Deck 11: Security and Ethics

Question 1

A firewall typically sits between a network and its individual computers.

Answer 1

False

Question 2

Wiretapping involves the capability of authorized users to search through storage,directories,or files for private information.

Answer 2

False

Question 3

Partial network encryption,also called communications encryption,is the most extreme form of encryption.

Answer 3

False

Question 4

A continuing series of security awareness and ethics communications to computer users is more effective than a single announcement.

Question 5

Some viruses are considered to be benign.

Question 6

Spooling is a security threat that relies on cleartext transmission whereby the assailant falsifies the IP addresses of an Internet server by changing the address recorded in packets it sends over the Internet.

Question 7

Intrusion detection is an example of a strategy for improving system survivability based on knowledge gained from intrusions.

Question 8

The IEEE and the Association for Computing Machinery (ACM)issued a standard of ethics for the global computing community in 1977.

Question 9

A master boot record virus infects both the boot record and program files,making them especially difficult to repair.

Question 10

A worm is a memory-resident program that copies itself from one system to the next without requiring the aid of an infected program file.

Question 11

If a password consists of ten characters,it would take a human about 4.5 years to guess the password if the human makes one try each second.

Question 12

Any vulnerability at the operating system level opens the entire system to attack.

Question 13

A gap in system security in always indicative of malicious activity.

Question 14

In public/private key encryption,the private key is a pair of two prime numbers chosen by the person who wants to receive a private message.

Question 15

A logic bomb often spreads unnoticed throughout a network until a predetermined event,when it goes off and does its damage.

Question 16

When nonsynchronized processes access data records and modify some but not all of a record's fields,it is called "accidental incomplete modification of data."

Question 17

A virus is defined as a small program written to alter the way a computer operates,without the permission or knowledge of the user.

Question 18

One popular authentication tool is Kerberos,a network authentication protocol developed as part of the Athena Project at MIT.

Question 19

A single computer without access to e-mail or the Internet is easy to protect and has a low risk of attack.

Question 20

Default passwords pose unique vulnerabilities because they are widely known among system attackers but are a necessary tool for vendors.

Question 21

____ peruse data packets as they pass by,examine each one for specific information,and log copies of interesting packets for more detailed examination.

A) Spoofers
B) Proxy servers
C) Packet sniffers
D) Packet filters

Question 22

A ____ server hides important network information from outsiders by making the network server invisible.

A) redirection
B) blocking
C) proxy
D) fire

Question 23

A ____ combines into one program the characteristics of other attacks.

A) Trojan Horse
B) worm
C) multi-thread virus
D) blended threat

Question 24

The object used by the Kerberos protocol to provide client verification is known as a ____.

A) password
B) passphrase
C) token
D) ticket

Question 25

Generally,____ antivirus software compares file sizes (checking for added code when none is expected),looks for replicating instructions,and searches for unusual file activity.

A) diagnostic
B) preventive
C) reactive
D) firewall

Question 26

What strategy contributes most to system recovery?

A) authentication
B) integrity checking
C) data replication
D) encryption

Question 27

Trash collection,also known as ____,is an evening pastime for those who enjoy perusing anything and everything thrown out by system users.

A) dumpster diving
B) digital recycling
C) dumpster surfing
D) trash surfing

Question 28

The immediate result of a worm is ____.

A) not noticeable until later
B) the slower processing time of legitimate work
C) complete data loss with little chance of recovery
D) a computer crash with or without a blue screen

Question 29

Intruders have been known to capture user passwords by using a ____ to replace the standard login program on the computer with an identical fake login that captures keystrokes.

A) worm
B) masquerade program
C) Trojan horse
D) virtual login console

Question 30

____ is a form of social engineering whereby an intruder pretends to be a legitimate entity and contacts unwary users asking them to reconfirm their personal and/or financial information.

A) Spoofing
B) Phishing
C) Impersonating
D) Acting

Question 31

It will take a computer ____ to crack a password with a length of three characters if the computer tries one million values per second.

A) .008788 seconds
B) 4.5 seconds
C) 2.5 hours
D) 58 hours

Question 32

One major disadvantage of encryption is that ____.

A) it increases the system's overhead
B) it is inconvenient for users
C) it is prohibitive in cost
D) it is often ineffective

Question 33

The capability of a system to fulfill its mission,in a timely manner,in the presence of attacks,failures,or accidents is known as ____.

A) attack resistance
B) attack survivability
C) system recovery
D) system survivability

Question 34

Errors can occur when data values are incorrectly stored because the field isn't large enough to hold the numeric value stored there.This issue is an example of a(n)____.

A) unintentional attack
B) malicious attack
C) denial-of-service attack
D) trap door attack

Question 35

An entire system that is backed up once a week and only backs up files daily that are changed on that day is known as a(n)____ backup.

A) incremental
B) layered
C) phased
D) recovery-based

Question 36

As an alternative to passwords,some systems have integrated use of a ____.

A) smart card
B) fingerprint scanner
C) biometric scanner
D) retina scanner

Question 37

Using ____,a firewall reviews the header information for incoming and outgoing Internet packets to verify that the source address,destination address,and protocol are all correct.

A) snooping
B) packet filtering
C) a proxy server
D) anti-virus software

Question 38

Two methods of active wiretapping are "between lines transmission" and "____."

A) Trojan horse
B) piggyback entry
C) browsing
D) trap doors

Question 39

____ viruses infect data files.

A) File infector
B) Boot sector
C) Master boot record
D) Macro

Question 40

What configuration has the highest level of risk?

A) LAN with Internet
B) LAN without Internet
C) Single computer without e-mail or Internet
D) LAN with firewall