Unit 4: Securing Devices
Cybersecurity · Unit 4 · Paper 1

Securing Devices unit test

A test on this unit alone, marked as a percentage and a letter grade — for the test your class is actually sitting, rather than for May. Answer everything, then submit once: seeing the answer to question 3 before attempting question 4 makes the final percentage meaningless.

Paper 1Paper 2Paper 3
Each paper is built from this unit’s 41 terms and is the same for everyone, so a teacher can assign “Unit 4, Paper 1” and every student sits the identical test. Multiple choice is marked objectively; the written sections you mark yourself against the model answer and rubric.
Suggested time 33 min 30 points0/17 attempted
1

Running as administrator

2

Full disk encryption

3

End-of-life software

4

Vulnerability scanning

5

Trusted Platform Module (TPM)

6

Privilege escalation

7

Rootkit

8

Malware

9

Host-based IDS

10

Endpoint detection and response (EDR)

11

Default credentials

12

Patch management

Short answer 1. Define or explain: Hardening

3 pts

Short answer 2. Define or explain: Screen lock and timeout

3 pts

Short answer 3. Define or explain: Firmware and BIOS/UEFI security

3 pts

Short answer 4. Define or explain: Endpoint

3 pts

Free response

6 pts

This course has no free-response prompt tagged to this unit, so one from elsewhere in the course is used. It is still worth writing — the skill transfers.

A student-built web application lets users search a course catalog. The developer builds the database query by concatenating the user's search text directly into a SQL string, and displays the search term back on the results page exactly as typed. (a) Name the vulnerability created by the query construction and explain the mechanism by which it is exploited. (b) Explain why parameterized queries fix it, and why filtering out the word "DROP" does not. (c) Name the separate vulnerability created by echoing the search term back to the page, and describe its impact on other users. (d) Explain what defense in depth means and apply it to this application with two distinct layers.