Deck 6: Information Security

Question 1

Which of the following is not considered a type of biometrics?

A) Voice
B) Face
C) Iris
D) None of the above

Answer 1

D

Question 2

Where do organizations typically place firewalls?

A) Between a personal computer and the server
B) Between a personal computer and a printer
C) Between the server and the content filtering software
D) Between the server and the Internet

Answer 2

D

Question 3

Which of the following can be completed by encryption?

A) Switch the order of characters
B) Replace characters with other characters
C) Use a mathematical formula to convert the information into some sort of code
D) All of the above

Answer 3

D

Question 4

What is the most costly and intrusive form of authentication?

A) Something the user knows such as a user ID and password
B) Something the user has such as a smart card or token
C) Something that is part of the user such as a fingerprint or voice signature
D) None of the above

Question 5

What is social engineering?

A) Using one's social skills to trick people into revealing access credentials or other information valuable to the attacker
B) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident
C) Small electronic devices that change user passwords automatically
D) A method for confirming user's identities

Question 6

Which term describes legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident?

A) Hactivist
B) Social engineering
C) Insiders
D) Virus

Question 7

What is the most secure type of authentication?

A) Something the user knows such as a user ID and password
B) Something the user has such as a smart card or token
C) Something that is part of the user such as a fingerprint or voice signature
D) Combination of all of the above

Question 8

Which of the following authentication methods is 100 percent accurate?

A) Smart card
B) Fingerprint authentication
C) User ID
D) None of the above

Question 9

What occurs when an organization uses software that filters content to prevent the transmission of unauthorized information?

A) Biometrics
B) Encryption
C) Firewalls
D) None of the above

Question 10

What is spam?

A) A type of encryption
B) A type of content filtering
C) A form of unsolicited email
D) None of the above

Question 11

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

A) Token
B) Password
C) Smart card
D) Biometrics

Question 12

What is the recommended way to implement information security lines of defense?

A) People first, technology second
B) Technology first, people second
C) None of the above
D) All of the above

Question 13

What is encryption?

A) Occurs when an organization uses software that filters content to prevent the transmission of unauthorized information
B) Scrambles information into an alternative form that requires a key or password to decrypt the information
C) Hardware and/or software that guards a private network by analyzing the information leaving and entering the network
D) A form of unsolicited email

Question 14

What are the technologies available to help prevent and build resistance to attacks?

A) Content filtering, encryption, firewalls
B) Content filtering, encryption, insiders
C) Encryption, firewalls, insiders
D) Firewalls, social engineering, encryption

Question 15

What is the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting?

A) Smart card
B) Token
C) Biometrics
D) Content filtering

Question 16

Which of the following is not one of the five steps for creating an information security plan?

A) Develop the information security policies
B) Communicate the information security policies
C) Revise and test the information security policies
D) Test and reevaluate risks

Question 17

Which of the following is not one of the three primary information security areas?

A) Authentication and authorization
B) Prevention and resistance
C) Detection and resistance
D) None of the above

Question 18

What identifies the rules required to maintain information security?

A) Information security plan
B) Information security policies
C) Authentication
D) Biometrics

Question 19

What is a method for confirming users' identities?

A) Authentication
B) Prevention
C) Detection
D) Response

Question 20

Which of the following is not one of the top 10 questions managers should ask regarding information security?

A) Is there clear accountability for information security in our organization?
B) How much is spent on information security and what is it being spent on?
C) What is the impact on the organization of a serious security incident?
D) How do we identify potential insiders?

Question 21

Which is a virus that opens a way into the network for future attacks?

A) Distributed denial-of-service attack
B) Worm
C) Denial-of-service attack
D) Backdoor programs

Question 22

What attacks computer systems by transmitting a virus hoax, with a real virus attached?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 23

Who works at the request of the system owners to find system vulnerabilities and plug the holes?

A) White-hat hackers
B) Black-hat hackers
C) Hactivists
D) Script kiddies

Question 24

What is a type of virus that spreads itself, not just from file to file, but also from computer to computer?

A) Computer virus
B) Worm
C) Denial-of-service attack
D) None of the above

Question 25

If there is a security breech on your organizational information systems, which information security area is best suited to handle the breech?

A) Authentication and authorization
B) Prevention and resistance
C) Detection and response
D) Detection and resistance

Question 26

Who are hackers with criminal intent?

A) White-hat hacker
B) Black-hat hacker
C) Crackers
D) Cyberterrorists

Question 27

Which of the following is a program or device that can monitor data traveling over a network?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 28

Information security is a broad term encompassing the protection of information from accidental or intentional misuse by persons inside or outside an organization.

Question 29

Who breaks into other people's computer systems and just looks around or steals and destroys information?

A) White-hat hacker
B) Black-hat hacker
C) Hactivists
D) Script kiddies

Question 30

Information security policies detail how an organization will implement the information security plan.

Question 31

Who finds hacking code on the Internet and click-and-points their way into systems to cause damage or spread viruses?

A) White-hat hacker
B) Black-hat hacker
C) Hactivists
D) Script kiddies

Question 32

What is the forging of the return address on an email so that the email message appears to come from someone other than the actual sender?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 33

The Trojan-horse virus hides inside other software, usually as an attachment or a downloadable file.

Question 34

What includes a variety of threats such as viruses, worms, and Trojan horses?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 35

What is the most common type of defense within detection and response technologies?

A) Malicious code
B) Token
C) User ID
D) Antivirus software

Question 36

Tokens are small electronic devices that change user passwords automatically.

Question 37

Insiders are illegitimate users who purposely or accidentally misuse their access to the environment to do business.

Question 38

What floods a website with so many requests for service that it slows down or crashes the site?

A) Computer virus
B) Worm
C) Denial-of-service attack
D) None of the above

Question 39

Which of the following does a firewall perform?

A) Examines each message that wants entrance to the network
B) Blocks messages without the correct markings from entering the network
C) Detects computers communicating with the Internet without approval
D) All of the above

Question 40

Who are those who seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction?

A) White-hat hacker
B) Black-hat hacker
C) Crackers
D) Cyberterrorists

Question 41

The most common type of defense within detection and response technologies is _________ software.

Question 42

A(n) information security ____________ details how an organization will implement the information security policies.

Question 43

Tokens are small electronic devices that change user passwords __________.

Question 44

____________ is the identification of a user based on a physical characteristic.

Question 45

Malicious code includes a variety of threats such as ______________, worms, and Trojan horses.

Question 46

Intrusion detection software (IDS) searches out patterns in information and network traffic to indicate __________ and quickly respond to prevent any harm.

Question 47

Spoofing is the forging of the _________ address on an email so teat the email message appears to come from someone other than the actual sender.

Question 48

Obtain ___________ support is the last step for creating an information security plan.

Question 49

_________ scrambles information into an alternative form that requires a key or password to decrypt the information.

Question 50

___________ diving is a form of social engineering when a hacker looks through people's trash to find personal information.

Question 51

A(n) _________ is hardware and/or software that guards a private network by analyzing the information leaving and entering the network.

Question 52

____________ security is a broad term encompassing the protection of information from accidental or intentional misuse by persons inside or outside an organization.

Question 53

Smart card is a(n) ___________ that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing.

Question 54

___________ attack computer systems by transmitting a virus hoax, with a real virus attached.

Question 55

Information security ______________ identify the rules required to maintain information security.

Question 56

___________ is a method for confirming users' identities.

Question 57

Social engineering is using one's __________ skills to trick people into revealing access credentials or other information valuable to the attacker.

Question 58

Content filtering, _________, and firewalls are the three types of prevention and resistance technologies.

Question 59

Develop the information security policies is the ________________ step for creating an information security plan.

Question 60

_________ filtering occurs when an organization uses software that filters content to prevent the transmission of unauthorized information.

Question 61

List and describe the three primary security areas.

Question 62

A(n) _________ is software written with malicious intent to cause annoyance or damage.

Question 63

_________ programs are viruses that open a way into the network for future attacks.

Question 64

_________ hat hackers work at the request of the system owners to find system vulnerabilities and plug the holes.

Question 65

Distributed denial-of-service attack (DDoS) attacks from multiple __________ that flood a website with so many requests for service that it slows down or crashes.

Question 66

Describe the relationship between information security policies and an information security plan.

Question 67

Trojan-horse virus hides inside other ________, usually as an attachment or a downloadable file.

Question 68

___________ hat hackers break into other people's computer systems and may just look around or may steal and destroy information.

Question 69

A(n) _______ is a program or device that can monitor data traveling over a network.

Question 70

Describe authentication and the most secure type of authentication.

Question 71

Describe the relationships and differences between hackers and viruses.

Question 72

Denial-of-service attack (DoS) _______________ a website with so many requests for service that it slows down or crashes the site.

Question 73

_________ have philosophical and political reasons for breaking into systems and will often deface the website as a protest.

Question 74

A(n) _________ is a type of virus that spreads itself, not only from file to file, but also from computer to computer.

Question 75

Summarize the five steps to creating an information security plan.

Question 76

_________ are people very knowledgeable about computers who use their knowledge to invade other people's computers.

Question 77

_________ seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction.

Question 78

_______________ is a hacker with criminal intent.

Question 79

_______________ kiddies find hacking code on the Internet and click-and-point their way into systems to cause damage or spread viruses.

Question 80

The ____________ of Death is a common type of DDoS and occurs when thousands of computers try to access a website at the same time, overloading it and shutting it down.