": "auditor",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "06) If the only form of attack that could be made on an encryption algorithm is brute-force, then the way to counter such attacks would be to __________ ",
    "answers": [
      {
        "text": "use longer keys",
        "image": ""
      },
      {
        "text": "use shorter keys",
        "image": ""
      },
      {
        "text": "use more keys",
        "image": ""
      },
      {
        "text": "use less keys",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1087) A common technique for masking contents of messages or other information traffic so that opponents can not extract the information from the message is __________ .",
    "answers": [
      {
        "text": " integrity",
        "image": ""
      },
      {
        "text": "encryption",
        "image": ""
      },
      {
        "text": " analysis",
        "image": ""
      },
      {
        "text": " masquerade",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "010) A __________ is created by using a secure hash function to generate a hash value for a message and then encrypting the hash code with a private key",
    "answers": [
      {
        "text": "digital signature",
        "image": ""
      },
      {
        "text": "keystream",
        "image": ""
      },
      {
        "text": "one way hash function",
        "image": ""
      },
      {
        "text": "secret key",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "101) __________ is a term that refers to the means of delivering a key to two parties that wish to exchange data without allowing others to see the key",
    "answers": [
      {
        "text": "Session key",
        "image": ""
      },
      {
        "text": "Subkey",
        "image": ""
      },
      {
        "text": "Key distribution technique",
        "image": ""
      },
      {
        "text": "Ciphertext key",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "014) Combined one byte at a time with the plaintext stream using the XOR operation, a __________ is the output of the pseudorandom bit generator",
    "answers": [
      {
        "text": "keystream",
        "image": ""
      },
      {
        "text": "digital signature",
        "image": ""
      },
      {
        "text": "secure hash",
        "image": ""
      },
      {
        "text": "message authentication code",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "385) To exploit any type of buffer overflow, the attacker needs to identify a buffer overflow vulnerability in some program that can be triggered using externally sourced data under the attacker's control",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "829) A ________ level breach of security could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals\nSelect one:",
    "answers": [
      {
        "text": "moderate",
        "image": ""
      },
      {
        "text": "high",
        "image": ""
      },
      {
        "text": "normal",
        "image": ""
      },
      {
        "text": "low",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "268) The purpose of the ________ module is to collect data on security related events on the host and transmit these to the central manager",
    "answers": [
      {
        "text": "central manager agent ",
        "image": ""
      },
      {
        "text": "LAN monitor agent",
        "image": ""
      },
      {
        "text": "host agent ",
        "image": ""
      },
      {
        "text": "architecture agent",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1115) If the analyst is able to get the source system to insert into the system a message chosen by the analyst,then a ________ attack is possible.",
    "answers": [
      {
        "text": "known-plaintext",
        "image": ""
      },
      {
        "text": "chosen-plaintext",
        "image": ""
      },
      {
        "text": "chosen ciphertext",
        "image": ""
      },
      {
        "text": "chosen text",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "158) ________ are analogous to a burglar guessing a safe combination by observing how long it takes to turn the dial from number to number",
    "answers": [
      {
        "text": "Collision attacks",
        "image": ""
      },
      {
        "text": "Preimage attacks",
        "image": ""
      },
      {
        "text": "Timing attacks",
        "image": ""
      },
      {
        "text": "Side-channel attacks",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1083) the algorithm will produce a different output depending on the\nspecific secret key being used at the time.the exact substitutions\nand transformations performed by the algorithm depend on the\nkey.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "376) _________ can prevent buffer overflow attacks, typically of global data, which attempt to overwrite adjacent regions in the processes address space, such as the global offset table",
    "answers": [
      {
        "text": "MMUs",
        "image": ""
      },
      {
        "text": "Heaps",
        "image": ""
      },
      {
        "text": "Guard Pages",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1091) The _______ category is a transitional stage between awareness and training.",
    "answers": [
      {
        "text": "roles and responsibilities relative to IT systems",
        "image": ""
      },
      {
        "text": "security basics and literacy",
        "image": ""
      },
      {
        "text": "education and experience",
        "image": ""
      },
      {
        "text": "security awareness",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "585) T/F: To create a relationship between two tables, the attributes that define the primary key in one table must appear as attributes in another table, where they are referred to as a foreign key",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "223) 5.0 Points\nSince the responsibility for IT security is shared across the\norganization, there is a risk of inconsistent implementation of security and a loss of central monitoring and control",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "261) A _________ monitors the characteristics of a single host and the events occurring within that host for suspicious activity",
    "answers": [
      {
        "text": "host-based IDS ",
        "image": ""
      },
      {
        "text": "security intrusion",
        "image": ""
      },
      {
        "text": "network-based IDS ",
        "image": ""
      },
      {
        "text": "intrusion detection",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "259) _________ are either individuals or members of a larger group of outsider attackers who are motivated by social or political causes",
    "answers": [
      {
        "text": "State-sponsored organizations ",
        "image": ""
      },
      {
        "text": "Activists",
        "image": ""
      },
      {
        "text": "Cyber criminals ",
        "image": ""
      },
      {
        "text": "Others",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "153) Which of the following would allow an attack that to know the (plaintext of) current message must be the same as one previously transmitted because their ciphtertexts are the same?",
    "answers": [
      {
        "text": "CBC",
        "image": ""
      },
      {
        "text": "CTR",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      },
      {
        "text": "ECB",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "464) Sometimes known as a \"logic bomb\", the __________ is the event or condition that determines when the payload is activated or delivered",
    "answers": [
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Router",
        "image": ""
      },
      {
        "text": "Antivirus software",
        "image": ""
      },
      {
        "text": "Encryption key",
        "image": ""
      },
      {
        "text": "trigger",
        "image": ""
      }
    ],
    "correct": 4,
    "image": ""
  },
  {
    "quest": "013) The purpose of the DSS algorithm is to enable two users to securely reach agreement about a shared secret that can be used as a secret key for subsequent symmetric encryption of messages",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "716) A __________ is directed at the user file at the host where passwords, token passcodes, or biometric templates are stored",
    "answers": [
      {
        "text": "eavesdropping attack",
        "image": ""
      },
      {
        "text": "denial-of-service attack",
        "image": ""
      },
      {
        "text": "client attack",
        "image": ""
      },
      {
        "text": "host attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "468) __________ code refers to programs that can be shipped unchanged to a heterogeneous collection of platforms and execute with identical semantics",
    "answers": [
      {
        "text": "Obfuscated",
        "image": ""
      },
      {
        "text": "Scripting",
        "image": ""
      },
      {
        "text": "Legacy",
        "image": ""
      },
      {
        "text": "Mobile",
        "image": ""
      },
      {
        "text": "Open-source",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "276) The _________ to an IDS enables a user to view output from the system or control the behavior of the system",
    "answers": [
      {
        "text": "command-line interface",
        "image": ""
      },
      {
        "text": "graphical user interface",
        "image": ""
      },
      {
        "text": "administrator console",
        "image": ""
      },
      {
        "text": "user interface",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "465) The four phases of a typical virus are: dormant phase, triggering phase, execution phase and __________ phase",
    "answers": [
      {
        "text": "Initialization phase",
        "image": ""
      },
      {
        "text": "Recovery phase",
        "image": ""
      },
      {
        "text": "propagation",
        "image": ""
      },
      {
        "text": "Termination phase",
        "image": ""
      },
      {
        "text": "Mutation phase",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "265) _________ involves the collection of data relating to the behavior of legitimate users over a period of time",
    "answers": [
      {
        "text": "Profile based detection ",
        "image": ""
      },
      {
        "text": "Signature detection",
        "image": ""
      },
      {
        "text": "Threshold detection ",
        "image": ""
      },
      {
        "text": "Anomaly detection",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "013) A __________ is to try every possible key on a piece of ciphertext until an intelligible translation into plaintext is obtained",
    "answers": [
      {
        "text": "mode of operation",
        "image": ""
      },
      {
        "text": "hash function",
        "image": ""
      },
      {
        "text": "cryptanalysis",
        "image": ""
      },
      {
        "text": "brute-force attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "012) A __________ is directed at the user file at the host where passwords, token passcodes, or biometric templates are store",
    "answers": [
      {
        "text": "eavesdropping attack",
        "image": ""
      },
      {
        "text": "denial-of-service attack",
        "image": ""
      },
      {
        "text": "client attack",
        "image": ""
      },
      {
        "text": "host attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "642) A(n) __________ is a user who has administrative responsibility for part or all of the database",
    "answers": [
      {
        "text": "administrator",
        "image": ""
      },
      {
        "text": "database relations manager",
        "image": ""
      },
      {
        "text": "application owner",
        "image": ""
      },
      {
        "text": "end user other than application owner",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "96) There are _____ modes of operation defined by NIST that are intended to cover virtually all the possible applications of encryption for which a block cipher could be used",
    "answers": [
      {
        "text": "three",
        "image": ""
      },
      {
        "text": "five",
        "image": ""
      },
      {
        "text": "seven",
        "image": ""
      },
      {
        "text": "nine",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "30) The __________ component deals with the management and control of the ways entities are granted access to resources",
    "answers": [
      {
        "text": "resource management",
        "image": ""
      },
      {
        "text": "access management",
        "image": ""
      },
      {
        "text": "privilege management",
        "image": ""
      },
      {
        "text": "policy management",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "325) _________ involves counting the number of occurrences of a speciﬁc event type over an interval of time\nSelect one:",
    "answers": [
      {
        "text": "Threshold detection",
        "image": ""
      },
      {
        "text": "Rule-based detection",
        "image": ""
      },
      {
        "text": "Resource usage",
        "image": ""
      },
      {
        "text": "Proﬁle-based system",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "282) _________ simulate human brain operation with neurons and synapse between them that classify observed data",
    "answers": [
      {
        "text": "Antivirus software",
        "image": ""
      },
      {
        "text": "Intrusion prevention systems",
        "image": ""
      },
      {
        "text": "Neural networks",
        "image": ""
      },
      {
        "text": "Genetic algorithms",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "239) A _____ monitors the characteristics of a single host and the events occurring within that host for suspicious activity",
    "answers": [
      {
        "text": "Network-based IDS",
        "image": ""
      },
      {
        "text": "Intrusion Prevention System",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Host-based IDS",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "832) A(n) _________ is an attempt to learn or make use of information from the system that does not affect system resources\nSelect one:",
    "answers": [
      {
        "text": "active attack",
        "image": ""
      },
      {
        "text": "inside attack",
        "image": ""
      },
      {
        "text": "outside attack",
        "image": ""
      },
      {
        "text": "passive attack",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "507) ______ attempts to monopolize all of the available request handling threads on the Web server by sending HTTP requests that never complete",
    "answers": [
      {
        "text": "HTTP",
        "image": ""
      },
      {
        "text": "Reflection attacks",
        "image": ""
      },
      {
        "text": "SYN flooding",
        "image": ""
      },
      {
        "text": "Slowloris",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "443) Gaps, or __________ , are flagged in the MMU as illegal addresses, and any attempt to access them results in the process being aborted",
    "answers": [
      {
        "text": "Stack frames",
        "image": ""
      },
      {
        "text": "Heap blocks",
        "image": ""
      },
      {
        "text": "guard pages",
        "image": ""
      },
      {
        "text": "Code sections",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1107) If the PRF does not generate effectively random 128-bit output values it may be possible for an adversary to narrow the possibilities and successfully use a brute force attack.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "633) Network security is extremely important in a facility in which such a large collection of assets is concentrated in a single place and accessible by external network connections",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "07) __________ is a procedure that allows communicating parties to verify that received or stored messages are authentic",
    "answers": [
      {
        "text": "Cryptanalysis",
        "image": ""
      },
      {
        "text": "Decryption",
        "image": ""
      },
      {
        "text": "Message authentication",
        "image": ""
      },
      {
        "text": "Collision resistance",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "85) _________ mode is similar to Cipher Feedback, except that the input to the encryption algorithm is the preceding DES output",
    "answers": [
      {
        "text": "Counter",
        "image": ""
      },
      {
        "text": "Cipher Block Chaining",
        "image": ""
      },
      {
        "text": "Output Feedback",
        "image": ""
      },
      {
        "text": "Cipher Feedback",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "463) Sometimes referred to as the \"infection vector\", the __________ is the means by which a virus spreads or propagates",
    "answers": [
      {
        "text": "Exploit",
        "image": ""
      },
      {
        "text": "Encryption algorithm",
        "image": ""
      },
      {
        "text": "infection mechanism",
        "image": ""
      },
      {
        "text": "Payload",
        "image": ""
      },
      {
        "text": "Backdoor",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1122) the key exchange protocol is vulnerable to a __________ attack because it does not authenticate the participants.",
    "answers": [
      {
        "text": "one-way function",
        "image": ""
      },
      {
        "text": "time complexity",
        "image": ""
      },
      {
        "text": "chosen ciphertext",
        "image": ""
      },
      {
        "text": "man-in-the-middle",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "718) An institution that issues debit cards to cardholders and is responsible for the cardholder's account and authorizing transactions is the _________",
    "answers": [
      {
        "text": "cardholder",
        "image": ""
      },
      {
        "text": "auditor",
        "image": ""
      },
      {
        "text": "issuer",
        "image": ""
      },
      {
        "text": "processor",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "378) A consequence of a buffer overflow error is:",
    "answers": [
      {
        "text": "possibly memory access violation",
        "image": ""
      },
      {
        "text": "corruption of data used by the program",
        "image": ""
      },
      {
        "text": "unexpected transfer of control in the program",
        "image": ""
      },
      {
        "text": "all of these options",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "310) An operation such as login, read, perform, I/O or execute that is performed by the subject on or with an object is the _________ audit record ﬁeld",
    "answers": [
      {
        "text": "Action",
        "image": ""
      },
      {
        "text": "Subject",
        "image": ""
      },
      {
        "text": "Resource-usage",
        "image": ""
      },
      {
        "text": "Object",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1077) the XtS-AES standard describes a method of decryption for data\nstored in sector-based devices where the threat model includes\npossible access to stored data by the adversary.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "462) A computer __________ is a piece of software that can \"infect\" other programs or any type of executable content and tries to replicate itself",
    "answers": [
      {
        "text": "Trojan horse",
        "image": ""
      },
      {
        "text": "Adware",
        "image": ""
      },
      {
        "text": "virus",
        "image": ""
      },
      {
        "text": "Worm",
        "image": ""
      },
      {
        "text": "Spyware",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "511) It is possible to specifically defend against the ______ by using a modified version of the TCP connection handling code",
    "answers": [
      {
        "text": "three-way handshake",
        "image": ""
      },
      {
        "text": "UDP flood",
        "image": ""
      },
      {
        "text": "SYN spoofing attack",
        "image": ""
      },
      {
        "text": "flash crowd",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "015) A _________ protects against an attack in which one party generates a message for another party to sign",
    "answers": [
      {
        "text": "data authenticator ",
        "image": ""
      },
      {
        "text": "strong hash function",
        "image": ""
      },
      {
        "text": "weak hash function ",
        "image": ""
      },
      {
        "text": "digital signature",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "644) __________ is the process of performing authorized queries and deducing unauthorized information from the legitimate responses received",
    "answers": [
      {
        "text": "Perturbation",
        "image": ""
      },
      {
        "text": "Inference",
        "image": ""
      },
      {
        "text": "Compromise",
        "image": ""
      },
      {
        "text": "Partitioning",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "283) A ________ IDS monitors traffic at selected points on a network or interconnected set of networks",
    "answers": [
      {
        "text": "host-based (HIDS)",
        "image": ""
      },
      {
        "text": "cloud-based (CIDS)",
        "image": ""
      },
      {
        "text": "application-based (AIDS)",
        "image": ""
      },
      {
        "text": "net-work based (NIDS)",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "27) __________ provide a means of adapting RBAC to the specifics of administrative and security policies in an organization",
    "answers": [
      {
        "text": "Constraints",
        "image": ""
      },
      {
        "text": "Mutually Exclusive Roles",
        "image": ""
      },
      {
        "text": "Cardinality",
        "image": ""
      },
      {
        "text": "Prerequisites",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "160) The principal attraction of ________ compared to RSA is that it appears to offer equal security for a far smaller bit size, thereby reducing processing overhead",
    "answers": [
      {
        "text": "AES",
        "image": ""
      },
      {
        "text": "ECC",
        "image": ""
      },
      {
        "text": "Blowfish",
        "image": ""
      },
      {
        "text": "RC4",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "393) At the basic machine level, all of the data manipulated by machine instructions executed by the computer processor are stored in either the processors registers or in memory",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1124) For determining the security of various elliptic curve\nciphers it is of some interest to know the number of\npoints in a finite abelian group defined over an elliptic\ncurve.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "366) In 2004 the ________ exploited a buffer overflow in Microsoft Windows 2000/XP Local Security Authority Subsystem Service",
    "answers": [
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "Sasser Worm",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "694) User authentication is a procedure that allows communicating parties to verify that the contents of a received message have not been altered and that the source is authentic",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "421) __________ aim to prevent or detect buffer overflows by instrumenting programs when they are compiled",
    "answers": [
      {
        "text": "threat modeling",
        "image": ""
      },
      {
        "text": "compile-time defenses",
        "image": ""
      },
      {
        "text": "runtime patching",
        "image": ""
      },
      {
        "text": "post-incident analysis",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "308) Metrics that are useful for proﬁle-based intrusion detection are: counter, gauge, resource utilization, and _______",
    "answers": [
      {
        "text": "network bandwidth",
        "image": ""
      },
      {
        "text": "packet loss rate",
        "image": ""
      },
      {
        "text": "system uptime",
        "image": ""
      },
      {
        "text": "interval timer",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1440) __________ is a data collection technology that uses electronic tags attached to items to allow the items to be identified and tracked by a remote system.",
    "answers": [
      {
        "text": "RFID",
        "image": ""
      },
      {
        "text": "NtRU",
        "image": ""
      },
      {
        "text": "EPC",
        "image": ""
      },
      {
        "text": "CRYPtOREC",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "827) An example of __________ is an attempt by an unauthorized user to gain access to a system by posing as an authorized user\nSelect one:",
    "answers": [
      {
        "text": "repudiation",
        "image": ""
      },
      {
        "text": "masquerade",
        "image": ""
      },
      {
        "text": "inference",
        "image": ""
      },
      {
        "text": "interception",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "822) __________ is the insertion of bits into gaps in a data stream to frustrate traffic analysis attempts\nSelect one:",
    "answers": [
      {
        "text": "Traffic padding",
        "image": ""
      },
      {
        "text": "Traffic integrity",
        "image": ""
      },
      {
        "text": "Traffic control",
        "image": ""
      },
      {
        "text": "Traffic routing",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "242) _____ involves the collection of data relating to the behavior of legitimate users over a period of time",
    "answers": [
      {
        "text": "Signature Detection",
        "image": ""
      },
      {
        "text": "Statistical Analysis",
        "image": ""
      },
      {
        "text": "Log Monitoring",
        "image": ""
      },
      {
        "text": "Anomaly Detection",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "375) Even through it is a high-level programming language, Java still suffers from buffer overflows because it permits more data to be saved into a buffer than it has space for",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "775) ______ is the recommended technique for wireless network security",
    "answers": [
      {
        "text": "Using encryption",
        "image": ""
      },
      {
        "text": "Using anti-virus and anti-spyware software",
        "image": ""
      },
      {
        "text": "Turning off identifier broadcasting",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "269) A(n) ________ is inserted into a network segment so that the traffic that it is monitoring must pass through the sensor",
    "answers": [
      {
        "text": "passive sensor ",
        "image": ""
      },
      {
        "text": "analysis sensor",
        "image": ""
      },
      {
        "text": "LAN sensor ",
        "image": ""
      },
      {
        "text": "inline sensor",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "57) __________ is malware that encrypts the user's data and demands payment in order to access the key needed to recover the information",
    "answers": [
      {
        "text": "Trojan horse",
        "image": ""
      },
      {
        "text": "Ransomware",
        "image": ""
      },
      {
        "text": "Crimeware",
        "image": ""
      },
      {
        "text": "Polymorphic",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "510) In a _______ attack the attacker creates a series of DNS requests containing the spoofed source address for the target system",
    "answers": [
      {
        "text": "SYN flood",
        "image": ""
      },
      {
        "text": "DNS amplification",
        "image": ""
      },
      {
        "text": "poison packet",
        "image": ""
      },
      {
        "text": "UDP flood",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "830) A __________ is any action that compromises the security of information owned by an organization\nSelect one:",
    "answers": [
      {
        "text": "security attack",
        "image": ""
      },
      {
        "text": "security mechanism",
        "image": ""
      },
      {
        "text": "security policy",
        "image": ""
      },
      {
        "text": "security service",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "466) During the __________ phase the virus is activated to perform the function for which it was intended",
    "answers": [
      {
        "text": "Encryption phase",
        "image": ""
      },
      {
        "text": "Stealth phase",
        "image": ""
      },
      {
        "text": "Payload phase",
        "image": ""
      },
      {
        "text": "triggering",
        "image": ""
      },
      {
        "text": "Replication phase",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "394) Even though it is a highlevel programming language, Java still suffers from buffer overflows because it permits more data to be saved into a buffer than it has space for",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "46) A program that is covertly inserted into a system with the intent of compromising the integrity or confidentiality of the victim's data is __________",
    "answers": [
      {
        "text": "Adobe",
        "image": ""
      },
      {
        "text": "Animoto",
        "image": ""
      },
      {
        "text": "Malware",
        "image": ""
      },
      {
        "text": "Prezi",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "106) A symmetric encryption scheme has five ingredients: plaintext, encryption algorithm, ciphertext, decryption algorithm and _________",
    "answers": [
      {
        "text": "password",
        "image": ""
      },
      {
        "text": "hash",
        "image": ""
      },
      {
        "text": "secret key",
        "image": ""
      },
      {
        "text": "digital signature",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "648) _________ is an organization that produces data to be made available for controlled release, either within the organization or to external users",
    "answers": [
      {
        "text": "Client",
        "image": ""
      },
      {
        "text": "Data owner",
        "image": ""
      },
      {
        "text": "User",
        "image": ""
      },
      {
        "text": "Server",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "114) Unlike ECB and CBC modes, ________ mode requires only the implementation of the encryption algorithm and not the decryption algorithm",
    "answers": [
      {
        "text": "block",
        "image": ""
      },
      {
        "text": "counter (CTR)",
        "image": ""
      },
      {
        "text": "stream",
        "image": ""
      },
      {
        "text": "substitution",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "714) To counter threats to remote user authentication, systems generally rely on some form of ___________ protocol",
    "answers": [
      {
        "text": "eavesdropping",
        "image": ""
      },
      {
        "text": "Trojan horse",
        "image": ""
      },
      {
        "text": "challenge-response",
        "image": ""
      },
      {
        "text": "denial-of-service",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1104) Plaintext is recovered from the ciphertext using the paired key and _____________ .",
    "answers": [
      {
        "text": "a digital signature",
        "image": ""
      },
      {
        "text": "a recovery encryption",
        "image": ""
      },
      {
        "text": "a decryption algorithm",
        "image": ""
      },
      {
        "text": "an encryption algorithm",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "115) The most powerful, and most common, approach to countering the threats to network security is ________",
    "answers": [
      {
        "text": "authentication",
        "image": ""
      },
      {
        "text": "firewall implementation",
        "image": ""
      },
      {
        "text": "intrusion detection",
        "image": ""
      },
      {
        "text": "encryption",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "442) The _________ is typically located above the program code and global data and grows up in memory (while the sack grows down toward it)",
    "answers": [
      {
        "text": "Data section",
        "image": ""
      },
      {
        "text": "Cache",
        "image": ""
      },
      {
        "text": "heap",
        "image": ""
      },
      {
        "text": "Register file",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "369) _________ aim to prevent or detect buffer overflows by instrumenting programs when they are compiled",
    "answers": [
      {
        "text": "Run-time defenses",
        "image": ""
      },
      {
        "text": "Compile-time defenses",
        "image": ""
      },
      {
        "text": "Shellcodes",
        "image": ""
      },
      {
        "text": "All of these answers",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "821) Masquerade, falsification, and repudiation are threat actions that cause __________ threat consequences\nSelect one:",
    "answers": [
      {
        "text": "unauthorized disclosure",
        "image": ""
      },
      {
        "text": "disruption",
        "image": ""
      },
      {
        "text": "deception",
        "image": ""
      },
      {
        "text": "usurpation",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "348) _________ are used to attack networked computer systems with a large volume of trafﬁc to carry out a denial-of-service attack\nSelect one:",
    "answers": [
      {
        "text": "Bots",
        "image": ""
      },
      {
        "text": "Exploits",
        "image": ""
      },
      {
        "text": "Keyloggers",
        "image": ""
      },
      {
        "text": "flooders",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "275) A ________ is a hacker with sufficient technical skills to modify and extend attack toolkits to use newly discovered vulnerabilities",
    "answers": [
      {
        "text": "script kiddie",
        "image": ""
      },
      {
        "text": "journeyman",
        "image": ""
      },
      {
        "text": "novice",
        "image": ""
      },
      {
        "text": "expert",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1101) The appeal of HMAC is that its designers have been able to prove an\nexact relationship between the strength of the embedded hash function and the strength of HMAC.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "21) A concept that evolved out of requirements for military information security is ______ ",
    "answers": [
      {
        "text": "reliable input",
        "image": ""
      },
      {
        "text": "mandatory access control",
        "image": ""
      },
      {
        "text": "open and closed policies",
        "image": ""
      },
      {
        "text": "discretionary input",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "287) 14.________ are decoy systems that are designed to lure a potential attacker away from critical systems",
    "answers": [
      {
        "text": "Antivirus software",
        "image": ""
      },
      {
        "text": "Honeypots",
        "image": ""
      },
      {
        "text": "Firewalls",
        "image": ""
      },
      {
        "text": "Intrusion Detection Systems",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "48) A __________ is code inserted into malware that lies dormant until a predefined condition, which triggers an unauthorized act, is met",
    "answers": [
      {
        "text": "logic bomb",
        "image": ""
      },
      {
        "text": "trapdoor",
        "image": ""
      },
      {
        "text": "worm",
        "image": ""
      },
      {
        "text": "Trojan horse",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "315) To be of practical use an intrusion detection system should detect a substantial percentage of intrusions while keeping the false alarm rate at an acceptable level",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "118) For symmetric encryption to work the two parties to an exchange must share the same _____, which must be protected from access by others",
    "answers": [
      {
        "text": "username",
        "image": ""
      },
      {
        "text": "key",
        "image": ""
      },
      {
        "text": "password",
        "image": ""
      },
      {
        "text": "certificate",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "380) The potential for a buffer overflow exists anywhere that data is copied or merged into a buffer, where at least some of the data are read from outside the program",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "471) A bot can use a __________ to capture keystrokes on the infected machine to retrieve sensitive information",
    "answers": [
      {
        "text": "Antivirus software",
        "image": ""
      },
      {
        "text": "Encryption key",
        "image": ""
      },
      {
        "text": "keylogger",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "828) The assurance that data received are exactly as sent by an authorized entity is __________\nSelect one:",
    "answers": [
      {
        "text": "data integrity",
        "image": ""
      },
      {
        "text": "data confidentiality",
        "image": ""
      },
      {
        "text": "authentication",
        "image": ""
      },
      {
        "text": "access control",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "833) The _________ prevents or inhibits the normal use or management of communications facilities\nSelect one:",
    "answers": [
      {
        "text": "passive attack",
        "image": ""
      },
      {
        "text": "denial of service",
        "image": ""
      },
      {
        "text": "masquerade",
        "image": ""
      },
      {
        "text": "traffic encryption",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1128) Intrusion detection is the process of collecting information about\nevents occurring in a computer system or network and analyzing them for signs of intrusions.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "504) _______ bandwidth attacks attempt to take advantage of the disproportionally large resource consumption at a server",
    "answers": [
      {
        "text": "Application-based",
        "image": ""
      },
      {
        "text": "System-based",
        "image": ""
      },
      {
        "text": "Random",
        "image": ""
      },
      {
        "text": "Amplification",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "499) ______ relates to the capacity of the network links connecting a server to the wider Internet",
    "answers": [
      {
        "text": "Application resource",
        "image": ""
      },
      {
        "text": "Network bandwidth",
        "image": ""
      },
      {
        "text": "System payload",
        "image": ""
      },
      {
        "text": "Directed broadcast",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "440) A _________ value is named after the miner's bird used to detect poisonous air in a mine and warn miners in time for them to escape",
    "answers": [
      {
        "text": "Sparrow",
        "image": ""
      },
      {
        "text": "Falcon",
        "image": ""
      },
      {
        "text": "Hawk",
        "image": ""
      },
      {
        "text": "canary",
        "image": ""
      },
      {
        "text": "Eagle",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "384) The buffer overflow type of attack has been known since it was first widely used by the _______ Worm in 1988",
    "answers": [
      {
        "text": "Alpha One",
        "image": ""
      },
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "423) _________ is a form of overflow attack",
    "answers": [
      {
        "text": "heap overflows, return to system call, and replacement stack frame",
        "image": ""
      },
      {
        "text": "Cross-site scripting (XSS)",
        "image": ""
      },
      {
        "text": "SQL injection",
        "image": ""
      },
      {
        "text": "Directory traversal",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "412) A buffer overflow in Microoft Windows 2000/XP Local Security Authority Subsystem Service was exploited by the _________",
    "answers": [
      {
        "text": "Melissa Worm",
        "image": ""
      },
      {
        "text": "Sasser Worm",
        "image": ""
      },
      {
        "text": "Nimda Worm",
        "image": ""
      },
      {
        "text": "Sobig Worm",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "240) A(n) _____ is inserted into a network segment so that the traffic that it is monitoring must pass through the sensor",
    "answers": [
      {
        "text": "Active Sensor",
        "image": ""
      },
      {
        "text": "Probe",
        "image": ""
      },
      {
        "text": "Inline Sensor",
        "image": ""
      },
      {
        "text": "Passive Sensor",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "868) The Common Criteria for Information Technology and Security Evaluation are ISO standards for specifying security requirements and defining evaluation criteria",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "228) The relative lack of success in bringing cybercriminals to justice has led to an increase in their numbers, boldness, and the global scale of their operations",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "579) The basic building block of a __________ is a table of data, consisting of rows and columns, similar to a spreadsheet",
    "answers": [
      {
        "text": "relational database",
        "image": ""
      },
      {
        "text": "query set",
        "image": ""
      },
      {
        "text": "DBMS",
        "image": ""
      },
      {
        "text": "perturbation",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "329) A ______ attack is an attempt to prevent legitimate users of a service from using that service",
    "answers": [
      {
        "text": "Man-in-the-middle",
        "image": ""
      },
      {
        "text": "Phishing",
        "image": ""
      },
      {
        "text": "Denial of service (DOS)",
        "image": ""
      },
      {
        "text": "Social engineering",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "506) Bots starting from a given HTTP link and then following all links on the provided Web site in a recursive way is called _______",
    "answers": [
      {
        "text": "trailing",
        "image": ""
      },
      {
        "text": "spidering",
        "image": ""
      },
      {
        "text": "spoofing",
        "image": ""
      },
      {
        "text": "crowding",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "271) _________ is a document that describes the application level protocol for exchanging data between intrusion detection entities",
    "answers": [
      {
        "text": "RFC 4767 ",
        "image": ""
      },
      {
        "text": "RFC 4766",
        "image": ""
      },
      {
        "text": "RFC 4765 ",
        "image": ""
      },
      {
        "text": "RFC 4764",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "581) __________ is an organization that receives the encrypted data from a data owner and makes them available for distribution to clients",
    "answers": [
      {
        "text": "User",
        "image": ""
      },
      {
        "text": "Client",
        "image": ""
      },
      {
        "text": "Data owner",
        "image": ""
      },
      {
        "text": "Server",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "06) Modes of operation are the alternative techniques that have been developed to increase the security of symmetric block encryption for large sequences of data",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "343) A _________ virus is a form of virus explicitly designed to hide itself from detection by antivirus software\nSelect one:",
    "answers": [
      {
        "text": "stealth",
        "image": ""
      },
      {
        "text": "polymorphic",
        "image": ""
      },
      {
        "text": "encrypted",
        "image": ""
      },
      {
        "text": "metamorphic",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "157) ________ attacks have several approaches, all equivalent in effort to factoring the product of two primes",
    "answers": [
      {
        "text": "Mathematical ",
        "image": ""
      },
      {
        "text": "Statistical",
        "image": ""
      },
      {
        "text": "Brute-force",
        "image": ""
      },
      {
        "text": "Social engineering",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "841) Computer security is essentially a battle of wits between a perpetrator\nwho tries to find holes and the administrator who tries to close them\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "897) An attacker can generally determine in advance exactly where the targeted buffer will be located in the stack frame of teh function in which it is defined",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1043) Which stages does a virus have?",
    "answers": [
      {
        "text": "Dormant phase",
        "image": ""
      },
      {
        "text": "Propagation phase - i.e. attachment to email",
        "image": ""
      },
      {
        "text": "Triggering phase",
        "image": ""
      },
      {
        "text": "Execution phase",
        "image": ""
      },
      {
        "text": "All viruses have these four stages",
        "image": ""
      }
    ],
    "correct": 4,
    "image": ""
  },
  {
    "quest": "267) The _________ module analyzes LAN traffic and reports the results to the central manager",
    "answers": [
      {
        "text": "LAN monitor agent ",
        "image": ""
      },
      {
        "text": "host agent",
        "image": ""
      },
      {
        "text": "central manager agent ",
        "image": ""
      },
      {
        "text": "architecture agent",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1134) Message authentication protects two parties who exchange\nmessages from any third party, however, it does not protect the\ntwo parties against each other.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "645) A ___________ is the portion of the data center that houses data processing equipment",
    "answers": [
      {
        "text": "computer room",
        "image": ""
      },
      {
        "text": "main distribution area",
        "image": ""
      },
      {
        "text": "entrance room",
        "image": ""
      },
      {
        "text": "horizontal distribution",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "377) The ________________ used a buffer overflow exploit in the \"fingerd\" as one of its attack mechanisms",
    "answers": [
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "Sasser Worm",
        "image": ""
      },
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "470) A __________ is a collection of bots capable of acting in a coordinated manner",
    "answers": [
      {
        "text": "botnet",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      },
      {
        "text": "Encryption algorithm",
        "image": ""
      },
      {
        "text": "Intrusion Detection System (IDS)",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "11) A user program executes in a kernel mode in which certain areas of memory are protected from the user's use and certain instructions may not be executed",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1116) The BLP model effectively breaks down when (untruste> low classified\nexecutable data are allowed to be executed by a high clearance (truste>  subject.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1089) To emphasize the importance of security awareness,an organization\nshould have a security awareness policy document that is provided to all employees.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "76) In the first instance of multiple encryption plaintext is converted to __________ using the encryption algorithm",
    "answers": [
      {
        "text": "ciphertext",
        "image": ""
      },
      {
        "text": "S-AES mode",
        "image": ""
      },
      {
        "text": "Triple DES",
        "image": ""
      },
      {
        "text": "block cipher",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "161) Intrusion detection is based on the assumption that the behavior of the intruder differs from that of a legitimate user in ways that can be quantified",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "92) The exact substitutions and transformations performed by the algorithm depend on the ________",
    "answers": [
      {
        "text": "ciphertext",
        "image": ""
      },
      {
        "text": "decryption algorithm",
        "image": ""
      },
      {
        "text": "secret key",
        "image": ""
      },
      {
        "text": "encryption algorithm",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "127) A hash function such as SHA-1 was not designed for use as a MAC and cannot be used directly for that purpose because it does not rely on a secret key",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "109) A ________ cipher processes the input elements continuously, producing output one element at a time as it goes along",
    "answers": [
      {
        "text": "substitution",
        "image": ""
      },
      {
        "text": "block",
        "image": ""
      },
      {
        "text": "stream",
        "image": ""
      },
      {
        "text": "transposition",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1078) Once the plaintext is converted to ciphertext using the\nencryption algorithm the plaintext is then used as input and the algorithm is applied again.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "692) Depending on the details of the overall authentication system, the registration authority issues some sort of electronic credential to the subscriber",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "713) Each individual who is to be included in the database of authorized users must first be __________ in the system",
    "answers": [
      {
        "text": "verified",
        "image": ""
      },
      {
        "text": "authenticated",
        "image": ""
      },
      {
        "text": "identified",
        "image": ""
      },
      {
        "text": "enrolled",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "397) An attacker is more interested in transferring control to a location and code of the attackers choosing rather than immediately crashing the program",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "307) Password ﬁles can be protected in one of two ways: One-way function or ______",
    "answers": [
      {
        "text": "biometric authentication",
        "image": ""
      },
      {
        "text": "access control",
        "image": ""
      },
      {
        "text": "encryption",
        "image": ""
      },
      {
        "text": "two-factor authentication",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "719) __________ allows an issuer to access regional and national networks that connect point of sale devices and bank teller machines worldwide",
    "answers": [
      {
        "text": "EFT",
        "image": ""
      },
      {
        "text": "POS",
        "image": ""
      },
      {
        "text": "BTM",
        "image": ""
      },
      {
        "text": "ATF",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "012) Digital signatures and key management are the two most important applications of __________ encryption",
    "answers": [
      {
        "text": "private-key",
        "image": ""
      },
      {
        "text": "public-key",
        "image": ""
      },
      {
        "text": "preimage resistant ",
        "image": ""
      },
      {
        "text": "advanced",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "647) __________ encompasses intrusion detection, prevention and response",
    "answers": [
      {
        "text": "Intrusion management",
        "image": ""
      },
      {
        "text": "Security assessments",
        "image": ""
      },
      {
        "text": "Database access control",
        "image": ""
      },
      {
        "text": "Data loss prevention",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "820) A threat action in which sensitive data are directly released to an unauthorized entity is __________\nSelect one:",
    "answers": [
      {
        "text": "disruption",
        "image": ""
      },
      {
        "text": "exposure",
        "image": ""
      },
      {
        "text": "corruption",
        "image": ""
      },
      {
        "text": "intrusion",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "12) Any program that is owned by, and SetUID to, the \"superuser\" potentially grants unrestricted access to the system to any user executing that program",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "08) The purpose of a __________ is to produce a “fingerprint” of a file, message, or other block of data",
    "answers": [
      {
        "text": "secret key ",
        "image": ""
      },
      {
        "text": "digital signature",
        "image": ""
      },
      {
        "text": "keystream",
        "image": ""
      },
      {
        "text": "hash function",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "04) On average, __________ of all possible keys must be tried in order to achieve success with a brute-force attack",
    "answers": [
      {
        "text": "one-fourth ",
        "image": ""
      },
      {
        "text": "half",
        "image": ""
      },
      {
        "text": "two-thirds ",
        "image": ""
      },
      {
        "text": "three-fourths",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "759) A traditional packet filter makes filtering decisions on an individual packet basis and does not take into consideration any higher layer context",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "270) A(n) ________ event is an alert that is generated when the gossip traffic enables a platform to conclude that an attack is under way",
    "answers": [
      {
        "text": "PEP ",
        "image": ""
      },
      {
        "text": "DDI",
        "image": ""
      },
      {
        "text": "IDEP ",
        "image": ""
      },
      {
        "text": "IDME",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1172) __________ defines user authentication as \"the process of verifying an identity claimed by or for a system entity\".",
    "answers": [
      {
        "text": "RFC 2828",
        "image": ""
      },
      {
        "text": "RFC 2493",
        "image": ""
      },
      {
        "text": "RFC 2298",
        "image": ""
      },
      {
        "text": "RFC 2328",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "370) In 2003, the _______ exploited a buffer overflow in Microsoft SQL Server 2000",
    "answers": [
      {
        "text": "Slammer worm",
        "image": ""
      },
      {
        "text": "Sasser worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      }
    ],
    "correct": 4,
    "image": ""
  },
  {
    "quest": "1118) Multilevel security is of interest when there is a requirement to maintain a\nresource in which multiple levels of data sensitivity are defined.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "410) The __________ used a buffer overflow exploit in fingerd as one of its attack mechanisms",
    "answers": [
      {
        "text": "Conficker Worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "Stuxnet Worm",
        "image": ""
      },
      {
        "text": "ILOVEYOU Worm",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "108) A ________ cipher processes the input one block of elements at a time, producing an output block for each input",
    "answers": [
      {
        "text": "substitution",
        "image": ""
      },
      {
        "text": "block",
        "image": ""
      },
      {
        "text": "stream",
        "image": ""
      },
      {
        "text": "transposition",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "212) A cookie can be used to authenticate a user to a web site so that the user does not have to type in his password for each connection to the site",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1163) The countermeasure to tiny fragment attacks is to discard packets with\nan inside source address if the packet arrives on an external interface.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "140) Which of the following scenario requires a security protocol:",
    "answers": [
      {
        "text": "log in to mail.google.com",
        "image": ""
      },
      {
        "text": "connecting to work from home using a VPN",
        "image": ""
      },
      {
        "text": "All the previous answers",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "274) The broad classes of intruders are: cyber criminals, state-sponsored organizations, _________ , and others",
    "answers": [
      {
        "text": "terrorists",
        "image": ""
      },
      {
        "text": "script kiddies",
        "image": ""
      },
      {
        "text": "activists",
        "image": ""
      },
      {
        "text": "hackers",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1095) Performing regular backups of data on a system is a critical control\nthat assists with maintaining the integrity of the system and user data.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "594) T/F: Business continuity consists of security services that allocate access, distribute, monitor, and protect the underlying resource services",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "01) __________ defines user authentication as “the process of verifying an identity claimed by or for a system entity”",
    "answers": [
      {
        "text": "RFC 4949",
        "image": ""
      },
      {
        "text": "RFC 2298",
        "image": ""
      },
      {
        "text": "RFC 2493",
        "image": ""
      },
      {
        "text": "RFC 2328",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "427) The buffer is located __________ ",
    "answers": [
      {
        "text": "in the heap",
        "image": ""
      },
      {
        "text": "in the stack",
        "image": ""
      },
      {
        "text": "in the data section of the process",
        "image": ""
      },
      {
        "text": "in the register",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      },
      {
        "text": "1,2,3 are correct",
        "image": ""
      }
    ],
    "correct": 5,
    "image": ""
  },
  {
    "quest": "162) To be of practical use an IDS should detect a substantial percentage of intrusions while keeping the false alarm rate at an acceptable level",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "132) In Kerberos, each human user has a master key shared with the authentication server, and the key is usually derived from the user's password",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "712) __________ systems identify features of the hand, including shape, and lengths and widths of fingers",
    "answers": [
      {
        "text": "Signature",
        "image": ""
      },
      {
        "text": "Hand geometry",
        "image": ""
      },
      {
        "text": "Fingerprint",
        "image": ""
      },
      {
        "text": "Palm print",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "155) Which of the following feature can only be provided by public-key cryptography?",
    "answers": [
      {
        "text": "Data integrity",
        "image": ""
      },
      {
        "text": "Confidentiality",
        "image": ""
      },
      {
        "text": "Digital signatures",
        "image": ""
      },
      {
        "text": "None of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "401) The buffer overflow type of attack has been known since it was first widely used by the __________ Worm in 1988",
    "answers": [
      {
        "text": "Morris",
        "image": ""
      },
      {
        "text": "Slammer",
        "image": ""
      },
      {
        "text": "Code Red",
        "image": ""
      },
      {
        "text": "Heartbleed",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "707) Recognition by fingerprint, retina, and face are examples of __________",
    "answers": [
      {
        "text": "face recognition",
        "image": ""
      },
      {
        "text": "dynamic biometrics",
        "image": ""
      },
      {
        "text": "static biometrics authentication",
        "image": ""
      },
      {
        "text": "token",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "306) The three classes of intruders identiﬁed by Anderson are: Masquerader, Misfeasor, and____",
    "answers": [
      {
        "text": "Insider threat",
        "image": ""
      },
      {
        "text": "Social engineer",
        "image": ""
      },
      {
        "text": "clandestine",
        "image": ""
      },
      {
        "text": "Cybercriminal",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "513) When a DoS attack is detected, the first step is to _______",
    "answers": [
      {
        "text": "identify the attack",
        "image": ""
      },
      {
        "text": "analyze the response",
        "image": ""
      },
      {
        "text": "design blocking filters",
        "image": ""
      },
      {
        "text": "shut down the network",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "373) Buffer overflows can be found in a wide variety of programs, processing a range of different input and with a variety of possible responses",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "309) Two types of audit records used are Detection-speciﬁc audit records and ____ audit records",
    "answers": [
      {
        "text": "system uptime",
        "image": ""
      },
      {
        "text": "native",
        "image": ""
      },
      {
        "text": "network bandwidth",
        "image": ""
      },
      {
        "text": "packet loss rate",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "102) A ________ is a key used between entities for the purpose of distributing session keys",
    "answers": [
      {
        "text": "permanent key",
        "image": ""
      },
      {
        "text": "session key",
        "image": ""
      },
      {
        "text": "distribution key",
        "image": ""
      },
      {
        "text": "all of the above",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1074) A __________ is a set in which you can do addition, subtraction, multiplication and division without leaving the set.",
    "answers": [
      {
        "text": "record",
        "image": ""
      },
      {
        "text": "standard",
        "image": ""
      },
      {
        "text": "field",
        "image": ""
      },
      {
        "text": "block",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "202) In a wireless network, traffic is broadcasted into the air, and so it is much easier to sniff wireless traffic compared with wired traffic",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1113) Defensive programming is sometimes referred to as _________.",
    "answers": [
      {
        "text": "variable programming",
        "image": ""
      },
      {
        "text": "secure programming",
        "image": ""
      },
      {
        "text": "interpretive programming",
        "image": ""
      },
      {
        "text": "chroot programming",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "18) _________ is the granting of a right or permission to a system entity to access a system resource",
    "answers": [
      {
        "text": "Authorization",
        "image": ""
      },
      {
        "text": "Authentication",
        "image": ""
      },
      {
        "text": "Control",
        "image": ""
      },
      {
        "text": "Monitoring",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1119) IPSec can guarantee that all traffic designated by the network\nadministrator is authenticated but cannot guarantee that it is\nencrypted.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "33) Metamorphic code is software that can be shipped unchanged to a heterogeneous collection of platforms and execute with identical semantics",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "381) Memory is requested from the ______ by programs for use in dynamic data structures, such as linked lists of records",
    "answers": [
      {
        "text": "ROM",
        "image": ""
      },
      {
        "text": "heap",
        "image": ""
      },
      {
        "text": "address space",
        "image": ""
      },
      {
        "text": "shell",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "117) With ______ encryption each vulnerable communications link is equipped on both ends with an encryption device",
    "answers": [
      {
        "text": "network",
        "image": ""
      },
      {
        "text": "end-to-end",
        "image": ""
      },
      {
        "text": "link",
        "image": ""
      },
      {
        "text": "transport",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "351) The success of the digital immune system depends on the ability of the virus analysis machine to detect new and innovative virus strains",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "91) _________ is the original message or data that is fed into the algorithm as input",
    "answers": [
      {
        "text": "Plaintext",
        "image": ""
      },
      {
        "text": "Encryption algorithm",
        "image": ""
      },
      {
        "text": "Decryption algorithm",
        "image": ""
      },
      {
        "text": "Ciphertext",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1166) Signature-based approaches attempt to define normal,or expected,\nbehavior,whereas anomaly approaches attempt to define proper behavior.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "143) A brute-force approach involves trying every possible key until an intelligible translation of the ciphertext into plaintext is obtained",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1138) the __________ generation is usually thought of as the Iot and is marked by the use of billions of embedded devices.",
    "answers": [
      {
        "text": "second",
        "image": ""
      },
      {
        "text": "third",
        "image": ""
      },
      {
        "text": "fourth",
        "image": ""
      },
      {
        "text": "fifth",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1158) A denial-of-service attack is an attempt to compromise availability by\nhindering or blocking completely the provision of some service.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "321) Intrusion detection involves detecting unusual patterns of activity or patterns of activity that are known to correlate with intrusions",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "577) Encryption can be applied to the entire database, at the record level, at the attribute level, or at the level of the individual field",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "266) A (n) __________ is a hacker with minimal technical skill who primarily uses existing attack toolkits",
    "answers": [
      {
        "text": "Master ",
        "image": ""
      },
      {
        "text": "Apprentice",
        "image": ""
      },
      {
        "text": "Journeyman ",
        "image": ""
      },
      {
        "text": "Activist",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "424) The __________ used a buffer overflow exploit in \"fingerd\" as one of its attack",
    "answers": [
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Stuxnet Worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "ILOVEYOU Worm",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "632) Site security of the data center itself includes barriers to entry, coupled with authentication techniques for gaining physical access",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "285) 12.The functional components of an _________ are: data source, sensor, analyzer, administration, manager, and operator",
    "answers": [
      {
        "text": "IDS",
        "image": ""
      },
      {
        "text": "IPS",
        "image": ""
      },
      {
        "text": "SIEM",
        "image": ""
      },
      {
        "text": "Firewall",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "139) The purposes of a security protocol include:",
    "answers": [
      {
        "text": "Authentication",
        "image": ""
      },
      {
        "text": "Key-exchange",
        "image": ""
      },
      {
        "text": "Negotiate crypto algorithms and parameters",
        "image": ""
      },
      {
        "text": "All the previous answers",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1106) there are well-defined tests for determining uniform distribution\nand independence to validate that a sequence of numbers is\nrandom.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1082) The first widely used occurrence of the buffer overflow attack was the _______.",
    "answers": [
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Morris Internet Worm",
        "image": ""
      },
      {
        "text": "Sasser Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "29) Subject attributes, object attributes and environment attributes are the three types of attributes in the __________ model",
    "answers": [
      {
        "text": "DSD",
        "image": ""
      },
      {
        "text": "RBAC",
        "image": ""
      },
      {
        "text": "ABAC",
        "image": ""
      },
      {
        "text": "SSD",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "63) A mode of operation is a technique for enhancing the effect of a cryptographic algorithm or adapting the algorithm for an application",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "272) The rule _______ tells Snort what to do when it finds a packet that matches the rule criteria",
    "answers": [
      {
        "text": "protocol ",
        "image": ""
      },
      {
        "text": "direction",
        "image": ""
      },
      {
        "text": "action ",
        "image": ""
      },
      {
        "text": "destination port",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "640) A _________ is defined to be a portion of a row used to uniquely identify a row in a table",
    "answers": [
      {
        "text": "foreign key",
        "image": ""
      },
      {
        "text": "query",
        "image": ""
      },
      {
        "text": "primary key",
        "image": ""
      },
      {
        "text": "data perturbation",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "211) Since Android is open-source, each handset vendor can customize it, and this is good for security (hint: consider security updates)",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "010) The strength of a hash function against brute-force attacks depends\nsolely on the length of the hash code produced by the algorithm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "138) The DSS makes use of the _______ and presents a new digital signature technique, the Digital Signature Algorithm (DSA) ",
    "answers": [
      {
        "text": "AES",
        "image": ""
      },
      {
        "text": "SHA-1 ",
        "image": ""
      },
      {
        "text": "MD5",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "428) _________ is a tool used to automatically identify potentially vulnerable programs",
    "answers": [
      {
        "text": "Code obfuscation",
        "image": ""
      },
      {
        "text": "Encryption",
        "image": ""
      },
      {
        "text": "fuzzing",
        "image": ""
      },
      {
        "text": "Penetration testing",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "80) __________ modes of operation have been standardized by NIST for use with symmetric block ciphers such as DES and AES",
    "answers": [
      {
        "text": "Nine",
        "image": ""
      },
      {
        "text": "Seven",
        "image": ""
      },
      {
        "text": "Three",
        "image": ""
      },
      {
        "text": "Five",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "467) A __________ virus is explicitly designed to hide itself from detection by anti-virus software",
    "answers": [
      {
        "text": "Adware",
        "image": ""
      },
      {
        "text": "Spyware",
        "image": ""
      },
      {
        "text": "Rootkit",
        "image": ""
      },
      {
        "text": "stealth",
        "image": ""
      },
      {
        "text": "Ransomware",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "116) With _________ encryption the encryption process is carried out at the two end systems",
    "answers": [
      {
        "text": "point-to-point",
        "image": ""
      },
      {
        "text": "intermediary",
        "image": ""
      },
      {
        "text": "centralized",
        "image": ""
      },
      {
        "text": "end-to-end",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "119) All encryption algorithms are based on two general principles: substitution and _________",
    "answers": [
      {
        "text": "compression",
        "image": ""
      },
      {
        "text": "expansion",
        "image": ""
      },
      {
        "text": "transposition",
        "image": ""
      },
      {
        "text": "permutation",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "01) The original message or data that is fed into the algorithm is __________",
    "answers": [
      {
        "text": "encryption algorithm ",
        "image": ""
      },
      {
        "text": "secret key",
        "image": ""
      },
      {
        "text": "decryption algorithm ",
        "image": ""
      },
      {
        "text": "plaintext",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "100) ______ mode is typically used for a general-purpose block-oriented transmission and is useful for high-speed requirements",
    "answers": [
      {
        "text": "ECB",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      },
      {
        "text": "CFB",
        "image": ""
      },
      {
        "text": "CTR",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "323) System administrators can stop all attacks and hackers from penetrating their systems by installing software patches periodically",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "217) In XSRF, the malicious site can send malicious script to execute in the user?s browser by embedding the script in a hidden iframe",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "634) Security specifically tailored to databases is an increasingly important component of an overall organizational security strategy",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "836) Computer security is protection of the integrity, availability, and\nconfidentiality of information system resources\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1137) A major characteristic of a good security program is how quickly\nthe Iot system can be recovered after an incident has occurred.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1121) Additional padding may be added to provide partial traffic-flow\nconfidentiality by concealing the actual length of the payload.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "03) Cryptanalytic attacks try every possible key on a piece of ciphertext until an intelligible translation into plaintext is obtaine",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "69) A typical application of Output Feedback mode is stream oriented transmission over noisy channel, such as satellite communication",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "650) __________ specifies the minimum requirements for telecommunications infrastructure of data centers",
    "answers": [
      {
        "text": "TIA-492",
        "image": ""
      },
      {
        "text": "RFC-4949",
        "image": ""
      },
      {
        "text": "NIST-7883",
        "image": ""
      },
      {
        "text": "RSA-298",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "147) Using PKCS (public-key cryptography standard), when RSA encrypts the same message twice, different ciphertexts will be produced",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "943) Four stages of viruses",
    "answers": [
      {
        "text": "Dormant phase",
        "image": ""
      },
      {
        "text": "Propagation phase - i.e. attachment to email",
        "image": ""
      },
      {
        "text": "Triggering phase",
        "image": ""
      },
      {
        "text": "Execution phase",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      }
    ],
    "correct": 4,
    "image": ""
  },
  {
    "quest": "437) __________ defenses aim to detect and abort attacks in existing programs",
    "answers": [
      {
        "text": "Code signing",
        "image": ""
      },
      {
        "text": "run-time",
        "image": ""
      },
      {
        "text": "Compile-time defenses",
        "image": ""
      },
      {
        "text": "Patch management",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1162) The firewall may be a single computer system or a set of two or more\nsystems that cooperate to perform the firewall function.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "82) The simplest form of multiple encryption has __________ encryption stages and __________ keys",
    "answers": [
      {
        "text": "three, two",
        "image": ""
      },
      {
        "text": "four, two",
        "image": ""
      },
      {
        "text": "two, three",
        "image": ""
      },
      {
        "text": "two, two",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "304) Statistical approaches attempt to deﬁne proper behavior and rule-based approaches attempt to deﬁne normal or expected behavior",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "17) __________ is verification that the credentials of a user or other system entity are valid",
    "answers": [
      {
        "text": "Adequacy",
        "image": ""
      },
      {
        "text": "Authentication",
        "image": ""
      },
      {
        "text": "Authorization",
        "image": ""
      },
      {
        "text": "Audit",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "711) The most common means of human-to-human identification are __________",
    "answers": [
      {
        "text": "facial characteristics",
        "image": ""
      },
      {
        "text": "signatures",
        "image": ""
      },
      {
        "text": "retinal patterns",
        "image": ""
      },
      {
        "text": "fingerprints",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1155) In relational database parlance,the basic building block is a __________,which is a flat table.",
    "answers": [
      {
        "text": "attribute",
        "image": ""
      },
      {
        "text": "tuple",
        "image": ""
      },
      {
        "text": "primary key",
        "image": ""
      },
      {
        "text": "relation",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1159) Using forged source addresses is known as _________.",
    "answers": [
      {
        "text": "source address spoofing",
        "image": ""
      },
      {
        "text": "a three-way address",
        "image": ""
      },
      {
        "text": "random dropping",
        "image": ""
      },
      {
        "text": "directed broadcast",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1432) \"Each block of 64 plaintext bits is encoded independently using the\nsame key\" is a description of the CBC mode of operation.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "126) Cryptographic hash functions generally execute faster in software than conventional encryption algorithms such as DES and AES",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "95) The most widely used encryption scheme is based on the _________ adopted in 1977 by the National Bureau of Standards",
    "answers": [
      {
        "text": "AES",
        "image": ""
      },
      {
        "text": "3DES",
        "image": ""
      },
      {
        "text": "CES",
        "image": ""
      },
      {
        "text": "DES",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "939) If we find that a botnet server is located in country X, we can be certain that criminals within country X control the botnet",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "169) The strength of a hash function against brute-force attacks depends on the length of the hash code produced by the algorithm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "05) The most important symmetric algorithms, all of which are block ciphers, are the DES, triple DES, and the __________",
    "answers": [
      {
        "text": "SHA",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      },
      {
        "text": "AES",
        "image": ""
      },
      {
        "text": "DSS",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "229) The purpose of the privacy functions is to provide a user protection against discovery and misuse of identity by other users",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1123) the __________ cryptosystem is used in some form in a number of standards including DSS and S/MIME.",
    "answers": [
      {
        "text": "Rabin",
        "image": ""
      },
      {
        "text": "Rijnedel",
        "image": ""
      },
      {
        "text": "Hillman",
        "image": ""
      },
      {
        "text": "ElGamal",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1052) TCB Design Principles",
    "answers": [
      {
        "text": "Least Privilege",
        "image": ""
      },
      {
        "text": "Economy",
        "image": ""
      },
      {
        "text": "Open Design",
        "image": ""
      },
      {
        "text": "Complete Mediation",
        "image": ""
      },
      {
        "text": "Fail-safe defaults",
        "image": ""
      },
      {
        "text": "Ease of Use",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      }
    ],
    "correct": 6,
    "image": ""
  },
  {
    "quest": "438) The __________ project produces a free, multiplatform 4.4BSD-based UNIX-like operating system",
    "answers": [
      {
        "text": "Linux",
        "image": ""
      },
      {
        "text": "Windows",
        "image": ""
      },
      {
        "text": "OpenBSD",
        "image": ""
      },
      {
        "text": "macOS",
        "image": ""
      },
      {
        "text": "FreeBSD",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "58) A __________ attack is a bot attack on a computer system or network that causes a loss of service to users",
    "answers": [
      {
        "text": "spam",
        "image": ""
      },
      {
        "text": "phishing",
        "image": ""
      },
      {
        "text": "DDoS",
        "image": ""
      },
      {
        "text": "sniff",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "328) Stealth is not a term that applies to a virus as such but, rather, refers to a technique used by a virus to evade detection",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "411) In 2003 the _________ exploited a buffer overflow in Microsoft SQL Server 2000",
    "answers": [
      {
        "text": "Code Red Worm",
        "image": ""
      },
      {
        "text": "Mydoom Worm",
        "image": ""
      },
      {
        "text": "Blaster Worm",
        "image": ""
      },
      {
        "text": "Slammer Worm",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1131) A recipient in possession of the secret key cannot generate an\nauthentication code to verify the integrity of the message.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "831) A loss of _________ is the unauthorized disclosure of information\nSelect one:",
    "answers": [
      {
        "text": "integrity",
        "image": ""
      },
      {
        "text": "availability",
        "image": ""
      },
      {
        "text": "confidentiality",
        "image": ""
      },
      {
        "text": "authenticity",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "335) An encrypted virus is a virus that mutates with every infection, making detection by the signature of the virus impossible",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "934) The best defense against being an unwitting participant in a DDos attack is to prevent your systems from being compromised",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "112) ______ was designed in 1987 by Ron Rivest and is a variable key-size stream cipher with byte-oriented operations",
    "answers": [
      {
        "text": "DES",
        "image": ""
      },
      {
        "text": "RC4",
        "image": ""
      },
      {
        "text": "AES",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1090) Security awareness,training,and education programs may be needed to\ncomply with regulations and contractual obligations.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "77) Triple DES makes use of __________ stages of the DES algorithm, using a total of two or three distinct keys",
    "answers": [
      {
        "text": "twelve",
        "image": ""
      },
      {
        "text": "six",
        "image": ""
      },
      {
        "text": "nine",
        "image": ""
      },
      {
        "text": "three",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "436) __________ defenses aim to harden programs to resist attacks in new programs",
    "answers": [
      {
        "text": "Machine code",
        "image": ""
      },
      {
        "text": "Obfuscated",
        "image": ""
      },
      {
        "text": "Self-modifying",
        "image": ""
      },
      {
        "text": "compile-time",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "150) Just like RSA can be used for signature as well as encryption, Digital Signature Standard can also be used for encryption",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "55) __________ is the first function in the propagation phase for a network worm",
    "answers": [
      {
        "text": "Propagating",
        "image": ""
      },
      {
        "text": "Fingerprinting",
        "image": ""
      },
      {
        "text": "Keylogging",
        "image": ""
      },
      {
        "text": "Spear phishing",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "717) A __________ attack involves an adversary repeating a previously captured user response",
    "answers": [
      {
        "text": "client",
        "image": ""
      },
      {
        "text": "replay",
        "image": ""
      },
      {
        "text": "Trojan horse",
        "image": ""
      },
      {
        "text": "eavesdropping",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "578) A(n) __________ is a structured collection of data stored for use by one or more applications",
    "answers": [
      {
        "text": "attribute",
        "image": ""
      },
      {
        "text": "database",
        "image": ""
      },
      {
        "text": "tuple",
        "image": ""
      },
      {
        "text": "inference",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "837) Data integrity assures that information and programs are changed only\nin a specified and authorized manner\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "216) XSRF is possible when a user has a connection to a malicious site while a connection to a legitimate site is still alive",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1125) Limited characteristics make it impossible for hash functions to be\nused to determine whether or not data has changed.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "120) The three most important symmetric block ciphers are: 3DES, AES, and _____",
    "answers": [
      {
        "text": "Serpent",
        "image": ""
      },
      {
        "text": "Data Encryption Standard (DES)",
        "image": ""
      },
      {
        "text": "Blowfish",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "795) The principal objective for developing a PKI is to enable secure, convenient, and efficient acquisition of private keys",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "278) An IDS comprises three logical components: analyzers, user interface and _____",
    "answers": [
      {
        "text": "sensors",
        "image": ""
      },
      {
        "text": "firewalls",
        "image": ""
      },
      {
        "text": "routers",
        "image": ""
      },
      {
        "text": "encryption algorithms",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1129) One limitation of a firewall is that an improperly secured wireless\nLAN may be accessed from outside the organization.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "41) A Trojan horse is an apparently useful program containing hidden code that, when invoked, performs some harmful function",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "698) Depending on the application, user authentication on a biometric system involves either verification or identification",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "382) A stack buffer overflow attack is also referred to as ______",
    "answers": [
      {
        "text": "buffer overrunning",
        "image": ""
      },
      {
        "text": "stack framing",
        "image": ""
      },
      {
        "text": "heap overflowing",
        "image": ""
      },
      {
        "text": "stack smashing",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "78) Another important mode, XTS-AES, has been standardized by the __________ Security in Storage Working Group",
    "answers": [
      {
        "text": "NIST",
        "image": ""
      },
      {
        "text": "IEEE",
        "image": ""
      },
      {
        "text": "ITIL",
        "image": ""
      },
      {
        "text": "ISO",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "72) It is possible to convert a block cipher into a stream cipher using cipher feedback, output feedback and counter modes",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1105) A major advance in symmetric cryptography occurred with the\ndevelopment of the rotor encryption/decryption machine.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1108) A widely used technique for pseudorandom number generation is\nan algorithm known as the linear congruential method.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "26) A __________ is a named job function within the organization that controls this computer system",
    "answers": [
      {
        "text": "user",
        "image": ""
      },
      {
        "text": "role",
        "image": ""
      },
      {
        "text": "permission",
        "image": ""
      },
      {
        "text": "session",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1126) the Secure Hash Algorithm design closely models, and is based on, the hash function __________ .",
    "answers": [
      {
        "text": "MD5",
        "image": ""
      },
      {
        "text": "FIPS 180",
        "image": ""
      },
      {
        "text": "RFC 4634",
        "image": ""
      },
      {
        "text": "MD4",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "09) __________ is a block cipher in which the plaintext and ciphertext are integers between 0 and n-1 for some n",
    "answers": [
      {
        "text": "DSS",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      },
      {
        "text": "SHA",
        "image": ""
      },
      {
        "text": "AES",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "349) Malicious software that needs a host program is referred to as _________ \nSelect one:",
    "answers": [
      {
        "text": "blended",
        "image": ""
      },
      {
        "text": "parasitic",
        "image": ""
      },
      {
        "text": "logic bomb",
        "image": ""
      },
      {
        "text": "ﬂooders",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "701) Identifiers should be assigned carefully because authenticated identities are the basis for other security services",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "79) The _________ and _________ block cipher modes of operation are used for authentication",
    "answers": [
      {
        "text": "OFB, CTR",
        "image": ""
      },
      {
        "text": "CBC, CFB",
        "image": ""
      },
      {
        "text": "CFB, OFB",
        "image": ""
      },
      {
        "text": "ECB, CBC",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "865) A subject can exercise only accesses for which it has the necessary authorization and which satisfy the MAC rules",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1111) Data representing behavior that does not trigger an alarm cannot serve as input to intrusion detection analysis.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1112) Security flaws occur as a consequence of sufficient checking and validation of data and error codes in programs.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "107) _________ is the process of attempting to discover the plaintext or key",
    "answers": [
      {
        "text": "Cryptanalysis",
        "image": ""
      },
      {
        "text": "Steganography",
        "image": ""
      },
      {
        "text": "Cryptography",
        "image": ""
      },
      {
        "text": "Hashing",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "133) In Kerberos, the purpose of using ticket-granting-ticket (TGT) is to minimize the exposure of a user?s master key",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1135) the main work for signature generation depends on the message\nand is done during the idle time of the processor.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "02) The __________ is the encryption algorithm run in reverse",
    "answers": [
      {
        "text": "decryption algorithm",
        "image": ""
      },
      {
        "text": "plaintext",
        "image": ""
      },
      {
        "text": "ciphertext ",
        "image": ""
      },
      {
        "text": "encryption algorithm",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "15) An ABAC model can define authorizations that express conditions on properties of both the resource and the subject",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1169) A bot propagates itself and activates itself,whereas a worm is initially\ncontrolled from some central facility.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "560) T/F: SQL Server allows users to create roles that can then be assigned access rights to portions of the database",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "320) Unauthorized intrusion into a computer system or network is one of the most serious threats to computer security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "567) T/F: A view cannot provide restricted access to a relational database so it cannot be used for security purposes",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1160) Flooding attacks take a variety of forms based on which network\nprotocol is being used to implement the attack.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "589) T/F: The database management system makes use of the database description tables to manage the physical database",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "595) T/F: An IPS incorporates IDS functionality but also includes mechanisms designed to block traffic from intruders",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "340) Mobile phone worms communicate through Bluetooth wireless connections or via the _________ \nSelect one:",
    "answers": [
      {
        "text": "SQL",
        "image": ""
      },
      {
        "text": "TRW",
        "image": ""
      },
      {
        "text": "PWC",
        "image": ""
      },
      {
        "text": "MMS",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "367) ____________ is a form of overflow attack",
    "answers": [
      {
        "text": "Heap overflows",
        "image": ""
      },
      {
        "text": "Replacement stack frame",
        "image": ""
      },
      {
        "text": "Return to system call",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1102) HMAC can be proven secure provided that the embedded hash function\nhas some reasonable cryptographic strengths.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1149) A loss of _________ is the unauthorized disclosure of information.",
    "answers": [
      {
        "text": "confidentiality",
        "image": ""
      },
      {
        "text": "authenticity",
        "image": ""
      },
      {
        "text": "integrity",
        "image": ""
      },
      {
        "text": "availability",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "149) A key exchange protocol is vulnerable to a man-in-the-middle attack if it does not authenticate the participants",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "319) The main advantage of the use of statistical proﬁles is that a prior knowledge of security ﬂaws is not required",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1100) The Diffie-Hellman algorithm depends for its effectiveness on the\ndifficulty of computing discrete logarithms.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "014) An important element in many computer security services and\napplications is the use of cryptographic algorithms",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "937) the domain name of the command and control server of a botnet are pre-determined for the lifetime of the botnet",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "52) The __________ is when the virus function is performed",
    "answers": [
      {
        "text": "dormant phase",
        "image": ""
      },
      {
        "text": "propagation phase",
        "image": ""
      },
      {
        "text": "triggering phase",
        "image": ""
      },
      {
        "text": "execution phase",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "596) T/F: The CSP can provide backup at multiple locations, with reliable failover and disaster recovery facilities",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "131) In Kerberos, the authentication server shares a unique secret key with each authorized computer on the network",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1171) In a biometric scheme some physical characteristic of the individual is\nmapped into a digital representation.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "418) A stack buffer overflow is also referred to as ___________ ",
    "answers": [
      {
        "text": "data leakage",
        "image": ""
      },
      {
        "text": "stack smashing",
        "image": ""
      },
      {
        "text": "heap hijacking",
        "image": ""
      },
      {
        "text": "code injection",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "87) The __________ mode operates on full blocks of plaintext and ciphertext, as opposed to an s-bit subset",
    "answers": [
      {
        "text": "ECB",
        "image": ""
      },
      {
        "text": "CFB",
        "image": ""
      },
      {
        "text": "CBC",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "214) XSS is possible when a web site does not check user input properly and use the input in an outgoing html page",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1075) the Rijndael developers designed the expansion key algorithm to\nbe resistant to known cryptanalytic attacks.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "898) It is possible to write a compiler tool to check any C program and identify all possible buffer overflow bugs",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "838) Availability assures that systems works promptly and service is not\ndenied to authorized users\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "207) The App Store review process can guarantee that no malicious iOS app is allowed into the store for download",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1142) A major weakness of the public announcement of public keys is\nthat anyone can forge a public announcement.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "137) Issued as RFC 2104, _______ has been chosen as the mandatory-to-implement MAC for IP Security",
    "answers": [
      {
        "text": "SHA-256",
        "image": ""
      },
      {
        "text": "HMAC",
        "image": ""
      },
      {
        "text": "MD5",
        "image": ""
      },
      {
        "text": "AES",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1084) Restoring the plaintext from the ciphertext is __________ .",
    "answers": [
      {
        "text": "deciphering",
        "image": ""
      },
      {
        "text": " transposition",
        "image": ""
      },
      {
        "text": " steganography",
        "image": ""
      },
      {
        "text": " encryption",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "74) OFB mode requires an initialization vector that must be unique to each execution of the encryption operation",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "05) Triple DES takes a plaintext block of 64 bits and a key of 56 bits to produce a ciphertext block of 64 bits",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "590) T/F: The cloud carrier is useful when cloud services are too complex for a cloud consumer to easily manage",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "08) A message authentication code is a small block of data generated by a\nsecret key and appended to a message",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "49) The term \"computer virus\" is attributed to __________",
    "answers": [
      {
        "text": "Herman Hollerith",
        "image": ""
      },
      {
        "text": "Fred Cohen",
        "image": ""
      },
      {
        "text": "Charles Babbage",
        "image": ""
      },
      {
        "text": "Albert Einstein",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "167) Two of the most important applications of public-key encryption are digital signatures and key management",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "842) Security mechanisms typically do not involve more than one particular\nalgorithm or protocol\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "227) The IT security management process ends with the implementation of controls and the training of personnel",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "913) each layer of code needs appropriate hardening measures in place to provide appropriate security services",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1117) The Biba models deals with confidentiality and is concerned with\nunauthorized disclosure of information.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "215) XSS can perform many types of malicious actions because a malicious script is executed at user?s browser",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "163) An inline sensor monitors a copy of network traffic; the actual traffic does not pass through the device",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1114) It is possible to convert any block cipher into a stream cipher by using\nthe cipher feedback (CF> mode.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "37) Many forms of infection can be blocked by denying normal users the right to modify programs on the system",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "28) __________ refers to setting a maximum number with respect to roles",
    "answers": [
      {
        "text": "Cardinality",
        "image": ""
      },
      {
        "text": "Prerequisite",
        "image": ""
      },
      {
        "text": "Exclusive",
        "image": ""
      },
      {
        "text": "Hierarchy",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "152) is the original message or data that is fed into the encryption process as input",
    "answers": [
      {
        "text": "Hash",
        "image": ""
      },
      {
        "text": "Key",
        "image": ""
      },
      {
        "text": "Plaintext ",
        "image": ""
      },
      {
        "text": "Ciphertext",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1092) The approach taken by Kerberos is using authentication software tied\nto a secure authentication server.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "25) __________ is based on the roles the users assume in a system rather than the user's identity",
    "answers": [
      {
        "text": "DAC",
        "image": ""
      },
      {
        "text": "RBAC",
        "image": ""
      },
      {
        "text": "MAC",
        "image": ""
      },
      {
        "text": "URAC",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "245) Activists are either individuals or members of an organized crime group with a goal of financial reward",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "246) Running a packet sniffer on a workstation to capture usernames and passwords is an example of intrusion",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "409) A buffer can be located _________",
    "answers": [
      {
        "text": "in the heap",
        "image": ""
      },
      {
        "text": "on the stack",
        "image": ""
      },
      {
        "text": "in the data section of the process",
        "image": ""
      },
      {
        "text": "All of the above",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "226) It is likely that an organization will not have the resources to implement all the recommended controls",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "47) __________ are used to send large volumes of unwanted e-mail",
    "answers": [
      {
        "text": "Rootkits",
        "image": ""
      },
      {
        "text": "Spammer programs",
        "image": ""
      },
      {
        "text": "Downloaders",
        "image": ""
      },
      {
        "text": "Auto-rooters",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "263) The ________ is responsible for determining if an intrusion has occurred",
    "answers": [
      {
        "text": "analyzer ",
        "image": ""
      },
      {
        "text": "host",
        "image": ""
      },
      {
        "text": "user interface ",
        "image": ""
      },
      {
        "text": "sensor",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "899) The OpenSSL heartbleed vulnerability would have been prevented if OpenSSL had been implemented in Java",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "220) Using an input filter to block certain characters is an effective way to prevent SQL injection attacks",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "103) The _______ module performs end-to-end encryption and obtains session keys on behalf of users",
    "answers": [
      {
        "text": "PKM",
        "image": ""
      },
      {
        "text": "RCM",
        "image": ""
      },
      {
        "text": "SSM",
        "image": ""
      },
      {
        "text": "CCM",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1130) the primary benefit of a host-based IDS is that it can detect both\nexternal and internal intrusions.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "93) The _________ is the encryption algorithm run in reverse",
    "answers": [
      {
        "text": "decryption algorithm",
        "image": ""
      },
      {
        "text": "ciphertext",
        "image": ""
      },
      {
        "text": "plaintext",
        "image": ""
      },
      {
        "text": "secret key",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "840) The more critical a component or service, the higher the level of\navailability required\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1099) If a computer's temperature gets too cold the system can undergo\nthermal shock when it is turned on.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "708) A __________ is a password guessing program",
    "answers": [
      {
        "text": "password hash",
        "image": ""
      },
      {
        "text": "password cracker",
        "image": ""
      },
      {
        "text": "password biometric",
        "image": ""
      },
      {
        "text": "password salt",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1088) Integrity can apply to a stream of messages, a single message, or\nselected fields within a message.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1489) __________ controls access based on comparing security labels with security clearances.",
    "answers": [
      {
        "text": "MAC",
        "image": ""
      },
      {
        "text": "DAC",
        "image": ""
      },
      {
        "text": "RBAC",
        "image": ""
      },
      {
        "text": "MBAC",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "124) The additive constant numbers used in SHA-512 are random-looking and are hardcoded in the algorithm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "508) A characteristic of reflection attacks is the lack of _______ traffic",
    "answers": [
      {
        "text": "backscatter",
        "image": ""
      },
      {
        "text": "network",
        "image": ""
      },
      {
        "text": "three-way",
        "image": ""
      },
      {
        "text": "botnet",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "313) Penetration identiﬁcation is an approach developed to detect deviation from previous usage patterns",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "935) Botnet command and control must be centralized( i.e. all bots communicate with a central server(s))",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "880) A virus that attaches to an executable program can do anything that hte program is permitted to do",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "691) Identification is the means of establishing the validity of a claimed identity provided by a user",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "198) In IPSec, if A uses DES for traffic from A to B, then B must also use DES for traffic from B to A",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "34) A virus that attaches to an executable program can do anything that the program is permitted to do",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "779) The most significant source of risk in wireless networks in the underlying communications medium",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "36) A logic bomb is the event or condition that determines when the payload is activated or delivered",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "53) During the __________ the virus is idle",
    "answers": [
      {
        "text": "dormant phase",
        "image": ""
      },
      {
        "text": "propagation phase",
        "image": ""
      },
      {
        "text": "triggering phase",
        "image": ""
      },
      {
        "text": "execution phase",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "503) TCP uses the _______ to establish a connection",
    "answers": [
      {
        "text": "zombie",
        "image": ""
      },
      {
        "text": "SYN cookie",
        "image": ""
      },
      {
        "text": "directed broadcast",
        "image": ""
      },
      {
        "text": "three-way handshake",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "97) For stream-oriented transmission over noisy channel you would typically use _______ mode",
    "answers": [
      {
        "text": "ECB",
        "image": ""
      },
      {
        "text": "CTR",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      },
      {
        "text": "CBC",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "866) One way to secure against Trojan horse attacks is the use of a secure, trusted operating system",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "593) T/F: An IDS is a set of automated tools designed to detect unauthorized access to a host system",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "350) The challenge in coping with DDoS attacks is the sheer number of ways in which they can operate",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "66) Given the potential vulnerability of DES to a brute-force attack, an alternative has been found",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "758) A packet filtering firewall is typically configured to filter packets going in both directions",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1085) the process of converting from plaintext to ciphertext is known as\ndeciphering or decryption.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "99) For general-purpose stream-oriented transmission you would typically use _______ mode",
    "answers": [
      {
        "text": "CTR",
        "image": ""
      },
      {
        "text": "CFB",
        "image": ""
      },
      {
        "text": "ECB",
        "image": ""
      },
      {
        "text": "CBC",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "10) The default set of rights should always follow the rule of least privilege or read-only access",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "03) __________ is the scrambled message produced as output",
    "answers": [
      {
        "text": "Plaintext",
        "image": ""
      },
      {
        "text": "Ciphertext",
        "image": ""
      },
      {
        "text": "Secret key ",
        "image": ""
      },
      {
        "text": "Cryptanalysis",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "42) Packet sniffers are mostly used to retrieve sensitive information like usernames and passwords",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "236) The primary purpose of an IDS is to detect intrusions, log suspicious events, and send alerts",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "696) User authentication is the basis for most types of access control and for user accountability",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "59) The ideal solution to the threat of malware is __________",
    "answers": [
      {
        "text": "identification",
        "image": ""
      },
      {
        "text": "removal",
        "image": ""
      },
      {
        "text": "detection",
        "image": ""
      },
      {
        "text": "prevention",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "98) For general-purpose block-oriented transmission you would typically use _______ mode",
    "answers": [
      {
        "text": "CBC",
        "image": ""
      },
      {
        "text": "CTR",
        "image": ""
      },
      {
        "text": "CFB",
        "image": ""
      },
      {
        "text": "OFB",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "695) A good technique for choosing a password is to use the first letter of each word of a phrase",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "128) It is a good idea to use sequentially increasing numbers as challenges in security protocols",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "210) In Android, an app will never be able to get more permission than what the user has approved",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "893) Security mechanisms typically do not involve more than one particular algorithm or protocol",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1127) Big-endian format is the most significant byte of a word in the\nlow-address byte position.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "341) Backdoors become threats when unscrupulous programmers use them to gain unauthorized access",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "894) The first step in devising security services and mechanisms is to develop a security policy",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "67) A number of Internet based applications have adopted two-key 3DES, including PGP and S/MIME",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "386) Buffer overflow exploits are no longer a major source of concern to security practitioners",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "936) Both static and dynamic analyses are needed in order to fully understand malware behaviors",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "151) In general, public key based encryption is much slower than symmetric key based encryption",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "011) Transmitted data stored locally are referred to as __________ ",
    "answers": [
      {
        "text": "ciphertext ",
        "image": ""
      },
      {
        "text": "DES",
        "image": ""
      },
      {
        "text": "data at rest ",
        "image": ""
      },
      {
        "text": "ECC",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "727) Hardware is the most vulnerable to attack and the least susceptible to automated controls",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1109) The foundation of a security auditing facility is the initial capture of\nthe audit data.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "597) T/F: Encryption is a pervasive service that can be provided for data at rest in the cloud",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "699) Enrollment creates an association between a user and the user's biometric characteristics",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "222) Organizational security objectives identify what IT security outcomes should be achieved",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "221) SQL injection is yet another example that illustrates the importance of input validation",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "203) Compared with WEP, WPA2 has more flexible authentication and stronger encryption schemes",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "165) Network-based intrusion detection makes use of signature detection and anomaly detection",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "125) The strong collision resistance property subsumes the weak collision resistance property",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "13) Traditional RBAC systems define the access rights of individual users and groups of users",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "218) It is easy for the legitimate site to know if a request is really from the (human) user",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "200) Most browsers come equipped with SSL and most Web servers have implemented the protocol",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "690) User authentication is the fundamental building block and the primary line of defense",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "6) Security labels indicate which system entities are eligible to access certain resources",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1096) A malicious driver can potentially bypass many security controls to\ninstall malware.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "639) In a relational database rows are referred to as _________",
    "answers": [
      {
        "text": "relations",
        "image": ""
      },
      {
        "text": "attributes",
        "image": ""
      },
      {
        "text": "views",
        "image": ""
      },
      {
        "text": "tuples",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "312) Password crackers rely on the fact that some people choose easily guessable passwords",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1161) An important aspect of a distributed firewall configuration is security\nmonitoring.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1133) An important characteristic of the MAC algorithm is that it needs\nto be reversible.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1086) A loss of integrity is the unauthorized modification or destruction\nof information.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "3) An auditing function monitors and keeps a record of user accesses to system resources",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "224) Legal and regulatory constraints may require specific approaches to risk assessment",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "568) T/F: Two disadvantages to database encryption are key management and inflexibility",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1146) SSO enables a user to access all network resources after a single\nauthentication.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "333) Viruses, logic bombs, and backdoors are examples of independent malicious software",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "225) One asset may have multiple threats and a single threat may target multiple assets",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "371) A stack overflow can result in some form of a denial of service attack on a system",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "14) A constraint is a defined relationship among roles or a condition related to roles",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1167) The __________ is what the virus \"does\".",
    "answers": [
      {
        "text": "infection mechanism",
        "image": ""
      },
      {
        "text": "trigger",
        "image": ""
      },
      {
        "text": "logic bomb",
        "image": ""
      },
      {
        "text": "payload",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "56) Unsolicited bulk e-mail is referred to as __________",
    "answers": [
      {
        "text": "spam",
        "image": ""
      },
      {
        "text": "propagating",
        "image": ""
      },
      {
        "text": "phishing",
        "image": ""
      },
      {
        "text": "crimeware",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "575) The two commands that SQL provides for managing access rights are ALLOW and DENY",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "71) Cipher Block Chaining is a simple way to satisfy the security deficiencies of ECB",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "197) In IPSec, packets can be protected using ESP or AH but not both at the same time",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1110) Although important,security auditing is not a key element in computer\nsecurity.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "933) A bot is a computer compromised by malware and under the control of a bot master",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "379) A buffer overflow error is not likely to lead to eventual program termination. ",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "700) An individual's signature is not unique enough to use in biometric applications",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "505) _______ is a text-based protocol with a syntax similar to that of HTTP",
    "answers": [
      {
        "text": "RIP",
        "image": ""
      },
      {
        "text": "DIP",
        "image": ""
      },
      {
        "text": "SIP",
        "image": ""
      },
      {
        "text": "HIP",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "431) Data is simply an array of _________ ",
    "answers": [
      {
        "text": "characters",
        "image": ""
      },
      {
        "text": "integers",
        "image": ""
      },
      {
        "text": "floating-point numbers",
        "image": ""
      },
      {
        "text": "bytes",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "915) The default configuration for many operating systems usually maximizes security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "141) Symmetric encryption is also referred to as secret-key or single-key encryption",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1081) The buffer overflow type of attack is one of the least commonly seen\nattacks.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "23) A(n) __________ is a resource to which access is controlled",
    "answers": [
      {
        "text": "object",
        "image": ""
      },
      {
        "text": "owner",
        "image": ""
      },
      {
        "text": "world",
        "image": ""
      },
      {
        "text": "subject",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "159) _________ was the first published public-key algorithm",
    "answers": [
      {
        "text": "ElGamal",
        "image": ""
      },
      {
        "text": "DSA",
        "image": ""
      },
      {
        "text": "Diffie-Hellman",
        "image": ""
      },
      {
        "text": "RSA",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1132) A __________ is an algorithm that requires the use of a secret key.",
    "answers": [
      {
        "text": "DAA",
        "image": ""
      },
      {
        "text": "SHA",
        "image": ""
      },
      {
        "text": "GCM",
        "image": ""
      },
      {
        "text": "MAC",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "914) it is possible for a system to be compromised during the installation process",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1136) the digital signature function does not include the authentication\nfunction.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "19) __________ is the traditional method of implementing access control",
    "answers": [
      {
        "text": "MAC",
        "image": ""
      },
      {
        "text": "RBAC",
        "image": ""
      },
      {
        "text": "DAC",
        "image": ""
      },
      {
        "text": "MBAC",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "1157) T F 4.The value of a primary key must be unique for each tuple of its table.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "31) Malicious software aims to trick users into revealing sensitive personal data",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1147) The authentication function determines who is trusted for a given purpose.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "73) Cipher Feedback Mode conforms to the typical construction of a stream cipher",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "168) The secret key is one of the inputs to a symmetric-key encryption algorithm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1080) Buffer overflow attacks result from careless programming in\napplications.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "70) Cipher Feedback (CFB  is used for the secure transmission of single values)",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "586) T/F: The value of a primary key must be unique for each tuple of its table",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1103) Much of the theory of public-key cryptosystems is based on\nnumber theory.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "22) A __________ is an entity capable of accessing objects",
    "answers": [
      {
        "text": "group",
        "image": ""
      },
      {
        "text": "object",
        "image": ""
      },
      {
        "text": "subject",
        "image": ""
      },
      {
        "text": "owner",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "334) In addition to propagation a worm usually performs some unwanted function",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "388) The buffer overflow type of attack is one of the most common attacks seen",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "104) Public-key encryption was developed in the late ________",
    "answers": [
      {
        "text": "1950s",
        "image": ""
      },
      {
        "text": "1970s",
        "image": ""
      },
      {
        "text": "1960s",
        "image": ""
      },
      {
        "text": "1980s",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "164) A common location for a NIDS sensor is just inside the external firewall",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1165) Those who hack into computers do so for the thrill of it or for status.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "9) An access right describes the way in which a subject may access an object",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "4) External devices such as firewalls cannot provide access control services",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1094) The authentication server shares a unique secret key with each server.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "233) The IDS component responsible for collecting data is the user interface",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "130) In security protocol, an obvious security risk is that of impersonation",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "50) Computer viruses first appeared in the early __________",
    "answers": [
      {
        "text": "1960s",
        "image": ""
      },
      {
        "text": "1970s",
        "image": ""
      },
      {
        "text": "1980s",
        "image": ""
      },
      {
        "text": "1990s",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "24) The final permission bit is the _________ bit",
    "answers": [
      {
        "text": "superuser",
        "image": ""
      },
      {
        "text": "kernel",
        "image": ""
      },
      {
        "text": "set user",
        "image": ""
      },
      {
        "text": "sticky",
        "image": ""
      }
    ],
    "correct": 3,
    "image": ""
  },
  {
    "quest": "1079) the XtS-AES mode is based on the concept of a tweakable block\ncipher.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "591) T/F: Fixed server roles operate at the level of an individual database",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1154) Public-key algorithms are based on simple operations on bit patterns.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "40) In addition to propagating, a worm usually carries some form of payload",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1144) For end-to-end encryption over a network, manual delivery is\nawkward.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1093) X.509 provides a format for use in revoking a key before it expires.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "387) Shellcode must be able to run no matter where in memory it is located",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "563) T/F: Encryption becomes the last line of defense in database security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "324) One important element of intrusion prevention is password management",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1164) Snort can perform intrusion prevention but not intrusion detection.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "68) The sender is the only one who needs to know an initialization vector",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "693) Many users choose a password that is too short or too easy to guess",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "374) Stack buffer overflow attacks were first seen in the Aleph One Worm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "199) In IPSec, the sequence number is used for preventing replay attacks",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "372) There are several generic restrictions on the content of shellcode",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "583) T/F: A query language provides a uniform interface to the database",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "166) Symmetric encryption is used primarily to provide confidentiality",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "900) ASLR(if implemented correctly) can prevent return-to-libc attacks",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "399) Shellcode is not specific to a particular processor architecture",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1143) Manual delivery of a key is not reasonable for link encryption.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "839) The \"A\" in the CIA triad stands for \"authenticity\"\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "389) Buffer overflow attacks are one of the most common attacks seen",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "206) In iOS, an app can run its own dynamic, run-time generated code",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "336) Macro viruses infect documents, not executable portions of code",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "732) Like the MAC, a hash function also takes a secret key as input",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "235) Intruders typically use steps from a common attack methodology",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "587) T/F: A foreign key value can appear multiple times in a table",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "209) In Android, all apps have to be reviewed and signed by Google",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "121) SHA is perhaps the most widely used family of hash functions",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "735) The advantage of a stream cipher is that you can reuse keys",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "015) Some form of protocol is needed for public-key distribution",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "584) T/F: A single countermeasure is sufficient for SQLi attacks",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "205) In iOS, each file is encrypted using a unique, per-file key",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "213) Malicious JavaScripts is a major threat to browser security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "142) The ciphertext-only attack is the easiest to defend against",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "318) Insider attacks are among the easiest to detect and prevent",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "244) An intruder can also be referred to as a hacker or cracker",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1139) the main elements of a RFID system are tags and readers.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "219) SQL injection attacks only lead to information disclosure",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "879) External attacks are the only threats to dataase security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "938) Some APT attacks last for years before they are detected",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1) Access control is the central element of computer security",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "65) S-AES is the most widely used multiple encryption scheme",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "631) A data center generally includes backup power supplies",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1168) Programmers use backdoors to debug and test programs.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "864) ?No write down? is also referred to as the *-property",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1141) the Iot depends heavily on deeply embedded systems.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "135) Kerberos does not support inter-realm authentication",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1151) The \"A\" in the CIA triad stands for \"authenticity\".",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "136) SHA-1 produces a hash value of _______ bits",
    "answers": [
      {
        "text": "256",
        "image": ""
      },
      {
        "text": "512",
        "image": ""
      },
      {
        "text": "160",
        "image": ""
      },
      {
        "text": "128",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "39) E-mail is a common method for spreading macro viruses",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "35) It is not possible to spread a virus via a USB stick",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1097) Lower layer security does not impact upper layers.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "62) There are no practical cryptanalytic attacks on 3DES",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "32) Keyware captures keystrokes on a compromised system",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "04) The secret key is input to the encryption algorithm",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "253) Anomaly detection is effective against misfeasors",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "883) A macro virus infects executable protions of code",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "38) A macro virus infects executable portions of code",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1098) The direct flame is the only threat from fire.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "702) A smart card contains an entire microprocessor",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "346) Malware is another name for Malicious Software",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "641) A _________ is a virtual table",
    "answers": [
      {
        "text": "tuple",
        "image": ""
      },
      {
        "text": "query",
        "image": ""
      },
      {
        "text": "view",
        "image": ""
      },
      {
        "text": "DBMS",
        "image": ""
      }
    ],
    "correct": 2,
    "image": ""
  },
  {
    "quest": "7) Reliable input is an access control requirement",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "835) Threats are attacks carried out\nTrue or False",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "201) Even web searches have (often) been in HTTPS",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "134) The ticket-granting ticket is never expired",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "146) Timing attacks are only applicable to RSA",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "1076) InvSubBytes is the inverse of ShiftRows.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "208) In iOS, each app runs in its own sandbox",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1153) Public-key cryptography is asymmetric.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "327) Bot programs are activated by a trigger",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1148) A user may belong to multiple groups.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "122) SHA-1 is considered to be very secure",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "703) Keylogging is a form of host attack",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "697) Memory cards store and process data",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "44) Every bot has a distinct IP address",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 0,
    "image": ""
  },
  {
    "quest": "1150) Threats are attacks carried out.",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "144) AES uses a Feistel structure",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "787) Search engines support HTTPS",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  },
  {
    "quest": "204) iOS has no vulnerability",
    "answers": [
      {
        "text": "True",
        "image": ""
      },
      {
        "text": "False",
        "image": ""
      }
    ],
    "correct": 1,
    "image": ""
  }
]