Security Fundamentals Flashcards

Which type of malware disguises itself as legitimate software but performs malicious actions when executed?

Answer: Trojan horse

A Trojan horse masquerades as legitimate or useful software while secretly executing malicious functions.

What is the function of an Intrusion Detection System (IDS)?

Answer: Monitor and alert on suspicious activity or policy violations

An IDS monitors network traffic or system activity for suspicious behavior and generates alerts without actively blocking traffic.

An employee plugs in a USB drive found in the parking lot. This is an example of which social engineering technique?

Answer: Baiting

Baiting lures victims by exploiting curiosity, often using physical media like USB drives left in conspicuous locations.

Which access control model assigns permissions based on job roles within an organization?

Answer: Role-Based Access Control (RBAC)

RBAC grants permissions based on predefined organizational roles rather than individual user identities.

What is a zero-day vulnerability?

Answer: A flaw that is unknown to the vendor and has no available patch

A zero-day vulnerability is an unknown security flaw that vendors have had zero days to address, leaving systems exposed.

Which security concept ensures that users only have access to the resources they need to perform their job?

Answer: Least privilege

The principle of least privilege restricts user access rights to only what is necessary for their specific job functions.

What type of encryption uses the same key for both encrypting and decrypting data?

Answer: Symmetric encryption

Symmetric encryption uses a single shared key for both encryption and decryption, making key distribution a critical challenge.