CCNA Cbrops Security Concepts Questions

Integrity ensures that data is not altered by unauthorized individuals or processes.

A vulnerability is a weakness that can be exploited.

Symmetric encryption uses the same key for encryption and decryption. AES and 3DES are symmetric algorithms.

Non-repudiation ensures that a party cannot deny having performed a specific action, such as sending an email. This is typically achieved through digital signatures using asymmetric cryptography (e.g., RSA or ECDSA) and public key infrastructure (PKI), where the sender's private key creates a signature that can be verified by anyone with the sender's public key. The goal is to provide irrefutable proof of origin and integrity, preventing the sender from later claiming they did not send the message.

AES is a symmetric encryption algorithm, meaning the same key is used for encryption and decryption.

Reconnaissance attacks involve gathering information to identify vulnerabilities. Passive reconnaissance uses publicly available sources like social media.

A man-in-the-middle (MitM) attack places the attacker between two parties to intercept and manipulate traffic.

The email is a social engineering technique known as phishing. Since it targeted a specific employee with a tailored message (IT department), it is spear phishing. The attacker then used the credentials to access the VPN, which is a direct use of the stolen information, not a separate attack like MitM.

Option D is correct because using a publicly available tool to scan a company's network for open ports and services involves directly interacting with the target systems by sending probes (e.g., TCP SYN packets, UDP datagrams) and analyzing responses. This constitutes active reconnaissance, as the attacker's actions generate traffic that can be detected by intrusion detection systems (IDS) or firewall logs, unlike passive methods that only observe existing traffic.

Confidentiality ensures that data is not disclosed to unauthorized individuals or systems.

Active reconnaissance involves direct interaction with the target, such as port scanning, which generates traffic. Passive recon uses public data.

B is correct because the attack uses email as the delivery vector to trick recipients into revealing credentials, which is the classic definition of phishing. Phishing is a broad category of social engineering that employs deceptive electronic communications (typically email) to steal sensitive information.

The Respond function includes activities to contain and mitigate incidents.

The General Data Protection Regulation (GDPR) is the EU regulation specifically designed to protect the privacy and personal data of EU citizens. It applies to any organization that processes or controls the personal data of individuals in the EU, regardless of where the organization is based. This makes GDPR the correct compliance framework for the scenario described.

A CA issues, revokes, and manages digital certificates, establishing trust in the public key's ownership.

A virus is a type of malware that replicates by attaching itself to legitimate executable files or scripts, requiring user action (e.g., opening an infected attachment) to spread. It is one of the classic and most common forms of malicious software, making option B correct.

Option C is correct because verifying file integrity involves computing a cryptographic hash (e.g., SHA-256) of the downloaded file and comparing it to the hash provided by the publisher. If the hashes match, the file has not been altered; any tampering would produce a different hash value. This is a standard integrity check, not a confidentiality or authentication mechanism.

Passive reconnaissance involves gathering information without directly interacting with the target, such as searching public records and social media.

PCI DSS is the Payment Card Industry Data Security Standard, which applies to organizations that handle credit card data.

Symmetric encryption, asymmetric encryption, and TLS (which uses both) provide confidentiality. Hashing does not.

This is a phishing attack because the attacker uses a fraudulent email that impersonates a trusted entity (the IT department) to trick the recipient into clicking a malicious link and entering sensitive login credentials. Phishing is a broad category of social engineering that relies on deceptive electronic communications, typically email, to harvest credentials or deliver malware.

PCI DSS is the Payment Card Industry Data Security Standard for credit card data.

Active reconnaissance involves direct interaction with the target. Port scanning and ping sweeps are active; WHOIS and Google searches are passive.