D340 Cyber Defense and Countermeasures
Access The Exact Questions for D340 Cyber Defense and Countermeasures
💯 100% Pass Rate guaranteed
🗓️ Unlock for 1 Month
Rated 4.8/5 from over 1000+ reviews
- Unlimited Exact Practice Test Questions
- Trusted By 200 Million Students and Professors
What’s Included:
- Unlock Actual Exam Questions and Answers for D340 Cyber Defense and Countermeasures on monthly basis
- Well-structured questions covering all topics, accompanied by organized images.
- Learn from mistakes with detailed answer explanations.
- Easy To understand explanations for all students.
Free D340 Cyber Defense and Countermeasures Questions
What captures the keystrokes that the user presses and is used to capture passwords and login information?
-
Spyware
-
Keylogging
-
Rootkit
-
Computer Worm
-
Botnet
Explanation
Explanation:
Keylogging is the technique (or software/hardware) that records the exact keys a user types, capturing passwords, usernames, and other sensitive input. Keyloggers can be implemented as covert software installed on the victim’s device or as physical devices placed between a keyboard and computer; they operate stealthily and send captured data to attackers or store it for later retrieval. While keylogging is a form of spyware in a broad sense, the specific term for the keystroke-capturing capability is keylogging.
Correct Answer:
Keylogging
Instructions or code that executes on an end user's machine from a web browser is known as _________ code.
-
Active X
-
JavaScript
-
Malware
-
Windows Scripting
-
Mobile
Explanation
Explanation:
JavaScript is a programming language commonly used to execute instructions directly in a web browser on the client side. It can provide dynamic content, interactivity, and automation in web pages. While it can sometimes be exploited for malicious purposes, its defining feature is that it runs in the end user’s browser. Other options like ActiveX, Windows Scripting, or mobile code refer to different execution environments or contexts.
Correct Answer:
JavaScript
What is the difference between confidentiality, integrity and availability (CIA) in information security?
-
Confidentiality is the property that information is not disclosed to unauthorized parties, integrity is the property that information is accurate and complete, and availability is the property that information is accessible and usable when needed
-
Confidentiality is the property that information is accessible and usable when needed, integrity is the property that information is not disclosed to unauthorized parties, and availability is the property that information is accurate and complete
-
Confidentiality, integrity and availability are synonymous terms that can be used interchangeably
-
Confidentiality, integrity and availability are different types of threats that can affect information security
Explanation
Explanation:
The CIA triad is a foundational concept in information security. Confidentiality ensures that information is only accessible to authorized individuals, protecting it from unauthorized disclosure. Integrity guarantees that the information remains accurate, complete, and unaltered by unauthorized parties. Availability ensures that information and systems are accessible and usable when needed, supporting operational continuity. These three principles collectively form the core objectives of information security management.
Correct Answer:
Confidentiality is the property that information is not disclosed to unauthorized parties, integrity is the property that information is accurate and complete, and availability is the property that information is accessible and usable when needed
A security incident where confidential data is copied, viewed, or stolen by an unauthorized party is a:
-
security breach
-
PII violation
-
data breach
-
security failure
Explanation
Explanation:
When confidential data is copied, viewed, or stolen by someone who is not authorized to access it, the situation is described as a data breach. A data breach specifically refers to the unauthorized access or disclosure of protected information, and it can include exposure of personally identifiable information (PII) but is broader than the term "PII violation." It is not simply a generic security failure or the more general phrase "security breach" in the sense the question intends—data breach is the most precise term for unauthorized copying, viewing, or theft of data.
Correct Answer:
data breach
A specific situation in which a so-called information broker calls banks and other financial institutions under the guise of being a customer to obtain the customer's account numbers and balances, as well as other personal information, is called _____________.
-
False advertising
-
Information sharing
-
Pretexting
-
None of the above
Explanation
Explanation:
Pretexting is a form of social engineering in which an attacker creates a fabricated scenario or identity to manipulate a target into revealing confidential information. In this case, the attacker pretends to be the customer to extract sensitive financial data from banks or institutions. False advertising and information sharing do not involve the deceptive personal interaction that defines pretexting.
Correct Answer:
Pretexting
What type of spyware is designed to monitor user activity by capturing keystrokes and searching through disk drives for sensitive information?
-
Adware
-
Keylogger
-
Ransomware
-
Rootkit
Explanation
Explanation:
A keylogger is a type of spyware that records every keystroke entered on a computer, enabling attackers to capture sensitive information such as passwords, account numbers, and personal messages. Keyloggers can also search disk drives for confidential data, making them highly effective for information theft. Unlike adware, which displays unwanted ads, ransomware, which encrypts files, or rootkits, which conceal system control, keyloggers focus specifically on monitoring and capturing user input.
Correct Answer:
Keylogger
Users on your network receive an e-mail warning them of a dangerous computer virus. It instructs the user to delete files it claims were put there by the virus, but they are actually critical system files. This is an example of
-
Social engineering
-
Reverse social engineering
-
A hoax
-
Phishing
Explanation
Explanation:
This scenario describes a hoax. A hoax is a false warning or message intended to deceive users into taking harmful actions, such as deleting essential system files, based on incorrect information. Unlike phishing, which aims to steal sensitive data, or social engineering in general, which manipulates behavior for various malicious purposes, a hoax specifically relies on fear or misinformation to trick users without the attacker directly obtaining credentials or access.
Correct Answer:
A hoax
Which of the following types of malware is specifically designed to replicate itself and spread to other computers without user intervention?
-
Trojan horse
-
Worm
-
RAT (Remote Access Trojan)
-
Adware
Explanation
Explanation:
A worm is a type of malware that can self-replicate and spread across networks without requiring user action. Unlike a Trojan horse, which relies on the user to execute it, or a RAT that provides remote access but may need installation, worms propagate automatically to other systems, exploiting vulnerabilities in software or network protocols. Adware, on the other hand, is primarily designed to display advertisements and does not self-replicate.
Correct Answer:
Worm
A ________ is a small program that, after installed, downloads a larger attack program.
-
Trojan horse
-
Trojan pony
-
Stub
-
Downloader
Explanation
Explanation:
A downloader is a small program designed to download and install a larger, more complex attack program after being executed on a victim’s system. This approach allows attackers to deliver malware in stages, often bypassing initial security defenses. Unlike generic Trojan horses or Trojan ponies, which may perform various malicious tasks, the downloader’s primary function is to fetch and execute additional malicious software.
Correct Answer:
Downloader
A(n) ________ is said to happen when an unauthorized person views, alters, or steals secured data.
-
data breach
-
asynchronous communication
-
key escrow
-
sequence flow
Explanation
Explanation:
A data breach occurs when an unauthorized individual gains access to protected or confidential information, potentially viewing, altering, or stealing it. This compromises the confidentiality, integrity, or availability of data. The other options—such as asynchronous communication, key escrow, or sequence flow—do not describe unauthorized access or theft of secured data, making data breach the correct term.
Correct Answer:
data breach
How to Order
Select Your Exam
Click on your desired exam to open its dedicated page with resources like practice questions, flashcards, and study guides.Choose what to focus on, Your selected exam is saved for quick access Once you log in.
Subscribe
Hit the Subscribe button on the platform. With your subscription, you will enjoy unlimited access to all practice questions and resources for a full 1-month period. After the month has elapsed, you can choose to resubscribe to continue benefiting from our comprehensive exam preparation tools and resources.
Pay and unlock the practice Questions
Once your payment is processed, you’ll immediately unlock access to all practice questions tailored to your selected exam for 1 month .