Deck 5: Protecting Information Resources

Question 1

Social engineering is an example of an unintentional security threat.

Answer 1

False

Question 2

Trojan programs replicate themselves as viruses and worms do.

Answer 2

False

Question 3

When using mirror disks,if one of the two disks containing the same data fails,the other disk also fails.

Answer 3

False

Question 4

Spoofing is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Question 5

In the context of security,social engineering protects the integrity of information resources.

Question 6

Part of ensuring integrity is identifying authorized users and granting them access privileges.

Question 7

Phishing is different from pharming as phishing usually involves hijacking an official Web site address by hacking a Domain Name System server.

Question 8

After examining an incoming packet,a firewall cannot reject that packet.

Question 9

When a program containing a virus is used,the virus attaches itself to other files,and the cycle continues.

Question 10

Viruses can only be transmitted through sharing of infected files directly from one computer to another.

Question 11

An intrusion detection system (IDS) can protect networks against both external and internal access.

Question 12

A distributed denial-of-service (DDoS) attack involves hundreds of computers working together to bombard a Web site with thousands of requests for information in a short period.

Question 13

Hand geometry is an example of a biometric security measure.

Question 14

If a drive in a redundant array of independent disks (RAID) system fails,data stored on it can be reconstructed from data stored on the remaining drives.

Question 15

Keystroke loggers can be used for malicious purposes,such as collecting the credit card numbers that users enter while shopping online.

Question 16

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Question 17

Level 1 security protects the back-end systems to ensure confidentiality,accuracy,and integrity of data.

Question 18

A proxy server is often used to help protect the network against unauthorized access from outside the network by hiding the network addresses of internal systems.

Question 19

Social engineering is an attack that takes advantage of the backdoors in security systems.

Question 20

Confidentiality,integrity,and availability are collectively referred to as the CIA triangle.

Question 21

The cost of setting up a virtual private network (VPN) is usually high.

Question 22

In symmetric encryption,the same key is used to encrypt and decrypt a message.

Question 23

_____ is the process of capturing and recording network traffic.

A) Sniffing
B) Phishing
C) Spoofing
D) Pharming

Question 24

A level 2 security system protects _____.

A) back-end systems
B) corporate networks
C) Web servers
D) e-mail servers

Question 25

In the context of computer and network security,_____ means that computers and networks are operating and authorized users can access the information they need.

A) validity
B) confidentiality
C) integrity
D) availability

Question 26

_____ is a computer crime that involves destroying or disrupting computer services.

A) Sabotage
B) Slander
C) Libel
D) Keystroke logging

Question 27

In the context of computer and network security,_____ refers to the accuracy of information resources within an organization.

A) validity
B) confidentiality
C) integrity
D) availability

Question 28

An intrusion detection system (IDS) cannot prevent denial-of-service (DoS) attacks.

Question 29

Similar to phishing,_____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information,such as Social Security numbers,passwords,bank account numbers,and credit card numbers.

A) sniffing
B) spoofing
C) pharming
D) cybersquatting

Question 30

An ideal password should be eight characters or longer.

Question 31

Data encryption transforms data into a scrambled form called ciphertext.

Question 32

Terminal resource security is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.

Question 33

A level 1 security system is used to protect _____ against unauthorized access.

A) users' work stations
B) corporate networks
C) internal database servers
D) front-end servers

Question 34

A level 3 security system focuses on protecting _____.

A) back-end systems
B) corporate networks
C) users' work stations
D) front-end servers

Question 35

Backup facilities should never be shared in an attempt to reduce costs.

Question 36

The main advantage of asymmetric encryption is that it is faster and requires only a small amount of processing power.

Question 37

_____ can interfere with users' control of their computers,through such methods as installing additional software and redirecting Web browsers.

A) Kernels
B) Spyware
C) Cookies
D) Log files

Question 38

In the context of computer and network security,_____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

A) validity
B) confidentiality
C) integrity
D) availability

Question 39

Corner bolts are an expensive way to secure a computer to a desktop or a counter.

Question 40

Symmetric encryption is also called public key encryption.

Question 41

Which of the following is considered an intentional security threat?

A) Floods
B) A user's accidental deletion of data
C) Backdoors
D) Power outages

Question 42

Which of the following is a biometric security measure?

A) Electronic trackers
B) Passwords
C) Firewalls
D) Signature analysis

Question 43

A(n) _____ is often used,so remote users have a secure connection to an organization's network.

A) biometric security system
B) intrusion detection system
C) virtual private network
D) terminal resource network

Question 44

Which of the following is a nonbiometric security measure?

A) Electronic trackers
B) Passwords
C) Firewalls
D) Signature analysis

Question 45

Which of the following is a type of access control used to protect systems from unauthorized access?

A) Steel encasements
B) Passwords
C) Firewalls
D) Identification badges

Question 46

A (n) _____ travels from computer to computer in a network,but it does not usually erase data.

A) Trojan program
B) worm
C) applet
D) backdoor

Question 47

_____ security measures primarily control access to computers and networks,and they include devices for securing computers and peripherals from theft.

A) Nonbiometric
B) Physiological
C) Biometric
D) Physical

Question 48

Data sent through a virtual private network (VPN) can be encrypted using the _____ protocol.

A) User Datagram
B) Transmission Control
C) Secured Sockets layer
D) Layer Two Tunneling

Question 49

_____ encryption uses a public key known to everyone and a private key known only to the recipient.

A) Symmetric
B) Asymmetric
C) Synchronous
D) Asynchronous

Question 50

_____ ensures data security and integrity over public networks,such as the Internet.

A) Transport Layer Security
B) Terminal Resource Security
C) Transmission Control Protocol
D) User Datagram Protocol

Question 51

_____ are usually placed in front of a firewall and can identify attack signatures and trace patterns.

A) Intrusion detection systems
B) Proxy servers
C) Physical security measures
D) Biometric security measures

Question 52

A _____ attack floods a network or server with service requests to prevent legitimate users' access to the system.

A) social engineering
B) denial-of-service
C) backdoor
D) phishing

Question 53

A _____ is a programming routine built into a system by its designer or programmer.

A) logic bomb
B) worm
C) virus
D) backdoor

Question 54

A _____ is the software that acts as an intermediary between two systems.

A) database
B) backdoor
C) proxy server
D) Trojan program

Question 55

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

A) Applications Layer
B) Secure Sockets Layer
C) Transmission Control Protocol
D) User Datagram Protocol

Question 56

_____ use a physiological element to enhance security measures.

A) Modems
B) Firewalls
C) Intrusion detection systems
D) Biometric security measures

Question 57

A logic bomb is a type of _____.

A) Trojan program
B) worm
C) blended threat
D) backdoor

Question 58

_____ take advantage of the human element of security systems.

A) Denial-of-service attacks
B) Trojan programs
C) Blended threats
D) Social engineering attacks

Question 59

Which of the following forms of text used in an encryption algorithm is unreadable without a decryption key?

A) Plaintext
B) Cleartext
C) Codetext
D) Ciphertext

Question 60

Which of the following is a physical security measure?

A) Fitting electronic trackers to a computer
B) Restricting access through passwords
C) Filtering data packets using a firewall
D) Checking a user's signature

Question 61

_____ is software that secretly gathers information about users while they browse the Web.

Question 62

A(n) _____ is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

Question 63

_____ is the unauthorized use of computer data for personal gain,such as transferring money from another's account or charging purchases to someone else's account.

Question 64

In _____ encryption,the same key is used to encrypt and decrypt a message.

A) symmetric
B) asymmetric
C) synchronous
D) asynchronous

Question 65

_____ is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Question 66

A(n) _____ is a security threat that combines the characteristics of computer viruses,worms,and other malicious codes with vulnerabilities found on public and private networks.

Question 67

When planning a comprehensive security system,the first step is designing _____,which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure.

Question 68

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.

A) Social engineering
B) Business continuity planning
C) An intrusion detection system
D) Terminal resource security

Question 69

A(n) _____ consists of self-propagating program code that is triggered by a specified time or event.

Question 70

_____ is a form of spyware that collects information about a user (without the user's consent) to determine which advertisements to display in the user's Web browser.

Question 71

_____ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information,such as passwords and credit card information.

Question 72

A _____ plan lists the tasks that must be performed to restore damaged data and equipment.

A) risk assessment
B) systems engineering
C) disaster recovery
D) security compliance

Question 73

The _____ biometric security measure translates words into digital patterns,which are recorded and examined for tone and pitch.

Question 74

The main function of Cyber Incident Response Capability (CIRT) is to:

A) provide level 1 security.
B) restrict access controls to unauthorized personnel.
C) provide information on security incidents.
D) create backdoors to bypass security protocols.

Question 75

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

Question 76

_____ are independent programs that can spread themselves without having to be attached to a host program.

Question 77

In the context of security,_____ means using "people skills"-such as being a good listener and assuming a friendly,unthreatening air-to trick others into revealing private information.

Question 78

A(n) _____ contains code intended to disrupt a computer,network,or Web site,and it is usually hidden inside a popular program.

Question 79

A(n) _____ encryption usually works better for public networks,such as the Internet.

A) symmetric
B) asymmetric
C) synchronous
D) asynchronous

Question 80

_____ is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.