IT Security Fundamentals Quiz

The code checks the session for the 'Admin' role to decide whether to render the 'Delete Users' button. However, the action endpoint /DeleteUsersAction is triggered via client-side JavaScript without verifying permission on the server side, representing a broken access control vulnerability.

The code uses Base64 encoding to obfuscate the redirect URL. Base64 is a reversible encoding scheme, not encryption, representing a usage of risky/non-existent encryption to secure sensitive parameter values. Since other options are also relevant, 'Usage of Risky Encryption' is the specific implementation flaw shown here.

Lines 7 and 8 contain the security vulnerabilities. Line 7 loads the obsolete and insecure JDBC-ODBC bridge driver. Line 8 contains hardcoded database credentials ("admin"/"admin"), exposing the application to credential theft and unauthorized access.

Managed code runs within a virtual machine or runtime environment (like JVM or CLR) that enforces type safety, memory management, and array bounds checking. This significantly reduces the attack surface by eliminating entire classes of low-level memory corruption vulnerabilities like buffer overflows.

Management is ultimately responsible for directing organization-wide security posture, policies, and legally required notifications to authorities following a security incident. Security and system administrators handle technical response and reporting to management, while users report anomalies internally.

Authorization is the correct mitigation for elevation of privilege threats because it directly controls what actions users can perform. By implementing proper authorization (such as principle of least privilege, role-based access control, and permission checks), you ensure users cannot exceed their intended access level. Authentication (A) verifies identity but doesn't prevent privilege escalation. Auditing (C) detects violations but doesn't prevent them. Confidentiality (D) protects data secrecy, not privilege levels.

Integrity is the correct mitigation for tampering threats because it ensures data and system state remain unmodified. Tampering attacks attempt to modify data or code in unauthorized ways, so integrity mechanisms like digital signatures, hash verification, checksums, and write protections directly counter this threat. Availability (B) ensures system uptime, not data authenticity. Auditing (C) tracks changes but doesn't prevent them. Confidentiality (D) protects secrecy, not modification.

Encryption is the correct answer because it directly preserves confidentiality by making data unreadable to unauthorized parties. Encryption transforms plaintext into ciphertext that can only be read by parties with the decryption key. Hashing (B) provides integrity verification, not confidentiality. Recovery (C) is about restoring data after loss, not protecting secrecy. Redundancy (D) ensures availability through duplication, not confidentiality.

To solve this question, the user needs to understand the concept of file security and how confidential data can be exposed.

Option A is incorrect because using special characters in the filename does not necessarily keep the file hidden or secure. The filename is just a label for the file and does not affect the file's contents or accessibility.

Option B is incorrect because the amount of time the file exists does not determine the file's security. Even temporary files can contain confidential data, and it is essential to ensure that they are adequately secured.

Option D is also incorrect because using special characters in the filename does not necessarily indicate that the file is a system file or secure. The filename is just a label and does not affect the file's contents or accessibility.

Option C is correct because file permissions play a crucial role in determining who can access or modify a file. If the permissions are not set appropriately, anyone can access the file, including unauthorized users, resulting in confidential data exposure.

Therefore, the answer is: C.

To solve this question, the user needs to know about the advantages and disadvantages of integrating cryptography into applications.

Option A is incorrect because it states cryptography brings increased stability as the programs are protected against viral attack. Cryptography can help protect against viral attacks to some extent, but it does not guarantee increased stability.

Option B is incorrect because it states that cryptography enhances reliability since users can no longer modify source code. This is not true as cryptography does not prevent users from modifying source code, but rather it helps protect sensitive data.

Option C is also incorrect because it states that cryptography reduces breaches of policy due to disclosure of information. Cryptography can help protect against data breaches but does not prevent them entirely.

Option D is the correct answer because possible denial of service (DoS) attacks can occur if the keys used for cryptography are corrupted. Once the keys are corrupted, the system will be unable to decrypt messages, which can lead to a DoS attack.

Therefore, the correct answer is:

The Answer is: D. Possible denial of service if the keys are corrupted

Switches often lack sufficient accountability controls because they operate primarily at Layer 2 (data link layer) and typically don't have the robust logging, authentication, or individual user tracking capabilities that servers, workstations, or database management systems possess. Network switches handle packet forwarding without granular user activity monitoring, making it difficult to attribute specific actions to individual users. Workstations, servers, and DBMS typically have strong authentication and audit trails.

System time correlation is critical for audit log review because security events across multiple devices must be synchronized to reconstruct attack timelines and investigate incidents. When network components have synchronized clocks, analysts can correlate events from different sources (firewall logs, server logs, IDS alerts) to understand the sequence of actions during a security incident. Without time synchronization, logs cannot be accurately correlated, making forensic analysis nearly impossible. Availability (A), network connectivity (B), and backups (C) don't require tight time synchronization.

Group accounts should be avoided because they destroy individual accountability by allowing multiple people to share the same credentials. When a group account is used, it's impossible to determine which specific individual performed an action, violating the principle of individual accountability essential for security and compliance. Account groupings based on duties (A), distributing privileges to group members (C), and assigning accounts to multiple groups (D) are all valid security practices when combined with individual user accounts.

System accounts are designated for automated system services, processes, and daemons rather than human users. Neither ordinary users, system administrators, nor security administrators should log in directly to system accounts; instead, humans must use their own personal accounts.

Wi-Fi Protected Access (WPA) is the correct answer as it provides significantly stronger security than WEP. WEP (both 'Wireless Encryption Protocol' and 'Wired Equivalent Privacy' in options A and B) has well-known cryptographic weaknesses and can be cracked in minutes. WPA introduced TKIP encryption and improved authentication. Note that options C and D both refer to WPA - option D has a minor naming error ('Wireless' instead of 'Wi-Fi') making C the most technically accurate answer.

Phishing is a type of social engineering attack. Social engineering attacks exploit human psychology to trick people into revealing sensitive information or clicking on malicious links. Phishing attacks typically involve sending emails or text messages that appear to be from a legitimate source, such as a bank or credit card company. The emails or text messages will often contain a link that, when clicked, will take the victim to a fake website that looks like the real website. Once the victim enters their personal information on the fake website, the attacker can steal it.

Malware, spyware, and denial of service attacks are all different types of cybersecurity attacks. Malware is software that is designed to harm a computer system. Spyware is software that is designed to collect information about a user's computer activities. Denial of service attacks are designed to make a computer system unavailable to its intended users.

Therefore, the correct answer is B. Social engineering.

Here is a table that summarizes the differences between phishing and the other three options:

Intrusion detection systems (IDS) analyze traffic and host behavior to identify malicious activity like system misuse, unauthorized file changes, and physical break-ins (via host sensors). They are not designed to filter unsolicited bulk email (SPAM), which is handled by email gateways.

To answer this question, the user needs to know what vulnerability is. In the context of cybersecurity, vulnerability refers to a weakness in a system that can be exploited by attackers to gain unauthorized access, cause damage, steal data, or disrupt services.

Now, let's go through each option and explain whether it gives rise to a vulnerability:

A. Hackers: This option is correct. Hackers are not a vulnerability themselves but rather a threat that can exploit vulnerabilities. They are individuals or groups who attempt to gain unauthorized access to systems or networks for malicious purposes. While hackers can cause damage if they successfully exploit a vulnerability, they are not the source of the vulnerability itself.

B. Flaws: This option is incorrect. Flaws, such as coding errors or design weaknesses, can create vulnerabilities in systems that can be exploited by attackers. Flaws are one of the primary sources of vulnerabilities and are often exploited by hackers to gain access to systems or data.

C. Policy failures: This option is incorrect. Policy failures, such as weak passwords or lack of access controls, can create vulnerabilities in systems that can be exploited by attackers. Policy failures are another source of vulnerabilities and are often exploited by hackers to gain access to systems or data.

D. Weaknesses: This option is incorrect. Weaknesses, such as outdated software or unpatched vulnerabilities, can create vulnerabilities in systems that can be exploited by attackers. Weaknesses are yet another source of vulnerabilities and are often exploited by hackers to gain access to systems or data.

Therefore, the correct answer is:

The Answer is: A. Hackers

Patch management is formally governed by change control management because updates modify the production environment and must be planned, tested, and authorized. Contingency and business continuity planning focus on disaster recovery, while system update management is a task, not the parent framework.

Screening routers, firewalls, and proxy servers are all standard components used at network perimeters to filter traffic and enforce security. Since all listed devices should be part of a perimeter defense, the correct choice is none of the above.