Deck 4: Information Security

Question 1

A(n)_________ network is any network within your organization; a(n)_________ network is any network external to your organization.

A)trusted; trusted
B)trusted; untrusted
C)untrusted; trusted
D)untrusted; untrusted

Answer 1

B

Question 2

The US intelligence community accused _________ of the hacks on the Democratic National Committee in 2015 and 2016.

A)China
B)India
C)North Korea
D)Russia

Answer 2

D

Question 3

You leave your laptop at your desk while you go to the restroom.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Answer 3

B

Question 4

Careless Internet surfing is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 5

Carelessness using unmanaged devices is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 6

You never wipe the dust off your computer.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 7

Which of the following does NOT contribute to the increasing vulnerability of organizational information resources?

A)Increasing skills necessary to be a computer hacker
B)International organized crime taking over cybercrime
C)Lack of management support
D)Smaller,faster,cheaper computers and storage devices
E)Today's interconnected,interdependent,wirelessly networked business environment

Question 8

You don't lock your computer when you go to the restroom.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 9

Computer crimes typically average _________ of dollars and cause businesses _________ of dollars in damages.

A)hundreds; millions
B)hundreds; billions
C)hundreds of thousands; millions
D)hundreds of thousands; billions

Question 10

Hackers used _________ to get into the Democratic National Committee computer systems.

A)denial-of-service attacks
B)spear-phishing
C)a Trojan horse
D)viruses

Question 11

_________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords.

A)Espionage
B)Malware
C)Profiling
D)Social engineering

Question 12

You are a nice person,so you hold the door open for the person running in behind you.Since you needed to use your ID badge to open the door,the person running in behind you is __________; this is _________.

A)shoulder surfing; a good way to show kindness that causes no harm
B)shoulder surfing; an unintentional threat to your organization
C)tailgating; a good way to show kindness that causes no harm
D)tailgating; an unintentional threat to your organization

Question 13

An information resource's _________ is the possibility that the system will be harmed by a threat.

A)exposure
B)risk
C)threat
D)vulnerability

Question 14

A(n)_________ to an information resource is any danger to which a system may be exposed.

A)exposure
B)risk
C)threat
D)vulnerability

Question 15

You lose the company's USB with your sales spreadsheets on it.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 16

It took the Democratic National Committee _________ to respond to the FBI's discovery of hacking on their system.

A)1 day
B)7 days
C)1 month
D)7 months

Question 17

The _________ of an information resource is the harm,loss,or damage that can result if a threat compromises that resource.

A)exposure
B)risk
C)threat
D)vulnerability

Question 18

You open an e-mail from your friend that looks a little odd,but you figure your friend would never send you anything bad.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 19

You get a new smartphone and throw your old one away without erasing all your data.This is _________ and is an _________ mistake.

A)a human error; intentional
B)a human error; unintentional
C)social engineering; intentional
D)social engineering; unintentional

Question 20

Which of the following does NOT contribute to the increasing vulnerability of organizational information resources?

A)Additional management support
B)Decreasing skills necessary to be a computer hacker
C)International organized crime taking over cybercrime
D)Smaller,faster,cheaper computers and storage devices
E)Today's interconnected,interdependent,wirelessly networked business environment

Question 21

Intellectual property is NOT protected under _________ laws.

A)copyright
B)patent
C)privacy
D)trade secret

Question 22

A _________ is an official document that grants the holder exclusive rights on an invention or a process for a specified period of time.

A)copyright
B)patent
C)trade secret
D)trademark

Question 23

_________ collects personal information about users without their consent.

A)Adware
B)Marketware
C)Spamware
D)Spyware

Question 24

_________ occurs when an unauthorized individual attempts to gain illegal access to organizational information.

A)Alien software
B)Espionage
C)Identity theft
D)Information extortion

Question 25

_________ is a remote attack requiring user action.

A)DoS
B)A logic bomb
C)A Trojan horse
D)Virus

Question 26

_________ is an unintentional threat.

A)Espionage
B)Identity theft
C)Social engineering
D)Software attacks

Question 27

Current US laws award patents for _________ years and copyright protection for _________ years.

A)20; 20
B)20; life+70
C)life+70; 20
D)life+70; life+70

Question 28

A _________ is a statutory grant that provides the creators or owners of intellectual property with ownership of the property for a designated period.

A)copyright
B)patent
C)trade secret
D)trademark

Question 29

_________ occur(s)when an attacker either threatens to steal,or actually steals,information from a company and then demands payment for not carrying out a particular act.

A)Alien software
B)Espionage
C)Information extortion
D)SCADA attacks

Question 30

_________ causes pop-up advertisements to appear on your screen.

A)Adware
B)Marketware
C)Spamware
D)Spyware

Question 31

Keystroke loggers and screen scrapers are examples of _________.

A)adware
B)marketware
C)spamware
D)spyware

Question 32

You purchased a copy of Microsoft Office and give a copy to a friend so he/she doesn't have to buy it too.This is _________ and is _________.

A)piracy; legal
B)piracy; illegal
C)social engineering; legal
D)social engineering; illegal

Question 33

_________ is a remote attack requiring no user action.

A)DoS
B)A logic bomb
C)A Trojan horse
D)Virus

Question 34

_________ is an attack by a programmer developing a system.

A)DoS
B)A phishing attack
C)A Trojan horse
D)Virus

Question 35

If humans are careless with laptops,this is an _________ error which could cause theft of equipment or information (an _________ error).

A)intentional; intentional
B)intentional; unintentional
C)unintentional; intentional
D)unintentional; unintentional

Question 36

_________ is pestware that users your computer as a launch pad for unsolicited e-mail,usually advertising for products and services.

A)Adware
B)Marketware
C)Spamware
D)Spyware

Question 37

Piracy costs businesses _________ of dollars per year.

A)hundreds
B)millions
C)billions
D)trillions

Question 38

_________ is a deliberate act that involves defacing an organization's website,potentially damaging the organization's image and causing its customers to lose faith.

A)Espionage
B)Sabotage
C)SCADA attacks
D)Software attacks

Question 39

A _________ is an intellectual work that is not based on public information.

A)copyright
B)patent
C)trade secret
D)trademark

Question 40

Hackers would use a botnet to perform a _________.

A)DDoS
B)a logic bomb
C)a Trojan horse
D)virus

Question 41

_________ is a possible solution to the ransomware problem but is not recommended by the FBI.

A)Backing up data
B)Employ real-time monitoring
C)Pay the ransom
D)Provide user education and training

Question 42

If you limit your risk by implementing controls that minimize the impact of the threat,you have implemented a risk _________ strategy.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 43

Spam costs US companies _________ of dollars per year.

A)hundreds
B)millions
C)billions
D)trillions

Question 44

_________ refers to malicious acts in which attackers use a target's computer systems to cause physical,real-world harm or severe disruption,often to carry out a political agenda.

A)A SCADA attack
B)Cyberterrorism
C)Espionage
D)Identity theft

Question 45

Your company hires FireEye to install security software and monitor your systems.This is an example of risk _________.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 46

Russia attacked Ukraine's _________ system.

A)internet
B)power
C)transportation
D)water

Question 47

The Houston Astros contacted the _________ to investigate a security breach in 2014.

A)CIA
B)FBI
C)MLB
D)NFL

Question 48

If you accept the potential risk,continue operating with no controls,and absorb any damages that occur,you have adopted a risk _________ strategy.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 49

Which of the following was NOT used in the cyberattack on Ukraine?

A)DoS
B)Spear-phishing
C)a logic bomb
D)a SCADA attack

Question 50

If a hacker takes control of equipment such as power grids or nuclear power plants,this is an example of a(n)_________ attack.

A)alien software
B)espionage
C)SCADA
D)virus

Question 51

Your company decides not to implement security procedures because employees refuse to comply anyway.This is an example of risk _________.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 52

St.Louis Cardinal scouting director Christopher Correa hacked the Houston Astros' system.This was an example of _________.

A)alien software
B)cyberterrorism
C)espionage
D)identity theft

Question 53

Dyn is a cloud-based internet performance management company that provides DNS services for internet websites.It was attacked with _________ in 2016.

A)alien software
B)a DDoS
C)espionage
D)a SCADA attack

Question 54

Ransomware is typically disseminated through _________.

A)botnets
B)logic bombs
C)Trojan horses
D)viruses

Question 55

Almost _________ percent of ransomware victims pay the ransom and hackers _________ decrypt the data as promised.

A)50; do
B)50; do not
C)95; do
D)95; do not

Question 56

Ukraine's protection of their SCADA systems is _________ than in the US but was vulnerable because of its use of _________.

A)better; RFID
B)better; VPN
C)worse; RFID
D)worse; VPN

Question 57

The most current form of ransomware demands payment in the form of _________.

A)Bitcoins
B)cash
C)credit cards
D)Paypal transactions

Question 58

_________ is also called digital extortion.

A)Adware
B)Ransomware
C)Spamware
D)Spyware

Question 59

The US government considers the Sony hack _________.

A)a SCADA attack
B)cyberterrorism
C)espionage
D)identity theft

Question 60

Dyn's hackers formed a botnet from _________.

A)corporate servers
B)devices incorporating the Internet of Things
C)individuals willing to become part-time hackers
D)programmers within the company

Question 61

In public-key encryption,the _________ key is used for locking and the _________ key is used for unlocking.

A)private; private
B)private; public
C)public; private
D)public; public

Question 62

Biometrics is an example of something the user _________.

A)does
B)has
C)is
D)knows

Question 63

_________ is the process of converting an original message into a form that cannot be read by anyone except the intended receiver.

A)Authorization
B)Blacklisting
C)Encryption
D)Firewalling

Question 64

_________ is a communications control.

A)A company gate
B)Encryption
C)A firewall
D)RFID

Question 65

_________ controls restrict unauthorized individuals from using information resources.

A)Access
B)Communications
C)Physical
D)Useful

Question 66

Suppose your university automatically logs you off of a university computer after 15 minutes of disuse.This is an example of a(n)_________ control.

A)access
B)communication
C)physical
D)useful

Question 67

_________ is a physical control.

A)A company gate
B)Encryption
C)A firewall
D)VPN

Question 68

Your company decides to purchase security insurance from Travelers Insurance in case your systems get hacked and employee information is stolen.This is an example of risk _________.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 69

_________ is a private network that uses a public network to connect users.

A)DoS
B)ERP
C)RFID
D)VPN

Question 70

A(n)_________ is a system that prevents a specific type of information from moving between untrusted networks and private networks.

A)anti-malware system
B)DMZ
C)ERP
D)firewall

Question 71

A(n)_________ is a software package that attempts to identify and eliminate viruses and worms.

A)anti-malware system
B)DMZ
C)ERP
D)firewall

Question 72

Your student ID is an example of something the user _________.

A)does
B)has
C)is
D)knows

Question 73

Typing in your password to access a system is an example of something the user _________.

A)does
B)has
C)is
D)knows

Question 74

_________ controls secure the movement of data across networks.

A)Access
B)Communications
C)Physical
D)Useful

Question 75

Which of the following is NOT an advantage of VPN?

A)Cost
B)Flexibility
C)Remote access
D)Security

Question 76

If you shift your risk by using other means to compensate for the loss like purchasing insurance,you have implemented a risk _________ strategy.

A)acceptance
B)avoidance
C)limitation
D)transference

Question 77

_________ controls prevent unauthorized individuals from gaining access to a company's facilities.

A)Access
B)Communications
C)Physical
D)Useful

Question 78

If you have to speak into your phone to unlock it,this is an example of something the user _________.

A)does
B)has
C)is
D)knows

Question 79

A(n)_________ is located between two firewalls.

A)anti-malware system
B)DMZ
C)ERP
D)spamware detector

Question 80

_________ is an access control.

A)A company gate
B)Encryption
C)A firewall
D)RFID